= 1024 && $i < count($units) - 1) {
$bytes /= 1024;
$i++;
}
return number_format($bytes, $decimals, '.', ',') . ' ' . $units[$i];
}
$reqPath = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH);
$scriptDir = rtrim(str_replace('\\','/', dirname($_SERVER['SCRIPT_NAME'])), '/');
if ($scriptDir !== '' && $scriptDir !== '.') {
if ($scriptDir !== '/' && str_starts_with($reqPath, $scriptDir)) {
$reqPath = substr($reqPath, strlen($scriptDir));
}
}
$reqPath = '/' . ltrim($reqPath, '/');
$targetPath = ($reqPath === '/' || $reqPath === '')
? __DIR__
: __DIR__ . $reqPath;
$targetPath = rtrim(str_replace('\\','/',$targetPath), '/');
$realTarget = realpath($targetPath);
$realRoot = realpath(__DIR__);
if ($realTarget === false || $realRoot === false || !str_starts_with($realTarget, $realRoot)) {
http_response_code(403);
echo "Access denied.";
exit;
}
$title = "Files Directory: " . htmlspecialchars($reqPath, ENT_QUOTES, 'UTF-8');
$ignore = array('.', '..', 'index.php', '.htaccess', '.DS_Store');
$items = [];
foreach (scandir($realTarget) as $name) {
if (in_array($name, $ignore, true)) continue;
$items[] = $name;
}
?>
<?= htmlspecialchars($title, ENT_QUOTES, 'UTF-8') ?>