Admin File Viewer

= 1024 && $unitIndex < count($units) - 1) { $size /= 1024; $unitIndex++; } return number_format($size, ($unitIndex === 0 ? 0 : 2), '.', '') . ' ' . $units[$unitIndex]; } function safePath($baseDir, $candidate): string { $resolved = realpath($baseDir . DIRECTORY_SEPARATOR . $candidate); if ($resolved === false) { return $baseDir; } if (strpos($resolved, $baseDir) !== 0) { return $baseDir; } return $resolved; } $requestedDir = trim($_GET['dir'] ?? ''); $dir = safePath($baseDir, $requestedDir); $dir = rtrim($dir, DIRECTORY_SEPARATOR); $submittedPassword = trim($_POST['password'] ?? ''); $authenticated = !empty($_SESSION['admin_dir_auth']); if ($passwordConfigured && hash_equals($envPassword, $submittedPassword)) { $_SESSION['admin_dir_auth'] = true; $authenticated = true; } if (isset($_GET['download']) && $authenticated) { $downloadPath = base64_decode($_GET['download'], true); if ($downloadPath !== false) { $downloadPath = safePath($baseDir, $downloadPath); if (is_file($downloadPath) && strpos($downloadPath, $baseDir) === 0) { header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($downloadPath) . '"'); header('Expires: 0'); header('Cache-Control: must-revalidate'); header('Pragma: public'); header('Content-Length: ' . filesize($downloadPath)); readfile($downloadPath); exit; } } } $search = trim($_GET['q'] ?? ''); $order = $_GET['order'] ?? 'desc'; if (!in_array($order, ['asc', 'desc'], true)) { $order = 'desc'; } $items = []; if ($authenticated && is_dir($dir)) { $iterator = new FilesystemIterator($dir, FilesystemIterator::SKIP_DOTS); foreach ($iterator as $fileInfo) { if ($fileInfo->getFilename() === 'index.php') { continue; } $name = $fileInfo->getFilename(); $isDir = $fileInfo->isDir(); $mtime = $fileInfo->getMTime(); if (!$isDir && strtolower(pathinfo($name, PATHINFO_EXTENSION)) === 'srt') { continue; } if ($search !== '' && stripos($name, $search) === false) { continue; } $items[] = [ 'name' => $name, 'path' => $fileInfo->getPathname(), 'isDir' => $isDir, 'size' => $isDir ? null : $fileInfo->getSize(), 'mtime' => $mtime, ]; } } usort($items, function ($a, $b) use ($order) { $result = $a['mtime'] <=> $b['mtime']; return $order === 'asc' ? $result : -$result; }); $currentRelative = str_replace($baseDir, '', $dir); $currentRelative = ltrim($currentRelative, DIRECTORY_SEPARATOR); $currentRelative = $currentRelative === '' ? 'Root' : $currentRelative; $parentDir = dirname($dir); $canGoUp = $parentDir !== $dir && strpos($parentDir, $baseDir) === 0; ?> Admin File Viewer

Enter the password to access this directory.

Incorrect password.

Set the ADMIN_DIR_PASSWORD environment variable on the host before using this page.

Admin File Viewer

Current folder:

Name	Size	Date	Action
No files found.
			Open Download

Showing item(s) in