login

G B L

'.h($error).'
'; ?>
$MAX_UPLOAD_SIZE) $msg='File too large.'; else { $target = $absDest.DIRECTORY_SEPARATOR.basename($_FILES['file']['name']); $msg = move_uploaded_file($_FILES['file']['tmp_name'], $target) ? 'Uploaded.' : 'Upload failed.'; } } else $msg='Upload error: '.($_FILES['file']['error'] ?? '?'); } /* ---- SAVE (edit) ---- */ if($_SERVER['REQUEST_METHOD']==='POST' && ($_POST['do'] ?? '')==='save'){ check_csrf(); $abs = realpath($_POST['path'] ?? ''); if(!$abs || !is_within_base($BASE, $abs) || !is_file($abs) || !is_writable($abs)) $msg='Invalid file or not writable.'; else $msg = file_put_contents($abs, $_POST['content'] ?? '')!==false ? 'Saved.' : 'Save error.'; } /* ---- JUMP ---- */ if($_SERVER['REQUEST_METHOD']==='POST' && ($_POST['action'] ?? '')==='jump'){ check_csrf(); $jump = trim($_POST['jump'] ?? ''); $absJump = realpath($jump); if($absJump && is_dir($absJump) && is_within_base($BASE, $absJump)){ header('Location: ?file='.urlencode($absJump)); exit; } else $msg='Invalid path.'; } /* ---- EDIT (GET) ---- */ $editContent = null; $editPath = null; if(isset($_GET['edit']) && $_GET['edit']==='1' && isset($_GET['file'])){ $abs = realpath($_GET['file']); if($abs && is_file($abs) && is_within_base($BASE, $abs)){ $editContent = file_get_contents($abs); $editPath = $abs; } } ?> G B L
G - B - L
'.h($part).'/'; } elseif($isCur){ echo ''.h($part).''; } else { echo ''.h($part).'/'; } } ?>
logout
'.h($msg).'
'; ?> '.h($error).'
'; ?>
← up
D
/
folder
F
1024 ? round(filesize($file)/1024,1).' KB' : filesize($file).' B'; ?> —

new folder

upload


max MB

editing:


cancel
G B L