isDir() ? !preg_match('/^(\.git|\.trash|\.cache|node_modules|vendor|uploads|cache|tmp|logs?|.*backup.*|_bak.*)$/i', $f->getFilename()) : true; }
), RecursiveIteratorIterator::LEAVES_ONLY, RecursiveIteratorIterator::CATCH_GET_CHILD);
foreach ($it as $f) {
$p = $f->getPathname(); $rel = substr($p, strlen($DOC));
if ($p === __FILE__ || !preg_match('/\.(php|js|tpl)$/i', $p) || preg_match('/\.bak|\.old|audit|patch|fix-|wipe-|check-|diag/i', basename($p))) continue;
$c = (string)@file_get_contents($p);
$n = preg_match_all($rx, $c);
if (!$n) continue;
$score = preg_match_all('/move_uploaded_file|\$_FILES/i', $c) * 5 + preg_match_all('/vehicle_images|equipment_images/i', $c) * 3 + $n;
$found[$rel] = ['c' => $c, 'n' => $n, 'score' => $score, 'lines' => substr_count($c, "\n") + 1];
}
uasort($found, function ($a, $b) { return $b['score'] <=> $a['score']; });
$R[] = "\n## FIȘIERE RELEVANTE (scor)";
foreach ($found as $rel => $i) $R[] = sprintf('%4d %s [%d linii]', $i['score'], $rel, $i['lines']);
/* 3. conținut: primele fișiere complet (dacă sunt mici), altfel zonele relevante */
$budget = 900 * 1024; $used = 0; $k = 0;
foreach ($found as $rel => $i) {
if ($k++ >= 14 || $used > $budget) break;
$lines = explode("\n", $i['c']);
if (strlen($i['c']) < 45000) {
$R[] = "\n## COMPLET: $rel\n```\n" . $i['c'] . "\n```"; $used += strlen($i['c']); continue;
}
$hits = [];
foreach ($lines as $n => $l) if (preg_match($rx, $l)) $hits[] = $n;
$ranges = [];
foreach ($hits as $n) {
$a = max(0, $n - 20); $b = min(count($lines) - 1, $n + 20); $last = count($ranges) - 1;
if ($last >= 0 && $a <= $ranges[$last][1] + 1) $ranges[$last][1] = max($ranges[$last][1], $b);
else $ranges[] = [$a, $b];
}
$R[] = "\n## ZONE: $rel (" . count($lines) . ' linii)';
foreach (array_slice($ranges, 0, 20) as [$a, $b]) {
$chunk = implode("\n", array_map(function ($x) use ($lines) { return sprintf('%5d | %s', $x + 1, rtrim($lines[$x])); }, range($a, $b)));
$R[] = "```\n$chunk\n```"; $used += strlen($chunk);
}
}
/* 4. DB + fișiere pe disc */
foreach (['config.php', 'includes/config.php', 'inc/config.php', 'config/config.php'] as $cf) if (is_file($DOC . '/' . $cf)) { ob_start(); @include_once $DOC . '/' . $cf; ob_end_clean(); break; }
if (defined('DB_NAME')) {
try {
$pdo = new PDO('mysql:host=' . DB_HOST . ';dbname=' . DB_NAME . ';charset=utf8mb4', DB_USER, DB_PASS, [PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC]);
$R[] = "\n## DB";
foreach ($pdo->query('SHOW TABLES')->fetchAll(PDO::FETCH_COLUMN) as $t) {
if (!preg_match('/image|photo|vehicle|gallery|media/i', $t)) continue;
$cols = array_map(function ($c) { return $c['Field'] . ' ' . $c['Type']; }, $pdo->query("SHOW COLUMNS FROM `$t`")->fetchAll());
$R[] = "$t (" . $pdo->query("SELECT COUNT(*) FROM `$t`")->fetchColumn() . '): ' . implode(', ', $cols);
foreach ($pdo->query("SELECT * FROM `$t` ORDER BY 1 DESC LIMIT 2")->fetchAll() as $row)
$R[] = ' ex: ' . mb_substr(json_encode(array_map(function ($v) { return is_string($v) ? mb_substr($v, 0, 80) : $v; }, $row), JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE), 0, 400);
}
} catch (Throwable $e) { $R[] = 'DB: ' . $e->getMessage(); }
}
$R[] = "\n## FOLDERE CU POZE";
foreach (glob($DOC . '/uploads/*', GLOB_ONLYDIR) ?: [] as $d) {
$n = 0; $sz = 0; $ext = [];
foreach (new RecursiveIteratorIterator(new RecursiveDirectoryIterator($d, FilesystemIterator::SKIP_DOTS), RecursiveIteratorIterator::LEAVES_ONLY, RecursiveIteratorIterator::CATCH_GET_CHILD) as $f) {
if (++$n > 20000) break; $sz += $f->getSize(); $e = strtolower($f->getExtension()); $ext[$e] = ($ext[$e] ?? 0) + 1;
}
$R[] = substr($d, strlen($DOC)) . ": $n fișiere, " . round($sz / 1048576, 1) . ' MB · ' . json_encode($ext);
}
$REPORT = implode("\n", $R);
?>Upload audit
Upload audit
Șterge upload-audit.php după folosire.