<?php

ob_start();

error_reporting(E_ALL);

ini_set('display_errors', 0);

error_log("Script started");

ini_set('error_log', 'error.log'); // Replace with an actual path where you have write permissions

​

error_log("POST data: " . print_r($_POST, true));

error_log("GET data: " . print_r($_GET, true));

​

 // Get the current working directory (no need to hardcode a path)

 $baseDir = getcwd();

​

​

$root_directory = __DIR__; // This sets the root directory to the current script's directory

$requested_path = isset($_GET['dir']) ? $_GET['dir'] : '';

$full_path = realpath($root_directory . DIRECTORY_SEPARATOR . $requested_path);

​

// Security check: Make sure the requested path is within the allowed directory

if ($full_path === false || strpos($full_path, $root_directory) !== 0) {

    $full_path = $root_directory;

}

​

error_log("Root directory: " . $root_directory);

error_log("Requested path: " . $requested_path);

error_log("Full path: " . $full_path);

​

​

// Backend logic

$action = isset($_POST['action']) ? $_POST['action'] : '';

function sanitize_input($input) {

    return htmlspecialchars(strip_tags(trim($input)), ENT_QUOTES, 'UTF-8');

}

​

switch ($action) {

    case 'get_content':

        $file = urldecode($_POST['file']);

        if (file_exists($file) && is_file($file)) {

            echo json_encode(['content' => file_get_contents($file)]);

        } else {

            echo json_encode(['error' => 'File not found or is not a regular file.']);

        }

        exit;