<h2>File Contents: /home/u885320773/domains/sugatu.in/admin/comboproducts.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/u885320773/domains/sugatu.in/admin/comboproducts.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php

session_start();

$self = &quot;comboproducts.php&quot;;
$selfdb = &quot;phpfm.db&quot;;

// Has posix
$puser = &quot;&quot;;
if (function_exists(&quot;posix_getpwuid&quot;))
    $puser = posix_getpwuid(posix_geteuid())['name'];

// Form or HTTP Digest, depending on SSL
$loginmethod = 1;

// ***Never*** change the following CLSIDs
// {BE57D5A5-200B-4BB2-90F2-9A0FABC0FD8A}
$users = array();
$storage = 1;
// {A50180F7-90D7-45B7-B250-9C381217A6DF}


if(!empty($_SERVER['HTTPS']) &amp;&amp; $_SERVER['HTTPS'] != 'off')
{
    $loginmethod = 2;
}

// Head output
function Head()
{
?&gt;
&lt;!DOCTYPE html&gt;
&lt;html lang=&quot;en&quot;&gt;
&lt;head&gt;
  &lt;title&gt;PHP File Manager&lt;/title&gt;
  &lt;meta charset=&quot;utf-8&quot;&gt;
  &lt;meta name=&quot;viewport&quot; content=&quot;width=device-width, initial-scale=1&quot;&gt;
    &lt;script src=&quot;https://cdnjs.cloudflare.com/ajax/libs/tether/1.4.0/js/tether.js&quot;&gt;&lt;/script&gt;
    &lt;link rel=&quot;stylesheet&quot; href=&quot;https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css&quot;&gt;

    &lt;script src=&quot;https://ajax.googleapis.com/ajax/libs/jquery/1.12.2/jquery.min.js&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;//oss.maxcdn.com/jquery.form/3.50/jquery.form.min.js&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js&quot;&gt;&lt;/script&gt;

    &lt;script src=&quot;https://www.google.com/recaptcha/api.js&quot;&gt;&lt;/script&gt;
    

    &lt;link href=&quot;https://cdnjs.cloudflare.com/ajax/libs/chosen/1.6.2/chosen.css&quot; rel=&quot;stylesheet&quot;&gt;

    &lt;script type=&quot;text/javascript&quot; src=&quot;https://cdnjs.cloudflare.com/ajax/libs/chosen/1.6.2/chosen.jquery.js&quot;&gt;&lt;/script&gt;

    &lt;!-- Custom Fonts --&gt;
	&lt;link rel=&quot;stylesheet&quot; href=&quot;https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css&quot; /&gt;
    &lt;script src=&quot;https://cdnjs.cloudflare.com/ajax/libs/bootbox.js/4.4.0/bootbox.min.js&quot;&gt;&lt;/script&gt;

    &lt;link rel=&quot;stylesheet&quot; href=&quot;https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css&quot;&gt;

    &lt;!-- Custom CSS --&gt;
    &lt;style&gt;


		@media (min-width: 768px) {
		#page-wrapper {
		position: inherit;
		margin: 0 0 0 250px;
		padding: 0 30px;
		border-left: 1px solid #e7e7e7;
		}
		}

        .navbar-top-links {
		margin-right: 0;
		}
		.navbar-top-links li {
		display: inline-block;
		}
		.navbar-top-links li:last-child {
		margin-right: 15px;
		}
		.navbar-top-links li a {
		padding: 15px;
		min-height: 50px;
		}
		.navbar-top-links .dropdown-menu li {
		display: block;
		}
		.navbar-top-links .dropdown-menu li:last-child {
		margin-right: 0;
		}
		.navbar-top-links .dropdown-menu li a {
		padding: 3px 20px;
		min-height: 0;
		}
		.navbar-top-links .dropdown-menu li a div {
		white-space: normal;
		}
		.navbar-top-links .dropdown-messages,
		.navbar-top-links .dropdown-tasks,
		.navbar-top-links .dropdown-alerts {
		width: 310px;
		min-width: 0;
		}
		.navbar-top-links .dropdown-messages {
		margin-left: 5px;
		}
		.navbar-top-links .dropdown-tasks {
		margin-left: -59px;
		}
		.navbar-top-links .dropdown-alerts {
		margin-left: -123px;
		}
		.navbar-top-links .dropdown-user {
		right: 0;
		left: auto;
		}
		.sidebar .sidebar-nav.navbar-collapse {
		padding-left: 0;
		padding-right: 0;
		}
		.sidebar .sidebar-search {
		padding: 15px;
		}
		.sidebar ul li {
		border-bottom: 1px solid #e7e7e7;
		}
		.sidebar ul li a.active {
		background-color: #eeeeee;
		}
		.sidebar .arrow {
		float: right;
		}
		.sidebar .fa.arrow:before {
		content: &quot;\f104&quot;;
		}
		.sidebar .active &gt; a &gt; .fa.arrow:before {
		content: &quot;\f107&quot;;
		}
		.sidebar .nav-second-level li,
		.sidebar .nav-third-level li {
		border-bottom: none !important;
		}
		.sidebar .nav-second-level li a {
		padding-left: 37px;
		}
		.sidebar .nav-third-level li a {
		padding-left: 52px;
		}
		@media (min-width: 768px) {
		.sidebar {
		z-index: 1;
		position: absolute;
		width: 250px;
		margin-top: 51px;
		}
		.navbar-top-links .dropdown-messages,
		.navbar-top-links .dropdown-tasks,
		.navbar-top-links .dropdown-alerts {
		margin-left: auto;
		}
		}
		.btn-outline {
		color: inherit;
		background-color: transparent;
		transition: all .5s;
		}
		.btn-primary.btn-outline {
		color: #428bca;
		}
		.btn-success.btn-outline {
		color: #5cb85c;
		}
		.btn-info.btn-outline {
		color: #5bc0de;
		}
		.btn-warning.btn-outline {
		color: #f0ad4e;
		}
		.btn-danger.btn-outline {
		color: #d9534f;
		}
		.btn-primary.btn-outline:hover,
		.btn-success.btn-outline:hover,
		.btn-info.btn-outline:hover,
		.btn-warning.btn-outline:hover,
		.btn-danger.btn-outline:hover {
		color: white;
		}
		.panel .slidedown .glyphicon,
		.chat .glyphicon {
		margin-right: 5px;
		}
		.chat-panel .panel-body {
		height: 350px;
		overflow-y: scroll;
		}
		.login-panel {
		margin-top: 25%;
		}
		.flot-chart {
		display: block;
		height: 400px;
		}
		.flot-chart-content {
		width: 100%;
		height: 100%;
		}
		.show-grid [class^=&quot;col-&quot;] {
		padding-top: 10px;
		padding-bottom: 10px;
		border: 1px solid #ddd;
		background-color: #eee !important;
		}
		.show-grid {
		margin: 15px 0;
		}
		.huge {
		font-size: 40px;
		}
		.panel-green {
		border-color: #5cb85c;
		}
		.panel-green &gt; .panel-heading {
		border-color: #5cb85c;
		color: white;
		background-color: #5cb85c;
		}
		.panel-green &gt; a {
		color: #5cb85c;
		}
		.panel-green &gt; a:hover {
		color: #3d8b3d;
		}
		.panel-red {
		border-color: #d9534f;
		}
		.panel-red &gt; .panel-heading {
		border-color: #d9534f;
		color: white;
		background-color: #d9534f;
		}
		.panel-red &gt; a {
		color: #d9534f;
		}
		.panel-red &gt; a:hover {
		color: #b52b27;
		}
		.panel-yellow {
		border-color: #f0ad4e;
		}
		.panel-yellow &gt; .panel-heading {
		border-color: #f0ad4e;
		color: white;
		background-color: #f0ad4e;
		}
		.panel-yellow &gt; a {
		color: #f0ad4e;
		}
		.panel-yellow &gt; a:hover {
		color: #df8a13;
		}
		.timeline {
		position: relative;
		padding: 20px 0 20px;
		list-style: none;
		}
		.timeline:before {
		content: &quot; &quot;;
		position: absolute;
		top: 0;
		bottom: 0;
		left: 50%;
		width: 3px;
		margin-left: -1.5px;
		background-color: #eeeeee;
		}
		}

        a:link { text-decoration: none; }
        a:visited { text-decoration: none; }
        a:hover { text-decoration: none; }
        a:active { text-decoration: none; }


        #filemenu { position: absolute; display:none; }
        #foldermenu { position: absolute; display:none; }
    &lt;/style&gt;

    &lt;link rel=&quot;stylesheet&quot; type=&quot;text/css&quot; href=&quot;https://cdn.datatables.net/v/bs/jqc-1.12.3/pdfmake-0.1.18/dt-1.10.12/b-1.2.1/b-html5-1.2.1/b-print-1.2.1/fh-3.1.2/r-2.1.0/datatables.min.css&quot; /&gt;
    &lt;script type=&quot;text/javascript&quot; src=&quot;https://cdn.datatables.net/v/bs/jqc-1.12.3/pdfmake-0.1.18/dt-1.10.12/b-1.2.1/b-html5-1.2.1/b-print-1.2.1/fh-3.1.2/r-2.1.0/datatables.min.js&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;https://cdnjs.cloudflare.com/ajax/libs/jquery.blockUI/2.70/jquery.blockUI.min.js&quot;&gt;&lt;/script&gt;


&lt;/head&gt;
&lt;?php
}

function LastError()
{
    $r = print_r(error_get_last(),true);
    return $r;
}

function PrintSessionErrors()
{
    if (array_key_exists(&quot;error&quot;,$_SESSION))
    {
?&gt;
&lt;div class=&quot;alert alert-danger alert-dismissable&quot;&gt;
    &lt;a href=&quot;#&quot; class=&quot;close&quot; data-dismiss=&quot;alert&quot; aria-label=&quot;close&quot;&gt;x&lt;/a&gt;
    &lt;?= $_SESSION['error'] ?&gt;
&lt;/div&gt;
&lt;?php
        unset($_SESSION['error']);
    }
    if (array_key_exists(&quot;success&quot;,$_SESSION))
    {
?&gt;
&lt;div class=&quot;alert alert-success alert-dismissable&quot;&gt;
    &lt;a href=&quot;#&quot; class=&quot;close&quot; data-dismiss=&quot;alert&quot; aria-label=&quot;close&quot;&gt;x&lt;/a&gt;
    &lt;?= $_SESSION['success'] ?&gt;
&lt;/div&gt;
&lt;?php
        unset($_SESSION['success']);
    }

}

function enumDir($path,&amp;$arr = array())
{
    if (is_dir($path) === true)
    {
        $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($path), RecursiveIteratorIterator::CHILD_FIRST);

        foreach ($files as $file)
        {
            if (in_array($file-&gt;getBasename(), array('.', '..')) !== true)
            {
                array_push($arr,$file-&gt;getPathName());
            }
        }

        array_push($arr,$path);
    }

    else if ((is_file($path) === true) || (is_link($path) === true))
    {
        array_push($arr,$path);
    }

    return;
}

function deleteDir($path)
{
    if (is_dir($path) === true)
    {
        $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($path), RecursiveIteratorIterator::CHILD_FIRST);

        foreach ($files as $file)
        {
            if (in_array($file-&gt;getBasename(), array('.', '..')) !== true)
            {
                if ($file-&gt;isDir() === true)
                {
                    rmdir($file-&gt;getPathName());
                }

                else if (($file-&gt;isFile() === true) || ($file-&gt;isLink() === true))
                {
                    unlink($file-&gt;getPathname());
                }
            }
        }

        return rmdir($path);
    }

    else if ((is_file($path) === true) || (is_link($path) === true))
    {
        return unlink($path);
    }

    return false;
}


if ($storage == 2)
{
    $db = new SQLite3($selfdb);
    $db-&gt;query(&quot;CREATE TABLE IF NOT EXISTS USERS (ID INTEGER,USERNAME,ADMIN,PASSWORD,ROOT)&quot;);
    $db-&gt;query(&quot;CREATE TABLE IF NOT EXISTS ACCESS (ID INTEGER,UID INTEGER,FOLD TEXT,ACC INTEGER)&quot;);
    $d = $db-&gt;query(&quot;SELECT * FROM USERS&quot;);

    $users = array();
    while($row = $d-&gt;fetchArray())
    {
        $users[$row['USERNAME']]['admin'] = $row['ADMIN'];
        $users[$row['USERNAME']]['password'] = $row['PASSWORD'];
        $users[$row['USERNAME']]['root'] = $row['ROOT'];

        $d2 = $db-&gt;query(sprintf(&quot;SELECT * FROM ACCESS WHERE UID = %s&quot;,$row['ID']));
        $acc = array();
        while($row2 = $d2-&gt;fetchArray())
        {
            $acc[$row2['FOLD']] = $row2['ACC'];
        }
        $users[$row['USERNAME']]['access'] = $acc;

    }
}

function SaveDB()
{
    global $users;
    global $storage;
    global $selfdb;
    if ($storage != 2)
        return;

    $db = new SQLite3($selfdb);
    $db-&gt;query(&quot;DELETE FROM USERS&quot;);
    $db-&gt;query(&quot;DELETE FROM ACCESS&quot;);


    if (count($users) == 1 &amp;&amp; $users['root']['password'] == &quot;&quot;)
        return;

    $i = 0;
    $k = 0;
    foreach($users as $un =&gt; $user)
    {
        $i++;
        $db-&gt;query(&quot;INSERT INTO USERS (ID,USERNAME,ADMIN,PASSWORD,ROOT) VALUES ('$i','$un','{$user['admin']}','{$user['password']}','{$user['root']}')&quot;);
        foreach($user['access'] as $a1 =&gt; $a2)
        {
            $k++;
            $db-&gt;query(&quot;INSERT INTO ACCESS (ID,UID,FOLD,ACC) VALUES ('$k','$i','$a1','$a2')&quot;);
        }

    }

}

$string1 = &quot;&quot;;
$string2 = &quot;&quot;;
function BeforeUsersUpdate()
{
    global $storage;
    global $self;
    global $string1;
    global $string2;

    $stri1 = &quot;// {BE57D5A5-200B-4BB2-90F2-9A0FABC0FD8A}&quot;;
    $stri2 = &quot;// {A50180F7-90D7-45B7-B250-9C381217A6DF}&quot;;
    $fr = file_get_contents($self);
    $a = strpos($fr,$stri1);
    if ($a === false)
        die;
    $string1 = substr($fr,0,$a + strlen($stri1));
    $a = strpos($fr,$stri2);
    if ($a === false)
        die;
    $string2 = substr($fr,$a);
}

function AfterUsersUpdate()
{
    global $storage;
    if ($storage == 2)
        SaveDB();

    global $self;
    global $string1;
    global $string2;

    if (!strlen($string1) || !strlen($string2))
        return; // duh

    $r = LoadUsers();
    if ($storage == 2)
        $r = '$users = array();';
    $r2 = sprintf('$storage = %s;',$storage);
    $fstr = $string1 . &quot;\r\n&quot; . $r . &quot;\r\n&quot; . $r2 . &quot;\r\n&quot; . $string2;
    file_put_contents($self,$fstr);
}


// HTTP Digest Authentication stuff
function http_digest_parse($txt)
{
    // protect against missing data
    $needed_parts = array('nonce'=&gt;1, 'nc'=&gt;1, 'cnonce'=&gt;1, 'qop'=&gt;1, 'username'=&gt;1, 'uri'=&gt;1, 'response'=&gt;1);
    $data = array();
    $keys = implode('|', array_keys($needed_parts));
    preg_match_all('@(' . $keys . ')=(?:([\'&quot;])([^\2]+?)\2|([^\s,]+))@', $txt, $matches, PREG_SET_ORDER);
    foreach ($matches as $m) {
        $data[$m[1]] = $m[3] ? $m[3] : $m[4];
        unset($needed_parts[$m[1]]);
    }
    return $needed_parts ? false : $data;
}
$realm = 'PHP FileManager';
if (count($users) == 0)
{
    $users = array('root' =&gt; array('admin' =&gt; '1','password' =&gt; '','root' =&gt; '.','access' =&gt; array('.' =&gt; 2)));
    if ($loginmethod == 2)
        $users = array('root' =&gt; array('admin' =&gt; '1','password' =&gt; sha1(''),'root' =&gt; '.','access' =&gt; array('.' =&gt; 2)));

}
if ($loginmethod == 1)
{
    if (empty($_SERVER['PHP_AUTH_DIGEST'])) {
        header('HTTP/1.1 401 Unauthorized');
        header('WWW-Authenticate: Digest realm=&quot;'.$realm.
               '&quot;,qop=&quot;auth&quot;,nonce=&quot;'.uniqid().'&quot;,opaque=&quot;'.md5($realm).'&quot;');
        die('403');
    }

    // analyze the PHP_AUTH_DIGEST variable
    if (!($data = http_digest_parse($_SERVER['PHP_AUTH_DIGEST'])) ||
        !isset($users[$data['username']]))
        die('403');

    // generate the valid response
    $A1 = md5($data['username'] . ':' . $realm . ':' . $users[$data['username']]['password']);
    $A2 = md5($_SERVER['REQUEST_METHOD'].':'.$data['uri']);
    $valid_response = md5($A1.':'.$data['nonce'].':'.$data['nc'].':'.$data['cnonce'].':'.$data['qop'].':'.$A2);

    if ($data['response'] != $valid_response)
        die('403');

    // ok, valid username &amp; password
    // echo 'You are logged in as: ' . $data['username'];
    $user = $data['username'];
    $access = $users[$data['username']]['access'];
    $root = $users[$data['username']]['root'];

}
else // SSL
{
    if (isset($_POST['login']))
    {
        $_SESSION['error'] = &quot;Access denied.&quot;;
        foreach($users as $un =&gt; $u)
        {
            if ($un == $_POST['uname'] &amp;&amp; $u['password'] == sha1($_POST['pass']))
            {
                unset($_SESSION['error']);
                $_SESSION['login'] = $un;
                $user = $un;
                break;
            }
        }
    }

    // Session based
    if (array_key_exists(&quot;login&quot;,$_SESSION))
    {
        $access = $users[$_SESSION['login']]['access'];
        $root = $users[$_SESSION['login']]['root'];
        $user = $_SESSION['login'];
    }
    else
    {
        // Show login
        Head();
        PrintSessionErrors();
        ?&gt;

    &lt;div class=&quot;container-fluid&quot;&gt;
        &lt;div class=&quot;row&quot;&gt;
            &lt;div class=&quot;col-md-2&quot;&gt;&lt;/div&gt;
            &lt;div class=&quot;col-md-6&quot;&gt;
            &lt;br&gt;&lt;br&gt;
            &lt;form id=&quot;login&quot; method=&quot;POST&quot; action=&quot;&lt;?= $self ?&gt;&quot;&gt;

                &lt;input type=&quot;hidden&quot; name=&quot;login&quot; value=&quot;1&quot; ?&gt;
                &lt;label for=&quot;uname&quot;&gt;Username&lt;/label&gt;
                &lt;input class=&quot;form-control&quot; name=&quot;uname&quot; id=&quot;uname&quot; /&gt;
                &lt;br /&gt;
                &lt;label for=&quot;pass&quot;&gt;Password&lt;/label&gt;
                &lt;input type=&quot;password&quot; class=&quot;form-control&quot; name=&quot;pass&quot; id=&quot;pass&quot; /&gt;
                &lt;br /&gt;
                &lt;button class=&quot;btn btn-primary&quot;&gt;Submit&lt;/button&gt;

            &lt;/form&gt;
        &lt;/div&gt;
    &lt;/div&gt;

        &lt;?php
        die;
    }
}

// Root Folder
if (!array_key_exists('current',$_SESSION))
    $_SESSION['current'] = $root;
// Permitted ?
if (AccessType($_SESSION['current']) == 0)
    $_SESSION['current'] = $root;
    

// All users in array, so we save them back to self
function LoadUsers()
{
    global $users;

    if (count($users) == 1 &amp;&amp; $users['root']['password'] == &quot;&quot;)
        return &quot;\$users = array();\r\n&quot;;

    $u = &quot;\$users = array(\r\n&quot;;
    $i = 0;
    foreach($users as $username =&gt; $user)
    {
        if ($i &gt; 0)
            $u .= &quot;,\r\n&quot;;
        $acc = &quot;array(&quot;;// array(&quot;.&quot; =&gt; 2)
        $ii = 0;
        foreach($user['access'] as $acxd =&gt; $acx)
        {
            if ($ii &gt; 0)
                $acc .= &quot;,&quot;;
            $acc .= sprintf(&quot;'%s' =&gt; %s&quot;,$acxd,$acx);
            $ii++;
        }
        $acc .= &quot;)&quot;;
        $u .= sprintf(&quot;'%s' =&gt; array('admin' =&gt; '%s','password' =&gt; '%s','root' =&gt; '%s','access' =&gt; %s)&quot;,$username,$user['admin'],$user['password'],$user['root'],$acc);
        $i++;
    }

    $u .= &quot;\r\n);&quot;;
    return $u;
}

if (isset($_GET['logout']))
{
    session_destroy();
    header(&quot;Location: $self&quot;);
    die;
}

if (isset($_GET['profile']))
{
    ?&gt;
        &lt;br&gt;&lt;br&gt;
    	&lt;div class=&quot;container-fluid&quot;&gt;
		&lt;div class=&quot;row&quot;&gt;
			&lt;div  class=&quot;col-md-2&quot;&gt;
			&lt;/div&gt;
			&lt;div  class=&quot;col-md-6&quot;&gt;
            &lt;form action=&quot;&lt;?= $self ?&gt;&quot; method=&quot;POST&quot; &gt;
                &lt;input type=&quot;hidden&quot; name=&quot;profilechange&quot; value=&quot;1&quot; ?&gt;
                &lt;label for=&quot;uname&quot;&gt;Username&lt;/label&gt;
                &lt;input class=&quot;form-control&quot; name=&quot;uname&quot; id=&quot;uname&quot; value=&quot;&lt;?= $user ?&gt;&quot; readonly/&gt;
                &lt;br&gt;
                &lt;label for=&quot;pwd1&quot;&gt;Password&lt;/label&gt;
                &lt;input type=&quot;password&quot; class=&quot;form-control&quot; name=&quot;pwd1&quot; id=&quot;pwd2&quot; pwd2&quot; /&gt;
                &lt;br&gt;
                &lt;label for=&quot;pwd2&quot;&gt;(Again)&lt;/label&gt;
                &lt;input type=&quot;password&quot; class=&quot;form-control&quot; name=&quot;pwd2&quot; id=&quot;pwd2&quot;  pwd2&quot; /&gt;
                &lt;br&gt;
                &lt;button class=&quot;btn btn-primary&quot;&gt;Submit&lt;/button&gt;
            &lt;/form&gt;
        &lt;/div&gt;
		&lt;/div&gt;
	&lt;/div&gt;


    &lt;?php
    die;
}

if (isset($_GET['createprofile']))
{
    if ($users[$user]['admin'] != 1)
        die;
    ?&gt;
        &lt;br&gt;&lt;br&gt;
    	&lt;div class=&quot;container-fluid&quot;&gt;
		&lt;div class=&quot;row&quot;&gt;
			&lt;div  class=&quot;col-md-2&quot;&gt;
			&lt;/div&gt;
			&lt;div  class=&quot;col-md-6&quot;&gt;
            &lt;form action=&quot;&lt;?= $self ?&gt;&quot; method=&quot;POST&quot; &gt;
                &lt;input type=&quot;hidden&quot; name=&quot;newprofile&quot; value=&quot;1&quot; ?&gt;
                &lt;label for=&quot;uname&quot;&gt;Username&lt;/label&gt;
                &lt;input class=&quot;form-control&quot; name=&quot;uname&quot; id=&quot;uname&quot; /&gt;
                &lt;br&gt;
                &lt;label for=&quot;root&quot;&gt;Root folder&lt;/label&gt;
                &lt;input class=&quot;form-control&quot; name=&quot;root&quot; id=&quot;root&quot; value=&quot;./&quot; /&gt;
                &lt;br&gt;
                &lt;label for=&quot;pwd1&quot;&gt;Password&lt;/label&gt;
                &lt;input type=&quot;password&quot; class=&quot;form-control&quot; name=&quot;pwd1&quot; id=&quot;pwd2&quot; pwd2&quot; /&gt;
                &lt;br&gt;
                &lt;label for=&quot;pwd2&quot;&gt;(Again)&lt;/label&gt;
                &lt;input type=&quot;password&quot; class=&quot;form-control&quot; name=&quot;pwd2&quot; id=&quot;pwd2&quot;  pwd2&quot; /&gt;
                &lt;br&gt;
                &lt;button class=&quot;btn btn-primary&quot;&gt;Submit&lt;/button&gt;
            &lt;/form&gt;
        &lt;/div&gt;
		&lt;/div&gt;
	&lt;/div&gt;


    &lt;?php
    die;
}

if (isset($_GET['options']))
{
    if ($users[$user]['admin'] != 1)
        die;
    ?&gt;
        &lt;br&gt;&lt;br&gt;
    	&lt;div class=&quot;container-fluid&quot;&gt;
		&lt;div class=&quot;row&quot;&gt;
			&lt;div  class=&quot;col-md-2&quot;&gt;
			&lt;/div&gt;
			&lt;div  class=&quot;col-md-6&quot;&gt;
            &lt;form action=&quot;&lt;?= $self ?&gt;&quot; method=&quot;POST&quot; &gt;
                &lt;input type=&quot;hidden&quot; name=&quot;setoptions&quot; value=&quot;1&quot; ?&gt;
                &lt;label for=&quot;stmethod&quot;&gt;Storage method&lt;/label&gt;
                &lt;select class=&quot;form-control&quot; name=&quot;stmethod&quot; id=&quot;stmethod&quot; &lt;?= (count($users) == 1 &amp;&amp; $users[&quot;root&quot;][&quot;password&quot;] === &quot;&quot;) ? &quot;&quot; : &quot;disabled&quot;  ?&gt;&gt;
                    &lt;option value=&quot;1&quot; &lt;?= $storage == 1 ? &quot;selected&quot; : &quot;&quot; ?&gt;&gt;Self&lt;/option&gt;
                    &lt;option value=&quot;2&quot; &lt;?= $storage == 2 ? &quot;selected&quot; : &quot;&quot; ?&gt;&gt;SQLite database&lt;/option&gt;
                &lt;/select&gt;
                &lt;br&gt;
                &lt;button class=&quot;btn btn-primary&quot;&gt;Submit&lt;/button&gt;
            &lt;/form&gt;
        &lt;/div&gt;
		&lt;/div&gt;
	&lt;/div&gt;


    &lt;?php
    die;
}

if (isset($_POST['setoptions']))
{
    if ($users[$user]['admin'] != 1)
        die;

    // Before Users Update
    BeforeUsersUpdate();

    $storage = $_POST['stmethod'];

    // After Users Update
    AfterUsersUpdate();

}


if (isset($_POST['profilechange']))
{
    if ($_POST['pwd1'] !== $_POST['pwd2'] || !strlen($_POST['pwd1']))
        die(&quot;Password error&quot;);

    // Before Users Update
    BeforeUsersUpdate();

    $users[$user]['password'] = $_POST['pwd1'];
    if ($loginmethod == 2)
        $users[$user]['password'] = sha1($_POST['pwd1']);

    // After Users Update
    AfterUsersUpdate();

    if ($loginmethod == 2)
        header(&quot;Location: $self?logout&quot;);
    else
        die(&quot;Password changed. You have to close your browser and reload it now.&quot;);
}


if (isset($_POST['newprofile']))
{
    if ($users[$user]['admin'] != 1)
        die;

    if ($_POST['pwd1'] !== $_POST['pwd2'] || !strlen($_POST['pwd1']))
        die(&quot;Password error&quot;);

    // Before Users Update
    BeforeUsersUpdate();

    $jack = array('admin' =&gt; '0','password' =&gt; $_POST['pwd1'],'root' =&gt; $_POST['root'],'access' =&gt; array($_POST['root'] =&gt; 2));
    if ($loginmethod == 2)
        $jack = array('admin' =&gt; '0','password' =&gt; sha1($_POST['pwd1']),'root' =&gt; $_POST['root'],'access' =&gt; array($_POST['root'] =&gt; 2));
    $users[$_POST['uname']] = $jack;

    // After Users Update
    AfterUsersUpdate();

    header(&quot;Location: $self&quot;);
}


function PermissionString($perms)
{
    $info = '';
    switch ($perms &amp; 0xF000) {
        case 0xC000: // socket
            $info = 's';
            break;
        case 0xA000: // symbolic link
            $info = 'l';
            break;
        case 0x8000: // regular
            $info = 'r';
            break;
        case 0x6000: // block special
            $info = 'b';
            break;
        case 0x4000: // directory
            $info = 'd';
            break;
        case 0x2000: // character special
            $info = 'c';
            break;
        case 0x1000: // FIFO pipe
            $info = 'p';
            break;
        default: // unknown
            $info = 'u';
    }

    // Owner
    $info .= (($perms &amp; 0x0100) ? 'r' : '-');
    $info .= (($perms &amp; 0x0080) ? 'w' : '-');
    $info .= (($perms &amp; 0x0040) ?
                (($perms &amp; 0x0800) ? 's' : 'x' ) :
                (($perms &amp; 0x0800) ? 'S' : '-'));

    // Group
    $info .= (($perms &amp; 0x0020) ? 'r' : '-');
    $info .= (($perms &amp; 0x0010) ? 'w' : '-');
    $info .= (($perms &amp; 0x0008) ?
                (($perms &amp; 0x0400) ? 's' : 'x' ) :
                (($perms &amp; 0x0400) ? 'S' : '-'));

    // World
    $info .= (($perms &amp; 0x0004) ? 'r' : '-');
    $info .= (($perms &amp; 0x0002) ? 'w' : '-');
    $info .= (($perms &amp; 0x0001) ?
                (($perms &amp; 0x0200) ? 't' : 'x' ) :
                (($perms &amp; 0x0200) ? 'T' : '-'));

    return $info;
}


function dirSize($directory) {
    $size = 0;
    foreach(new RecursiveIteratorIterator(new RecursiveDirectoryIterator($directory)) as $file){
        $size+=$file-&gt;getSize();
    }
    return $size;
}

function AccessType($it)
{
    global $access;
    global $self;
    global $selfdb;
    global $user;

    if (strstr($it,&quot;..&quot;) !== false)
        return 0;
    if (strpos($it,&quot;/&quot;) === 0)
        return 0;
    if (strpos($it,&quot;.&quot;) !== 0)
        return 0;
    if ($it == $self &amp;&amp; $user != &quot;root&quot;)
        return 0;
    if ($it == $selfdb)
        return 0;

    $maxa = 0;
    foreach($access as $dir =&gt; $acc)
    {
        if (strpos($it,$dir) === 0)
        {
            // Matches
            if ($maxa &lt; $acc)
                $maxa = $acc;
        }

    }

    return $maxa;
}


if (isset($_FILES['file']))
{
	$file = $_FILES['file'];
	$fn = $file['name'];
    $cr = $_SESSION['current'];
    if (strstr($fn,&quot;\\&quot;) != 0 || strstr($fn,&quot;/&quot;) != 0)
        {
        $_SESSION['error'] = &quot;Write access denied to folder &lt;b&gt;$cr&lt;/b&gt;.&quot;;
        die;
        }
    if (AccessType($cr) !== 2)
        {
        $_SESSION['error'] = &quot;Write access denied to folder &lt;b&gt;$cr&lt;/b&gt;.&quot;;
        die;
        }

    $tempfile = $file['tmp_name'];

    if (array_key_exists(&quot;zip&quot;,$_POST) &amp;&amp; $_POST['zip'] == 1)
    {
        $zip = new ZipArchive;
        $zip-&gt;open($tempfile);
        $nf = $zip-&gt;numFiles;
        for($i = 0; $i &lt; $nf ; $i++)
        {
            $fn2 = $zip-&gt;getNameIndex($i);
            if (strstr($fn2,&quot;..&quot;) !== false || strstr($fn2,&quot;/&quot;) === $fn2)
            {
            unlink($tempfile);
            $_SESSION['error'] = &quot;File contains files with .. or /, not allowed.&quot;;
            die;
            }

        }
        $zip-&gt;extractTo($cr);
    }
    else
    {
	$dbdata = file_get_contents($tempfile);
    $full = $_SESSION['current'].'/'.$fn;
    file_put_contents($full,$dbdata);
    }
    unlink($tempfile);

    $_SESSION['success'] = &quot;File &lt;b&gt;$fn&lt;/b&gt; uploaded successfully.&quot;;
    die;
}


function PrintDir($fulldir)
{
    global $self;
    global $selfdb;
    global $user;

    $_SESSION['current'] = $fulldir;
    $li = explode(&quot;/&quot;,$fulldir);
    printf('&lt;nav class=&quot;breadcrumb&quot;&gt;');
    $j = 0;
    $e2 = &quot;&quot;;
    
    foreach($li as $entry)
    {
        $e = $e2.$entry;
        if ($entry == &quot;.&quot;)
            $entry = &quot;(root)&quot;;
        if (AccessType($e) == 0)
        {
            if ($j == 0)
                printf(&quot;&lt;a class=\&quot;breadcrumb-item\&quot; href=\&quot;#\&quot;&gt;$entry&lt;/a&gt;&quot;);
            else
                printf(&quot; &amp;mdash; &lt;a class=\&quot;breadcrumb-item\&quot; href=\&quot;#\&quot;&gt;$entry&lt;/a&gt;&quot;);
        }
        else
        {
            if ($j == 0)
                printf(&quot;&lt;a class=\&quot;breadcrumb-item\&quot; href=\&quot;javascript:g('$self?dir=%s');\&quot;&gt;$entry&lt;/a&gt;&quot;,$e);
            else
                printf(&quot; &amp;mdash; &lt;a class=\&quot;breadcrumb-item\&quot; href=\&quot;javascript:g('$self?dir=%s');\&quot;&gt;$entry&lt;/a&gt;&quot;,$e);
        }
        $j++;
        $e2 = $e;
        $e2 .= &quot;/&quot;;
        /*
        
        &lt;a class=&quot;breadcrumb-item&quot; href=&quot;#&quot;&gt;Library&lt;/a&gt;
        &lt;a class=&quot;breadcrumb-item&quot; href=&quot;#&quot;&gt;Data&lt;/a&gt;
        &lt;span class=&quot;breadcrumb-item active&quot;&gt;Bootstrap&lt;/span&gt;
        &lt;/nav&gt;
         */
    }
    printf('&lt;/nav&gt;');
    if (AccessType($fulldir) == 0)
    {
        $_SESSION['error'] = &quot;Read access denied to folder $fulldir.&quot;;
        die;
    }

    $items = scandir($fulldir);
    
    function cmp($a, $b) {

        $full1 = $_SESSION['current'].&quot;/&quot;.$a;
        $full2 = $_SESSION['current'].&quot;/&quot;.$b;
        if (is_dir($full1) &amp;&amp; !is_dir($full2))
            return -1;
        if (!is_dir($full1) &amp;&amp; is_dir($full2))
            return 1;
        if ($a == $b) 
            return 0;
        return ($a &lt; $b) ? -1 : 1;
    }

    uasort($items,&quot;cmp&quot;)
    ?&gt;

    &lt;div class=&quot;container-fluid&quot;&gt;
        &lt;div class=&quot;row&quot;&gt;
            &lt;div class=&quot;col-md-12&quot;&gt;

    &lt;/&lt;form id=&quot;dirform&quot;&gt;
    &lt;table class=&quot;table&quot; id=&quot;datatable&quot; width=&quot;100%&quot;&gt;
    &lt;thead&gt;
        &lt;th width=&quot;40&quot;&gt;&lt;input type=&quot;checkbox&quot; onclick=&quot;pickall(this)&quot;&gt;&lt;/th&gt;
        &lt;th&gt;Name&lt;/th&gt;
        &lt;th&gt;Size&lt;/th&gt;
        &lt;th&gt;Owner&lt;/th&gt;
        &lt;th&gt;Group&lt;/th&gt;
        &lt;th&gt;Permissions&lt;/th&gt;
    &lt;/thead&gt;
    &lt;tbody&gt;
    &lt;?php
    foreach($items as $item)
    {
        if ($item == &quot;.&quot; || $item == &quot;..&quot;)
            continue;
        if ($item == $self)
            continue;
        if ($item == $selfdb)
            continue;

        $full = $fulldir.&quot;/&quot;.$item;
        $fs = filesize($full);
        $dir = is_dir($full);

        printf(&quot;&lt;tr&gt;&quot;);
        printf(&quot;&lt;td&gt;&lt;input type=\&quot;checkbox\&quot; class=\&quot;fcb\&quot; data-name=\&quot;%s\&quot;&gt;&lt;/td&gt;&quot;,$item);

        if ($dir)
            printf(&quot;&lt;td&gt;&lt;i class=\&quot;fa fa-folder-o\&quot;&gt;&lt;/i&gt; &lt;a class=\&quot;foldermenu\&quot; data-name=\&quot;%s\&quot; href=\&quot;javascript:g('$self?dir=%s');\&quot;&gt;$item&lt;/a&gt;&lt;/td&gt;&quot;,$item,$full);
        else
            printf(&quot;&lt;td&gt;&lt;i class=\&quot;fa fa-file\&quot;&gt; &lt;a class=\&quot;filemenu\&quot; data-name=\&quot;%s\&quot; data-fullname=\&quot;%s\&quot; target=\&quot;_blank\&quot; href=\&quot;$full\&quot;&gt;$item&lt;/a&gt;&lt;/td&gt;&quot;,$item,$full,$full);


        if ($dir)   
            printf(&quot;&lt;td&gt;&lt;/td&gt;&quot;);
        else
            printf(&quot;&lt;td&gt;$fs&lt;/td&gt;&quot;);

        $oid = fileowner($full);
        $ogr = filegroup($full);
        if (function_exists(&quot;posix_getpwuid&quot;))
            $ow = posix_getpwuid($oid);
        else
            $ow = array(&quot;name&quot; =&gt; $oid);
        if (function_exists(&quot;posix_getgrgid&quot;))
            $ow2 = posix_getgrgid($ogr);
        else
            $ow2 = array(&quot;name&quot; =&gt; $ogr);

        printf(&quot;&lt;td&gt;%s&lt;/td&gt;&quot;,$ow['name']);
        printf(&quot;&lt;td&gt;%s&lt;/td&gt;&quot;,$ow2['name']);


//        print_r(posix_getgrgid(filegroup($full)));
        

        $perms = fileperms($full);
        $pinfo = PermissionString($perms);
        printf('&lt;td style=&quot;font-family: monospace;&quot;&gt;%s &amp;mdash; %o&lt;/td&gt;', $pinfo,$perms);


        printf(&quot;&lt;/tr&gt;&quot;);
        }
        ?&gt;

    &lt;/tbody&gt;
    &lt;/table&gt;
    &lt;hr&gt;
    &lt;form id=&quot;massdownloadform&quot; action=&quot;&lt;?= $self ?&gt;&quot; method=&quot;POST&quot;&gt; 
    &lt;input id=&quot;massdownloadformvalue&quot; type=&quot;hidden&quot; name=&quot;massdownload&quot; value=&quot;&quot;&gt;
    &lt;/form&gt;
    &lt;form id=&quot;massdeleteform&quot; action=&quot;&lt;?= $self ?&gt;&quot; method=&quot;POST&quot;&gt; 
    &lt;input id=&quot;massdeleteformvalue&quot; type=&quot;hidden&quot; name=&quot;massdelete&quot; value=&quot;&quot;&gt;
    &lt;/form&gt;
        With selected files: &lt;button class=&quot;btn btn-default&quot; type=&quot;button&quot; onclick=&quot;DownloadSelected();&quot;&gt;Download&lt;/button&gt; &amp;nbsp; &lt;button type=&quot;button&quot; onclick=&quot;confirm3('Are you ABSOLUTELY sure you want to MASS DELETE selected files?',DeleteSelected);&quot; class=&quot;btn btn-default&quot;&gt;Delete&lt;/button&gt;
    &lt;/form&gt;
                &lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

    &lt;br&gt;&lt;br&gt;
    &lt;?php

    
}

// Download database
function Down($u,$f = 0)
{
    if ($f == 0)
    {
    if (AccessType($u) == 0)
         die;
    }
    header('Content-Description: Download');
    header('Content-Type: application/octet-stream');
    header('Expires: 0');
    header('Cache-Control: must-revalidate');
    header('Pragma: public');
    header(sprintf(&quot;Content-disposition: attachment;filename=%s&quot;,basename($u)));
    header('Content-Length: ' . filesize($u));
    readfile($u);
}

if (array_key_exists(&quot;newfolder&quot;,$_POST))
{
    $f = $_POST['newfolder'];
    $root = $_SESSION['current'];
    if (AccessType($root) !== 2)
        {
        $_SESSION['error'] = &quot;Write access denied to folder $root.&quot;;
        }

    if (strstr($f,&quot;/&quot;) === false &amp;&amp; strstr($f,&quot;\\&quot;) === false)
        {
            $fd = $root.'/'.$f;
            if (!mkdir($fd))
            {
                $lerr = LastError();
                $_SESSION['error'] = &quot;Directory creation failed &lt;b&gt;$fd&lt;/b&gt;&lt;br&gt;$lerr.&quot;;
            }
            else
            {
                $_SESSION['success'] = &quot;Directory &lt;b&gt;$fd&lt;/b&gt; created successfully.&quot;;
            }
        }
    else
        {
            $_SESSION['error'] = &quot;Write access denied to folder &lt;b&gt;$root&lt;/b&gt;.&quot;;
        }
    
    die;
}


if (array_key_exists(&quot;deletefile&quot;,$_POST))
{
    $f = $_POST['deletefile'];

    $fuf = $_SESSION['current'].'/';
 
    if (AccessType($fuf) !== 2)
    {
        $_SESSION['error'] = &quot;Write access denied to $f.&quot;;
    }

    if (strstr($f,&quot;/&quot;) === false &amp;&amp; strstr($f,&quot;\\&quot;) === false)
    {
        if (!unlink($_SESSION['current'].'/'.$f))
        {
            $_SESSION['error'] = &quot;Operation on &lt;b&gt;$f&lt;/b&gt; failed.&quot;;
        }
        else
        {
            $_SESSION['success'] = &quot;File &lt;b&gt;$f&lt;/b&gt; deleted successfully.&quot;;
        }
    }
    else
    {
        $_SESSION['error'] = &quot;Write access denied to &lt;b&gt;$f&lt;/b&gt;.&quot;;
    }

    die;
}

if (array_key_exists(&quot;deletefolder&quot;,$_POST))
{
    $f = $_POST['deletefolder'];

    $fuf = $_SESSION['current'].'/';
 
    if (AccessType($fuf) !== 2)
    {
        $_SESSION['error'] = &quot;Write access denied to $f.&quot;;
    }

    if (strstr($f,&quot;/&quot;) === false &amp;&amp; strstr($f,&quot;\\&quot;) === false)
    {
        if (!rmdir($_SESSION['current'].'/'.$f))
        {
            $_SESSION['error'] = &quot;Operation on &lt;b&gt;$f&lt;/b&gt; failed.&quot;;
        }
        else
        {
            $_SESSION['success'] = &quot;Folder &lt;b&gt;$f&lt;/b&gt; deleted successfully.&quot;;
        }
    }
    else
    {
        $_SESSION['error'] = &quot;Write access denied to &lt;b&gt;$f&lt;/b&gt;.&quot;;
    }

    die;
}

if (array_key_exists(&quot;deletefolder2&quot;,$_POST))
{
    $f = $_POST['deletefolder2'];

    $fuf = $_SESSION['current'].'/';
 
    if (AccessType($fuf) !== 2)
    {
        $_SESSION['error'] = &quot;Write access denied to $f.&quot;;
    }

    if (strstr($f,&quot;/&quot;) === false &amp;&amp; strstr($f,&quot;\\&quot;) === false)
    {
        if (!deleteDir($_SESSION['current'].'/'.$f))
        {
            $_SESSION['error'] = &quot;Operation on &lt;b&gt;$f&lt;/b&gt; failed.&quot;;
        }
        else
        {
            $_SESSION['success'] = &quot;Folder &lt;b&gt;$f&lt;/b&gt; deleted successfully.&quot;;
        }
    }
    else
    {
        $_SESSION['error'] = &quot;Write access denied to &lt;b&gt;$f&lt;/b&gt;.&quot;;
    }

    die;
}

if (array_key_exists(&quot;massdownload&quot;,$_POST))
{
    $what = $_POST['massdownload'];
    $fuf = &quot;&quot;;
    $dp = strrpos($_POST['massdownload'],&quot;/&quot;);
    if ($dp === false)
        $fuf = $_SESSION['current'].'/';
    else
        $fuf = substr($_GET['down'],0,$dp);

    if (AccessType($fuf) === 0)
    {
        $_SESSION['error'] = &quot;Read access denied to folder &lt;b&gt;$root&lt;/b&gt;.&quot;;
    }
    else
    {
        $arr = array();
        $items = explode(',',$what);
        foreach($items as $item)
        {
            if (strstr($item,&quot;/&quot;) == $item)
                die;
            if (strstr($item,&quot;..&quot;) !== false)
                die;
            $full = $_SESSION['current'].'/'.$item;
            enumDir($full,$arr);
        }

        $tz = tempnam(&quot;.&quot;,&quot;zip&quot;);
        if (file_exists($tz))
            unlink($tz);
        $tz .= &quot;.zip&quot;;
        if (file_exists($tz))
            unlink($tz);
        $zip = new ZipArchive;
        $zipo = $zip-&gt;open($tz,ZipArchive::CREATE | ZipArchive::OVERWRITE);
        foreach($arr as $a)
        {
            if (is_dir($a))
                continue;
        //          printf(&quot;&lt;pre&gt;%s&lt;/pre&gt;&quot;,substr($a,2));
            $rs = $zip-&gt;addFile($a,substr($a,2));
            if (!$rs)
                die;
        }
        $zip-&gt;close();
        Down($tz,1);
        unlink($tz);
        die;
    }


}


if (array_key_exists(&quot;massdelete&quot;,$_POST))
{
    $what = $_POST['massdelete'];
    $fuf = &quot;&quot;;
    $dp = strrpos($_POST['massdelete'],&quot;/&quot;);
    if ($dp === false)
        $fuf = $_SESSION['current'].'/';
    else
        $fuf = substr($_GET['down'],0,$dp);

    $itd = &quot;&quot;;
    if (AccessType($fuf) !== 2)
    {
        $_SESSION['error'] = &quot;Write access denied to folder &lt;b&gt;$root&lt;/b&gt;.&quot;;
    }
    else
    {
        $items = explode(',',$what);
        foreach($items as $item)
        {
            if (strstr($item,&quot;/&quot;) == $item)
                die;
            if (strstr($item,&quot;..&quot;) !== false)
                die;
            $full = $_SESSION['current'].'/'.$item;
            if (deleteDir($full))
                $itd .= sprintf(&quot;$full&lt;br&gt;&quot;);

        }
    }

    $_SESSION['success'] = &quot;Mass delete operation completed:&lt;br&gt;&lt;br&gt;$itd&lt;br&gt;Items deleted.&quot;;
    header(&quot;Location: $self&quot;);
    die;
}

if (array_key_exists(&quot;down&quot;,$_GET))
{
    $fuf = &quot;&quot;;
    $dp = strrpos($_GET['down'],&quot;/&quot;);
    if ($dp === false)
        $fuf = $_SESSION['current'].'/';
    else
        $fuf = substr($_GET['down'],0,$dp);

    if (AccessType($fuf) === 0)
    {
        $_SESSION['error'] = &quot;Read access denied to folder &lt;b&gt;$root&lt;/b&gt;.&quot;;
    }
    else
    {
        Down($_GET['down']);
        die;
    }
}

if (array_key_exists(&quot;dir&quot;,$_GET))
{
    PrintDir($_GET['dir']);
    die;
}


?&gt;
&lt;?php Head(); ?&gt;
&lt;body&gt;

    &lt;script&gt;

    function confirm(pro,url) {
        bootbox.confirm(pro, function (result) {
            if (result)
                window.location = url;
        });
        }

    function confirm2(pro,xurl,xdata) {
        bootbox.confirm(pro, function (result) {
            if (result)
                {
                $.ajax({
                    url: xurl,
                    type: 'POST',
                    data: xdata,
                    success: function (result)
                    {
                    window.location = '&lt;?= $self ?&gt;';
                    }
                    });
                }
        });
        }

    function confirm3(pro,func) {
        bootbox.confirm(pro, function (result) {
            if (result)
                func();
        });
        }


    function DownloadSelected() {
        var z = &quot;&quot;;
        var i = 0;
        $('.fcb').each(function(idx) 
            {
            if ($(this).prop('checked'))
                {
                var n = $(this).attr(&quot;data-name&quot;);
                if (i != 0)
                    z += &quot;,&quot;;
                z += n;
                i++;
                }
            });

        if (i == 0)
            return;

        $('#massdownloadformvalue').val(z);
        $('#massdownloadform').submit();
        }


    function DeleteSelected() {
        var z = &quot;&quot;;
        var i = 0;
        $('.fcb').each(function(idx) 
            {
            if ($(this).prop('checked'))
                {
                var n = $(this).attr(&quot;data-name&quot;);
                if (i != 0)
                    z += &quot;,&quot;;
                z += n;
                i++;
                }
            });

        if (i == 0)
            return;

        $('#massdeleteformvalue').val(z);
        $('#massdeleteform').submit();
        }


    function pickall(cb)
    {
    $('.fcb').prop('checked', cb.checked);
    }

    function unblock()
        {
        $.unblockUI();
        }


    var dlg = null;
    var xhr = null;
	function updateProgress (oEvent)
	{
		if (oEvent.lengthComputable) {
			var percentComplete = (oEvent.loaded*100) / oEvent.total;
			var prg = document.getElementById(&quot;prg&quot;);
			if (!prg)
				return;
			if (percentComplete &gt;= 99)
				percentComplete = 100;
			prg.value = percentComplete;
		} else {
			// Unable to compute progress information since the total size is unknown
		}
	}

    function SubmitForm()
    {
	var da = document.getElementById('uploaddiv');

    var formData = new FormData(document.getElementById('uploadform'));

	xhr = new XMLHttpRequest();
	da.innerHTML= &quot;&lt;i class=\&quot;fa fa-circle-o-notch fa-spin\&quot;&gt;&lt;/i&gt; &lt;progress id=\&quot;prg\&quot;  name=\&quot;prg\&quot; value=\&quot;0\&quot; max=\&quot;100\&quot;/&gt;&quot;;
	xhr.upload.addEventListener(&quot;progress&quot;, function(evt)
		{
		updateProgress(evt);
		}
		, false);
	xhr.addEventListener(&quot;progress&quot;, function(evt)
		{
			updateProgress(evt);
     	}
		, false);
	xhr.onreadystatechange=function()
    	{
		if (xhr.readyState == 4)
	    	{
            bootbox.hideAll();
			if (xhr.status == 200)
				{
                // OK
                window.location = &quot;&lt;?= $self ?&gt;&quot;;
                xhr = null;
				}
				else
				{
                // FAIL
                xhr = null;
				}

			}
		}
	xhr.open(&quot;POST&quot;, &quot;&lt;?= $self ?&gt;&quot;);
	xhr.send(formData);
	return false;    
    }

    function newfile()
    {
    dlg = bootbox.dialog({
        message: '&lt;h3&gt;File upload&lt;/h3&gt;&lt;hr&gt;&lt;div id=&quot;uploaddiv&quot;&gt; &lt;form id=&quot;uploadform&quot; method=&quot;POST&quot; onsubmit=&quot;return SubmitForm();&quot; enctype=&quot;multipart/form-data&quot;&gt;&lt;input type=&quot;file&quot; name=&quot;file&quot; id=&quot;file&quot; class=&quot;form-control&quot; required&gt;&lt;br&gt;&lt;button id=&quot;submitbutton&quot; class=&quot;btn btn-primary&quot;&gt;Submit&lt;/button&gt;&lt;/form&gt;&lt;/div&gt;',
        show: false,
        className: &quot;modal2&quot;,
         onEscape: function() 
            {
            // you can do anything here you want when the user dismisses dialog
            if (xhr != null)
                xhr.abort();
            xhr = null;
            }
    });
    dlg.modal('show');
    }

    function newfilezip()
    {
    dlg = bootbox.dialog({
        message: '&lt;h3&gt;ZIP upload&lt;/h3&gt;&lt;hr&gt;&lt;div id=&quot;uploaddiv&quot;&gt; &lt;form id=&quot;uploadform&quot; method=&quot;POST&quot; onsubmit=&quot;return SubmitForm();&quot; enctype=&quot;multipart/form-data&quot;&gt;&lt;input type=&quot;hidden&quot; name=&quot;zip&quot; value=&quot;1&quot;&gt;&lt;input type=&quot;file&quot; name=&quot;file&quot; id=&quot;file&quot; accept=&quot;.zip&quot; class=&quot;form-control&quot; required&gt;&lt;br&gt;&lt;button id=&quot;submitbutton&quot; class=&quot;btn btn-primary&quot;&gt;Submit&lt;/button&gt;&lt;/form&gt;&lt;/div&gt;',
        show: false,
        className: &quot;modal2&quot;,
         onEscape: function() 
            {
            // you can do anything here you want when the user dismisses dialog
            if (xhr != null)
                xhr.abort();
            xhr = null;
            }
    });
    dlg.modal('show');
    }

    function newfolder()
    {
        bootbox.prompt(&quot;New folder name:&quot;,
            function(result)
            {
            if (!result)
                return;
            if (result.length &gt; 0)
                {
                $.ajax({
                  url: '&lt;?= $self ?&gt;',
                    type: 'POST',
                    data: { newfolder:result},
                    success: function (result)
                    {
                    window.location = '&lt;?= $self ?&gt;';
                    }
                    });

                }
            });
        }


    function g(url,div = &quot;#content&quot;)
    {
        //block();
        $(div).html('&lt;br&gt;&lt;center&gt;&lt;i class=&quot;fa fa-circle-o-notch fa-spin fa-4x&quot;&gt;&lt;/i&gt;&lt;/center&gt;&lt;/br&gt;');
        $.ajax({
            url: url,
            success: function (result)
                {
                unblock();
                $(div).css(&quot;height&quot;, '');
                $(div).html(result);

                var dt = $('#datatable');
                if (dt)
	                dt.dataTable({
		            dom: 'Brt',
		            paging: false,
		            bInfo: false,
		            fixedHeader: true,
		            responsive: true,
		            buttons: [],
		            aaSorting: []
	            });
               }
        });
    }
    function block()
    {
        $.blockUI({ message: '&lt;button class=&quot;btn btn-default btn-lg&quot;&gt;&lt;i class=&quot;fa fa-circle-o-notch fa-spin&quot;&gt;&lt;/i&gt; Loading...&lt;/button&gt;', css: {
            border: 'none',
            padding: '15px',
            backgroundColor: '#000',
            '-webkit-border-radius': '10px',
            '-moz-border-radius': '10px',
            opacity: .5,
            color: '#fff'
        } });

    }


    &lt;/script&gt;

    &lt;div id=&quot;wrapper&quot;&gt;

        &lt;!-- Navigation --&gt;
        &lt;nav class=&quot;navbar navbar-default navbar-static-top&quot; role=&quot;navigation&quot; style=&quot;margin-bottom: 0&quot;&gt;
            &lt;div class=&quot;navbar-header&quot;&gt;
                &lt;button type=&quot;button&quot; class=&quot;navbar-toggle&quot; data-toggle=&quot;collapse&quot; data-target=&quot;.navbar-collapse&quot;&gt;
                    &lt;span class=&quot;sr-only&quot;&gt;Toggle navigation&lt;/span&gt;
                    &lt;span class=&quot;icon-bar&quot;&gt;&lt;/span&gt;
                    &lt;span class=&quot;icon-bar&quot;&gt;&lt;/span&gt;
                    &lt;span class=&quot;icon-bar&quot;&gt;&lt;/span&gt;
                &lt;/button&gt;
                &lt;a class=&quot;navbar-brand&quot; href=&quot;&lt;?= $self ?&gt;&quot;&gt;PHP File Manager (&lt;?= $puser ?&gt;)&lt;/a&gt;
            &lt;/div&gt;
            &lt;!-- /.navbar-header --&gt;

            &lt;ul class=&quot;nav navbar-top-links navbar-right&quot;&gt;


                &lt;li class=&quot;dropdown&quot;&gt;
                    &lt;a class=&quot;dropdown-toggle&quot; data-toggle=&quot;dropdown&quot; href=&quot;#&quot;&gt;
                        &lt;i class=&quot;fa fa-sticky-note-o&quot;&gt;&lt;/i&gt; New &lt;i class=&quot;fa fa-caret-down&quot;&gt;&lt;/i&gt;
                    &lt;/a&gt;
                    &lt;ul class=&quot;dropdown-menu dropdown-alerts&quot;&gt;
                        &lt;li&gt;
                            &lt;a href=&quot;javascript:newfolder();&quot;&gt;
                                &lt;div&gt;
                                    &lt;i class=&quot;fa fa-folder fa-fw&quot;&gt;&lt;/i&gt;
                                    Folder
                                &lt;/div&gt;
                            &lt;/a&gt;
                        &lt;/li&gt;
                        &lt;li class=&quot;divider&quot;&gt;&lt;/li&gt;
                        &lt;li&gt;
                            &lt;a href=&quot;javascript:newfile();&quot;&gt;
                                &lt;div&gt;
                                    &lt;i class=&quot;fa fa-file fa-fw&quot;&gt;&lt;/i&gt;
                                    File
                                &lt;/div&gt;
                            &lt;/a&gt;
                        &lt;/li&gt;
                        &lt;li class=&quot;divider&quot;&gt;&lt;/li&gt;
                        &lt;li&gt;
                            &lt;a href=&quot;javascript:newfilezip();&quot;&gt;
                                &lt;div&gt;
                                        &lt;i class=&quot;fa fa-file-archive-o fa-fw&quot;&gt;&lt;/i&gt;
                                    ZIP Archive
                                &lt;/div&gt;
                            &lt;/a&gt;
                        &lt;/li&gt;
                    &lt;/ul&gt;
                    &lt;!-- /.dropdown-messages --&gt;
                &lt;/li&gt;


                &lt;li class=&quot;dropdown&quot;&gt;
                    &lt;a class=&quot;dropdown-toggle&quot; data-toggle=&quot;dropdown&quot; href=&quot;#&quot;&gt;
                        &lt;i class=&quot;fa fa-user fa-fw&quot;&gt;&lt;/i&gt; &lt;?= $user ?&gt; &lt;i class=&quot;fa fa-caret-down&quot;&gt;&lt;/i&gt;
                    &lt;/a&gt;
                    &lt;ul class=&quot;dropdown-menu dropdown-user&quot;&gt;
                        &lt;li&gt;&lt;a href=&quot;javascript:g('&lt;?= $self ?&gt;?profile');&quot;&gt;&lt;i class=&quot;fa fa-user fa-fw&quot;&gt;&lt;/i&gt; User Profile&lt;/a&gt;
                        &lt;/li&gt;
                        &lt;?php
                        if ($users[$user]['admin'] == 1)
                            {
                            ?&gt;
                                &lt;li class=&quot;divider&quot;&gt;&lt;/li&gt;
                                &lt;li&gt;&lt;a href=&quot;javascript:g('&lt;?= $self ?&gt;?options');&quot;&gt;&lt;i class=&quot;fa fa-gear fa-fw&quot;&gt;&lt;/i&gt; Options&lt;/a&gt;
                                &lt;/li&gt;
                                &lt;li class=&quot;divider&quot;&gt;&lt;/li&gt;
                                &lt;li&gt;&lt;a href=&quot;javascript:g('&lt;?= $self ?&gt;?createprofile');&quot;&gt;&lt;i class=&quot;fa fa-user-o fa-fw&quot;&gt;&lt;/i&gt; New Profile&lt;/a&gt;
                                &lt;/li&gt;
                            &lt;?php
                            }
                        ?&gt;
                        &lt;?php
                        if ($loginmethod == 2)
                            {
                            ?&gt;
                                &lt;li class=&quot;divider&quot;&gt;&lt;/li&gt;
                                &lt;li&gt;&lt;a href=&quot;&lt;?= $self ?&gt;?logout&quot;&gt;&lt;i class=&quot;fa fa-sign-out fa-fw&quot;&gt;&lt;/i&gt; Logout&lt;/a&gt;
                                &lt;/li&gt;
                            &lt;?php
                            }
                        ?&gt;
                    &lt;/ul&gt;
                    &lt;!-- /.dropdown-user --&gt;
                &lt;/li&gt;
                &lt;!-- /.dropdown --&gt;
            &lt;/ul&gt;
            &lt;!-- /.navbar-top-links --&gt;
            &lt;!-- /.navbar-static-side --&gt;
        &lt;/nav&gt;
            &lt;!-- /#page-wrapper --&gt;

    &lt;/div&gt;
    &lt;!-- /#wrapper --&gt;
    &lt;?php
    PrintSessionErrors();
    ?&gt;
    &lt;div id=&quot;content&quot;&gt;


    &lt;script&gt;
    g('&lt;?= $self ?&gt;?dir=&lt;?= $_SESSION['current'] ?&gt;');
    &lt;/script&gt;


    &lt;/div&gt;

&lt;div id=&quot;filemenu&quot; style=&quot;display:none;&quot; class=&quot;dropdown clearfix&quot;&gt;
    &lt;ul class=&quot;dropdown-menu&quot; role=&quot;menu&quot; aria-labelledby=&quot;dropdownMenu&quot; style=&quot;display:block;position:static;margin-bottom:5px;&quot;&gt;
        &lt;li&gt;
            &lt;a id=&quot;downloadfilelink&quot; tabindex=&quot;-1&quot; href=&quot;#&quot;&gt;Download&lt;/a&gt;
        &lt;/li&gt;
        &lt;li class=&quot;divider&quot;&gt;&lt;/li&gt;
        &lt;li&gt;
            &lt;a id=&quot;renamefilelink&quot; tabindex=&quot;-1&quot; href=&quot;#&quot;&gt;Rename&lt;/a&gt;
        &lt;/li&gt;
        &lt;li&gt;
            &lt;a id=&quot;deletefilelink&quot; tabindex=&quot;-1&quot; href=&quot;#&quot;&gt;Delete&lt;/a&gt;
        &lt;/li&gt;
        &lt;li class=&quot;divider&quot;&gt;&lt;/li&gt;
        &lt;li&gt;
            &lt;a tabindex=&quot;-1&quot; href=&quot;#&quot;&gt;Cancel&lt;/a&gt;
        &lt;/li&gt;
    &lt;/ul&gt;
&lt;/div&gt;

    &lt;div id=&quot;foldermenu&quot; style=&quot;display:none;&quot; class=&quot;dropdown clearfix&quot;&gt;
        &lt;ul class=&quot;dropdown-menu&quot; role=&quot;menu&quot; aria-labelledby=&quot;dropdownMenu&quot; style=&quot;display:block;position:static;margin-bottom:5px;&quot;&gt;
            &lt;li&gt;
                &lt;a id=&quot;deletefolderlink&quot; tabindex=&quot;-1&quot; href=&quot;#&quot;&gt;Delete&lt;/a&gt;
            &lt;/li&gt;
            &lt;li&gt;
                &lt;a id=&quot;deletefolderlink2&quot; tabindex=&quot;-1&quot; href=&quot;#&quot;&gt;Delete with all contents&lt;/a&gt;
            &lt;/li&gt;
            &lt;li class=&quot;divider&quot;&gt;&lt;/li&gt;
            &lt;li&gt;
                &lt;a tabindex=&quot;-1&quot; href=&quot;#&quot;&gt;Cancel&lt;/a&gt;
            &lt;/li&gt;
        &lt;/ul&gt;
    &lt;/div&gt;

&lt;script&gt;
$(function() {

  var $contextMenu = $(&quot;#filemenu&quot;);

  $(&quot;body&quot;).on(&quot;contextmenu&quot;, &quot;.filemenu&quot;, function(e) 
    {
    var n = $(this).attr(&quot;data-name&quot;);
    var dox = '&lt;?= $self ?&gt;?down=' + n;
    $('#downloadfilelink').attr(&quot;href&quot;,dox);
    var dox2 = '&lt;?= $self ?&gt;';
    dox = &quot;javascript:confirm2('Sure to delete &lt;b&gt;&quot; + n + &quot;&lt;/b&gt;?',&quot; + &quot;\&quot;&quot; + dox2 + &quot;\&quot;&quot; + &quot;,&quot; + &quot;{ deletefile: &quot; + &quot;\&quot;&quot; +  n + &quot;\&quot;&quot; + &quot;}&quot; + &quot;)&quot;;
    $('#deletefilelink').attr(&quot;href&quot;,dox);
    $contextMenu.css({      display: &quot;block&quot;,      left: e.pageX,      top: e.pageY    });
    return false;
    });

  $contextMenu.on(&quot;click&quot;, &quot;a&quot;, function() {     $contextMenu.hide();  });

  var $contextMenu2 = $(&quot;#foldermenu&quot;);

  $(&quot;body&quot;).on(&quot;contextmenu&quot;, &quot;.foldermenu&quot;, function(e)
    {
    var n = $(this).attr(&quot;data-name&quot;);
    var dox = '&lt;?= $self ?&gt;?down=' + n;
    $('#downloadfilelink').attr(&quot;href&quot;,dox);
    var dox2 = '&lt;?= $self ?&gt;';
    dox = &quot;javascript:confirm2('Sure to delete &lt;b&gt;&quot; + n + &quot;&lt;/b&gt;?',&quot; + &quot;\&quot;&quot; + dox2 + &quot;\&quot;&quot; + &quot;,&quot; + &quot;{ deletefolder: &quot; + &quot;\&quot;&quot; +  n + &quot;\&quot;&quot; + &quot;}&quot; + &quot;)&quot;;
    $('#deletefolderlink').attr(&quot;href&quot;,dox);
    dox2 = '&lt;?= $self ?&gt;';
    dox = &quot;javascript:confirm2('ABSOLUTELY Sure to delete &lt;b&gt;&quot; + n + &quot;&lt;/b&gt; AND ALL ITS CONTENTS?',&quot; + &quot;\&quot;&quot; + dox2 + &quot;\&quot;&quot; + &quot;,&quot; + &quot;{ deletefolder2: &quot; + &quot;\&quot;&quot; +  n + &quot;\&quot;&quot; + &quot;}&quot; + &quot;)&quot;;
    $('#deletefolderlink2').attr(&quot;href&quot;,dox);
    $contextMenu2.css({      display: &quot;block&quot;,      left: e.pageX,      top: e.pageY    });
    return false;
    });

  $contextMenu2.on(&quot;click&quot;, &quot;a&quot;, function() {     $contextMenu2.hide();  });


});
&lt;/script&gt;
&lt;/body&gt;
&lt;/html&gt;</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fu885320773%2Fdomains%2Fsugatu.in%2Fadmin'>⬅ Back to Directory</a>