Server-Side File Manager

WHAT IS THIS?
=============
NanoWiki is a documentation tool with a small footprint, extreme containment, and maximum portability, even when segments are isolated from a comprehensive constellation. Each element is as self-sustained as possible.
Unlike most content managers, this documentation tool tries to embed as much content as possible into one file, not link resources, like images and/or supportive documents. Therefore these binary files are converted to text, using base64-conversion, then included into the content via straight HTML. The syntax for images, documents, and links is provided as templates, along with explanations and samples.

HOW DOES IT WORK?
=================
CHANGE THE MAIN TITLE...
of the documentation, by double-clicking on it.

ADD ARTICLES...
as needed, bring them into the right order, and save the whole page through the button in the upper left.

EDIT ARTICLES...
by double-clicking them. Then edit and save the whole page (again) with the button in the upper left. Get new images and documents posted, using the conversion tool in the [ADD] section.

NO FONT-SIZE, BOLD, ITALIC, TABLES - NOTHING???
Nope. Enjoy your own HTML-skills, almost everything is supported (but stay away from </textarea> and JavaScript). This is intended to be as simple and bare-bones as possible.
Templates for images and links (to files and pages) are included. Use CAPITALIZATION, +++ additional characters +++, and indentation for emphasis and organization. Worked for decades on a typewriter, works here too.

AND NO 'UNDO...'
In the text-box, right-click and choose UNDO, or press [CTRL]+[Z] / [CTRL]+[Y] for UNDO / REDO.
If you messed up completely, deleted something, open the original you should overwrite after editing in a separate window and get the content from there (open the editor with a double-click).
If you broke the system somehow, do not overwrite the previous version, simply re-load the page, and start over. If you overwrote the original already, get a backup.
MAKE AND KEEP BACKUPS, they compress nicely and fast. Disciplin, people, this is meant to be small, simple, fast, portable, and independent, not fool or vilain proof.

AND NO LOGIN/SECURITY...
Not needed, only you (or your people) have write access to the files. You can write anything on a paper copy, doesn't change the original, neither other people's copies.

HOW DO I SHARE MY DOCUMENTATION?
================================
Give others read access e.g. by posting the wiki on a web server or on a file-sharing platform, like Dropbox or Google Drive. Just find out how to "make file publicly accessible".
Web servers or fully addressible platforms are (only) required to provide cross-linked multi-topic documentation sites instead of single documentation pages.
Here is a handy notes file handler, extract directly into directory with documentation notes on a PHP-enabled web server.

ENJOY! - or improve...

create as 'index.php' and place in upload directory, try with test/test (guest/guest for read-only)

-ready-

-double-click copies code sample-

<?php

$page_title='File Manager';
$fav_icon='';

/***************
* Secure Login *
***************/
session_start();

// create password salt
if(!isset($_SESSION['salt'])){
    $_SESSION['salt']=md5(rand(10000,99999));
}

// static access list
/** /

// -EITHER EXTERNAL (multi-page)-
 require_once('users.php');

/**/

// -OR INTERNAL (single-page)-

$access=array(
// USERNAME/EMAIL	=> PASSWORD,USER-LEVEL
'test'				=> array('test',0), // e.g. sys admin, username should be email for reporting problems
'guest'				=> array('guest',1)	// e.g. view only

//'[user2]'			=> array('[password]',2),// e.g. visitor
//'[user3]'			=> array('[password]',2)  // e.g. visitor
);

/**/

// ALLOWED FILE TYPES
$valid_mimes=[
	'audio/mpeg',
	'image/jpeg',
	'image/png',
	'image/gif',
	'image/webp',
	'image/svg+xml',
	'application/pdf',
	'text/csv',
	'application/msword',
	'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
	'application/vnd.ms-excel',
	'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
	'application/vnd.ms-powerpoint',
	'application/vnd.openxmlformats-officedocument.presentationml.presentation',
	'application/zip',
	'application/x-zip-compressed',
	'application/x-7z-compressed',
	'text/plain',
	'text/html',
	'video/mp4',
	'video/mpg',
	'video/webm'
];

// MAXIMUM FILE SIZE
$max_file_size=40000000;

/* CHECK/ADJUST PHP.INI
; Maximum allowed size for uploaded files.
upload_max_filesize = 40M

; Must be greater than or equal to upload_max_filesize
post_max_size = 40M
*/

// logging out
if(isset($_GET['exit'])){
    $_SESSION['passwd']='';
    $_SESSION['salt']=md5(rand(10000,99999));
	session_destroy();
	header('Location:'.parse_url($_SERVER['REQUEST_URI'])['path']);
}

// logging in
if(isset($_POST['password']) && isset($_POST['user'])){
	$_SESSION['user']=$_POST['user'];
	$_SESSION['passwd']=$_POST['password'];
}

// use session salt on passwords
foreach($access as &$y){
	$y[0]=md5($y[0].$_SESSION['salt']);
}
unset($y);

// wrong password
$wrong_password='';
if(isset($_POST['user'])){
	if(isset($_POST['user']) && isset($access[$_POST['user']])){
		if((isset($_POST['password'])) && (isset($_POST['user'])) && ($_SESSION['passwd']!=$access[$_SESSION['user']][0])){
			$wrong_password='<div style="text-align:right;color:#990000;font-family:sans-serif;font-weight:bold;">Sorry, wrong password, if needed, please contact the <a href="mailto:'.array_key_first($access).'?subject=Login Check Request - '.parse_url($_SERVER['REQUEST_URI'])['path'].'&body=Hello%2C%20%0APlease%20check/report%20credentials%20for%20username%20%0A%0A'.urlencode(addslashes($_POST['user'])).'%0A%0AThanks%21">administrator</a>. </div>';	
		}
	}else{
		$wrong_password='<div style="text-align:right;color:#990000;font-family:sans-serif;font-weight:bold;">Sorry, no such user, if needed, please contact the <a href="mailto:'.array_key_first($access).'?subject=Login Account Request - '.parse_url($_SERVER['REQUEST_URI'])['path'].'&body=Hello%2C%20%0APlease%20sign%20me%20up.%0A%0AThanks%21">administrator</a>. </div>';		
		$_SESSION['passwd']='123';
		$access[$_SESSION['user']][0]='321';
	}
}

// log in validator
if(!(isset($_SESSION['passwd']) && isset($access[$_SESSION['user']][0]) && ($_SESSION['passwd']==$access[$_SESSION['user']][0]))){

// log in form
    echo'
<!DOCTYPE html><html lang="en-US"><head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width" />
<title>'.$page_title.'</title>
'.$fav_icon.'
<script>
/**** MD5 (Message-Digest Algorithm) * http://www.webtoolkit.info/ ***/
var MD5=function(string){function RotateLeft(lValue,iShiftBits){return(lValue<<iShiftBits)|(lValue>>>(32-iShiftBits))}function AddUnsigned(lX,lY){var lX4,lY4,lX8,lY8,lResult;lX8=(lX&0x80000000);lY8=(lY&0x80000000);lX4=(lX&0x40000000);lY4=(lY&0x40000000);lResult=(lX&0x3FFFFFFF)+(lY&0x3FFFFFFF);if(lX4&lY4){return(lResult^0x80000000^lX8^lY8)}if(lX4|lY4){if(lResult&0x40000000){return(lResult^0xC0000000^lX8^lY8)}else{return(lResult^0x40000000^lX8^lY8)}}else{return(lResult^lX8^lY8)}}function F(x,y,z){return(x&y)|((~x)&z)}function G(x,y,z){return(x&z)|(y&(~z))}function H(x,y,z){return(x^y^z)}function I(x,y,z){return(y^(x|(~z)))}function FF(a,b,c,d,x,s,ac){a=AddUnsigned(a,AddUnsigned(AddUnsigned(F(b,c,d),x),ac));return AddUnsigned(RotateLeft(a,s),b)};function GG(a,b,c,d,x,s,ac){a=AddUnsigned(a,AddUnsigned(AddUnsigned(G(b,c,d),x),ac));return AddUnsigned(RotateLeft(a,s),b)};function HH(a,b,c,d,x,s,ac){a=AddUnsigned(a,AddUnsigned(AddUnsigned(H(b,c,d),x),ac));return AddUnsigned(RotateLeft(a,s),b)};function II(a,b,c,d,x,s,ac){a=AddUnsigned(a,AddUnsigned(AddUnsigned(I(b,c,d),x),ac));return AddUnsigned(RotateLeft(a,s),b)};function ConvertToWordArray(string){var lWordCount;var lMessageLength=string.length;var lNumberOfWords_temp1=lMessageLength+8;var lNumberOfWords_temp2=(lNumberOfWords_temp1-(lNumberOfWords_temp1%64))/64;var lNumberOfWords=(lNumberOfWords_temp2+1)*16;var lWordArray=Array(lNumberOfWords-1);var lBytePosition=0;var lByteCount=0;while(lByteCount<lMessageLength){lWordCount=(lByteCount-(lByteCount%4))/4;lBytePosition=(lByteCount%4)*8;lWordArray[lWordCount]=(lWordArray[lWordCount]|(string.charCodeAt(lByteCount)<<lBytePosition));lByteCount++}lWordCount=(lByteCount-(lByteCount%4))/4;lBytePosition=(lByteCount%4)*8;lWordArray[lWordCount]=lWordArray[lWordCount]|(0x80<<lBytePosition);lWordArray[lNumberOfWords-2]=lMessageLength<<3;lWordArray[lNumberOfWords-1]=lMessageLength>>>29;return lWordArray};function WordToHex(lValue){var WordToHexValue="",WordToHexValue_temp="",lByte,lCount;for(lCount=0;lCount<=3;lCount++){lByte=(lValue>>>(lCount*8))&255;WordToHexValue_temp="0"+lByte.toString(16);WordToHexValue=WordToHexValue+WordToHexValue_temp.substr(WordToHexValue_temp.length-2,2)}return WordToHexValue};function Utf8Encode(string){string=string.replace(/\r\n/g,"\n");var utftext="";for(var n=0;n<string.length;n++){var c=string.charCodeAt(n);if(c<128){utftext+=String.fromCharCode(c)}else if((c>127)&&(c<2048)){utftext+=String.fromCharCode((c>>6)|192);utftext+=String.fromCharCode((c&63)|128)}else{utftext+=String.fromCharCode((c>>12)|224);utftext+=String.fromCharCode(((c>>6)&63)|128);utftext+=String.fromCharCode((c&63)|128)}}return utftext};var x=Array();var k,AA,BB,CC,DD,a,b,c,d;var S11=7,S12=12,S13=17,S14=22;var S21=5,S22=9,S23=14,S24=20;var S31=4,S32=11,S33=16,S34=23;var S41=6,S42=10,S43=15,S44=21;string=Utf8Encode(string);x=ConvertToWordArray(string);a=0x67452301;b=0xEFCDAB89;c=0x98BADCFE;d=0x10325476;for(k=0;k<x.length;k+=16){AA=a;BB=b;CC=c;DD=d;a=FF(a,b,c,d,x[k+0],S11,0xD76AA478);d=FF(d,a,b,c,x[k+1],S12,0xE8C7B756);c=FF(c,d,a,b,x[k+2],S13,0x242070DB);b=FF(b,c,d,a,x[k+3],S14,0xC1BDCEEE);a=FF(a,b,c,d,x[k+4],S11,0xF57C0FAF);d=FF(d,a,b,c,x[k+5],S12,0x4787C62A);c=FF(c,d,a,b,x[k+6],S13,0xA8304613);b=FF(b,c,d,a,x[k+7],S14,0xFD469501);a=FF(a,b,c,d,x[k+8],S11,0x698098D8);d=FF(d,a,b,c,x[k+9],S12,0x8B44F7AF);c=FF(c,d,a,b,x[k+10],S13,0xFFFF5BB1);b=FF(b,c,d,a,x[k+11],S14,0x895CD7BE);a=FF(a,b,c,d,x[k+12],S11,0x6B901122);d=FF(d,a,b,c,x[k+13],S12,0xFD987193);c=FF(c,d,a,b,x[k+14],S13,0xA679438E);b=FF(b,c,d,a,x[k+15],S14,0x49B40821);a=GG(a,b,c,d,x[k+1],S21,0xF61E2562);d=GG(d,a,b,c,x[k+6],S22,0xC040B340);c=GG(c,d,a,b,x[k+11],S23,0x265E5A51);b=GG(b,c,d,a,x[k+0],S24,0xE9B6C7AA);a=GG(a,b,c,d,x[k+5],S21,0xD62F105D);d=GG(d,a,b,c,x[k+10],S22,0x2441453);c=GG(c,d,a,b,x[k+15],S23,0xD8A1E681);b=GG(b,c,d,a,x[k+4],S24,0xE7D3FBC8);a=GG(a,b,c,d,x[k+9],S21,0x21E1CDE6);d=GG(d,a,b,c,x[k+14],S22,0xC33707D6);c=GG(c,d,a,b,x[k+3],S23,0xF4D50D87);b=GG(b,c,d,a,x[k+8],S24,0x455A14ED);a=GG(a,b,c,d,x[k+13],S21,0xA9E3E905);d=GG(d,a,b,c,x[k+2],S22,0xFCEFA3F8);c=GG(c,d,a,b,x[k+7],S23,0x676F02D9);b=GG(b,c,d,a,x[k+12],S24,0x8D2A4C8A);a=HH(a,b,c,d,x[k+5],S31,0xFFFA3942);d=HH(d,a,b,c,x[k+8],S32,0x8771F681);c=HH(c,d,a,b,x[k+11],S33,0x6D9D6122);b=HH(b,c,d,a,x[k+14],S34,0xFDE5380C);a=HH(a,b,c,d,x[k+1],S31,0xA4BEEA44);d=HH(d,a,b,c,x[k+4],S32,0x4BDECFA9);c=HH(c,d,a,b,x[k+7],S33,0xF6BB4B60);b=HH(b,c,d,a,x[k+10],S34,0xBEBFBC70);a=HH(a,b,c,d,x[k+13],S31,0x289B7EC6);d=HH(d,a,b,c,x[k+0],S32,0xEAA127FA);c=HH(c,d,a,b,x[k+3],S33,0xD4EF3085);b=HH(b,c,d,a,x[k+6],S34,0x4881D05);a=HH(a,b,c,d,x[k+9],S31,0xD9D4D039);d=HH(d,a,b,c,x[k+12],S32,0xE6DB99E5);c=HH(c,d,a,b,x[k+15],S33,0x1FA27CF8);b=HH(b,c,d,a,x[k+2],S34,0xC4AC5665);a=II(a,b,c,d,x[k+0],S41,0xF4292244);d=II(d,a,b,c,x[k+7],S42,0x432AFF97);c=II(c,d,a,b,x[k+14],S43,0xAB9423A7);b=II(b,c,d,a,x[k+5],S44,0xFC93A039);a=II(a,b,c,d,x[k+12],S41,0x655B59C3);d=II(d,a,b,c,x[k+3],S42,0x8F0CCC92);c=II(c,d,a,b,x[k+10],S43,0xFFEFF47D);b=II(b,c,d,a,x[k+1],S44,0x85845DD1);a=II(a,b,c,d,x[k+8],S41,0x6FA87E4F);d=II(d,a,b,c,x[k+15],S42,0xFE2CE6E0);c=II(c,d,a,b,x[k+6],S43,0xA3014314);b=II(b,c,d,a,x[k+13],S44,0x4E0811A1);a=II(a,b,c,d,x[k+4],S41,0xF7537E82);d=II(d,a,b,c,x[k+11],S42,0xBD3AF235);c=II(c,d,a,b,x[k+2],S43,0x2AD7D2BB);b=II(b,c,d,a,x[k+9],S44,0xEB86D391);a=AddUnsigned(a,AA);b=AddUnsigned(b,BB);c=AddUnsigned(c,CC);d=AddUnsigned(d,DD)}var temp=WordToHex(a)+WordToHex(b)+WordToHex(c)+WordToHex(d);return temp.toLowerCase()}
</script>
</head>
<body>
<form method="post" id="login" style="padding:7px;margin:2px;background-color:#007700;border:#009900 double 3px;border-radius:5px;text-align:right;color:#ffffff;font-weight:bold;font-family:sans-serif;line-height:2em;">
	USERNAME: <input type="text" name="user" /><br />
	PASSWORD: <input type="password" name="password" onfocus="this.value=\'\';" onblur="if(this.value){this.value=MD5(this.value+\''.$_SESSION['salt'].'\');}" /><br />
	<input type="button" value="Log In" onclick="document.getElementById(\'login\').submit();" />
</form>
'.$wrong_password.'
</body>
</html>
';
die();
}else{

/*** PROCESSING ***/
	$target_dir='';

if($access[$_SESSION['user']][1]=='0'){ // ADMIN ONLY - FUNCTION

if(isset($_FILES['fileToUpload'])){
			$target_file=$target_dir.basename($_FILES['fileToUpload']['name']);
			$uploadOk= 1;
			$imageFileType=strtolower(pathinfo($target_file,PATHINFO_EXTENSION));

if (file_exists($target_file)) {
				echo 'File exists.';
				$uploadOk = 0;
			}

if ($_FILES['fileToUpload']['size']>$max_file_size) {
				echo 'File is too large.';
				$uploadOk = 0;
			}
			
			if(in_array($_FILES['fileToUpload']['type'],$valid_mimes)===false){
				echo 'Invalid File Type.';
				$uploadOk = 0;
			}

if ($uploadOk == 0) {
				echo 'Sorry, your file was not uploaded.';
				die();
			}else {
				if (move_uploaded_file($_FILES['fileToUpload']['tmp_name'], $target_file)) {
					echo'<div id="message" style="text-align:center;background-color:#990000;color:#ffffff;border-radius:25px; padding:5px; margin-bottom:5px;"><em>'.htmlspecialchars( basename( $_FILES['fileToUpload']['name'])).'</em> uploaded</div>';
				} else {
					echo 'Sorry, there was an error uploading your file.';
					die();
				}
			}
		}

// remove file
		if(isset($_GET['remove'])){
			if(file_exists(	$target_dir.basename($_GET['remove']))){
				unlink(	$target_dir.basename($_GET['remove']));
			}
			header('Location:'.parse_url($_SERVER['REQUEST_URI'])['path']);
			die();
		}

}

echo'
	<!DOCTYPE html>
	<html lang="en-US">
		<head>
			<meta charset="UTF-8" />
			<meta name="viewport" content="width=device-width" />
			<title>'.$page_title.'</title>
			'.$fav_icon.'
			<style>
				body{
					margin:0;
					padding:15px;
					font-family:sans-serif;
				}
				input{
					vertical-align:middle;
					font-family:monospace;
					font-size:10px;
				}
				a{
					text-decoration:none;
				}
			</style>
		</head>
		<body>
		<script>function msg(){document.getElementById(\'message\').style.backgroundColor=\'#990000\';document.getElementById(\'message\').innerHTML=\'COPIED!\';setTimeout(\'document.getElementById(\\\'message\\\').style.backgroundColor=\\\'#009900\\\';document.getElementById(\\\'message\\\').innerHTML=\\\'-ready-\\\';\',1000);}</script>
		<div style="text-align:right;"><input type="button" style="background-color:#990000;color:#ffffff;border-radius:15px;" value="LOG OUT" onclick="document.location.href=\'?exit\';" /></div>
		<hr />
	';
	if($access[$_SESSION['user']][1]=='0'){ // ADMIN ONLY - FUNCTION
		echo'
			<form method="post" enctype="multipart/form-data">
				Upload:<input type="file" name="fileToUpload" id="fileToUpload">
				<input type="submit" value="Upload" name="submit">
			</form>

<hr />
		';
	}		
	echo'
		<h3>LIST OF FILES - copy fully qualified URL with double-click</h3>
	';

$all=scandir('.');
	if(count($all)>3){array_shift($all);
		array_shift($all);
		echo'
			<div id="message" style="text-align:center;background-color:#009900;color:#ffffff;border-radius:25px; padding:5px; margin-bottom:5px;">-ready-</div>
			<br />
		';
		for($x=0;$x<count($all);$x++){
			if($all[$x]=='index.php'){
				array_splice($all,$x);$x--;
			}else{
				echo'
					<div style="display:flex;justify-content:center;flex-wrap:wrap;">
				';
				if($access[$_SESSION['user']][1]=='0'){ // ADMIN ONLY - FUNCTION
					echo'
						<div>
							<input type="button" value="x" title="remove...!" onclick="if(confirm(\'REMOVE THIS FILE?\n\n'.$all[$x].'\n\')){document.location.href=\'?remove='.$all[$x].'\';}" style="background-color:#990000;color:#ffffff;border-radius:15px;" />
						</div>
					';
				}
				echo'
					<div>
						 <input type="text" style="width:75vw;" value="'.$all[$x].'" ondblclick="hold=this.value;this.value=window.location.href.split(\'/\').toSpliced(-1, 1).join(\'/\')+\'/\'+hold;this.select();document.execCommand(\'copy\');msg();this.value=hold;" /> 
					</div>
					<div>
						<a href="'.$all[$x].'" target="_blank" title="look...!"> &#x1f441;</a>
					</div>
				</div>
				';
			}
		}
	}else{
		echo'<div id="message" style="text-align:center;background-color:#990000;color:#ffffff;border-radius:25px; padding:5px; margin-bottom:5px;">---[noth\'n here...]---</div>';
	}
}
?>
</body>
</html>