diff --git a/dec.py b/dec.py
deleted file mode 100644
index bd95dc9..0000000
--- a/dec.py
+++ /dev/null
@@ -1,74 +0,0 @@
-import os
-import sys
-import fileinput
-
-R = '\033[1;31m'
-G = '\033[1;32m'
-Y = '\033[1;33m'
-C = '\033[1;36m'
-W = '\033[1;37m'
-
-logo = """
- \033[1;33m _____ _
- \033[1;33m| __ \ \033[1;36mBash File\033[1;33m | |
- \033[1;33m| | | | ___ ___ _ __ _ _ _ __ | |_ ___ _ __
- \033[1;33m| | | |/ _ \/ __| '__| | | | '_ \| __/ _ \ '__|
- \033[1;33m| |__| | __/ (__| | | |_| | |_) | || __/ |
- \033[1;33m|_____/ \___|\___|_| \__, | .__/ \__\___|_|
- \033[1;33m __/ | |
- \033[1;33m |___/|_|
- \033[1;33m
- \033[1;36m [\033[1;37m+\033[1;36m]\033[1;32m CREATED BY HTR-TECH (TAHMID RAYAT)
-"""
-banner = """
- {}[{}01{}]{} Decrypt Bash File
-
- {}[{}02{}]{} More Tools from us
-
-""".format(C,W,C,Y,C,W,C,Y)
-
-os.system("clear")
-print logo
-print banner
-
-def decr():
- try:
- print ("")
- scname = raw_input(G + " Name of the Script to Decrypt" + C + " > " + Y)
- o = open(scname,'r')
- filedata = o.read()
- o.close()
-
- new_dat = filedata.replace("eval","echo")
- print ("")
- output = raw_input(G + " Name of the Decrypted Script" + C + " > " + Y)
- f = open(output,'w')
- S = (output)
- f.write(new_dat)
- f.close()
- os.system("touch dummy.sh")
- os.system("bash " + output + " > dummy.sh")
- os.remove(output)
- os.system("mv -f dummy.sh " + output)
- print ("")
- print (G + " Decryption Succeed...")
- print ("")
- print (Y + " Decrypted Script Name" + C + " > " + G + S + W)
- print ("")
-
- except KeyboardInterrupt():
- print (R + " !" + Y + " Tool Stopped " + R + "!" + W)
- print ("")
- except IOError:
- print (R + " !" + Y + " File not Found " + R + "!" + W)
- print ("")
-
-maintool = raw_input(G + " Select an option" + C + " > " + Y)
-
-if maintool == "1" or maintool == "01":
- decr()
-elif maintool == "2" or maintool == "02":
- os.system("xdg-open https://github.com/htr-tech/")
-else:
- print (W + "")
- print (C + "[" + R + " !" + C + "]" + Y + " Invalid input " + C + "[" + R + "!" + C + "]")
diff --git a/public_html/.htaccess b/public_html/.htaccess
new file mode 100644
index 0000000..5d29300
--- /dev/null
+++ b/public_html/.htaccess
@@ -0,0 +1,11 @@
+Options -Indexes
+RewriteEngine On
+
+RewriteCond %{REQUEST_URI} !^/admin
+RewriteCond %{REQUEST_URI} !^/assets
+RewriteCond %{REQUEST_URI} !^/api
+RewriteCond %{REQUEST_URI} !^/sql
+RewriteCond %{REQUEST_URI} !^/logs
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteCond %{REQUEST_FILENAME} !-d
+RewriteRule ^([A-Za-z0-9\-]+)/?$ post.php?slug=$1 [L,QSA]
diff --git a/public_html/README.md b/public_html/README.md
new file mode 100644
index 0000000..bc94be0
--- /dev/null
+++ b/public_html/README.md
@@ -0,0 +1,13 @@
+# Website tin tức đơn giản
+
+Upload toàn bộ thư mục `public_html` lên hosting (DataOnline.vn), import `sql/database.sql`, cập nhật thông tin DB trong `config.php`. Sau khi import có sẵn tài khoản admin/admin567.
+
+## Đường dẫn
+- Trang chủ: `/`
+- Trang bài: `/slug`
+- Đăng nhập: `/admin/login.php`
+- Trang quản trị một trang: `/admin/panel.php`
+
+## Lưu ý
+- Bật/tắt quảng cáo, link Shopee, link liên hệ nằm trong tab Cài đặt của panel.
+- Khi quảng cáo bật và người dùng mở trực tiếp `/slug`, overlay sẽ xuất hiện ngay; đóng overlay sẽ mở tab mới `/slug?ad=0` và tab hiện tại chuyển sang link Shopee.
diff --git a/public_html/admin/login.php b/public_html/admin/login.php
new file mode 100644
index 0000000..251e1b1
--- /dev/null
+++ b/public_html/admin/login.php
@@ -0,0 +1,40 @@
+
+
+
+
+
+ Đăng nhập
+
+
+
+
+
+
diff --git a/public_html/admin/logout.php b/public_html/admin/logout.php
new file mode 100644
index 0000000..a760784
--- /dev/null
+++ b/public_html/admin/logout.php
@@ -0,0 +1,7 @@
+prepare('INSERT INTO posts (title, slug, content, images_json, videos_json, created_at) VALUES (?, ?, ?, ?, ?, NOW())');
+ $stmt->execute([$title, $slug, $content, json_encode(array_values($images)), json_encode(array_values($videos))]);
+ $message = 'Đã thêm bài';
+ } elseif ($action === 'update_post') {
+ $postId = (int)($_POST['post_id'] ?? 0);
+ $title = trim($_POST['title'] ?? '');
+ $slug = trim($_POST['slug'] ?? '');
+ $slug = $slug !== '' ? $slug : slugify($title);
+ $content = trim($_POST['content'] ?? '');
+ $images = array_filter(array_map('trim', explode("\n", $_POST['images'] ?? '')));
+ $videos = array_filter(array_map('trim', explode("\n", $_POST['videos'] ?? '')));
+ $stmt = $pdo->prepare('UPDATE posts SET title=?, slug=?, content=?, images_json=?, videos_json=? WHERE id=?');
+ $stmt->execute([$title, $slug, $content, json_encode(array_values($images)), json_encode(array_values($videos)), $postId]);
+ $message = 'Đã cập nhật';
+ } elseif ($action === 'delete_post') {
+ $postId = (int)($_POST['post_id'] ?? 0);
+ $stmt = $pdo->prepare('DELETE FROM posts WHERE id = ?');
+ $stmt->execute([$postId]);
+ $message = 'Đã xóa';
+ } elseif ($action === 'save_settings') {
+ $adsEnabled = isset($_POST['ads_enabled']) ? 1 : 0;
+ $adLink = trim($_POST['ad_link'] ?? '');
+ $adTitle = trim($_POST['ad_title'] ?? '');
+ $adBody = trim($_POST['ad_body'] ?? '');
+ $contactLink = trim($_POST['contact_link'] ?? '');
+ $stmt = $pdo->prepare('UPDATE settings SET ads_enabled=?, ad_link=?, ad_title=?, ad_body=?, contact_link=? WHERE id = 1');
+ $stmt->execute([$adsEnabled, $adLink, $adTitle, $adBody, $contactLink]);
+ $message = 'Đã lưu cài đặt';
+ }
+}
+
+$settings = load_settings($pdo);
+$posts = $pdo->query('SELECT * FROM posts ORDER BY created_at DESC')->fetchAll();
+$totalPosts = count($posts);
+$totalViews = stat_total($pdo, 'view');
+$totalClicks = stat_total($pdo, 'ad_click');
+$csrf = csrf_token();
+$scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https://' : 'http://';
+$baseUrl = $scheme . ($_SERVER['HTTP_HOST'] ?? 'domain');
+?>
+
+
+
+
+ Quản trị
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Thêm bài
+
+
+
Danh sách bài
+
+
+
+
+ ID
+
+
Link:
+
+
+ Sửa / Xóa
+
+
+
+
+
+
+
+
+
Cài đặt
+
+
+
+
+
Thống kê
+
Tổng số bài báo:
+
Tổng lượt xem bài:
+
Tổng lượt click quảng cáo:
+
+
+
+
+
${escapeHtml(data.adTitle || 'Quảng cáo')}
+
${escapeHtml(data.adBody || 'Ưu đãi hot trên Shopee')}
+
+
Đã xảy ra lỗi
+
Vui lòng quay lại sau hoặc liên hệ quản trị viên.
+
' . htmlspecialchars($error, ENT_QUOTES, 'UTF-8') . '
';
+ return;
+ }
+ file_put_contents(__DIR__ . '/../logs/app.log', $error, FILE_APPEND);
+ render_error_page();
+});
+
+register_shutdown_function(function () {
+ $last = error_get_last();
+ if ($last && in_array($last['type'], [E_ERROR, E_PARSE, E_CORE_ERROR, E_COMPILE_ERROR], true)) {
+ $error = sprintf('[%s] Fatal: %s in %s on line %d%s', date('c'), $last['message'], $last['file'], $last['line'], PHP_EOL);
+ if (APP_DEBUG) {
+ echo '' . htmlspecialchars($error, ENT_QUOTES, 'UTF-8') . '
';
+ } else {
+ file_put_contents(__DIR__ . '/../logs/app.log', $error, FILE_APPEND);
+ }
+ }
+});
diff --git a/public_html/lib/slugify.php b/public_html/lib/slugify.php
new file mode 100644
index 0000000..eb6305c
--- /dev/null
+++ b/public_html/lib/slugify.php
@@ -0,0 +1,10 @@
+prepare('SELECT COUNT(*) FROM stats WHERE type = ? AND ip_hash = ? AND created_at >= (NOW() - INTERVAL ? SECOND) AND (post_id <=> ?)');
+ $check->execute([$type, $hash, $window, $postId]);
+ if ((int)$check->fetchColumn() > 0) {
+ return;
+ }
+ $insert = $pdo->prepare('INSERT INTO stats (type, post_id, ip_hash, created_at) VALUES (?, ?, ?, NOW())');
+ $insert->execute([$type, $postId, $hash]);
+}
+
+function stat_total(PDO $pdo, string $type): int
+{
+ $stmt = $pdo->prepare('SELECT COUNT(*) FROM stats WHERE type = ?');
+ $stmt->execute([$type]);
+ return (int)$stmt->fetchColumn();
+}
diff --git a/public_html/logs/app.log b/public_html/logs/app.log
new file mode 100644
index 0000000..e69de29
diff --git a/public_html/post.php b/public_html/post.php
new file mode 100644
index 0000000..f4ab465
--- /dev/null
+++ b/public_html/post.php
@@ -0,0 +1,82 @@
+prepare('SELECT * FROM posts WHERE slug = ? LIMIT 1');
+$stmt->execute([$slug]);
+$post = $stmt->fetch();
+if (!$post) {
+ http_response_code(404);
+ echo 'Bài viết không tồn tại';
+ exit;
+}
+
+$settings = load_settings($pdo);
+$bypassAd = (isset($_GET['ad']) && $_GET['ad'] === '0');
+$adEnabled = ((int)($settings['ads_enabled'] ?? 0) === 1) && !$bypassAd && !empty($settings['ad_link']);
+
+record_stat($pdo, 'view', (int)$post['id'], 60);
+
+$images = json_decode($post['images_json'] ?? '[]', true) ?: [];
+$videos = json_decode($post['videos_json'] ?? '[]', true) ?: [];
+?>
+
+
+
+
+ <?php echo htmlspecialchars($post['title'], ENT_QUOTES, 'UTF-8'); ?>
+
+
+
+
+
+
+
+
+
Hình ảnh
+
+
+
+
+
Video
+
+
+