50MB (mtime+size); dynamiczny tytuł modala
* v2.9.5 - bezpieczeństwo: isPathAuthorized() — stream/thumb/download/zip respektują ochronę config.php na całej ścieżce; stream tylko media (blokada config.php/json); isWithinBase() z separatorem; CSRF w create_config; session_regenerate_id po logowaniu; hash_equals dla admina; globalny nosniff
* v2.9.6 - isHiddenEntry(): centralne ukrywanie wrażliwych plików (dotfiles, php/json/sql/db/env/key/log/bak, backupy ~, macOS ._*) w listingu, wyszukiwarce i pobieraniu; usunięto martwe disallowedExtensions/isMacJunkFile
* v3.0.0 - wydanie stabilne: konsolidacja hardeningu bezpieczeństwa (autoryzacja ścieżek, ukrywanie wrażliwych plików, CSRF, sesje) oraz funkcji ZIP/integralności/lazy-load z gałęzi 2.9.x
*
**/
define('SOFTWARE_VERSION', 'v3.0.0');
define('ADMIN_USER', 'admin');
define('ADMIN_PASS', 'admin123'); // ✱ użyj haszowania w produkcji
$bLocalDev = in_array($_SERVER['REMOTE_ADDR'] ?? '', ['127.0.0.1', '::1'], true);
ini_set('display_errors', $bLocalDev ? '1' : '0');
ini_set('display_startup_errors', $bLocalDev ? '1' : '0');
error_reporting($bLocalDev ? E_ALL : 0);
if (session_status() === PHP_SESSION_NONE)
{
session_set_cookie_params([
'httponly' => true,
'samesite' => 'Lax',
'secure' => (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off'),
]);
session_start();
}
if (empty($_SESSION['csrf_token']))
{
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
header('X-Frame-Options: SAMEORIGIN');
header('Referrer-Policy: strict-origin-when-cross-origin');
header('X-Content-Type-Options: nosniff');
class View
{
// --- HEAD / FOOTER ---
public static function headLogin($title = 'File Browser')
{
return <<
{$title}
HTML;
}
public static function footer()
{
return "";
}
// --- LOGIN FORM (uniwersalny) ---
// $action może być '' aby użyć aktualnego URL
public static function loginForm($action = '', $error = '', $sTitle='', $extraFields = '')
{
$actionEsc = htmlspecialchars($action ?: $_SERVER['REQUEST_URI'], ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
$errHtml = $error ? $error : '';
return <<
HTML;
}
public function setStyleCss()
{
return <<
/* styl CSS bez zmian */
body {
font-family: Arial, sans-serif;
background-color: #1c1c1c;
color: #ffffff;
margin: 0;
padding: 0;
}
/* iOS: nie wymuszaj powiększania tekstu */
html { -webkit-text-size-adjust: 100%; }
/* Wygląd pola wyszukiwania na mobile/retina */
#searchInput{
-webkit-appearance: none;
appearance: none;
font-size: 16px; /* anty-zoom iOS */
line-height: 1.2;
border-radius: 10px;
touch-action: manipulation;
}
#searchInput::placeholder{ color:#aaa; }
#searchInput:focus{
outline: 2px solid #4aa3ff;
outline-offset: 2px;
}
.top-bar {
display: flex;
justify-content: space-between;
align-items: center;
padding: 20px;
background-color: #1c1c1c;
border-bottom: 1px solid #333;
}
.left-container h1 {
margin: 0;
font-size: 24px;
color: #fff;
}
.right-container {
text-align: right;
}
.logout-btn {
background-color: #444;
color: #fff;
padding: 8px 16px;
border: none;
border-radius: 6px;
text-decoration: none;
font-size: 14px;
transition: background 0.3s ease;
}
.logout-btn:hover {
background-color: #555;
}
.file-list-container {
width: 100%;
padding: 20px;
background-color: rgba(28, 28, 28, 0.9);
box-sizing: border-box;
}
table {
width: 100%;
border-collapse: collapse;
margin-top: 20px;
table-layout: fixed;
}
th, td {
padding: 10px;
border-bottom: 1px solid #444;
text-align: left;
word-wrap: break-word;
}
th {
background-color: #2c2c2c;
}
tr:hover {
background-color: #333;
}
a {
color: #61dafb;
text-decoration: none;
}
a:hover {
text-decoration: underline;
}
.btn {
background-color: #444;
color: #fff;
padding: 5px 10px;
border: none;
border-radius: 5px;
cursor: pointer;
font-size: 12px;
margin: 2px;
}
.btn:hover {
background-color: #555;
}
.btn.btn-sm{
padding: 6px 8px;
font-size: 12px;
line-height: 1.2;
}
.icon {
font-size: 16px;
margin-right: 5px;
}
.modal {
display: none;
position: fixed;
top: 0; left: 0;
width: 100%; height: 100%;
background-color: rgba(0, 0, 0, 0.8);
justify-content: center;
align-items: center;
z-index: 1000;
}
.modal-content {
position: relative;
max-width: 90vw;
max-height: 90vh;
text-align: center;
overflow: hidden;
}
.modal-content img,
.modal-content video {
max-width: 90vw;
max-height: 90vh;
width: auto;
height: auto;
object-fit: contain;
display: block;
margin: 0 auto;
}
.modal-close {
position: absolute;
top: 10px; right: 10px;
background: none;
border: none;
color: #fff;
font-size: 24px;
cursor: pointer;
}
#videoModal,
#previewModal,
#shareModal,
#playlistPanel,
#zipModal {
z-index: 5000 !important;
}
#zipModal .modal-content {
background: #1c1c1c;
border-radius: 12px;
padding: 28px 32px;
min-width: 320px;
max-width: 460px;
width: 90%;
text-align: left;
position: relative;
}
#zipModal h3 { margin: 0 0 16px; color: #cde2ff; font-size: 16px; }
.zip-track {
background: #333;
border-radius: 6px;
height: 10px;
overflow: hidden;
margin-bottom: 10px;
}
.zip-bar {
background: linear-gradient(90deg, #4a90e2, #7bc8ff);
height: 100%;
width: 0%;
transition: width 0.25s ease;
border-radius: 6px;
}
.zip-status { color: #a9c4ff; font-size: 13px; margin-bottom: 4px; }
.zip-file { color: #555; font-size: 11px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; margin-bottom: 18px; min-height: 16px; }
#videoModal .modal-content,
#previewModal .modal-content,
#shareModal .modal-content,
#playlistPanel .modal-content{
position: relative;
}
#audioPlayerBar {
position: fixed; left:0; right:0; bottom:0; z-index: 2000;
background: #181818; border-top: 1px solid #282828;
display: flex; align-items: center; gap: 0;
height: 88px; padding: 0 16px;
}
.ab-left {
display: flex; align-items: center; gap: 12px;
width: 240px; min-width: 160px; overflow: hidden; flex-shrink: 0;
}
.ab-art {
width: 50px; height: 50px; border-radius: 50%; flex-shrink: 0;
background: radial-gradient(circle at 40% 35%, #2a2a4a, #111);
display: flex; align-items: center; justify-content: center;
font-size: 22px; box-shadow: 0 2px 10px rgba(0,0,0,.5);
}
.ab-art.playing { animation: apSpin 18s linear infinite; }
.ab-title {
font-size: 13px; color: #fff; white-space: nowrap;
overflow: hidden; text-overflow: ellipsis; display: block;
}
.ab-center {
flex: 1; display: flex; flex-direction: column;
align-items: center; gap: 4px; padding: 0 16px; min-width: 0;
}
.ab-controls { display: flex; align-items: center; gap: 10px; }
.ab-btn {
background: none; border: none; color: #b3b3b3;
font-size: 20px; cursor: pointer; padding: 4px 6px;
border-radius: 50%; line-height: 1; transition: color .15s;
}
.ab-btn:hover { color: #fff; }
.ab-btn.active { color: #1db954; }
.ab-btn-play {
width: 38px; height: 38px; background: #fff; color: #000;
font-size: 16px; display: flex; align-items: center; justify-content: center;
}
.ab-btn-play:hover { background: #1db954; color: #000; transform: scale(1.06); }
.ab-progress-wrap {
display: flex; align-items: center; gap: 8px; width: 100%;
}
.ab-time { font-size: 11px; color: #aaa; min-width: 30px; flex-shrink: 0; }
.ab-progress-bar {
flex: 1; height: 4px; background: #3e3e3e; border-radius: 2px;
cursor: pointer; position: relative;
}
.ab-progress-bar:hover { height: 6px; }
.ab-progress-fill {
height: 100%; width: 0%; background: #1db954; border-radius: 2px;
pointer-events: none; transition: width .2s linear;
}
.ab-progress-bar:hover .ab-progress-fill { background: #fff; }
.ab-right {
display: flex; align-items: center; gap: 10px;
width: 200px; justify-content: flex-end; flex-shrink: 0;
}
.ab-volume { accent-color: #1db954; width: 90px; cursor: pointer; }
#playlistPanel .modal-content li{
display:flex; align-items:center; justify-content:space-between;
padding:6px 4px; border-bottom:1px solid #333; font-size:14px;
}
#playlistPanel .track-title{ flex:1; white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
#playlistPanel .track-actions .btn{ margin-left:6px; }
#playlistPanel .modal-content { max-height: 90vh; overflow: auto }
#playlistList { max-height: 70vh; overflow: auto }
/* Shuffle aktywne = zielone */
#audioShuffle.active{
background: #2e7d32; /* ciemna zieleń */
color: #fff;
border-color: #245b28;
}
tr.row-playing, #playlistList li.playing {
background: #1f3d1f !important;
border-color: #285c28 !important;
color: #e6ffe6;
transition: background .2s ease, color .2s ease;
}
tr.row-playing:hover { background: #234823 !important; }
tr.row-playing td:first-child { box-shadow: inset 4px 0 0 0 #32a852; }
/* Wiersze list klikane jak kafelki – podpowiedzka „tapnij mnie” */
tbody tr{ cursor: pointer; }
/* Niech klik w przyciski nadal działa niezależnie */
td .btn, td a, td button{ cursor: pointer; }
.sticky-search{
position: sticky;
top: 0;
z-index: 900;
background: #1a1a1a;
border-bottom: 1px solid #333;
}
/* ——— panel live-wyników ——— */
#liveResults{
display: none; /* ukryty gdy nic nie wpisane */
opacity: 0;
transform: translateY(-4px);
transition: opacity .25s ease, transform .25s ease;
background: rgba(30, 60, 100, 0.25);
border: 1px solid rgba(80, 130, 200, 0.35);
border-radius: 10px;
padding: 6px 10px 8px 10px;
margin-top: 8px;
backdrop-filter: blur(6px);
box-shadow: 0 0 10px rgba(0, 0, 30, 0.3);
color: #cde2ff;
scroll-margin-top: 80px; /* gdy przewijamy do wyników */
}
#liveResults table{
width: 100%;
border-collapse: collapse;
}
#liveResults th {
padding: 6px 8px;
border-bottom: 1px solid #2a2a2a;
text-align: left;
font-weight: normal;
}
#liveResults .actions .btn{
margin-left: 6px;
}
/* Gdy pokazujemy panel – płynne pojawienie i lekkie wsunięcie */
#liveResults.is-visible{
display: block;
opacity: 1;
transform: translateY(0);
animation: fadeSlideIn .25s ease;
}
@keyframes fadeSlideIn{
from{ opacity:0; transform: translateY(-6px); }
to { opacity:1; transform: translateY(0); }
}
#liveResults tr{ border-bottom: 1px solid rgba(120,160,220,.25); }
#liveResults tr:hover{ background: rgba(80,140,220,.15); transition: background .25s ease; }
#liveResults td{ padding: 6px 8px; color:#e0eaff; font-size:14px; }
#liveResults a, #liveResults .btn{
color:#bcd8ff; background: rgba(50,90,150,.4);
border:1px solid rgba(90,130,200,.3); border-radius:6px; padding:4px 8px; font-size:13px;
text-decoration:none; transition: background .25s ease, color .25s ease, border-color .25s ease;
}
#liveResults .btn:hover{ background: rgba(100,160,250,.4); color:#fff; border-color: rgba(150,200,255,.4); }
#liveResults .info{ color:#a9c4ff; text-align:center; padding:12px 6px; }
#adminLoginBtn {
position: relative;
margin-left: auto;
margin-right: 8px;
}
.footer {
text-align: center;
padding: 10px;
font-size: 13px;
color: #888;
background-color: #1c1c1c;
border-top: 1px solid #333;
margin-top: 40px;
}
.breadcrumbs{
padding: 8px 0 4px 0;
font-size: 14px;
color: #aaa;
white-space: nowrap;
overflow-x: auto;
-webkit-overflow-scrolling: touch;
}
.breadcrumbs a{
color: #61dafb;
text-decoration: none;
}
.breadcrumbs a:hover{
text-decoration: underline;
}
.breadcrumbs .sep{
color: #666;
margin: 0 6px;
}
/* Pasek narzędziowy galerii/wideo/audio */
.gallery-toolbar {
display: flex;
justify-content: space-between;
align-items: center;
flex-wrap: wrap;
gap: 8px;
padding: 10px 14px;
margin: 8px 0 12px;
background: #202020;
border: 1px solid #333;
border-radius: 10px;
}
.gallery-toolbar-info {
color: #aaa;
font-size: 13px;
flex-shrink: 0;
}
.gallery-toolbar-buttons {
display: flex;
gap: 6px;
flex-wrap: wrap;
justify-content: flex-end;
}
/* Gallery File View – fullscreen grid + lightbox */
#galleryGrid {
background: #000;
overflow: hidden;
font-size: 0;
line-height: 0;
margin: 0 -20px;
}
.gallery-tile {
display: inline-block;
width: 20%;
padding-bottom: 20%;
position: relative;
cursor: pointer;
background-size: cover;
background-position: center center;
background-color: #111;
transition: filter .1s ease-in;
vertical-align: top;
}
.gallery-tile:hover {
filter: brightness(.6);
transition: filter .1s ease-out;
}
/* Lightbox overlay */
#galleryLightbox {
display: none;
position: fixed;
inset: 0;
z-index: 5000;
overflow: hidden;
}
#galleryLbBg {
position: absolute;
left: 0; top: 0;
width: 100%; height: 100%;
background: #000;
opacity: .96;
}
#galleryLbImgWrap {
position: absolute;
inset: 0 0 72px 0;
display: flex;
align-items: center;
justify-content: center;
opacity: 0;
transition: opacity .3s ease;
z-index: 1;
}
#galleryLbImg {
max-width: 100%;
max-height: 100%;
object-fit: contain;
display: block;
user-select: none;
pointer-events: none;
}
/* Side hotspots */
.gallery-lb-hs {
position: absolute;
top: 0;
bottom: 72px;
width: 25%;
z-index: 2;
cursor: pointer;
}
#galleryLbHsPrev { left: 0; }
#galleryLbHsNext { right: 0; }
.gallery-lb-hs-btn {
position: absolute;
top: 50%;
transform: translateY(-50%);
width: 50px; height: 50px;
background: rgba(0,0,0,.55);
border: none;
border-radius: 4px;
color: #a0a0a0;
font-size: 32px;
cursor: pointer;
opacity: 0;
transition: opacity .2s ease-out;
display: flex;
align-items: center;
justify-content: center;
padding: 0;
line-height: 1;
pointer-events: none;
}
#galleryLbHsPrev .gallery-lb-hs-btn { left: 0; }
#galleryLbHsNext .gallery-lb-hs-btn { right: 0; }
.gallery-lb-hs:hover .gallery-lb-hs-btn { opacity: 1; }
/* Bottom bar */
#galleryLbBar {
position: absolute;
left: 0; right: 0; bottom: 0;
height: 72px;
display: flex;
align-items: center;
justify-content: center;
gap: 12px;
z-index: 3;
opacity: 0;
transition: opacity .3s ease;
}
#galleryLbBarPrev,
#galleryLbBarNext {
background: none;
border: none;
color: #a0a0a0;
font-size: 30px;
cursor: pointer;
width: 45px; height: 45px;
display: flex;
align-items: center;
justify-content: center;
border-radius: 50%;
transition: color .15s;
padding: 0;
}
#galleryLbBarPrev:hover,
#galleryLbBarNext:hover { color: #fff; }
#galleryLbCount {
font-size: 13px;
color: #aaa;
min-width: 60px;
text-align: center;
}
#galleryLbDownload {
display: inline-flex;
align-items: center;
gap: 5px;
padding: 7px 12px;
background: rgba(255,255,255,.1);
border: 1px solid rgba(255,255,255,.2);
border-radius: 7px;
color: #ddd;
text-decoration: none;
font-size: 13px;
transition: background .15s;
}
#galleryLbDownload:hover { background: rgba(255,255,255,.2); color: #fff; }
/* Close button */
#galleryLbClose {
position: absolute;
top: 0; right: 0;
width: 45px; height: 45px;
background: none;
border: none;
color: #a0a0a0;
font-size: 20px;
cursor: pointer;
z-index: 4;
display: flex;
align-items: center;
justify-content: center;
transition: color .15s;
}
#galleryLbClose:hover { color: #fff; }
.gallery-empty {
padding: 20px;
background: #202020;
border: 1px solid #333;
border-radius: 10px;
color: #bbb;
}
@media (max-width: 768px) {
.gallery-tile { width: 25%; padding-bottom: 25%; }
}
@media (max-width: 568px) {
.gallery-tile { width: 50%; padding-bottom: 50%; }
}
/* Video File View */
.video-viewer {
margin: 12px 0 18px;
padding: 12px;
background: #141414;
border: 1px solid #333;
border-radius: 12px;
}
.video-stage {
position: relative;
min-height: 420px;
background: #090909;
border: 1px solid #2b2b2b;
border-radius: 12px;
display: flex;
align-items: center;
justify-content: center;
overflow: hidden;
}
.video-stage video {
width: 100%;
max-height: 78vh;
display: block;
background: #000;
}
.video-actions {
position: absolute;
top: 12px;
right: 12px;
z-index: 8;
display: flex;
gap: 8px;
flex-wrap: wrap;
justify-content: flex-end;
}
.video-action-btn {
display: inline-flex;
align-items: center;
gap: 6px;
padding: 8px 11px;
border-radius: 8px;
background: rgba(0, 0, 0, 0.65);
border: 1px solid rgba(255, 255, 255, 0.18);
color: #fff;
text-decoration: none;
font-size: 13px;
line-height: 1;
cursor: pointer;
}
.video-action-btn:hover {
background: rgba(255, 255, 255, 0.16);
color: #fff;
}
.video-nav {
position: absolute;
top: 50%;
transform: translateY(-50%);
width: 48px;
height: 72px;
border: 0;
border-radius: 10px;
background: rgba(0, 0, 0, 0.55);
color: #fff;
font-size: 34px;
cursor: pointer;
z-index: 7;
}
.video-nav:hover {
background: rgba(255, 255, 255, 0.14);
}
.video-prev {
left: 12px;
}
.video-next {
right: 12px;
}
.video-caption {
margin-top: 10px;
color: #aaa;
text-align: center;
font-size: 14px;
word-break: break-word;
}
.video-items {
display: grid;
grid-template-columns: repeat(auto-fill, minmax(150px, 1fr));
gap: 8px;
margin-top: 12px;
}
.video-item {
border: 2px solid transparent;
border-radius: 8px;
background: #222;
padding: 10px;
cursor: pointer;
min-height: 82px;
color: #ddd;
text-align: left;
overflow: hidden;
}
.video-item.active {
border-color: #ffb347;
}
.video-item-icon {
display: block;
font-size: 26px;
margin-bottom: 6px;
}
.video-item-name {
display: block;
font-size: 13px;
line-height: 1.25;
word-break: break-word;
}
.video-share-status {
margin-top: 8px;
color: #90ee90;
text-align: center;
font-size: 13px;
min-height: 18px;
}
.video-empty {
padding: 20px;
background: #202020;
border: 1px solid #333;
border-radius: 10px;
color: #bbb;
}
/* ------------------------------------- */
/* AUDIO PLAYER VIEW */
/* ------------------------------------- */
.ap-viewer {
display: flex;
gap: 0;
background: #121212;
border: 1px solid #2a2a2a;
border-radius: 14px;
overflow: hidden;
margin: 12px 0 18px;
height: 85vh;
min-height: 480px;
align-items: stretch;
}
/* --- sidebar (track list) --- */
.ap-sidebar {
width: 280px;
min-width: 220px;
flex-shrink: 0;
background: #181818;
border-right: 1px solid #2a2a2a;
overflow-y: auto;
}
.ap-sidebar-title {
padding: 16px 16px 8px;
font-size: 11px;
font-weight: 700;
letter-spacing: .1em;
color: #aaa;
text-transform: uppercase;
}
.ap-track-row {
display: flex;
align-items: center;
}
.ap-track-row:hover { background: #282828; }
.ap-track-row:hover .ap-add-btn { opacity: 1; }
.ap-track {
display: flex;
align-items: center;
gap: 10px;
flex: 1;
padding: 10px 16px;
background: none;
border: none;
color: #b3b3b3;
font-size: 14px;
text-align: left;
cursor: pointer;
border-radius: 0;
transition: color .15s;
min-width: 0;
}
.ap-track:hover { color: #fff; }
.ap-track.active { color: #1db954; }
.ap-add-btn {
background: none;
border: none;
color: #1db954;
font-size: 18px;
font-weight: bold;
cursor: pointer;
padding: 6px 12px;
opacity: 1;
transition: color .15s;
flex-shrink: 0;
}
.ap-add-btn:hover { color: #fff; }
.ap-track-num {
min-width: 22px;
font-size: 13px;
color: #777;
text-align: right;
flex-shrink: 0;
}
.ap-track.active .ap-track-num { display: none; }
.ap-track-info { flex: 1; overflow: hidden; }
.ap-track-name {
display: block;
white-space: nowrap;
overflow: hidden;
text-overflow: ellipsis;
font-size: 14px;
}
/* animated bars icon (shown when active) */
.ap-track-bars {
display: none;
align-items: flex-end;
gap: 2px;
height: 14px;
flex-shrink: 0;
}
.ap-track.active .ap-track-bars { display: flex; }
.ap-track-bars span {
display: block;
width: 3px;
background: #1db954;
border-radius: 2px;
animation: apBars .9s ease-in-out infinite alternate;
}
.ap-track-bars span:nth-child(1) { height: 60%; animation-delay: 0s; }
.ap-track-bars span:nth-child(2) { height: 100%; animation-delay: .2s; }
.ap-track-bars span:nth-child(3) { height: 40%; animation-delay: .4s; }
.ap-track.paused .ap-track-bars span { animation-play-state: paused; }
@keyframes apBars {
from { transform: scaleY(.4); }
to { transform: scaleY(1); }
}
/* --- main player panel --- */
.ap-main {
flex: 1;
display: flex;
flex-direction: column;
align-items: center;
justify-content: center;
padding: 36px 40px;
gap: 16px;
background: linear-gradient(160deg, #1a1a2e 0%, #121212 60%);
overflow-y: auto;
}
.ap-art {
width: 200px;
height: 200px;
border-radius: 50%;
background: radial-gradient(circle at 40% 35%, #2a2a4a, #0d0d0d);
display: flex;
align-items: center;
justify-content: center;
font-size: 72px;
box-shadow: 0 8px 40px rgba(0,0,0,.6);
transition: box-shadow .4s;
flex-shrink: 0;
}
.ap-art.playing {
box-shadow: 0 0 0 6px rgba(29,185,84,.25), 0 8px 40px rgba(0,0,0,.7);
animation: apSpin 18s linear infinite;
}
@keyframes apSpin {
from { transform: rotate(0deg); }
to { transform: rotate(360deg); }
}
.ap-track-title {
font-size: 20px;
font-weight: 700;
color: #fff;
text-align: center;
max-width: 100%;
overflow: hidden;
text-overflow: ellipsis;
white-space: nowrap;
}
.ap-track-sub {
font-size: 13px;
color: #aaa;
}
.ap-progress-wrap {
display: flex;
align-items: center;
gap: 10px;
width: 100%;
max-width: 460px;
}
.ap-time { font-size: 12px; color: #aaa; min-width: 34px; }
.ap-progress-bar {
flex: 1;
height: 4px;
background: #3e3e3e;
border-radius: 2px;
cursor: pointer;
position: relative;
}
.ap-progress-bar:hover { height: 6px; }
.ap-progress-fill {
height: 100%;
width: 0%;
background: #1db954;
border-radius: 2px;
pointer-events: none;
transition: width .2s linear;
}
.ap-progress-bar:hover .ap-progress-fill { background: #fff; }
.ap-controls {
display: flex;
align-items: center;
gap: 20px;
}
.ap-btn {
background: none;
border: none;
color: #b3b3b3;
font-size: 26px;
cursor: pointer;
padding: 6px;
border-radius: 50%;
line-height: 1;
transition: color .15s, transform .1s;
}
.ap-btn:hover { color: #fff; }
.ap-btn-play {
width: 56px;
height: 56px;
background: #1db954;
color: #000;
font-size: 22px;
display: flex;
align-items: center;
justify-content: center;
}
.ap-btn-play:hover { background: #1ed760; color: #000; transform: scale(1.05); }
.ap-volume-wrap {
display: flex;
align-items: center;
gap: 8px;
color: #aaa;
font-size: 14px;
width: 100%;
max-width: 240px;
}
.ap-volume {
flex: 1;
accent-color: #1db954;
cursor: pointer;
}
.ap-empty {
padding: 20px;
background: #202020;
border: 1px solid #333;
border-radius: 10px;
color: #bbb;
}
/* ------------------------------------- */
/* RESPONSIVE CSS */
/* ------------------------------------- */
@media (max-width: 768px) {
/* Ukryj kolumnę typu pliku (rozszerzenie) */
.table-main tbody tr td:nth-child(3),
#liveResults table tbody tr td:nth-child(3) {
display: none;
}
/* Ukryj kolumnę ikonki pliku (pierwsza) */
.table-main tbody tr td:first-child,
#liveResults table tbody tr td:first-child {
display: none;
}
.breadcrumbs{ font-size: 20px; }
.top-bar {
flex-direction: column;
align-items: flex-start;
padding: 15px;
}
#audioPlayerBar {
height: auto;
min-height: 60px;
padding: 6px 10px;
flex-wrap: wrap;
gap: 4px;
}
.ab-left {
width: auto; min-width: 0; flex: 1;
}
.ab-art { display: none; }
.ab-center {
order: 3; width: 100%; padding: 0; gap: 4px;
}
.ab-right {
width: auto;
}
.ab-volume { display: none; }
.ab-progress-wrap { gap: 5px; }
.ab-controls { gap: 6px; }
.left-container {
margin-bottom: 10px;
}
.right-container {
width: 100%;
text-align: left;
}
.logout-btn {
width: 100%;
text-align: center;
box-sizing: border-box;
}
.file-list-container {
padding: 10px;
}
/* Układ tabeli dla urządzeń mobilnych */
table {
display: block;
}
thead {
display: none;
}
tbody {
display: block;
width: 100%;
}
tr {
margin-bottom: 15px;
border: 1px solid #444;
border-radius: 8px;
display: block;
padding: 10px;
box-shadow: 0 4px 8px rgba(0, 0, 0, 0.2);
}
td {
display: block;
justify-content: space-between;
align-items: center;
border-bottom: 1px solid #444;
padding: 8px 0;
text-align: right;
}
td:last-child {
border-bottom: none;
}
td::before {
content: attr(data-label);
font-weight: bold;
text-transform: uppercase;
color: #888;
text-align: left;
}
/* Dopasowanie modala do urządzeń mobilnych */
.modal-content {
max-width: 95vw;
max-height: 95vh;
}
.modal-content img,
.modal-content video {
max-width: 95vw;
max-height: 95vh;
}
/* Dopasowanie przycisków w tabeli na małych ekranach */
td a.btn {
display: inline-block;
box-sizing: border-box;
text-align: center;
margin: 2px 1%;
}
/* w tabeli/flex-kartach – zostaw nazwę pliku i ikonę typu */
thead { display: none; } /* już masz, ale zostawiamy */
/* Przyciskom obcinamy tekst – pokażemy ikony przez ::after */
/* tylko przyciski w tabelach/listach (nie w top barze, nie globalnie) */
td .btn, .actions .btn {
font-size: 0 !important;
padding: 8px 10px;
min-width: 38px;
text-align: center;
display: inline-block;
}
/* Download → strzałka */
.btn[data-action="download"]::after{ content: "⬇️"; font-size: 18px; }
/* Podgląd obrazów */
.preview-btn::after{ content: "🖼️"; font-size: 18px; }
/* Video: Odtwórz + Udostępnij */
.watch-btn::after{ content: "🎬"; font-size: 18px; }
.share-btn::after{ content: "🔗"; font-size: 18px; }
/* Audio: odtwórz / dodaj do kolejki (tylko w tabeli/akcjach) */
td .audio-play-btn::after, .actions .audio-play-btn::after { content: "▶️"; font-size: 18px; }
td .audio-add-btn::after, .actions .audio-add-btn::after { content: "➕"; font-size: 18px; }
#adminLoginBtn {
position: absolute;
top: 8px;
right: 8px;
padding: 8px 10px;
font-size: 0 !important; /* ukryj tekst */
min-width: 30px;
border-radius: 8px;
}
#adminLoginBtn::after {
content: "👤";
font-size: 18px;
}
/* Player – same ikonki */
#audioPrev, #audioNext, #audioShuffle, #audioClear, #togglePlaylist { font-size: 0 !important; min-width: 38px; }
/* prev/next */
#audioPrev::after { content: "⏮️"; font-size: 18px; }
#audioNext::after { content: "⏭️"; font-size: 18px; }
/* pozostałe (już były, ale zostaw komplet) */
#audioShuffle::after { content: "🔀"; font-size: 18px; }
#audioClear::after { content: "🗑️"; font-size: 18px; }
#togglePlaylist::after { content: "🎵"; font-size: 18px; }
/* Download (w wierszach tabel) */
td .btn[data-action="download"]::after, .actions .btn[data-action="download"]::after { content: "⬇️"; font-size: 18px; }
/* reszta akcji (w tabelach/listach) */
td .preview-btn::after, .actions .preview-btn::after { content: "🖼️"; font-size: 18px; }
td .watch-btn::after, .actions .watch-btn::after { content: "🎬"; font-size: 18px; }
td .share-btn::after, .actions .share-btn::after { content: "🔗"; font-size: 18px; }
/* Przyciski folderów */
td .btn[data-action="zip-dl"]::after { content: "📦"; font-size: 18px; }
td .btn[data-action="zip-build"]::after { content: "📦"; font-size: 18px; }
td .btn[data-action="zip-rebuild"]::after { content: "🔄"; font-size: 18px; }
td .btn[data-action="zip-del"]::after { content: "🗑️"; font-size: 18px; }
td .btn[data-action="cfg-edit"]::after { content: "✏️"; font-size: 18px; }
td .btn[data-action="cfg-del"]::after { content: "🗑️"; font-size: 18px; }
td .btn[data-action="cfg-create"]::after { content: "🔒"; font-size: 18px; }
/* sticky nad treścią, ale POD modalami */
.sticky-search{ position: sticky; top: 0; z-index: 900; background: #1a1a1a; border-bottom: 1px solid #333; }
/* Modale zawsze nad wszystkim */
#videoModal, #previewModal, #shareModal, #playlistPanel { z-index: 5000 !important; }
/* GŁÓWNA tabela (5 kolumn): ukryj kolumnę ROZMIAR = 4. wiersza */
.table-main tbody tr td:nth-child(4){ display: none; }
/* LIVE RESULTS (4 kolumny): ukryj ROZMIAR = 3. wiersza, NIE akcje */
#liveResults table tbody tr td:nth-child(3){ display: none; }
/* na wszelki wypadek wymuś 16px na mobile */
#searchInput{
font-size: 16px !important;
padding: 12px 14px;
}
/* mniejsze odstępy nad wynikami */
#liveResults{ margin-top: 4px; }
/* sticky nad treścią, ale pod modalami (modale masz na z-index:5000) */
.sticky-search{
position: sticky;
top: 0;
z-index: 900;
padding: 8px 10px;
background:#1a1a1a;
border-bottom:1px solid #333;
}
#liveResults {
background: rgba(30, 70, 130, 0.4);
padding: 8px 10px;
}
#liveResults td {
font-size: 15px;
}
#liveResults .btn {
font-size: 14px;
}
/* Audio player mobile */
.ap-viewer { flex-direction: column; height: auto; min-height: unset; }
.ap-sidebar { width: 100%; height: 40vh; max-height: 40vh; border-right: none; border-top: 1px solid #2a2a2a; order: 2; }
.ap-main { padding: 24px 20px; order: 1; flex: 0 0 auto; }
.ap-art { width: 140px; height: 140px; font-size: 52px; }
.ap-track-title { font-size: 17px; }
.ap-progress-wrap, .ap-volume-wrap { max-width: 100%; }
}
HTML;
}
}//koniec classy
/**
* Cache rozmiarów katalogów — zapis w .dircache.json przy bazie.
* Wykrywanie zmian przez fingerprint mtime bezpośrednich dzieci + TTL 2h.
*/
class DirSizeCache
{
private string $cacheFile;
private array $data = [];
private bool $dirty = false;
private int $ttl;
public function __construct(string $baseDir, int $ttl = 7200)
{
$this->cacheFile = $baseDir . DIRECTORY_SEPARATOR . '.dircache.json';
$this->ttl = $ttl;
$this->load();
}
private function load(): void
{
if (!file_exists($this->cacheFile)) return;
$raw = @file_get_contents($this->cacheFile);
if ($raw === false) return;
$decoded = @json_decode($raw, true);
if (is_array($decoded)) $this->data = $decoded;
}
public function save(): void
{
if (!$this->dirty) return;
@file_put_contents(
$this->cacheFile,
json_encode($this->data, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT),
LOCK_EX
);
$this->dirty = false;
}
/** Zwraca rozmiar z cache lub null gdy brak/nieaktualny. */
public function get(string $dir): ?int
{
$key = md5($dir);
if (!isset($this->data[$key])) return null;
$entry = $this->data[$key];
// sprawdź TTL
if ((time() - ($entry['at'] ?? 0)) > $this->ttl) return null;
// sprawdź fingerprint
if (($entry['fp'] ?? '') !== $this->fingerprint($dir)) return null;
return (int)$entry['size'];
}
public function set(string $dir, int $size): void
{
$key = md5($dir);
$this->data[$key] = [
'size' => $size,
'fp' => $this->fingerprint($dir),
'at' => time(),
'path' => $dir,
];
$this->dirty = true;
}
/**
* Fingerprint oparty na mtime bezpośrednich dzieci katalogu.
* Gdy plik/folder jest dodany/usunięty lub zmienia się mtime podkatalogu
* (bo w nim coś dodano) — fingerprint się zmienia.
*/
private function fingerprint(string $dir): string
{
if (!is_dir($dir)) return '';
$parts = [(string)@filemtime($dir)];
try {
$di = new DirectoryIterator($dir);
foreach ($di as $item) {
if ($item->isDot()) continue;
$parts[] = $item->getFilename() . ':' . $item->getMTime() . ':' . ($item->isDir() ? 'd' : $item->getSize());
}
} catch (Throwable $e) {}
sort($parts);
return md5(implode('|', $parts));
}
}
class FileBrowser
{
private string $baseDir;
private string $currentDir;
private array $sensitiveExtensions = [
// skrypty / kod
'php', 'phtml', 'php3', 'php4', 'php5', 'php7', 'php8', 'phps', 'pht', 'phar',
'sh', 'bash', 'zsh', 'pl', 'cgi', 'py', 'rb', 'asp', 'aspx', 'jsp',
// dane / bazy / konfiguracja
'json', 'sql', 'db', 'sqlite', 'sqlite3', 'mdb', 'accdb',
'env', 'ini', 'conf', 'config', 'cfg', 'htaccess', 'htpasswd',
'yml', 'yaml', 'xml', 'toml',
// sekrety / klucze
'key', 'pem', 'crt', 'cert', 'cer', 'p12', 'pfx', 'ppk', 'asc', 'gpg',
// kopie / logi / tymczasowe
'log', 'bak', 'old', 'orig', 'save', 'swp', 'swo', 'tmp', 'temp', 'lock', 'dist', 'sample',
];
public $oView;
private DirSizeCache $dirCache;
public function __construct(string $baseDir, ?string $relativeDir = null)
{
$this->baseDir = realpath($baseDir);
$requestedDir = $relativeDir ? realpath($this->baseDir . DIRECTORY_SEPARATOR . $relativeDir) : $this->baseDir;
if ($requestedDir === false
|| $requestedDir !== $this->baseDir
&& !str_starts_with($requestedDir, $this->baseDir . DIRECTORY_SEPARATOR))
{
$requestedDir = $this->baseDir;
}
if (class_exists('View'))
{
$this->oView = new View();
}
else
{
return "Brak biblioteki view";
}
$this->currentDir = $requestedDir;
$this->dirCache = new DirSizeCache($this->baseDir, 86400 * 30);
// zapis cache przy końcu żądania (nawet przy exit/die)
$cache = &$this->dirCache;
register_shutdown_function(static function() use (&$cache) {
$cache->save();
});
}
/**
* Czy wpis (plik lub katalog) powinien być ukryty przed listingiem,
* wyszukiwaniem i pobieraniem. Ukrywa:
* - wszystkie ukryte/dotfiles (.htaccess, .env, .git, .DS_Store, ._*, .integrity.json, .media_cache.* itd.)
* - kopie zapasowe edytorów (plik.txt~)
* - wrażliwe rozszerzenia (php, json, sql, db, env, key, log, bak ...)
*/
public function isHiddenEntry(string $name): bool
{
if ($name === '' || $name[0] === '.') return true; // dotfiles + macOS ._*
if (str_ends_with($name, '~')) return true; // backupy edytorów
return in_array($this->getExt($name), $this->sensitiveExtensions, true);
}
public function getBaseFolder(): string
{
return trim(dirname($_SERVER['SCRIPT_NAME']), '/');
}
public function getBaseUrl(): string
{
$protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? "https://" : "http://";
$host = $_SERVER['HTTP_HOST'];
$scriptName = dirname($_SERVER['SCRIPT_NAME']);
return rtrim($protocol . $host . $scriptName, '/') . '/';
}
/*
* @version 1.0
* @param string $sRelativeDir Ścieżka katalogu względem katalogu bazowego
* @param string $sFileName Nazwa pliku
* @param string $sAction Akcja streamingu: stream albo stream_audio
* @return string
*/
public function BuildStreamUrl(string $sRelativeDir, string $sFileName, string $sAction): string
{
$aAllowedActions = ['stream', 'stream_audio'];
if (!in_array($sAction, $aAllowedActions, true)) {
$sAction = 'stream';
}
$sProtocol = $this->getProtocol();
$sHost = $_SERVER['HTTP_HOST'];
$sScript = $_SERVER['PHP_SELF'];
$sDirB64 = rawurlencode(base64_encode($sRelativeDir));
$sFileB64 = rawurlencode(base64_encode($sFileName));
return $sProtocol . '://' . $sHost . $sScript
. '?action=' . rawurlencode($sAction)
. '&dir=' . $sDirB64
. '&file=' . $sFileB64;
}
/*
* @version 1.0
* @param string $sRelativeDir Ścieżka katalogu względem baseDir
* @param string $sFileName Nazwa pliku
* @return string URL do miniatury (action=thumb)
*/
public function BuildThumbUrl(string $sRelativeDir, string $sFileName): string
{
$sProtocol = $this->getProtocol();
$sHost = $_SERVER['HTTP_HOST'];
$sScript = $_SERVER['PHP_SELF'];
$sDirB64 = rawurlencode(base64_encode($sRelativeDir));
$sFileB64 = rawurlencode(base64_encode($sFileName));
return "{$sProtocol}://{$sHost}{$sScript}?action=thumb&dir={$sDirB64}&file={$sFileB64}";
}
/*
* @version 1.0
* @param mixed $mDirParam Parametr dir z requestu
* @param mixed $mFileParam Parametr file z requestu
* @return string|null
*/
public function ResolveStreamPathFromRequest($mDirParam, $mFileParam): ?string
{
if (is_array($mDirParam) || is_array($mFileParam)) {
return null;
}
$sDirDecoded = base64_decode(rawurldecode((string)$mDirParam), true);
$sFileDecoded = base64_decode(rawurldecode((string)$mFileParam), true);
if ($sDirDecoded === false || $sFileDecoded === false) {
return null;
}
return rtrim($this->getBaseDir(), DIRECTORY_SEPARATOR)
. DIRECTORY_SEPARATOR
. ltrim($sDirDecoded, DIRECTORY_SEPARATOR)
. DIRECTORY_SEPARATOR
. $sFileDecoded;
}
/*
* @version 1.0
* @param mixed $mValue Wartość do bezpiecznego wyświetlenia w HTML
* @return string
*/
public function EscapeHtml($mValue): string
{
return htmlspecialchars((string)$mValue, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
}
/*
* @version 1.0
* @param int $iStatusCode Kod HTTP
* @param string $sMessage Komunikat tekstowy
* @return void
*/
private function DisableOutputCompression(): void
{
while (ob_get_level() > 0) { @ob_end_clean(); }
if (function_exists('apache_setenv')) { @apache_setenv('no-gzip', '1'); }
@ini_set('zlib.output_compression', '0');
@header_remove('Content-Type');
@header_remove('Content-Encoding');
}
public function SendPlainHttpError(int $iStatusCode, string $sMessage): void
{
$this->DisableOutputCompression();
http_response_code($iStatusCode);
header('Content-Type: text/plain; charset=utf-8');
echo $sMessage;
exit;
}
/*
* @version 1.0
* @param string $sKey Nazwa parametru GET
* @param string $sDefault Wartość domyślna
* @return string
*/
public function GetRequestString(string $sKey, string $sDefault = ''): string
{
if (!isset($_GET[$sKey]) || is_array($_GET[$sKey])) {
return $sDefault;
}
return (string)$_GET[$sKey];
}
/*
* @version 1.0
* @param array $aData Dane odpowiedzi JSON
* @param int $iStatusCode Kod HTTP
* @return void
*/
public function SendJsonResponse(array $aData, int $iStatusCode = 200): void
{
$this->DisableOutputCompression();
http_response_code($iStatusCode);
header('Content-Type: application/json; charset=utf-8');
echo json_encode(
$aData,
JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES
);
exit;
}
/*
* @version 1.0
* @param string $sName Nazwa pliku
* @param string $sUrl URL do pliku / podglądu
* @param string $sWatchUrl URL do streamingu wideo
* @param string $sAudioUrl URL do streamingu audio
* @param string $sDownloadHref URL pobierania pliku
* @param bool $bIsIndexHtml Czy plik jest index.html
* @param bool $bAllowAviWatch Czy pokazywać przycisk odtwarzania dla AVI
* @return string
*/
public function RenderFileActions(
string $sName,
string $sUrl,
string $sWatchUrl,
string $sAudioUrl,
string $sDownloadHref,
bool $bIsIndexHtml = false,
bool $bAllowAviWatch = true
): string {
$sExt = $this->getExt($sName);
$sHtml = '';
if ($this->isPreviewable($sName)) {
$sHtml .= ''
. 'Podgląd'
. ' ' . PHP_EOL;
}
if ($this->isVideo($sName) && ($bAllowAviWatch || $sExt !== 'avi')) {
$sHtml .= ''
. 'Odtwórz'
. ' ' . PHP_EOL;
$sHtml .= ''
. '🔗 Udostępnij'
. ' ' . PHP_EOL;
}
if ($this->isAudio($sName)) {
$sHtml .= ''
. '▶️ Odtwórz'
. ' ' . PHP_EOL;
$sHtml .= ''
. '➕ Do kolejki'
. ' ' . PHP_EOL;
}
if (!$bIsIndexHtml) {
$sHtml .= ''
. 'Download'
. ' ' . PHP_EOL;
}
return $sHtml;
}
/**
* Szuka plików (i opcjonalnie folderów) zgodnych z zapytaniem.
*
* - Domyślnie zwraca tablicę wyników.
* - Jeśli w URL jest ?api=1 → zamiast tego zwraca JSON i kończy skrypt.
*
* @param string $query - zapytanie (szuka części nazwy, case-insensitive).
* @param string|null $startDir - katalog startowy (pełna ścieżka). Jeśli null użyje $this->currentDir.
* @param bool $recursive - czy przeszukiwać podkatalogi.
* @param int $maxResults - maksymalna liczba wyników (domyślnie 500).
* @return array - lista wyników: każdy element to tablica z keys: name, path, is_dir, size, mtime, url, icon
*/
public function searchFiles(string $query, ?string $startDir = null, bool $recursive = true, int $maxResults = 500): array
{
$query = trim($query);
if ($query === '') return [];
// --- ext: parser (wiele rozszerzeń + aliasy 'audio','video') ---
$extFilters = []; // pusta => brak filtru
if (preg_match('/\bext:([a-z0-9,|]+)\b/i', $query, $m)) {
$raw = strtolower($m[1]);
$parts = preg_split('/[|,]/', $raw, -1, PREG_SPLIT_NO_EMPTY);
$alias = [
'audio' => ['mp3','m4a','aac','ogg','oga','opus','wav','flac'],
'video' => ['mp4','webm','ogv','mov','avi','mkv'],
];
foreach ($parts as $p) {
if (isset($alias[$p])) { $extFilters = array_merge($extFilters, $alias[$p]); }
else { $extFilters[] = $p; }
}
$extFilters = array_values(array_unique($extFilters));
$query = trim(str_ireplace($m[0], '', $query)); // usuń "ext:..." z zapytania
}
$results = [];
$dir = $startDir ? realpath($startDir) : realpath($this->currentDir);
if ($dir === false) {
$dir = $this->baseDir;
}
// bezpieczeństwo: upewnij się, że przeszukiwanie nie wychodzi poza baseDir
if ($dir !== $this->baseDir
&& !str_starts_with($dir, $this->baseDir . DIRECTORY_SEPARATOR)) {
$dir = $this->baseDir;
}
try {
if ($recursive) {
$it = new RecursiveIteratorIterator(
new RecursiveDirectoryIterator($dir, FilesystemIterator::SKIP_DOTS),
RecursiveIteratorIterator::SELF_FIRST
);
foreach ($it as $fileInfo) {
if ($fileInfo->isDir()) continue;
$name = $fileInfo->getFilename();
$extension = strtolower($fileInfo->getExtension());
if ($this->isHiddenEntry($name)) continue;
if (!empty($extFilters) && !in_array($extension, $extFilters, true)) continue;
if (stripos($name, $query) === false && $query !== '') continue;
$fullPath = $fileInfo->getPathname();
$fileDirAbs = dirname($fullPath);
$relDir = $this->relativeToBase($fileDirAbs) ?: '/';
$watchUrl = $this->BuildStreamUrl($relDir, $name, 'stream');
$audioUrl = $this->BuildStreamUrl($relDir, $name, 'stream_audio');
$results[] = [
'name' => $name,
'path' => $fullPath,
'rel_dir' => $relDir, // <-- DODANE
'is_dir' => false,
'size' => $fileInfo->getSize(),
'mtime' => $fileInfo->getMTime(),
'url' => $this->getFileUrl($fullPath), // zostawiamy, ale player go nie używa
'icon' => $this->getFileTypeIcon($name),
'audio_url' => $this->isAudio($name) ? $audioUrl : null, // <-- DODANE
'video_url' => $this->isVideo($name) ? $watchUrl : null, // <-- DODANE
];
if (count($results) >= $maxResults) break;
}
} else {
$di = new DirectoryIterator($dir);
foreach ($di as $fileInfo) {
if ($fileInfo->isDot() || $fileInfo->isDir()) continue;
$name = $fileInfo->getFilename();
$extension = strtolower($fileInfo->getExtension());
if ($this->isHiddenEntry($name)) continue;
if (!empty($extFilters) && !in_array($extension, $extFilters, true)) continue;
if (stripos($name, $query) === false && $query !== '') continue;
$fullPath = $fileInfo->getPathname();
$fileDirAbs = dirname($fullPath);
$relDir = $this->relativeToBase($fileDirAbs) ?: '/';
$watchUrl = $this->BuildStreamUrl($relDir, $name, 'stream');
$audioUrl = $this->BuildStreamUrl($relDir, $name, 'stream_audio');
$results[] = [
'name' => $name,
'path' => $fullPath,
'rel_dir' => $relDir,
'is_dir' => false,
'size' => $fileInfo->getSize(),
'mtime' => $fileInfo->getMTime(),
'url' => $this->getFileUrl($fullPath),
'icon' => $this->getFileTypeIcon($name),
'audio_url' => $this->isAudio($name) ? $audioUrl : null,
'video_url' => $this->isVideo($name) ? $watchUrl : null,
];
if (count($results) >= $maxResults) break;
}
}
} catch (Exception $e) {
// w razie błędów - zwróć to co znaleziono do tej pory
}
return $results;
}
public function getPathUrl(string $path): string
{
$relativePath = str_replace($this->baseDir, '', $path);
$relativePath = trim($relativePath, DIRECTORY_SEPARATOR);
return $_SERVER['PHP_SELF'] . '?dir=' . rawurlencode($relativePath);
}
public function getFileUrl(string $path): string
{
$relativePath = str_replace($this->baseDir, '', $path);
$relativePath = trim($relativePath, DIRECTORY_SEPARATOR);
return rtrim($this->getBaseUrl(), '/') . '/' . $relativePath;
}
public function getFileTypeIcon(string $file): string
{
$extension = $this->getExt($file);
$icons = [
'jpg' => '🖼️', 'jpeg' => '🖼️', 'png' => '🖼️', 'gif' => '🖼️',
'mp4' => '🎥', 'mov' => '🎥', 'avi' => '🎥',
'mp3' => '🎵', 'wav' => '🎵',
'zip' => '📦', 'rar' => '📦', '7z' => '📦',
'pdf' => '📄', 'doc' => '📄', 'docx' => '📄',
];
return $icons[$extension] ?? '📁';
}
/*
* @version 1.1
* @param string $file Nazwa pliku
* @return bool
*/
public function isPreviewable(string $file): bool
{
$sExtension = $this->getExt($file);
$aPreviewable = ['jpg', 'jpeg', 'png', 'gif', 'webp'];
return in_array($sExtension, $aPreviewable, true);
}
/*
* @version 1.1
* @param string $file Nazwa pliku
* @return bool
*/
public function isVideo($file)
{
$sExtension = $this->getExt($file);
$aVideo = ['mp4', 'webm', 'ogv', 'mov', 'm4v', 'avi', 'mkv'];
return in_array($sExtension, $aVideo, true);
}
public function getExt(string $file): string
{
return strtolower(pathinfo($file, PATHINFO_EXTENSION));
}
private function getWritableTmpDir(): string
{
foreach ([sys_get_temp_dir(), '/tmp', '/var/tmp'] as $d) {
if ($d !== '' && is_dir($d) && is_writable($d)) return $d;
}
return sys_get_temp_dir();
}
/**
* Czy ścieżka (już po realpath) leży wewnątrz baseDir.
* Porównanie z separatorem — odrzuca katalogi-rodzeństwo typu /base2.
*/
private function isWithinBase(string $real): bool
{
return $real === $this->baseDir
|| strncmp($real, $this->baseDir . DIRECTORY_SEPARATOR, strlen($this->baseDir) + 1) === 0;
}
/**
* Sprawdza ochronę config.php dla każdego katalogu na ścieżce
* od baseDir do katalogu pliku. Admin ma zawsze dostęp.
* Chroni stream/thumb/download przed obejściem logowania do folderu.
*/
private function isPathAuthorized(string $absFile): bool
{
if ($this->isAdmin()) return true;
$dir = is_dir($absFile) ? $absFile : dirname($absFile);
while ($this->isWithinBase($dir)) {
if (file_exists($dir . DIRECTORY_SEPARATOR . 'config.php')) {
$sessionKey = md5($dir);
if (empty($_SESSION['auth'][$sessionKey])) return false;
}
if ($dir === $this->baseDir) break;
$dir = dirname($dir);
}
return true;
}
private function getProtocol(): string
{
return (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
}
public function getMimeType(string $ext): string
{
return match ($ext) {
'mp4' => 'video/mp4',
'webm' => 'video/webm',
'ogv' => 'video/ogg',
'mov' => 'video/quicktime',
'avi' => 'video/x-msvideo',
'mkv' => 'video/x-matroska',
'mp3' => 'audio/mpeg',
'm4a' => 'audio/mp4',
'aac' => 'audio/aac',
'ogg','oga','opus' => 'audio/ogg',
'wav' => 'audio/wav',
'flac' => 'audio/flac',
default => 'application/octet-stream',
};
}
/**
* Parsuje nagłówek HTTP Range. Zwraca ['start'=>int,'end'=>int,'code'=>int]
* lub null gdy zakres nieprawidłowy (wysyła 416 i kończy żądanie).
*/
private function parseRangeHeader(int $size): array
{
$start = 0;
$end = $size - 1;
$code = 200;
if (isset($_SERVER['HTTP_RANGE']) && preg_match('/bytes=(\d*)-(\d*)/', $_SERVER['HTTP_RANGE'], $m)) {
if ($m[1] !== '') $start = (int)$m[1];
if ($m[2] !== '') $end = (int)$m[2];
if ($start > $end || $end >= $size) {
header('HTTP/1.1 416 Requested Range Not Satisfiable');
header('Content-Range: bytes 0-' . ($size - 1) . '/' . $size);
exit;
}
$code = 206;
}
return ['start' => $start, 'end' => $end, 'code' => $code];
}
public function isAudio(string $file): bool
{
$audio = ['mp3','m4a','aac','ogg','oga','wav','flac', 'opus'];
return in_array($this->getExt($file), $audio, true);
}
public function isMediaFile(string $file): bool
{
static $media = [
'jpg','jpeg','png','gif','webp','bmp','tiff',
'mp4','webm','ogv','mov','m4v','avi','mkv',
'mp3','m4a','aac','ogg','oga','wav','flac','opus',
];
return in_array($this->getExt($file), $media, true);
}
private function buildContentDisposition(string $filename, string $disposition = 'inline'): string
{
// Spróbuj ujednolicić formę Unicode (wymaga ext-intl; jeśli nie ma, pomiń)
if (class_exists('Normalizer')) {
$filename = Normalizer::normalize($filename, Normalizer::FORM_C) ?? $filename;
}
// ASCII fallback – spróbuj transliterować, a jak się nie uda, zrób bezpieczny ASCII
$ascii = @iconv('UTF-8', 'ASCII//TRANSLIT//IGNORE', $filename);
if ($ascii === false || $ascii === '' ) {
$ascii = preg_replace('/[^A-Za-z0-9_. -]/', '_', $filename);
if ($ascii === '' ) $ascii = 'file';
}
// Usuń problematyczne znaki w ASCII
$ascii = preg_replace('/[\\r\\n"]/', '_', $ascii);
// RFC 5987 dla wariantu UTF-8 (percent-encoded)
$utf8Percent = rawurlencode($filename);
// Zabezpiecz cudzysłowy i backslash w ASCII wariancie
$asciiQuoted = addcslashes($ascii, "\"\\\\");
// Złóż pełny nagłówek z oboma atrybutami
return sprintf(
'%s; filename="%s"; filename*=UTF-8\'\'%s',
$disposition,
$asciiQuoted,
$utf8Percent
);
}
public function streamVideo($filePath)
{
$real = realpath($filePath);
if ($real === false || !is_file($real) || !$this->isWithinBase($real)) {
$this->SendPlainHttpError(404, 'Not found');
}
if (!$this->isVideo($real)) {
$this->SendPlainHttpError(403, 'Forbidden');
}
if (!$this->isPathAuthorized($real)) {
$this->SendPlainHttpError(401, 'Unauthorized');
}
$this->DisableOutputCompression();
$contentType = $this->getMimeType($this->getExt($real));
$size = filesize($real);
$start = 0;
$end = $size - 1;
$code = 200;
header('X-Content-Type-Options: nosniff');
header('Content-Type: ' . $contentType);
header('Content-Disposition: ' . $this->buildContentDisposition(basename($real), 'inline'));
header('Accept-Ranges: bytes');
header('Cache-Control: private, max-age=0, no-cache, no-store, must-revalidate');
header('Pragma: no-cache');
header('Expires: 0');
// Obsługa Range
['start' => $start, 'end' => $end, 'code' => $code] = $this->parseRangeHeader($size);
$length = $end - $start + 1;
if ($code === 206) {
header('HTTP/1.1 206 Partial Content');
header("Content-Range: bytes $start-$end/$size");
}
header("Content-Length: $length");
$fp = fopen($real, 'rb');
if ($fp === false) { http_response_code(500); echo 'Cannot open file'; exit; }
if ($start > 0) fseek($fp, $start);
ignore_user_abort(true);
set_time_limit(0);
$chunk = 8192;
$left = $length;
while ($left > 0 && !feof($fp)) {
$read = ($left > $chunk) ? $chunk : $left;
$buf = fread($fp, $read);
if ($buf === false) break;
echo $buf;
$left -= strlen($buf);
if (connection_aborted()) break;
flush();
}
fclose($fp);
exit;
}
public function streamAudio(string $filePath): void
{
$real = realpath($filePath);
if ($real === false || !is_file($real) || !$this->isWithinBase($real)) {
$this->SendPlainHttpError(404, 'Not found');
}
if (!$this->isAudio($real)) {
$this->SendPlainHttpError(403, 'Forbidden');
}
if (!$this->isPathAuthorized($real)) {
$this->SendPlainHttpError(401, 'Unauthorized');
}
$mime = $this->getMimeType($this->getExt($real));
$this->DisableOutputCompression();
$size = filesize($real);
$start = 0;
$end = $size - 1;
$code = 200;
// Proste cache headers (opcjonalne)
$mtime = filemtime($real) ?: time();
$lastMod = gmdate('D, d M Y H:i:s', $mtime) . ' GMT';
$etag = '"' . md5($real . '|' . $size . '|' . $mtime) . '"';
header('X-Content-Type-Options: nosniff');
header('Content-Type: ' . $mime);
header('Content-Disposition: ' . $this->buildContentDisposition(basename($real), 'inline'));
header('Accept-Ranges: bytes');
header('Cache-Control: private, max-age=0, no-cache, no-store, must-revalidate');
header('Pragma: no-cache');
header('Expires: 0');
header('Last-Modified: ' . $lastMod);
header('ETag: ' . $etag);
// Warunkowe 304 (opcjonalne)
if ((isset($_SERVER['HTTP_IF_NONE_MATCH']) && trim($_SERVER['HTTP_IF_NONE_MATCH']) === $etag) ||
(isset($_SERVER['HTTP_IF_MODIFIED_SINCE']) && trim($_SERVER['HTTP_IF_MODIFIED_SINCE']) === $lastMod)) {
http_response_code(304);
exit;
}
// Obsługa Range
['start' => $start, 'end' => $end, 'code' => $code] = $this->parseRangeHeader($size);
$length = $end - $start + 1;
if ($code === 206) {
header('HTTP/1.1 206 Partial Content');
header("Content-Range: bytes $start-$end/$size");
}
header("Content-Length: $length");
// HEAD → tylko nagłówki
if (isset($_SERVER['REQUEST_METHOD']) && strtoupper($_SERVER['REQUEST_METHOD']) === 'HEAD') {
exit;
}
$fp = fopen($real, 'rb');
if ($fp === false) {
http_response_code(500);
header('Content-Type: text/plain; charset=utf-8');
echo 'Cannot open file';
exit;
}
if ($start > 0) fseek($fp, $start);
ignore_user_abort(true);
set_time_limit(0);
$chunk = 8192;
$bytesLeft = $length;
while ($bytesLeft > 0 && !feof($fp)) {
$read = ($bytesLeft > $chunk) ? $chunk : $bytesLeft;
$buf = fread($fp, $read);
if ($buf === false) break;
echo $buf;
$bytesLeft -= strlen($buf);
if (connection_aborted()) break;
flush();
}
fclose($fp);
exit;
}
private function resolveZipDir(string $relDir): string|false
{
$relDir = ltrim(str_replace(['..', "\0"], '', $relDir), '/\\');
$abs = realpath($this->baseDir . ($relDir !== '' ? DIRECTORY_SEPARATOR . $relDir : ''));
if ($abs === false || !is_dir($abs)
|| ($abs !== $this->baseDir && strncmp($abs, $this->baseDir . DIRECTORY_SEPARATOR, strlen($this->baseDir) + 1) !== 0)) {
return false;
}
return $abs;
}
private function collectMediaFiles(string $abs): array
{
$maxBytes = 2 * 1024 * 1024 * 1024;
$maxFiles = 5000;
$collected = [];
$totalSize = 0;
$it = new RecursiveIteratorIterator(
new RecursiveDirectoryIterator($abs, FilesystemIterator::SKIP_DOTS),
RecursiveIteratorIterator::LEAVES_ONLY
);
foreach ($it as $f) {
if (!$f->isFile() || !$this->isMediaFile($f->getFilename())) continue;
if (count($collected) >= $maxFiles) break;
$sz = $f->getSize();
if ($totalSize + $sz > $maxBytes) break;
$totalSize += $sz;
$collected[] = $f->getRealPath();
}
return $collected;
}
// --- ZIP cache helpers ---
private function mediaCachePaths(string $abs): array
{
return [
'zip' => $abs . DIRECTORY_SEPARATOR . '.media_cache.zip',
'meta' => $abs . DIRECTORY_SEPARATOR . '.media_cache.json',
];
}
public function getMediaCacheInfo(string $abs): ?array
{
$p = $this->mediaCachePaths($abs);
if (!is_file($p['zip'])) return null;
$meta = is_file($p['meta']) ? (json_decode(file_get_contents($p['meta']), true) ?? []) : [];
return [
'size' => filesize($p['zip']),
'created' => (int)($meta['created'] ?? filemtime($p['zip'])),
'count' => (int)($meta['count'] ?? 0),
];
}
public function clearMediaCache(string $abs): void
{
$p = $this->mediaCachePaths($abs);
@unlink($p['zip']);
@unlink($p['meta']);
}
// --- ZIP build (SSE, saves to folder permanently) ---
public function streamZipBuild(string $relDir): void
{
@ini_set('display_errors', '0');
@ini_set('zlib.output_compression', '0');
@ini_set('output_buffering', 'Off');
while (ob_get_level() > 0) @ob_end_clean();
ob_implicit_flush(true);
session_write_close();
if (function_exists('apache_setenv')) {
@apache_setenv('no-gzip', '1');
@apache_setenv('dont-vary', '1');
}
header('Content-Type: text/event-stream; charset=utf-8');
header('Cache-Control: no-cache, no-store, must-revalidate');
header('Pragma: no-cache');
header('X-Accel-Buffering: no');
header('Connection: keep-alive');
set_time_limit(0);
ignore_user_abort(true);
$sseSend = function(string $event, array $data): void {
echo ($event !== 'message' ? "event: $event\n" : '') . 'data: ' . json_encode($data) . "\n\n";
flush();
};
$abs = $this->resolveZipDir($relDir);
if ($abs === false) { $sseSend('ziperr', ['msg' => 'Forbidden']); exit; }
if (!class_exists('ZipArchive')) { $sseSend('ziperr', ['msg' => 'ZipArchive unavailable']); exit; }
if (!is_writable($abs)) { $sseSend('ziperr', ['msg' => 'Katalog nie jest zapisywalny przez serwer']); exit; }
$collected = $this->collectMediaFiles($abs);
$total = count($collected);
if ($total === 0) { $sseSend('ziperr', ['msg' => 'Brak plików media w tym katalogu']); exit; }
$sseSend('message', ['total' => $total, 'done' => 0, 'file' => '']);
$tmpDir = $this->getWritableTmpDir();
$tmp = @tempnam($tmpDir, 'mzip_');
if (empty($tmp)) {
$sseSend('ziperr', ['msg' => "Brak dostępu do katalogu tymczasowego: $tmpDir"]);
exit;
}
$zip = new ZipArchive();
if ($zip->open($tmp, ZipArchive::OVERWRITE) !== true) {
@unlink($tmp);
$sseSend('ziperr', ['msg' => "ZipArchive nie może otworzyć pliku: $tmp"]);
exit;
}
foreach ($collected as $i => $path) {
$entry = substr($path, strlen($abs) + 1);
$zip->addFile($path, $entry);
$zip->setCompressionName($entry, ZipArchive::CM_STORE);
$sseSend('message', ['total' => $total, 'done' => $i + 1, 'file' => basename($path)]);
}
$zip->close();
$paths = $this->mediaCachePaths($abs);
rename($tmp, $paths['zip']);
@chmod($paths['zip'], 0644);
file_put_contents($paths['meta'], json_encode([
'created' => time(),
'count' => $total,
'size' => filesize($paths['zip']),
]));
$sseSend('done', ['count' => $total, 'size' => filesize($paths['zip'])]);
exit;
}
// --- ZIP cached download (all users) ---
public function streamZipCached(string $relDir): void
{
$abs = $this->resolveZipDir($relDir);
if ($abs === false) $this->SendPlainHttpError(403, 'Forbidden');
if (!$this->isPathAuthorized($abs)) $this->SendPlainHttpError(401, 'Unauthorized');
$p = $this->mediaCachePaths($abs);
if (!is_file($p['zip'])) $this->SendPlainHttpError(404, 'No cached archive');
$this->DisableOutputCompression();
$zipName = (basename($abs) ?: 'media') . '_media.zip';
header('Content-Type: application/zip');
header('Content-Disposition: ' . $this->buildContentDisposition($zipName, 'attachment'));
header('Content-Length: ' . filesize($p['zip']));
header('Cache-Control: no-cache, no-store');
readfile($p['zip']);
exit;
}
public function handleDownload(string $filename): void
{
$file = realpath($this->currentDir . DIRECTORY_SEPARATOR . $filename);
if ($file === false || !is_file($file) || !$this->isWithinBase($file)) {
http_response_code(404);
echo "Error: File does not exist or access is denied.";
exit;
}
if (!$this->isPathAuthorized($file)) {
$this->SendPlainHttpError(401, 'Unauthorized');
}
// Blokada pobierania wrażliwych/ukrytych plików (php, json, sql, db, dotfiles, backupy ...)
if ($this->isHiddenEntry(basename($file))) {
http_response_code(403);
echo "Error: Downloading this file type is not allowed.";
exit;
}
$this->DisableOutputCompression();
$name = basename($file);
$size = (string)filesize($file);
header('Content-Description: File Transfer');
header('Content-Type: application/octet-stream'); // zawsze binarnie
header('X-Content-Type-Options: nosniff'); // nie próbuj zgadywać
header('Content-Disposition: ' . $this->buildContentDisposition($name, 'attachment'));
header('Content-Transfer-Encoding: binary');
header('Content-Length: '.$size);
header('Cache-Control: no-store, no-cache, must-revalidate');
header('Pragma: no-cache');
header('Expires: 0');
// bez częściowych zakresów – pełny plik do pobrania
$fp = fopen($file, 'rb');
if ($fp === false) {
http_response_code(500);
echo "Error: Could not open file.";
exit;
}
set_time_limit(0);
$chunk = 8192;
while (!feof($fp)) {
echo fread($fp, $chunk);
flush();
}
fclose($fp);
exit;
}
/*
* Generuje miniaturę JPEG i serwuje ją z cache'em na dysku.
* Cache przechowywany w .thumbcache/ w baseDir (klucz = md5 ścieżki + mtime + rozmiar).
* Obsługuje EXIF orientation dla JPEG i białe tło dla PNG/GIF z przezroczystością.
*
* @param string $filePath Pełna ścieżka do pliku źródłowego
* @param int $maxW Maks. szerokość miniatury (px)
* @param int $maxH Maks. wysokość miniatury (px)
*/
public function serveThumb(string $filePath, int $maxW = 220, int $maxH = 220): void
{
$real = realpath($filePath);
if ($real === false || !is_file($real) || !$this->isWithinBase($real)) {
$this->SendPlainHttpError(404, 'Not found');
}
if (!$this->isPathAuthorized($real)) {
$this->SendPlainHttpError(401, 'Unauthorized');
}
$ext = $this->getExt($real);
if (!in_array($ext, ['jpg', 'jpeg', 'png', 'gif', 'webp'], true)) {
$this->SendPlainHttpError(415, 'Unsupported image type');
}
// Jeśli GD niedostępne — przekieruj do oryginału
if (!function_exists('imagecreatefromjpeg')) {
header('Location: ' . $this->getFileUrl($real));
exit;
}
$cacheDir = $this->baseDir . DIRECTORY_SEPARATOR . '.thumbcache';
$mtime = (int)filemtime($real);
$cacheKey = md5("{$real}|{$mtime}|{$maxW}x{$maxH}");
$cachePath = $cacheDir . DIRECTORY_SEPARATOR . $cacheKey . '.jpg';
if (!is_dir($cacheDir)) {
@mkdir($cacheDir, 0755, true);
@file_put_contents($cacheDir . DIRECTORY_SEPARATOR . '.htaccess', "Deny from all\n");
}
if (!file_exists($cachePath)) {
$src = match ($ext) {
'jpg', 'jpeg' => @imagecreatefromjpeg($real),
'png' => @imagecreatefrompng($real),
'gif' => @imagecreatefromgif($real),
'webp' => function_exists('imagecreatefromwebp') ? @imagecreatefromwebp($real) : false,
default => false,
};
if ($src === false) {
$this->SendPlainHttpError(500, 'Cannot decode image');
}
// Korekcja orientacji EXIF (zdjęcia z telefonów)
if (in_array($ext, ['jpg', 'jpeg'], true) && function_exists('exif_read_data')) {
$exif = @exif_read_data($real);
$src = match ((int)($exif['Orientation'] ?? 1)) {
3 => imagerotate($src, 180, 0),
6 => imagerotate($src, -90, 0),
8 => imagerotate($src, 90, 0),
default => $src,
};
}
$w = imagesx($src);
$h = imagesy($src);
$ratio = min($maxW / $w, $maxH / $h, 1.0);
$nw = max(1, (int)round($w * $ratio));
$nh = max(1, (int)round($h * $ratio));
$dst = imagecreatetruecolor($nw, $nh);
// białe tło (obsługa przezroczystości PNG/GIF przy zapisie do JPEG)
$white = imagecolorallocate($dst, 255, 255, 255);
imagefilledrectangle($dst, 0, 0, $nw, $nh, $white);
imagecopyresampled($dst, $src, 0, 0, 0, 0, $nw, $nh, $w, $h);
unset($src);
if (!imagejpeg($dst, $cachePath, 82)) {
unset($dst);
$this->SendPlainHttpError(500, 'Cannot write thumbnail cache');
}
unset($dst);
}
// Serwowanie z cache
$this->DisableOutputCompression();
$etag = "\"thumb-{$cacheKey}\"";
header('Content-Type: image/jpeg');
header('Content-Length: ' . (int)filesize($cachePath));
header('Cache-Control: public, max-age=604800, immutable');
header("ETag: {$etag}");
header('X-Content-Type-Options: nosniff');
if (isset($_SERVER['HTTP_IF_NONE_MATCH'])
&& trim($_SERVER['HTTP_IF_NONE_MATCH']) === $etag) {
http_response_code(304);
exit;
}
http_response_code(200);
readfile($cachePath);
exit;
}
public function getBaseDir(): string
{
return $this->baseDir;
}
public function getCurrentDir(): string
{
return $this->currentDir;
}
public function checkAccess(bool $renderLoginOnDeny = true): bool
{
$configPath = $this->currentDir . DIRECTORY_SEPARATOR . 'config.php';
// Admin ma pełny dostęp
if ($this->isAdmin()) {
return true;
}
if (!file_exists($configPath)) {
return true; // brak ochrony
}
$authConfig = include $configPath;
$sessionKey = md5($this->currentDir);
if (isset($_GET['logout'])) {
unset($_SESSION['auth'][$sessionKey]);
header("Location: " . strtok($_SERVER["REQUEST_URI"], '?'));
exit;
}
if (!isset($_SESSION['auth'][$sessionKey])) {
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['username'], $_POST['password'])) {
if ($_POST['username'] === ($authConfig['username'] ?? null) &&
password_verify($_POST['password'], $authConfig['password'] ?? '')) {
session_regenerate_id(true);
$_SESSION['auth'][$sessionKey] = true;
header('Location: ' . $_SERVER['REQUEST_URI']);
exit;
}
}
if ($renderLoginOnDeny) {
$loginError = ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['username'], $_POST['password']))
? "Niepoprawny login lub hasło."
: "";
echo $this->oView::headLogin('Zaloguj się do folderu');
echo $this->oView::loginForm($_SERVER['REQUEST_URI'], $loginError, "🔐 Dostęp chroniony");
echo $this->oView::footer();
exit;
} else {
// tylko sygnalizuj brak dostępu
return false;
}
}
return true;
}
/* ---------- ADMIN HANDLING ---------- */
public function isAdmin(): bool
{
return !empty($_SESSION['is_admin']);
}
public function handleAdminLogin(): void
{
// 1) Wylogowanie admina
if (isset($_GET['logoutAdmin']))
{
unset($_SESSION['is_admin']);
header('Location: ' . strtok($_SERVER['REQUEST_URI'], '?'));
exit;
}
// 2) Jeśli ?admin – pokaż formularz (o ile jeszcze nie zalogowany)
if (isset($_GET['admin']) && !$this->isAdmin())
{
$error = null;
$loginError = "";
if ($_SERVER['REQUEST_METHOD'] === 'POST')
{
$u = (string)($_POST['username'] ?? '');
$p = (string)($_POST['password'] ?? '');
if (hash_equals(ADMIN_USER, $u) && hash_equals(ADMIN_PASS, $p))
{
session_regenerate_id(true);
$_SESSION['is_admin'] = true;
header('Location: ' . strtok($_SERVER['REQUEST_URI'], '?')); // usuń ?admin
exit;
}
$loginError = 'Błędny login lub hasło.';
}
echo $this->oView::headLogin('Zaloguj się');
echo $this->oView::loginForm($_SERVER['REQUEST_URI'], $loginError, "Panel administratora");
echo $this->oView::footer();
exit;
}
}
public function handleCreateConfig(): void
{
$loginError = "";
if (!$this->isAdmin())
{
echo "Brak uprawnień.";
exit;
}
$configFile = $this->currentDir . DIRECTORY_SEPARATOR . 'config.php';
// Jeśli plik istnieje, pokaż obecne dane logowania
if (file_exists($configFile))
{
$config = include $configFile;
if (is_array($config) && isset($config['username'], $config['password']))
{
$loginError .= "" . $this->EscapeHtml($config['username']) . " " . $this->EscapeHtml($config['password']) . " ";
}
else
{
$loginError .= "⚠️ Plik config.php istnieje, ale ma niepoprawny format.baseDir, '', $this->currentDir), DIRECTORY_SEPARATOR)) . "\">⬅️ Wróć ";
}
}
$csrfField = 'Wyszukuje MP3 i WIDEO, w tym podkatalogi. Użyj filtra: ext:audio, ext:video lub np. ext:mp3,mp4 '
: '';
$recursiveCtl = $public
? '
';
}
/** Konwersja bajtów na MB (2 miejsca po przecinku) */
public function bytesToMB(int $bytes): float
{
return round($bytes / (1024 ** 2), 2);
}
public function formatBytes(int $bytes): string
{
if ($bytes < 1024 ** 3) {
return number_format($bytes / (1024 ** 2), 2, ',', ' ') . ' MB';
}
if ($bytes < 1024 ** 4) {
return number_format($bytes / (1024 ** 3), 2, ',', ' ') . ' GB';
}
return number_format($bytes / (1024 ** 4), 2, ',', ' ') . ' TB';
}
/**
* Rekurencyjny rozmiar katalogu w bajtach.
* Wynik jest cache'owany w .dircache.json — przeliczany tylko gdy zmieni się
* mtime któregoś z bezpośrednich dzieci (dodanie/usunięcie pliku) lub po 2h TTL.
*/
public function getDirectorySize(string $dir): int
{
$dir = realpath($dir);
if ($dir === false || !is_dir($dir)) return 0;
if (strncmp($dir, $this->baseDir, strlen($this->baseDir)) !== 0) return 0;
$cached = $this->dirCache->get($dir);
if ($cached !== null) return $cached;
$bytes = 0;
try {
$it = new RecursiveIteratorIterator(
new RecursiveDirectoryIterator($dir, FilesystemIterator::SKIP_DOTS),
RecursiveIteratorIterator::SELF_FIRST
);
foreach ($it as $item) {
if ($item->isLink()) continue;
if ($item->isFile()) $bytes += (int)$item->getSize();
}
} catch (Throwable $e) {}
$this->dirCache->set($dir, $bytes);
return $bytes;
}
/**
* Zwraca foldery i pliki bieżącego katalogu + meta (rozmiar, mtime, url, ikonka).
* - Rozmiar plików w MB wyliczany zawsze.
* - Rozmiar folderów w MB wyliczany tylko, gdy ?folder_size=1 (żeby nie mielić dysku).
*/
public function getFilesAndFolders(): array
{
$folders = [];
$files = [];
$relDirCurrent = $this->relativeToBase($this->currentDir) ?: '/';
$di = new DirectoryIterator($this->currentDir);
foreach ($di as $info) {
if ($info->isDot()) continue;
$name = $info->getFilename();
// ukryj wrażliwe/ukryte wpisy (dotfiles, php/json/sql/db/env, backupy, macOS ._*)
if ($this->isHiddenEntry($name)) continue;
$path = $info->getPathname();
if ($info->isDir()) {
$sizeBytes = -1; // ładowany leniwie przez AJAX
$folders[] = [
'name' => $name,
'path' => $path,
'is_dir' => true,
'size_bytes' => $sizeBytes,
'size_mb' => 0,
'mtime' => $info->getMTime(),
'url' => $_SERVER['PHP_SELF'] . '?dir=' . rawurlencode(trim(str_replace($this->baseDir, '', $path), DIRECTORY_SEPARATOR)),
'icon' => '📁', // albo $this->getFileTypeIcon($name) jeśli tak wolisz
];
continue;
}
// pliki (wrażliwe rozszerzenia odfiltrowane już przez isHiddenEntry)
$sizeBytes = (int)$info->getSize();
$files[] = [
'name' => $name,
'path' => $path,
'is_dir' => false,
'size_bytes' => $sizeBytes,
'size_mb' => $this->bytesToMB($sizeBytes),
'mtime' => $info->getMTime(),
'url' => $this->getFileUrl($path),
'icon' => $this->getFileTypeIcon($name),
'thumb_url' => $this->isPreviewable($name)
? $this->BuildThumbUrl($relDirCurrent, $name)
: null,
];
}
// sortowanie jak wcześniej
usort($folders, fn($a,$b) => strnatcasecmp($a['name'], $b['name']));
usort($files, fn($a,$b) => strnatcasecmp($a['name'], $b['name']));
return ['folders' => $folders, 'files' => $files];
}
public function relativeToBase(string $abs): string
{
$real = realpath($abs) ?: $abs;
if (strncmp($real, $this->baseDir, strlen($this->baseDir)) !== 0) {
return '';
}
return ltrim(str_replace($this->baseDir, '', $real), DIRECTORY_SEPARATOR);
}
/*
* @version 1.0
* @param array $aFiles Lista plików z getFilesAndFolders()
* @return array
*/
public function GetImageFiles(array $aFiles): array
{
return array_values(array_filter($aFiles, fn($f) => $this->isPreviewable((string)($f['name'] ?? ''))));
}
/*
* @version 1.0
* @param string $sKey Nazwa parametru GET
* @param int $iDefault Wartość domyślna
* @param int $iMin Minimalna wartość
* @param int $iMax Maksymalna wartość
* @return int
*/
public function GetRequestInt(string $sKey, int $iDefault = 1, int $iMin = 1, int $iMax = 999999): int
{
if (!isset($_GET[$sKey]) || is_array($_GET[$sKey])) {
return $iDefault;
}
$iValue = (int)$_GET[$sKey];
if ($iValue < $iMin) {
return $iMin;
}
if ($iValue > $iMax) {
return $iMax;
}
return $iValue;
}
/*
* @version 1.0
* @param array $aItems Lista elementów
* @param int $iPage Aktualna strona
* @param int $iPerPage Liczba elementów na stronę
* @return array
*/
public function PaginateItems(array $aItems, int $iPage, int $iPerPage): array
{
$iTotalItems = count($aItems);
$iTotalPages = max(1, (int)ceil($iTotalItems / $iPerPage));
$iPage = max(1, min($iPage, $iTotalPages));
$iOffset = ($iPage - 1) * $iPerPage;
return [
'items' => array_slice($aItems, $iOffset, $iPerPage),
'page' => $iPage,
'per_page' => $iPerPage,
'total_items' => $iTotalItems,
'total_pages' => $iTotalPages,
];
}
/*
* @version 1.0
* @param string $sView Tryb widoku
* @param int $iPage Numer strony
* @return string
*/
public function BuildCurrentDirUrl(string $sView = '', int $iPage = 1): string
{
$sRelDir = $this->relativeToBase($this->getCurrentDir());
$aQuery = [];
if ($sRelDir !== '') {
$aQuery['dir'] = $sRelDir;
}
if ($sView !== '') {
$aQuery['view'] = $sView;
}
if ($iPage > 1) {
$aQuery['page'] = $iPage;
}
$sQuery = http_build_query($aQuery);
return $_SERVER['PHP_SELF'] . ($sQuery !== '' ? '?' . $sQuery : '');
}
/*
* @version 1.0
* @param array $aImages Lista grafik dla aktualnej strony
* @param int $iPage Aktualna strona
* @param int $iTotalPages Liczba stron
* @param int $iTotalImages Liczba wszystkich grafik
* @return string
*/
public function RenderImageGallery(array $aImages): string
{
if (count($aImages) === 0) {
return 'Brak grafik w tym katalogu.
';
}
$aJs = [];
foreach ($aImages as $aImg) {
$sUrl = (string)($aImg['url'] ?? '');
$sThumb = (string)($aImg['thumb_url'] ?? $sUrl);
$sName = (string)($aImg['name'] ?? '');
if ($sUrl === '') continue;
$aJs[] = ['url' => $sUrl, 'thumb' => $sThumb, 'name' => $sName];
}
$sJsData = json_encode($aJs, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_HEX_TAG);
return <<
HTML;
}
/*
* @version 1.0
* @param int $iPage Aktualna strona
* @param int $iTotalPages Liczba stron
* @return string
*/
public function RenderPaginationHtml(string $sView, int $iPage, int $iTotalPages): string
{
if ($iTotalPages <= 1) {
return '';
}
$iStart = max(1, $iPage - 3);
$iEnd = min($iTotalPages, $iPage + 3);
$url = fn(int $p) => $this->EscapeHtml($this->BuildCurrentDirUrl($sView, $p));
$sHtml = '\n";
}
/*
* @version 1.0
* @param array $aFiles Lista plików z getFilesAndFolders()
* @return array
*/
public function GetVideoFiles(array $aFiles): array
{
return array_values(array_filter($aFiles, fn($f) => $this->isVideo((string)($f['name'] ?? ''))));
}
public function GetAudioFiles(array $aFiles): array
{
return array_values(array_filter($aFiles, fn($f) => $this->isAudio((string)($f['name'] ?? ''))));
}
public function RenderAudioPlayer(array $aTracks): string
{
if (empty($aTracks)) {
return 'Brak plików audio w tym katalogu.
';
}
$sRelDir = $this->relativeToBase($this->getCurrentDir());
$total = count($aTracks);
$sidebarItems = '';
$allUrls = [];
$allTitles = [];
foreach ($aTracks as $i => $t) {
$name = (string)($t['name'] ?? '');
$url = $this->BuildStreamUrl($sRelDir, $name, 'stream_audio');
$title = pathinfo($name, PATHINFO_FILENAME);
$urlEsc = $this->EscapeHtml($url);
$titleEsc = $this->EscapeHtml($title);
$allUrls[] = $url;
$allTitles[] = $title;
$sidebarItems .= ""
. ""
. "" . $i + 1 . " "
. "{$titleEsc} "
. "+ "
. "
\n";
}
$allUrlsJson = htmlspecialchars(json_encode($allUrls), ENT_QUOTES, 'UTF-8');
$allTitlesJson = htmlspecialchars(json_encode($allTitles), ENT_QUOTES, 'UTF-8');
return <<
🎵
Wybierz utwór
{$total} utworów w katalogu
⏮
▶
⏭
🔈
🔊
▶ Odtwórz wszystkie
➕ Dodaj wszystkie
📋 Kolejka
HTML;
}
/*
* @version 1.0
* @param array $aVideos Lista filmów dla aktualnej strony
* @param int $iPage Aktualna strona
* @param int $iTotalPages Liczba stron
* @param int $iTotalVideos Liczba wszystkich filmów
* @return string
*/
public function RenderVideoViewer(array $aVideos, int $iPage, int $iTotalPages, int $iTotalVideos): string
{
if (count($aVideos) === 0) {
return 'Brak plików wideo w tym katalogu.
';
}
$sHtml = '' . PHP_EOL;
$sFirstName = (string)($aVideos[0]['name'] ?? '');
$sRelDir = $this->relativeToBase($this->getCurrentDir());
$sFirstUrl = $this->BuildStreamUrl($sRelDir, $sFirstName, 'stream');
$sHtml .= '
' . PHP_EOL;
$sHtml .= '
' . PHP_EOL;
$sHtml .= '
⬇ Pobierz ' . PHP_EOL;
$sHtml .= '
🔗 Udostępnij ' . PHP_EOL;
$sHtml .= '
' . PHP_EOL;
$sHtml .= '
‹ ' . PHP_EOL;
$sHtml .= '
' . PHP_EOL;
$sHtml .= '' . PHP_EOL;
$sHtml .= 'Twoja przeglądarka nie obsługuje odtwarzacza wideo.' . PHP_EOL;
$sHtml .= ' ' . PHP_EOL;
$sHtml .= '
› ' . PHP_EOL;
$sHtml .= '
' . PHP_EOL;
$sHtml .= '
'
. $this->EscapeHtml($sFirstName)
. ' — strona ' . (int)$iPage . ' / ' . (int)$iTotalPages
. ', filmów: ' . (int)$iTotalVideos
. '
' . PHP_EOL;
$sHtml .= '
' . PHP_EOL;
foreach ($aVideos as $iIndex => $aVideo) {
$sName = (string)($aVideo['name'] ?? '');
$sUrl = $this->BuildStreamUrl($sRelDir, $sName, 'stream');
if ($sName === '' || $sUrl === '') {
continue;
}
$sHtml .= ''
. '🎬 '
. '' . $this->EscapeHtml($sName) . ' '
. ' ' . PHP_EOL;
}
$sHtml .= '
' . PHP_EOL;
$sHtml .= '
File Browser
File Browser
isAdmin())
{
// ▼ administrator już zalogowany
echo '
Wyloguj admina ';
}
else
{
// ▼ link do logowania admina
echo '
Zaloguj admina ';
}
/* przycisk katalogowego wylogowania (jeśli istnieje sesja) */
if (isset($_SESSION['auth'][$sessionKey]))
{
echo '
🚪 Wyloguj katalog ';
}
?>
isAdmin()) {
echo $browser->setCreateSerarch(false);
// zwykły user – pokaż tylko, gdy jest audio/video w bieżącym katalogu
} elseif ($hasMedia) {
echo $browser->setCreateSerarch(true);
}
?>
isAdmin()): ?>
loadIntegritySnapshot($currentDir);
$snapDate = $snapshot ? $snapshot['captured_at'] : null;
$relDirEnc = urlencode(trim(str_replace($baseDir, '', $currentDir), DIRECTORY_SEPARATOR));
$csrfToken = htmlspecialchars($_SESSION['csrf_token'], ENT_QUOTES, 'UTF-8');
$integrityFlash = $_SESSION['integrity_flash'] ?? null;
unset($_SESSION['integrity_flash']);
?>
isAdmin() || $hasMedia) {
$q = trim($_GET['q']);
$recursive = isset($_GET['recursive']) && $_GET['recursive'] == '1';
$max = 800;
if (!$browser->isAdmin()) {
// Domyślnie wymuś AV i rekurencję dla zwykłego usera,
// jeśli nie podał żadnego ext:
if (!preg_match('/\bext:/i', $q)) {
$q .= ' ext:audio,video';
}
$recursive = true;
}
$searchResults = $browser->searchFiles($q, $currentDir, $recursive, $max);
}
}
?>
Wyniki wyszukiwania dla: "EscapeHtml($q); ?>"
()
isAdmin()): ?>
– podkatalogi włączone
Brak wyników.
Icon
Nazwa
Rozszerzenie
Rozmiar (MB)
Akcje
getCurrentDir();
$relDir = $browser->relativeToBase($fileDirAbs) ?: '/';
$watchUrl = $browser->BuildStreamUrl($relDir, $name, 'stream');
$audioUrl = $browser->BuildStreamUrl($relDir, $name, 'stream_audio');
// Download zawsze z katalogu, w którym faktycznie leży znaleziony plik.
$dlRel = $relDir;
$dlHref = $_SERVER['PHP_SELF'] . '?dir=' . rawurlencode($dlRel) . '&action=download&file=' . rawurlencode($name);
$isIndexHtml = (strtolower($name) === 'index.html');
?>
EscapeHtml($name); ?>
EscapeHtml($ext); ?>
RenderFileActions(
$name,
$url,
$watchUrl,
$audioUrl,
$dlHref,
$isIndexHtml,
true
); ?>
EscapeHtml($_SERVER['PHP_SELF']);
$crumbs[] = '
../ ';
// kolejne segmenty /a/b/c → budujemy narastająco ?dir=a, ?dir=a/b, ...
$accum = '';
foreach ($segments as $seg) {
if ($seg === '') continue;
$accum .= ($accum === '' ? '' : DIRECTORY_SEPARATOR) . $seg;
$href = $rootHref . '?dir=' . rawurlencode($accum);
$crumbs[] = '
' . $browser->EscapeHtml($seg) . ' ';
}
?>
› ', $crumbs); ?>
0 || $iVideoFilesCount > 0 || $iAudioFilesCount > 0): ?>
RenderImageGallery($aGalleryImages); ?>
RenderVideoViewer(
$aVideoPaginationData['items'],
(int)$aVideoPaginationData['page'],
(int)$aVideoPaginationData['total_pages'],
(int)$aVideoPaginationData['total_items']
);
echo $browser->RenderPaginationHtml('video',
(int)$aVideoPaginationData['page'],
(int)$aVideoPaginationData['total_pages']
);
?>
RenderAudioPlayer($aAudioFiles); ?>
Icon
Nazwa
Rozszerzenie
Rozmiar (MB)
Akcje
relativeToBase($folderPath);
$encodedDir = rawurlencode($relFolder);
// Zabezpieczenie: jeżeli coś poszło nie tak – pomijamy ten wiersz
if ($folderName === '' || $folderPath === '' || $folderUrl === '') {
continue;
}
$configExists = file_exists($folderPath . DIRECTORY_SEPARATOR . 'config.php');
$folderCache = $browser->getMediaCacheInfo($folderPath);
$folderCacheEnc = htmlspecialchars(json_encode($relFolder), ENT_QUOTES);
?>
📁
EscapeHtml($folderName); ?>
Folder
⏳
📦 ZIP
isAdmin()): ?>
✏️ Edytuj
➕ Zabezpiecz
getExt($name);
$sLink = $browser->BuildStreamUrl($relDirFiles, $name, 'stream');
$audioLink = $browser->BuildStreamUrl($relDirFiles, $name, 'stream_audio');
$isVideo = $browser->isVideo($name);
$isIndexHtml = (strtolower($name) === 'index.html');
?>
EscapeHtml($name); ?>
EscapeHtml($name); ?>
EscapeHtml($name); ?>
formatBytes($f['size_bytes']); ?>
RenderFileActions(
$name,
$url,
$sLink,
$audioLink,
$dlHref,
$isIndexHtml,
false
);
?>
✖
📦 Tworzenie archiwum ZIP
Przygotowywanie...
Anuluj
isAdmin() && $integrityFlash): ?>