######## pagaai.cadtech.com.br ########
FILES: . , .. , .env , .git , .gitignore , .next , .well-known , AGENTS.md , CLAUDE.md , README.md , check_users.ts , eslint.config.mjs , fix_sessions.ts , next-env.d.ts , next.config.ts , node_modules , package-lock.json , package.json , prisma , public , seed.ts , src , test.js , test_jwt.ts , test_prisma.js , tsconfig.json , upgrade_to_saas.ts
---- .env ----
DATABASE_URL="file:./dev.db"
# Insira suas credenciais abaixo:
MP_ACCESS_TOKEN="APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384"
EVOLUTION_API_URL="http://75.119.156.103:8080"
EVOLUTION_API_KEY="PQVZ3A4F779NXHNNH7770BI447DRI7C0"
# Defina a URL base pública do seu site quando hospedar para o webhook funcionar
NEXT_PUBLIC_BASE_URL="https://pagaai.cadtech.com.br"
---- tsconfig.json ----
{
  "compilerOptions": {
    "target": "ES2017",
    "lib": ["dom", "dom.iterable", "esnext"],
    "allowJs": true,
    "skipLibCheck": true,
    "strict": true,
    "noEmit": true,
    "esModuleInterop": true,
    "module": "esnext",
    "moduleResolution": "bundler",
    "resolveJsonModule": true,
    "isolatedModules": true,
    "jsx": "react-jsx",
    "incremental": true,
    "plugins": [
      {
        "name": "next"
      }
    ],
    "paths": {
      "@/*": ["./src/*"]
    }
  },
  "include": [
    "next-env.d.ts",
    "**/*.ts",
    "**/*.tsx",
    ".next/types/**/*.ts",
    ".next/dev/types/**/*.ts",
    "**/*.mts"
  ],
  "exclude": ["node_modules"]
}

SUBDIR src/lib: . , .. , prisma.ts , session.ts , whatsapp.ts

######## pagaairs.cadtech.com.br ########
FILES: . , .. , .env , .gitignore , .next , .user.ini , AGENTS.md , CLAUDE.md , MainWrapper.tsx , README.md , ServiceWorkerRegister.tsx , Sidebar.tsx , SidebarContext.tsx , check_users.js , check_users.ts , clean_page.js , ecosystem.config.cjs , eslint.config.mjs , fix_sessions.ts , globals.css , iniciar_projeto.bat , layout.tsx , manifest.ts , middleware.ts , next-env.d.ts , next.config.ts , node_modules , package-lock.json , package.json , page.module.css , page.tsx , prisma , prisma.ts , public , route.ts , seed.ts , session.ts , src , test.js , test_jwt.ts , test_prisma.js , tsconfig.json , tsconfig.tsbuildinfo , upgrade_to_saas.ts , whatsapp.ts
---- .env ----
DATABASE_URL="file:./dev.db"
# Insira suas credenciais abaixo:
MP_ACCESS_TOKEN="APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384"
EVOLUTION_API_URL="http://75.119.156.103:8080"
EVOLUTION_API_KEY="PQVZ3A4F779NXHNNH7770BI447DRI7C0"
# Defina a URL base pública do seu site quando hospedar para o webhook funcionar
NEXT_PUBLIC_BASE_URL="https://pagaai.cadtech.com.br"
---- clean_page.js ----
const fs = require('fs');
const file = 'src/app/group/[id]/page.tsx';
let content = fs.readFileSync(file, 'utf8');

content = content.replace(/const \[newPlayerPosition, setNewPlayerPosition\] = useState\(''\);\n?/g, '');
content = content.replace(/const \[editPlayerPosition, setEditPlayerPosition\] = useState\(''\);\n?/g, '');
content = content.replace(/stars:\s*3,\s*position:\s*newPlayerPosition,?\n?/g, '');
content = content.replace(/setNewPlayerPosition\(''\);\n?/g, '');
content = content.replace(/setEditPlayerPosition\(player\.position \|\| ''\);\n?/g, '');
content = content.replace(/stars:\s*3,\s*position:\s*editPlayerPosition,?\n?/g, '');

content = content.replace(/<div className="input-group" style=\{\{ flex: '1 1 100px' \}\}>[\s\S]*?<\/div>/g, (match) => {
  if (match.includes('Posição')) return '';
  return match;
});

content = content.replace(/\{player\.position && <span[^>]*>\{player\.position\}<\/span>\}/g, '');

fs.writeFileSync(file, content);
console.log('Done cleaning page.tsx');

---- tsconfig.json ----
{
  "compilerOptions": {
    "target": "ES2017",
    "lib": ["dom", "dom.iterable", "esnext"],
    "allowJs": true,
    "skipLibCheck": true,
    "strict": true,
    "noEmit": true,
    "esModuleInterop": true,
    "module": "esnext",
    "moduleResolution": "bundler",
    "resolveJsonModule": true,
    "isolatedModules": true,
    "jsx": "react-jsx",
    "incremental": true,
    "plugins": [
      {
        "name": "next"
      }
    ],
    "paths": {
      "@/*": ["./src/*"]
    }
  },
  "include": [
    "next-env.d.ts",
    "**/*.ts",
    "**/*.tsx",
    ".next/types/**/*.ts",
    ".next/dev/types/**/*.ts",
    "**/*.mts"
  ],
  "exclude": ["node_modules"]
}

SUBDIR src/lib: . , .. , prisma.ts , session.ts , whatsapp.ts

######## admhibrido.cadtech.com.br ########
FILES: . , .. , .git , .gitignore , .htaccess , .well-known , 1central_radios.php , Autoads , Manualads , admins.php , admplay_bg.php , admplay_logo.php , admplay_m3u.php , admplay_music.php , admplay_salvar_texto.php , admplay_texto.php , admplay_whatsapp.php , ads.php , ads2.php , ads3.php , all_users.php , api , apppremium , assets , banners , base64.php , bg.php , central_radios.php , clientes_vencidos.json , contato.php , cron_cobrancas_inteligentes.php , cron_cobrancas_log.json , dns.php , edit_usuario.php , enviar_cobrancas.php , estatisticas.php , gerar_vencidos.php , get.php , hub_apps.php , hub_whatsapp.php , img , img_custom , includes , index.php , init_play.php , logo.php , mRTXAdsSetting.php , mensagem.txt , mercado_pago_gold.php , migrar_dns.php , music_manifest.json , music_sw.js , note.php , player_api.php , playlists.php , qrcode.php , rtx , sair.php , stream.php , tema.php , test_db.php , test_insert.php , teste.php , tmdb_api.php , users.php , users_create.php , users_teste.php , users_teste_update.php , users_update.php , usuario.php , usuarios.php , usuarios_massa.php , vencimento.php , vendor , verificar_id.php , webtv , whats.json , whatsapp_api.php , whatsapp_api1.php , xmltv.php , zerar_banco.php
---- enviar_cobrancas.php ----
<?php
// enviar_cobrancas.php
// Envia mensagens do JSON clientes_vencidos.json via WasenderAPI
set_time_limit(0);

include './whatsapp_api.php';

$arquivo = __DIR__.'/clientes_vencidos.json';

if(!file_exists($arquivo)) {
    die("❌ Arquivo clientes_vencidos.json não encontrado!");
}

$clientes = json_decode(file_get_contents($arquivo), true);

foreach($clientes as $mac => &$cliente) {
    // Pula se já enviou hoje
    $hoje = date('Y-m-d');
    if(isset($cliente['enviado_em']) && strpos($cliente['enviado_em'], $hoje) === 0) {
        continue;
    }

    $resposta = enviarMensagemWasender($cliente['numero'], $cliente['mensagem']);

    if(!isset($resposta['error'])) {
        $cliente['enviado_em'] = date('Y-m-d H:i');
        echo "✅ Mensagem enviada para {$mac}\n";
    } else {
        echo "⚠️ Erro ao enviar para {$mac}: {$resposta['error']}\n";
    }

    // Espera aleatoriamente entre 4 e 8 segundos antes de enviar a próxima (evitar banimento do WhatsApp)
    sleep(rand(4, 8));
}

// Salva JSON atualizado
file_put_contents($arquivo, json_encode($clientes, JSON_PRETTY_PRINT));

echo "🚀 Envio automático concluído: " . date('Y-m-d H:i');
?>

---- mercado_pago_gold.php ----
<?php
// mercado_pago_gold.php
$config_file = './api/mercado_pago_gold/config.json';
$config = [];
if (file_exists($config_file)) {
    $config = json_decode(file_get_contents($config_file), true) ?: [];
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (isset($_POST['update_token'])) {
        $config['access_token'] = trim($_POST['access_token']);
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Token atualizado com sucesso!";
    }

    if (isset($_POST['add_pacote'])) {
        $novo_pacote = [
            'id' => uniqid(),
            'nome' => trim($_POST['nome_pacote']),
            'valor' => floatval($_POST['valor_pacote']),
            'dias' => intval($_POST['dias_pacote'])
        ];
        $config['pacotes'][] = $novo_pacote;
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Pacote adicionado com sucesso!";
    }

    if (isset($_POST['delete_pacote'])) {
        $id_delete = $_POST['id_pacote'];
        foreach ($config['pacotes'] as $k => $pacote) {
            if ($pacote['id'] === $id_delete) {
                unset($config['pacotes'][$k]);
            }
        }
        $config['pacotes'] = array_values($config['pacotes']);
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Pacote excluído!";
    }

    if (isset($_POST['add_cupom'])) {
        if (!isset($config['cupons'])) {
            $config['cupons'] = [];
        }
        $novo_cupom = [
            'id' => uniqid(),
            'codigo' => strtoupper(trim($_POST['codigo_cupom'])),
            'desconto' => floatval($_POST['desconto_cupom'])
        ];
        $config['cupons'][] = $novo_cupom;
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Cupom adicionado com sucesso!";
    }

    if (isset($_POST['delete_cupom'])) {
        $id_delete = $_POST['id_cupom'];
        foreach ($config['cupons'] as $k => $cupom) {
            if ($cupom['id'] === $id_delete) {
                unset($config['cupons'][$k]);
            }
        }
        $config['cupons'] = array_values($config['cupons']);
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Cupom excluído!";
    }

    if (isset($_POST['add_multimac'])) {
        if (!isset($config['multi_macs'])) {
            $config['multi_macs'] = [];
        }
        $novo_multimac = [
            'id' => uniqid(),
            'codigo' => strtoupper(trim($_POST['codigo_multimac'])),
            'valor' => floatval($_POST['valor_multimac']),
            'dias' => intval($_POST['dias_multimac']),
            'macs' => trim($_POST['macs_multimac'])
        ];
        $config['multi_macs'][] = $novo_multimac;
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Pacote Multi MACs adicionado com sucesso!";
    }

    if (isset($_POST['delete_multimac'...
---- player_api.php ----
<?php require_once 'api/xc_proxy.php'; ?>

---- test_db.php ----
<?php $db = new SQLite3("api/db/studiolivecode_clientes.db"); $res = $db->query("PRAGMA table_info(ibo);"); while ($row = $res->fetchArray()) { echo $row["name"] . "\n"; } ?>

---- tmdb_api.php ----
<?php
/*
 * @ https://hospedagem.matrixch.store 
 * @ PHP 7.4
 * @ Decoder version: 1.0.2
 * @ Release: 17/06/2024
*/

error_reporting(0);
include "includes/header.php";
$jsonFilePath = "includes/ad_type.json";
$jsonData = json_decode(file_get_contents($jsonFilePath), true);
$currentAdType = $jsonData["adType"] ?? "manual";
$db = new SQLite3("./api/.bet_tmdb.db");
$table_name = "api_key";
$db->exec("CREATE TABLE IF NOT EXISTS " . $table_name . " (id INTEGER PRIMARY KEY, key TEXT)");
$rows = $db->query("SELECT COUNT(*) as count FROM " . $table_name);
$row = $rows->fetchArray();
$numRows = $row["count"];
if ($numRows == 0) {
    $db->exec("INSERT INTO " . $table_name . "(key) VALUES('')");
}
if ($_SERVER["REQUEST_METHOD"] === "POST") {
    if (isset($_POST["submit"])) {
        $newKey = $_POST["key"];
        $stmt = $db->prepare("UPDATE " . $table_name . " SET key = :newKey WHERE id = 1");
        $stmt->bindValue(":newKey", $newKey, SQLITE3_TEXT);
        $stmt->execute();
        header("Location: tmdb_api.php");
        exit;
    }
    if (isset($_POST["deleteCache"])) {
        $cacheFilePath = "./api/cache/combined_cache.json";
        if (file_exists($cacheFilePath)) {
            unlink($cacheFilePath);
        }
        header("Location: tmdb_api.php");
        exit;
    }
}
$res = $db->query("SELECT * FROM " . $table_name . " WHERE id = 1");
$rowU = $res->fetchArray();
if (empty($rowU["key"])) {
    echo "<div class=\"alert alert-warning\" role=\"alert\">\n        You must add your tMDB API key before using the app. Follow the instructions below to add your API key.\n    </div>";
}
echo "<link rel=\"stylesheet\" href=\"css/slider.css\">\n        <div class=\"col-md-12 mx-auto\">\n            <div class=\"card-body\">\n                \n                <div class=\"card bg-primary text-white\">\n                    <div class=\"card-header card-header-warning\">\n                                    <div class=\"card-header bg-primary py-3\">\n                                        \n                                        <div id=\"slider-container\" data-ad-type=\"";
echo $currentAdType;
echo "\" style=\"display: flex; align-items: center; justify-content: center;\">\n    <span style=\"margin-right: 20px; font-size: 24px;\">Manual Ads</span> <!-- Increased font size here -->\n    <label class=\"switch\">\n        <input type=\"checkbox\" id=\"pageSlider\" onchange=\"toggleAdType()\">\n        <span class=\"slider round\"></span>\n    </label>\n    <span style=\"margin-left: 20px; font-size: 24px;\">tMDB Ads</span> <!-- And here -->\n</div>\n                            <center>\n                            <h5> Advert Type Selector</h5>\n                            </center>\n                                    </div>\n                                    <div class=\"card-body\">\n                                        <!-- Add instructions here -->\n                                        <p style=\"font-size: 16px;\">\n               ...
---- whatsapp_api.php ----
<?php
function enviarMensagemWasender($numero, $mensagem) {
    // Configurações da Evolution API v2 fornecidas
    $baseUrl = 'http://75.119.156.103:8080';
    $apiKey = 'PQVZ3A4F779NXHNNH7770BI447DRI7C0';
    
    // Ler a instância ativa gerada pela interface
    $configFile = __DIR__ . '/api/evolution_config.json';
    $instanceName = 'admhibrido';
    
    if (file_exists($configFile)) {
        $config = json_decode(file_get_contents($configFile), true) ?: [];
        if (!empty($config['evolution_url'])) {
            $baseUrl = rtrim(trim($config['evolution_url']), '/');
        }
        if (!empty($config['api_key'])) {
            $apiKey = trim($config['api_key']);
        }
        if (!empty($config['active_instance'])) {
            $instanceName = trim($config['active_instance']);
        }
    }

    // Se nenhuma instância estiver configurada, podemos abortar ou tentar
    if (empty($instanceName) || $instanceName === 'NOME_DA_SUA_INSTANCIA') {
        return ['error' => 'Instância do WhatsApp não configurada. Conecte pelo painel.'];
    }

    // Tratamento de número com DDI 55
    $numero = preg_replace('/[^0-9]/', '', (string)$numero);
    $numero = ltrim($numero, '0');
    if (strlen($numero) <= 11) {
        $numero = '55' . $numero;
    }

    // Endpoint de envio de mensagem de texto na Evolution API v2
    $url = $baseUrl . '/message/sendText/' . urlencode($instanceName);

    $ch = curl_init($url);
    
    // Payload no formato esperado pela Evolution API v2
    $payload = json_encode([
        'number' => $numero,
        'options' => [
            'delay' => 1200,
            'presence' => 'composing',
            'linkPreview' => false
        ],
        'text' => $mensagem
    ]);

    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'apikey: ' . $apiKey,
        'Content-Type: application/json'
    ]);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 8);
    curl_setopt($ch, CURLOPT_TIMEOUT, 15);
    
    // Ignorar verificação de SSL caso mude para HTTPS sem certificado válido
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

    $response = curl_exec($ch);
    $error = curl_error($ch);
    curl_close($ch);

    if ($error) return ['error' => $error];

    return json_decode($response, true);
}
?>
---- whatsapp_api1.php ----
<?php
function enviarMensagemWasender($numero, $mensagem) {
    $apiKey = 'SUA-API-WASENDER';
    $url = 'https://wasenderapi.com/api/send-message';

    $ch = curl_init($url);
    $payload = json_encode([
        'to' => $numero,
        'text' => $mensagem
    ]);

    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Authorization: Bearer ' . $apiKey,
        'Content-Type: application/json'
    ]);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);

    $response = curl_exec($ch);
    $error = curl_error($ch);
    curl_close($ch);

    if ($error) return ['error' => $error];

    return json_decode($response, true);
}
?>

SUBDIR api: . , .. , .adb.db , .bet_tmdb.db , .db.db , .db_ads.db , .db_bg.db , .db_logo.db , .htaccess , .qr.db , 1msg.php , add.php , ads.php , ads2.php , ads3.php , allads.php , allads1.php , allads2.php , arquivos originais , ativar.php , auth.php , backdrop.php , betstyle.css , bg.php , bloqueado.m3u , cache , cf.php , connection_log.json , contato.php , db , device_keys.json , dump.php , dump.py , edit_texto.php , esporte.php , evolution_api.php , evolution_config.json , getappuser.php , hub_db.php , hub_receiver.php , hub_worker.php , index.php , integracao , key.php , logo.php , m3u_padrao.json , m3u_proxy.php , main_movies.php , manual_ads.php , mercado_pago_gold , message.php , movies.php , movies_script.js , msg.php , music_manifest.json , pagamento.php , pagamento1.php , payment , play_msg.php , playlist.php , qr , qr.php , qrcode.php , renovar , salvar_mensagem.php , setting.php , sport.php , sportjr.php , test_exec.php , theme_change , tmdb.php , tmdb.php00 , update.php , vencido.php , video-ads.php , webview.php , webview2.php , webview3 (1).php , webview3.php , xc_proxy.php
---- api/connection_log.json ----
[
    {
        "mac_address": "0F:EE:F7:F6:55:C4",
        "date": "2026-08-03 23:51:20",
        "url_accessed": "https:\/\/admhibrido.cadtech.com.br\/api\/m3u_proxy.php?mac=0F%3AEE%3AF7%3AF6%3A55%3AC4&username=151415&password=495667"
    },
    {
        "mac_address": "0F:EE:F7:F6:55:C4",
        "date": "2026-08-03 23:51:20",
        "url_accessed": "https:\/\/admhibrido.cadtech.com.br\/api\/m3u_proxy.php?mac=0F%3AEE%3AF7%3AF6%3A55%3AC4&username=151415&password=495667"
    },
    {
        "mac_address": "0F:EE:F7:F6:55:C4",
        "date": "2026-08-04 21:38:22",
        "url_accessed": "https:\/\/admhibrido.cadtech.com.br\/api\/m3u_proxy.php?mac=0F%3AEE%3AF7%3AF6%3A55%3AC4&username=6484650&password=2449974"
    },
    {
        "mac_address": "0F:EE:F7:F6:55:C4",
        "date": "2026-08-04 21:38:22",
        "url_accessed": "https:\/\/admhibrido.cadtech.com.br\/api\/m3u_proxy.php?mac=0F%3AEE%3AF7%3AF6%3A55%3AC4&username=151415&password=495667"
    },
    {
        "mac_address": "0F:EE:F7:F6:55:C4",
        "date": "2026-08-04 21:38:22",
        "url_accessed": "https:\/\/admhibrido.cadtech.com.br\/api\/m3u_proxy.php?mac=0F%3AEE%3AF7%3AF6%3A55%3AC4&username=151415&password=495667"
    },
    {
        "mac_address": "89:DD:F9:48:ED:E8",
        "date": "2026-08-05 09:49:10",
        "url_accessed": "https:\/\/admhibrido.cadtech.com.br\/api\/m3u_proxy.php?mac=89%3ADD%3AF9%3A48%3AED%3AE8&username=6484650&password=2449974"
    },
    {
        "mac_address": "89:DD:F9:48:ED:E8",
        "date": "2026-08-05 09:49:10",
        "url_accessed": "https:\/\/admhibrido.cadtech.com.br\/api\/m3u_proxy.php?mac=89%3ADD%3AF9%3A48%3AED%3AE8&username=356365&password=265033"
    },
    {
        "mac_address": "89:DD:F9:48:ED:E8",
        "date": "2026-08-05 09:49:10",
        "url_accessed": "https:\/\/admhibrido.cadtech.com.br\/api\/m3u_proxy.php?mac=89%3ADD%3AF9%3A48%3AED%3AE8&username=356365&password=265033"
    },
    {
        "mac_address": "89:DD:F9:48:ED:E8",
        ...
---- api/device_keys.json ----
{
    "": "d41d8cd9",
    "C4:AA:19:66:60:0C": "ebfd4cfa",
    "89:DD:F9:48:ED:E8": "0566b915",
    "0F:EE:F7:F6:55:C4": "21d841fc",
    "32:90:49:85:B6:F8": "fe79ac40",
    "89:AC:DF:5F:B0:A7": "acd9b5f5",
    "77:C1:81:4B:A0:BF": "cda6b70c",
    "58:D8:28:3D:33:44": "b7fcb93d"
}
---- api/evolution_api.php ----
<?php
header('Content-Type: application/json');

// Configurações da Evolution API
$DEFAULT_URL = 'http://75.119.156.103:8080';
$DEFAULT_KEY = 'PQVZ3A4F779NXHNNH7770BI447DRI7C0';
$CONFIG_FILE = __DIR__ . '/evolution_config.json';

$EVOLUTION_URL = $DEFAULT_URL;
$EVOLUTION_KEY = $DEFAULT_KEY;

if (file_exists($CONFIG_FILE)) {
    $cfgData = json_decode(file_get_contents($CONFIG_FILE), true) ?: [];
    if (!empty($cfgData['evolution_url'])) {
        $EVOLUTION_URL = rtrim(trim($cfgData['evolution_url']), '/');
    }
    if (!empty($cfgData['api_key'])) {
        $EVOLUTION_KEY = trim($cfgData['api_key']);
    }
}

// Função auxiliar para requisições cURL
function evolutionRequest($method, $endpoint, $payload = null, $timeout = 15, &$httpCode = null, &$rawResponse = null) {
    global $EVOLUTION_URL, $EVOLUTION_KEY;
    $url = rtrim($EVOLUTION_URL, '/') . $endpoint;
    $ch = curl_init($url);
    
    $headers = [
        'apikey: ' . $EVOLUTION_KEY,
        'Content-Type: application/json'
    ];
    
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 8);
    curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
    
    if ($payload !== null) {
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload));
    }
    
    $rawResponse = curl_exec($ch);
    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    
    return json_decode((string)$rawResponse, true);
}

function getActiveInstance() {
    global $CONFIG_FILE;
    if (file_exists($CONFIG_FILE)) {
        $data = json_decode(file_get_contents($CONFIG_FILE), true) ?: [];
        if (!empty($data['active_instance'])) {
            return trim($data['active_instance']);
        }
    }
    return 'admhibrido';
}

function setActiveIns...
---- api/evolution_config.json ----
{
    "active_instance": "admhibrido_1030930903",
    "evolution_url": "http:\/\/75.119.156.103:8095",
    "api_key": "PLAYER99_EVO_KEY_2026_94a73e51bc084d28f92b71c6e"
}
---- api/hub_db.php ----
<?php
// api/hub_db.php
function getHubDb() {
    $dbPath = __DIR__ . '/db/hub_queue.db';
    $db = new SQLite3($dbPath);
    $db->busyTimeout(5000);
    
    // Tabela de Tokens (Projetos permitidos)
    $db->exec("CREATE TABLE IF NOT EXISTS hub_tokens (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        project_name TEXT NOT NULL,
        token TEXT NOT NULL UNIQUE,
        created_at DATETIME DEFAULT CURRENT_TIMESTAMP
    )");
    
    // Tabela de Fila de Mensagens
    $db->exec("CREATE TABLE IF NOT EXISTS hub_queue (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        token_id INTEGER,
        phone_number TEXT NOT NULL,
        message TEXT NOT NULL,
        status TEXT DEFAULT 'pending', -- pending, processing, sent, failed
        response TEXT,
        retries INTEGER DEFAULT 0,
        created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
        updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,
        FOREIGN KEY (token_id) REFERENCES hub_tokens(id)
    )");
    
    // Garante coluna retries em bancos antigos
    @$db->exec("ALTER TABLE hub_queue ADD COLUMN retries INTEGER DEFAULT 0");
    
    // Destrava mensagens presas em 'processing' há mais de 3 minutos
    @$db->exec("UPDATE hub_queue SET status = 'pending', updated_at = CURRENT_TIMESTAMP WHERE status = 'processing' AND datetime(updated_at) <= datetime('now', '-3 minutes')");
    
    // Reenfileira automaticamente mensagens das últimas 24h que falharam apenas por timeout/queda de socket (até 3 tentativas)
    @$db->exec("UPDATE hub_queue SET status = 'pending', retries = COALESCE(retries, 0) + 1, updated_at = CURRENT_TIMESTAMP WHERE status = 'failed' AND (response LIKE '%cURL Error%' OR response LIKE '%Connection Closed%' OR response LIKE '%timed out%') AND COALESCE(retries, 0) < 3 AND datetime(created_at) >= datetime('now', '-24 hours')");
    
    return $db;
}
?>
---- api/key.php ----

---- api/pagamento.php ----
<!DOCTYPE html>
<html>
<head>
    <title>ADS3</title>
    <style>
        html, body {
            margin: 0;
            padding: 0;
            width: 100vw;
            height: 100vh;
            overflow: hidden;
            background: transparent;
        }
        #slideshow { 
            position: relative; 
            width: 100vw; 
            height: 100vh; 
            overflow: hidden; 
            box-sizing: border-box; 
            margin: 0; 
        }
        img, video {
            width: 100%;
            height: 100%;
            object-fit: 100% 100%;
            position: absolute;
            top: 0;
            left: 0;
            border: 0;
        }
        .slide-indicator {
            display: inline-block;
            width: 10px;
            height: 10px;
            background-color: gray;
            border-radius: 50%;
            margin: 5px;
            cursor: pointer;
        }
        .active {
            background-color: white;
        }
    </style>
</head>
<body>
    <div id="slideshow"></div>
    <div id="slide-indicators"></div>

<script>
    var slideshow = document.getElementById("slideshow");

    fetch('ads3.php')
        .then(response => response.json())
        .then(data => {
            var mediaUrls = data.map(obj => obj.AdUrl);
            loadSlides(mediaUrls);
        });

    function getMediaType(url) {
        var extension = url.split('.').pop();
        if (extension == "jpg" || extension == "jpeg" || extension == "png" || extension == "gif") {
            return "image";
        } else if (extension == "mp4") {
            return "video";
        } else {
            return null;
        }
    }

    function loadSlides(mediaUrls) {
        var i;
        for (i = 0; i < mediaUrls.length; i++) {
            var mediaType = getMediaType(mediaUrls[i]);
            var slideElement;
            if (mediaType == "image") {
                slideElement = document.createElement("img");
                s...
---- api/pagamento1.php ----
<!DOCTYPE html>
<html>
<head>
    <title>ADS3</title>
    <style>
        html, body {
            margin: 0;
            padding: 0;
            width: 100vw;
            height: 100vh;
            overflow: hidden;
            background: transparent;
        }
        #slideshow { 
            position: relative; 
            width: 100vw; 
            height: 100vh; 
            overflow: hidden; 
            box-sizing: border-box; 
            margin: 0; 
        }
        img, video {
            width: 100%;
            height: 100%;
            object-fit: 100% 100%;
            position: absolute;
            top: 0;
            left: 0;
            border: 0;
        }
        .slide-indicator {
            display: inline-block;
            width: 10px;
            height: 10px;
            background-color: gray;
            border-radius: 50%;
            margin: 5px;
            cursor: pointer;
        }
        .active {
            background-color: white;
        }
    </style>
</head>
<body>
    <div id="slideshow"></div>
    <div id="slide-indicators"></div>

<script>
    var slideshow = document.getElementById("slideshow");

    fetch('ads3.php')
        .then(response => response.json())
        .then(data => {
            var mediaUrls = data.map(obj => obj.AdUrl);
            loadSlides(mediaUrls);
        });

    function getMediaType(url) {
        var extension = url.split('.').pop();
        if (extension == "jpg" || extension == "jpeg" || extension == "png" || extension == "gif") {
            return "image";
        } else if (extension == "mp4") {
            return "video";
        } else {
            return null;
        }
    }

    function loadSlides(mediaUrls) {
        var i;
        for (i = 0; i < mediaUrls.length; i++) {
            var mediaType = getMediaType(mediaUrls[i]);
            var slideElement;
            if (mediaType == "image") {
                slideElement = document.createElement("img");
                s...
---- api/tmdb.php ----
<?php
/*
 * @ https://hospedagem.matrixch.store 
 * @ PHP 7.4
 * @ Decoder version: 1.0.2
 * @ Release: 17/06/2024
*/

echo "<!DOCTYPE html>\n<html>\n<head>\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Movie Slider</title>\n    <link rel=\"stylesheet\" type=\"text/css\" href=\"betstyle.css\">\n</head>\n<body>\n    <div class=\"container\">\n        <!-- Your slider content here -->\n    </div>\n\n    <script>\n    function adjustBackgroundSize() {\n    var container = document.querySelector('.container');\n    var imgAspectRatio = 3840 / 2160; // Aspect ratio of your image\n\n    var containerAspectRatio = container.offsetWidth / container.offsetHeight;\n\n    if (containerAspectRatio > imgAspectRatio) {\n        container.style.backgroundSize = '100% auto';\n    } else {\n        container.style.backgroundSize = 'auto 100%';\n    }\n}\n\n// Initial adjustment\nadjustBackgroundSize();\n\n// Adjust on window resize\nwindow.addEventListener('resize', adjustBackgroundSize);\n    </script>\n\n    <script type=\"text/javascript\" src=\"movies_script.js\"></script>\n</body>\n</html>\n";

?>
SUBDIR includes: . , .. , .db.db , footer.php , functions.php , header.php , index.php

######## admplay.cadtech.com.br ########
FILES: . , .. , .well-known , 0000

######## admpremium.cadtech.com.br ########
FILES: . , .. , .git , .gitignore , .htaccess , .user.ini , .well-known , APK , admins.php , all_users.php , api , api.rar , assets , backup_restore , backup_temp.zip , banners , banners_manager.php , bg.php , clientes_vencidos.json , completar_cadastro.php , contato.php , cron_config.json , cron_guard.php , cron_notificacoes.php , dns.php , dump_bot.php , edit_usuario.php , enviar_cobrancas.php , estatisticas.php , evolution_config.json , gerar_vencidos.php , get.php , getappuser_original.php , img_custom , importar_usuarios.php , includes , index.php , logo.php , mercado_pago.php , migrar_dns.php , modelo_importacao.csv , note.php , notificacoes.php , notificacoes_api.php , pagamento_maos.php , player_api.php , proxy_stream.php , qrcode.php , sair.php , sec_logins.json , tema.php , teste.php , users.php , users_create.php , users_teste.php , users_teste_update.php , users_update.php , usuario.php , usuarios.php , vencimento.php , vendor , webtv , whats - copy.json , whats.json , whatsapp_api.php , whatsapp_api1.php , whatsapp_api_status.php , whatsapp_config.php
---- cron_config.json ----
{
    "token": "e1e15f56db37c3c53021bf3ee9ee5d8f",
    "domain": "admpremium.cadtech.com.br"
}
---- enviar_cobrancas.php ----
<?php
// enviar_cobrancas.php
// Envio manual de cobrança aos clientes vencidos (botão da tela Início). Somente admin logado ou token do cron.
require_once __DIR__ . '/cron_guard.php';
cron_authorize(true);

set_time_limit(0);
ignore_user_abort(true);
date_default_timezone_set('America/Sao_Paulo');
require_once __DIR__ . '/whatsapp_api.php';

$db = new SQLite3(__DIR__ . "/api/db/studiolivecode_clientes.db");
$db->busyTimeout(5000);
$dbNotif = new SQLite3(__DIR__ . "/api/db/studiolivecode_notificacoes.db");
$dbNotif->busyTimeout(5000);
$dbNotif->exec("CREATE TABLE IF NOT EXISTS notificacoes_log (id INTEGER PRIMARY KEY AUTOINCREMENT, mac TEXT, notificacao_id TEXT, data_envio TEXT)");

$whatsFile = __DIR__ . '/whats.json';
$whatsData = file_exists($whatsFile) ? json_decode(file_get_contents($whatsFile), true) : [];
if (!is_array($whatsData)) $whatsData = [];

$hoje = date('Y-m-d');
$res = $db->query("SELECT * FROM ibo WHERE expire_date < date('now') AND active = 1");

$enviados = 0;
$ignorados = 0;
while ($row = $res->fetchArray(SQLITE3_ASSOC)) {
    $mac = $row['mac_address'];

    if (!isset($whatsData[$mac]) || empty($whatsData[$mac]['whatsapp'])) continue;
    $numero = preg_replace('/[^0-9]/', '', $whatsData[$mac]['whatsapp']);
    if (strlen($numero) < 10) continue;
    if (strlen($numero) <= 11) $numero = '55' . $numero;

    // Não cobra o mesmo cliente duas vezes no mesmo dia
    $chk = $dbNotif->prepare("SELECT COUNT(*) FROM notificacoes_log WHERE mac = :mac AND notificacao_id = 'cobranca_manual' AND data_envio = :hoje");
    $chk->bindValue(':mac', $mac, SQLITE3_TEXT);
    $chk->bindValue(':hoje', $hoje, SQLITE3_TEXT);
    if ((int)$chk->execute()->fetchArray()[0] > 0) { $ignorados++; continue; }

    $nome = !empty($row['title']) ? $row['title'] : $row['username'];
    $mensagem = "Olá " . $nome . ",\nSua assinatura venceu. Por favor, renove para continuar usando nosso serviço.";

    $ret = sendWhatsAppMessage($numero, $mensagem);
    if ($ret && isset($ret['status']) && $ret['status'] === 'success') {
        $enviados++;
        $ins = $dbNotif->prepare("INSERT INTO notificacoes_log (mac, notificacao_id, data_envio) VALUES (:mac, 'cobranca_manual', :hoje)");
        $ins->bindValue(':mac', $mac, SQLITE3_TEXT);
        $ins->bindValue(':hoje', $hoje, SQLITE3_TEXT);
        $ins->execute();
        // Previne banimento variando o tempo entre 4 a 8 segundos
        sleep(rand(4, 8));
    }
}
$db->close();
$dbNotif->close();
header('Content-Type: application/json');
echo json_encode(['status' => 'success', 'enviados' => $enviados, 'ignorados_ja_cobrados_hoje' => $ignorados]);
?>

---- evolution_config.json ----
{
    "evolution_url": "https:\/\/admhibrido.cadtech.com.br",
    "global_apikey": "HUB_6A60FC9971FF61d9cabab",
    "instance_name": "HUB Hibrido"
}
---- mercado_pago.php ----
<?php
session_start();
// Verifica login se tiver um sistema central de sessões
// if (!isset($_SESSION['login'])) { header("Location: index.php"); exit; }
include './includes/header.php';
?>

<div class="card radius-10">
    <div class="card-body">
        <div class="d-flex align-items-center justify-content-between mb-4">
            <h5 class="card-title mb-0 text-success">Mercado Pago Gold Avançado</h5>
            <button class="btn btn-secondary btn-sm" onclick="window.history.back()"><i class='bx bx-arrow-back'></i> Voltar ao Painel</button>
        </div>

        <div class="row">
            <div class="col-12 col-lg-6">
                <!-- Access Token -->
                <div class="card border border-secondary mb-4 shadow-none">
                    <div class="card-header bg-transparent border-bottom border-secondary">
                        <h6 class="mb-0 text-primary"><i class='bx bx-key'></i> Configuração Mercado Pago Gold</h6>
                    </div>
                    <div class="card-body">
                        <label class="form-label">Access Token (Mercado Pago)</label>
                        <div class="input-group">
                            <input type="text" id="access_token" class="form-control" placeholder="APP_USR-...">
                            <button class="btn btn-primary" onclick="saveToken()"><i class='bx bx-save'></i> Salvar</button>
                        </div>
                    </div>
                </div>

                <!-- Cupons -->
                <div class="card border border-secondary mb-4 shadow-none">
                    <div class="card-header bg-transparent border-bottom border-secondary">
                        <h6 class="mb-0 text-warning"><i class='bx bx-purchase-tag'></i> Gerenciar Cupons</h6>
                    </div>
                    <div class="card-body">
                        <div class="row g-2 mb-3">
                            <div class="col-md-6">
                                <input type="text" id="cupom_codigo" class="form-control" placeholder="Código (Ex: PROMO30)">
                            </div>
                            <div class="col-md-4">
                                <input type="number" id="cupom_desconto" class="form-control" placeholder="Desconto (%)">
                            </div>
                            <div class="col-md-2">
                                <button class="btn btn-warning w-100 text-dark" onclick="addCupom()" title="Adicionar"><i class='bx bx-plus'></i></button>
                            </div>
                        </div>
                        <div class="table-responsive">
                            <table class="table table-hover align-middle mb-0" id="tabela_cupons">
                                <thead class="table-light">
                                    <tr><th>Código</th><th>Desconto</th><th width="80">Ação</th></tr>
                                </thead>
                     ...
---- notificacoes_api.php ----
<?php
session_start();
header('Content-Type: application/json');

if (!isset($_SESSION["U"])) {
    echo json_encode(['status' => 'error', 'message' => 'Não autorizado.']);
    exit;
}

$dbFile = __DIR__ . "/api/db/studiolivecode_notificacoes.db";

// Inicializa banco e tabela se não existir
$db = new SQLite3($dbFile);
$db->exec("CREATE TABLE IF NOT EXISTS notificacoes (
    id TEXT PRIMARY KEY,
    nome TEXT,
    tipo TEXT,
    horario TEXT,
    dias INTEGER,
    mensagem TEXT,
    ativo INTEGER
)");

$db->exec("CREATE TABLE IF NOT EXISTS notificacoes_log (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    mac TEXT,
    notificacao_id TEXT,
    data_envio TEXT
)");

// Popula dados padrão se tabela estiver vazia
$res = $db->querySingle("SELECT COUNT(*) as count FROM notificacoes");
if ($res == 0) {
    $defaults = [
        ['boas_vindas', 'Boas-Vindas', 'imediato', '', 0, "🎉 *SEJA BEM-VINDO(A)!*\n\nOlá *#NOME#*, seu cadastro foi ativado com sucesso! 🚀\n\n📱 *Seu MAC:* `#MAC#`\n\n⚡ Para renovar depois, acesse:\n#LINK_RENOVACAO#\n\nBom entretenimento! ✨", 1],
        ['comprovante', 'Confirmação de Pagamento', 'imediato', '', 0, "Olá *#NOME#*! 🥳\n\nSeu pagamento foi confirmado com sucesso!\nSua assinatura foi renovada até *#VENCIMENTO#*.\n\nSeu MAC: *#MAC#*", 1],
        ['aviso_5_dias', 'Lembrete (5 Dias Antes)', 'agendado', '10:00', 5, "Olá *#NOME#*! ⚠️\n\nPassando para lembrar que sua assinatura vence em *5 dias* (#VENCIMENTO#).\n\nPara não ficar sem acesso, renove via PIX no link:\n#LINK_RENOVACAO#", 0],
        ['aviso_3_dias', 'Lembrete (3 Dias Antes)', 'agendado', '10:00', 3, "Olá *#NOME#*! ⚠️\n\nPassando para lembrar que sua assinatura vence em *3 dias* (#VENCIMENTO#).\n\nRenove via PIX no link:\n#LINK_RENOVACAO#", 0],
        ['vencimento_hoje', 'Vencimento Hoje', 'agendado', '09:00', 0, "Bom dia, *#NOME#*! 🚨\n\nSua assinatura vence *HOJE* (#VENCIMENTO#)!\n\nGaranta que você não perca acesso ao seu conteúdo renovando agora mesmo via PIX automático:\n\n#LINK_RENOVACAO#", 1],
        ['bloqueio', 'Aviso de Bloqueio', 'agendado', '11:00', -1, "Olá *#NOME#* 🛑\n\nInformamos que o seu acesso foi suspenso por falta de pagamento (venceu em #VENCIMENTO#).\n\nMas não se preocupe! Você pode reativar instantaneamente pagando via PIX no link abaixo:\n\n#LINK_RENOVACAO#", 0]
    ];
    
    $stmt = $db->prepare("INSERT INTO notificacoes (id, nome, tipo, horario, dias, mensagem, ativo) VALUES (:id, :nome, :tipo, :horario, :dias, :mensagem, :ativo)");
    foreach ($defaults as $d) {
        $stmt->bindValue(':id', $d[0], SQLITE3_TEXT);
        $stmt->bindValue(':nome', $d[1], SQLITE3_TEXT);
        $stmt->bindValue(':tipo', $d[2], SQLITE3_TEXT);
        $stmt->bindValue(':horario', $d[3], SQLITE3_TEXT);
        $stmt->bindValue(':dias', $d[4], SQLITE3_INTEGER);
        $stmt->bindValue(':mensagem', $d[5], SQLITE3_TEXT);
        $stmt->bindValue(':ativo', $d[6], SQLITE3_INTEGER);
        $stmt->execute();
    }
...
---- pagamento_maos.php ----
<?php
session_start();
require_once __DIR__ . '/whatsapp_api.php';

$msg_sucesso = '';
$msg_erro = '';

if (isset($_POST['renovar'])) {
    $link_colado = trim($_POST['link_colado'] ?? '');
    
    // Tenta interpretar o input. Se contiver URL, extrai query params. Se não for, usa direto.
    $input_val = '';
    $url_to_parse = '';

    if (filter_var($link_colado, FILTER_VALIDATE_URL)) {
        $url_to_parse = $link_colado;
    } elseif (preg_match('/https?:\/\/[^\s"\'<>]+/i', $link_colado, $urlMatch)) {
        $url_to_parse = $urlMatch[0];
    }

    if (!empty($url_to_parse)) {
        $query = parse_url($url_to_parse, PHP_URL_QUERY);
        parse_str((string)$query, $params);
        $mac_address = $params['mac'] ?? '';
        $telefone = $params['telefone'] ?? '';
        $input_val = !empty($telefone) ? $telefone : $mac_address;
    } else {
        $input_val = $link_colado;
    }
    
    $input_val = strtoupper(trim($input_val));
    
    if (empty($input_val)) {
        $msg_erro = 'Entrada inválida. Não foi possível extrair MAC ou telefone.';
    } else {
        $configPath = __DIR__ . '/api/renovar/config.json';
        $config = file_exists($configPath) ? json_decode(file_get_contents($configPath), true) : [];
        $whatsFile = __DIR__ . '/whats.json';
        $whatsData = file_exists($whatsFile) ? json_decode(file_get_contents($whatsFile), true) : [];
        if (!is_array($whatsData)) $whatsData = [];
        
        $clean_input = preg_replace('/[^0-9]/', '', $input_val);
        $input_phone_core = normalizePhoneCore($input_val);

        // Prepara variações de MAC caso tenha digitado sem dois-pontos
        $mac_variations = [$input_val];
        $clean_mac = preg_replace('/[^A-Z0-9]/', '', $input_val);
        if (strlen($clean_mac) === 12 && preg_match('/^[A-F0-9]{12}$/', $clean_mac)) {
            $mac_variations[] = implode(':', str_split($clean_mac, 2));
        }

        $is_multimac = false;
        $multimac_m = null;

        if (isset($config['multimacs']) && is_array($config['multimacs'])) {
            foreach ($config['multimacs'] as $m) {
                $match = false;
                
                // 1. Verifica se bate com o código (WhatsApp do revendedor/pacote) com ou sem o 9º dígito / +55
                $codigo_m = strtoupper(trim((string)($m['codigo'] ?? '')));
                if ($codigo_m !== '' && ($codigo_m === $input_val || phonesMatch($codigo_m, $input_val))) {
                    $match = true;
                }
                
                // 2. Verifica se o input bate com algum MAC dentro do pacote (ou com o WhatsApp de algum MAC do pacote)
                if (!$match && isset($m['macs']) && is_array($m['macs'])) {
                    foreach ($m['macs'] as $pacote_mac) {
                        $pacote_mac_upper = strtoupper(trim($pacote_mac));
                        foreach ($mac_variations as $m_try) {
                            if ($pacote_mac_upper === $m_try) {...
---- player_api.php ----
<?php
// player_api.php
// Proxy do Xtream Codes para logins secundários
header('Content-Type: application/json');

$user = $_GET['username'] ?? '';
$pass = $_GET['password'] ?? '';
$action = $_GET['action'] ?? '';

if (empty($user) || empty($pass)) {
    echo json_encode([]);
    exit;
}

$secFile = __DIR__ . '/sec_logins.json';
if (!file_exists($secFile)) {
    echo json_encode([]);
    exit;
}

$data = json_decode(file_get_contents($secFile), true);
$userId = null;
foreach ($data as $id => $cred) {
    if ($cred['username'] === $user && $cred['password'] === $pass) {
        $userId = $id;
        break;
    }
}

if (!$userId) {
    echo json_encode(['user_info' => ['auth' => 0]]);
    exit;
}

$db = new SQLite3(__DIR__ . "/api/db/studiolivecode_clientes.db");
$db->busyTimeout(5000);
$stmt = $db->prepare("SELECT * FROM ibo WHERE id = :id AND active = 1");
$stmt->bindValue(':id', $userId, SQLITE3_INTEGER);
$res = $stmt->execute();
$cliente = $res->fetchArray(SQLITE3_ASSOC);

if ($cliente) {
    $now = date('Y-m-d H:i:s');
    @$db->exec("UPDATE ibo SET last_login = '$now' WHERE id = " . $cliente['id']);
}

$db->close();

if (!$cliente) {
    echo json_encode(['user_info' => ['auth' => 0, 'status' => 'Expired']]);
    exit;
}

// Verifica vencimento
$hoje = date('Y-m-d');
if ($cliente['expire_date'] < $hoje) {
    echo json_encode(['user_info' => ['auth' => 0, 'status' => 'Expired']]);
    exit;
}

// Dados originais
$origDns = rtrim($cliente['dns'], '/');
$origUser = $cliente['username'];
$origPass = $cliente['password'];

// Prepara requisição para o servidor original
$url = $origDns . "/player_api.php?username=" . urlencode($origUser) . "&password=" . urlencode($origPass);

// Repassa todos os outros parametros GET
foreach ($_GET as $k => $v) {
    if (!in_array($k, ['username', 'password'])) {
        $url .= "&" . urlencode($k) . "=" . urlencode($v);
    }
}

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
// Desabilita verificação SSL para servidores iptv não seguros
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

$response = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

// Aqui precisamos substituir as URLs do servidor original pelo NOSSO DNS se houver base_url ou server_info
if ($action === '' || empty($action)) {
    // Autenticação (retorna server_info)
    $json = json_decode($response, true);
    if ($json && isset($json['server_info'])) {
        $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? "https://" : "http://";
        $host = $_SERVER['HTTP_HOST'];
        $myUrl = $protocol . $host;
        
        $json['server_info']['url'] = $host;
        $json['server_info']['port'] = $_SERVER['SERVER_PORT'];
        $json['server_info']['https_port'] = "443";
        $json['server_info']['server_protocol'] = $protocol === 'https://' ? 'https' :...
---- whatsapp_api.php ----
<?php
// whatsapp_api.php
// Integração WhatsApp usando HUB Híbrido + Funções de Normalização de Telefone e Disparo Obrigatório de Renovação

if (!function_exists('normalizePhoneCore')) {
    /**
     * Normaliza qualquer telefone brasileiro (com ou sem +55, com ou sem o 9º dígito, inclusive DDD 55)
     * para o núcleo canônico de 10 dígitos: DDD (2 dígitos) + 8 últimos dígitos do número.
     * Ex: "+55 55 8100-5918" -> "5581005918"
     * Ex: "55981005918"      -> "5581005918"
     * Ex: "5555981005918"    -> "5581005918"
     */
    function normalizePhoneCore($raw) {
        $d = ltrim(preg_replace('/[^0-9]/', '', (string)$raw), '0');
        if (strlen($d) < 8) {
            return '';
        }
        // Se tem 12 ou 13 dígitos e começa com DDI 55 (Brasil), remove o DDI 55
        if ((strlen($d) === 12 || strlen($d) === 13) && substr($d, 0, 2) === '55') {
            $d = substr($d, 2);
        }
        // Se ficou com 11 dígitos (DDD + 9 + 8 dígitos), remove o 9º dígito para unificar a comparação
        if (strlen($d) === 11 && $d[2] === '9') {
            return substr($d, 0, 2) . substr($d, 3);
        }
        if (strlen($d) === 10) {
            return $d;
        }
        if (strlen($d) > 10) {
            return substr($d, 0, 2) . substr($d, -8);
        }
        return $d;
    }

    /**
     * Retorna todas as variações possíveis de um telefone (10, 11, 12 e 13 dígitos)
     */
    function getPhoneVariations($raw) {
        $core = normalizePhoneCore($raw);
        if (strlen($core) !== 10) {
            $clean = ltrim(preg_replace('/[^0-9]/', '', (string)$raw), '0');
            return $clean !== '' ? [$clean] : [];
        }
        $ddd = substr($core, 0, 2);
        $num8 = substr($core, 2);
        $sem9 = $ddd . $num8;           // 10 dígitos: 5581005918
        $com9 = $ddd . '9' . $num8;     // 11 dígitos: 55981005918
        return [
            $sem9,
            $com9,
            '55' . $sem9,               // 12 dígitos: 555581005918
            '55' . $com9                // 13 dígitos: 5555981005918
        ];
    }

    /**
     * Compara dois telefones ignorando formatação, DDI +55 e presença/ausência do 9º dígito.
     */
    function phonesMatch($phoneA, $phoneB) {
        $coreA = normalizePhoneCore($phoneA);
        $coreB = normalizePhoneCore($phoneB);
        if (strlen($coreA) < 10 || strlen($coreB) < 10) {
            return false;
        }
        return $coreA === $coreB;
    }

    /**
     * Localiza todos os telefones associados a um MAC (ou código MultiMAC),
     * buscando no whats.json, no config.json (multimacs) e usando fallback se fornecido.
     */
    function findPhonesForMac($mac, $fallbackPhone = '') {
        $macUpper = strtoupper(trim((string)$mac));
        $whatsFile = __DIR__ . '/whats.json';
        $configFile = __DIR__ . '/api/renovar/config.json';

        $whatsData = file_exists($whatsFile) ? json_decode(file_get_contents($whats...
---- whatsapp_api1.php ----
<?php
function enviarMensagemWasender($numero, $mensagem) {
    $apiKey = 'SUA-API-WASENDER';
    $url = 'https://wasenderapi.com/api/send-message';

    $ch = curl_init($url);
    $payload = json_encode([
        'to' => $numero,
        'text' => $mensagem
    ]);

    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Authorization: Bearer ' . $apiKey,
        'Content-Type: application/json'
    ]);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);

    $response = curl_exec($ch);
    $error = curl_error($ch);
    curl_close($ch);

    if ($error) return ['error' => $error];

    return json_decode($response, true);
}
?>

---- whatsapp_api_status.php ----
<?php
session_start();
header('Content-Type: application/json');

$action = $_GET['action'] ?? '';
$configFile = __DIR__ . '/evolution_config.json';

if (!file_exists($configFile)) {
    echo json_encode(['status' => 'error', 'message' => 'Configuração não encontrada']);
    exit;
}

$config = json_decode(file_get_contents($configFile), true);
$url = rtrim($config['evolution_url'], '/');
if (strpos($url, 'hub_receiver.php') === false) {
    $url .= '/api/hub_receiver.php';
}
$apikey = trim($config['global_apikey']);

if (empty($url) || empty($apikey)) {
    echo json_encode(['status' => 'error', 'message' => 'Credenciais incompletas']);
    exit;
}

if ($action === 'status') {
    $ch = curl_init($url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode(['action' => 'test']));
    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Content-Type: application/json',
        'Authorization: Bearer ' . $apikey
    ]);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

    $res = curl_exec($ch);
    $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);

    $body = json_decode($res, true);

    if ($code >= 200 && $code < 300 && isset($body['success'])) {
        echo json_encode(['status' => 'success', 'state' => 'open']); // Fake open state pro frontend
    } else {
        echo json_encode(['status' => 'error', 'message' => 'Falha ao conectar no HUB.', 'raw' => $body]);
    }
    exit;
}

echo json_encode(['status' => 'error', 'message' => 'Ação não suportada via Hub.']);
exit;
?>

---- whatsapp_config.php ----
<?php
session_start();

// Verifica login se tiver um sistema central de sessões
// if (!isset($_SESSION['login'])) { header("Location: index.php"); exit; }

$jsonFile = __DIR__ . '/evolution_config.json';

if (file_exists($jsonFile)) {
  $config = json_decode(file_get_contents($jsonFile), true);
} else {
  $config = [
    'evolution_url' => '',
    'global_apikey' => '',
    'instance_name' => ''
  ];
}

if (isset($_POST["submit"])) {
  $config['evolution_url'] = rtrim(trim($_POST["evolution_url"]), '/');
  $config['global_apikey'] = trim($_POST["global_apikey"]);
  $config['instance_name'] = trim($_POST["instance_name"]);
  
  file_put_contents($jsonFile, json_encode($config, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
  $msg = "Configurações do WhatsApp salvas com sucesso!";
}
?>
<!DOCTYPE html>
<html lang="pt-BR">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Configurações WhatsApp</title>
<style>
  @import url('https://fonts.googleapis.com/css2?family=Poppins:wght@400;600&display=swap');
  * { box-sizing: border-box; font-family: 'Poppins', sans-serif; }
  body { background: #0d1117; color: #e6edf3; margin: 0; height: 100vh; display: flex; align-items: center; justify-content: center; }
  .container { background: #161b22; padding: 40px 30px; border-radius: 15px; box-shadow: 0 0 20px rgba(0,0,0,0.4); width: 100%; max-width: 470px; }
  h2 { text-align: center; margin-bottom: 25px; font-weight: 600; color: #2ea043; }
  label { display: flex; justify-content: space-between; align-items: center; margin-bottom: 6px; font-size: 14px; color: #c9d1d9; }
  input { width: 100%; padding: 10px 12px; background: #0d1117; border: 1px solid #30363d; border-radius: 8px; color: #e6edf3; font-size: 15px; margin-bottom: 18px; transition: border-color 0.2s; }
  input:focus { outline: none; border-color: #2ea043; }
  button { width: 100%; background: #238636; color: white; padding: 12px; border: none; border-radius: 8px; font-size: 16px; cursor: pointer; transition: background 0.3s; margin-bottom: 10px; }
  button:hover { background: #2ea043; }
  .btn-voltar { background: #30363d; }
  .btn-voltar:hover { background: #444c56; }
  .msg { text-align: center; background: #23863633; border: 1px solid #238636; padding: 10px; border-radius: 8px; margin-bottom: 15px; color: #7ee787; }
</style>
</head>
<body>
  <div class="container">
    <h2>Integração WhatsApp API</h2>

    <?php if (!empty($msg)) echo "<div class='msg'>$msg</div>"; ?>

    <form method="post">
      <label for="evolution_url">URL da Evolution API</label>
      <input type="text" id="evolution_url" name="evolution_url"
             placeholder="https://api.seuhub.com"
             value="<?=htmlspecialchars($config['evolution_url']);?>" required>

      <label for="global_apikey">Global API Key</label>
      <input type="text" id="global_apikey" name="global_apikey"
             placeholder="Sua chave global"
             value="<?=h...
SUBDIR api: . , .. , .adb.db , .ansdb.db , .htaccess , allads.php , banners.json , bg.php , contato.php , db , debug.log , getappuser.php , ibo.json , index.php , language.json , logo.php , note.json , pagamento.php , payment , playlist.php , qr.php , renovar , setting.json , setting.php , sportjr.php , teste_manual.json , theme.json , theme_change
---- api/pagamento.php ----
<!DOCTYPE HTML>
<html lang="pt-BR">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Ativar / Renovar</title>

    <style>
        body {
            display: flex;
            flex-direction: column;
            align-items: center;
            justify-content: center;
            height: 100vh;
            margin: 0;
            background: linear-gradient(to bottom, #000000, #302f2f 50%, #000000 100%);
            color: white;
            font-family: Arial, sans-serif;
        }

h1 {
    text-align: center;
    animation: blinkText 1.5s infinite alternate;
    font-size: 10px; /* ou 2em, 2rem, etc */
}

        @keyframes blinkText {
            0% { color: white; }
            50% { color: yellow; }
            100% { color: white; }
        }

        .box img {
            width: 80px;
            height: 80px;
            border-radius: 10px;
            animation: blinkImage 1s infinite alternate;
        }

        @keyframes blinkImage {
            0% { opacity: 1; }
            50% { opacity: 0.5; }
            100% { opacity: 1; }
        }
    </style>
</head>
<body>

<?php
    // Detecta protocolo e domínio
    $protocolo = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? "https://" : "http://";
    $dominio = $_SERVER['HTTP_HOST'];

    // Caminho atual sem o último segmento (ex: remove /api)
    $uri = rtrim(dirname($_SERVER['REQUEST_URI']), '/');
    $uriPai = substr($uri, 0, strrpos($uri, '/')); // Remove o último segmento

    // URL final apontando para a raiz de onde está o pagamento.php
    $url = $protocolo . $dominio . $uriPai . '/api/renovar/consulta_mac.php';
?>

<h1>✅Renove AGORA!</h1>

<div class="box">
    <img src="https://image-charts.com/chart?chs=100x100&cht=qr&chl=<?= urlencode($url) ?>" alt="QR Code">
</div>

</body>
</html>

SUBDIR includes: . , .. , footer.php , header.php , index.php

######## admsky.cadtech.com.br ########
FILES: . , .. , .user.ini , .well-known , all_users.php , announcement.php , api , app.php , appads.php , css , error_log , img , includes , index.php , interface.php , intro.php , js , language.php , logo.php , logout.php , maintenance.php , message.php , parental_reset.php , player.php , sports.php , theme.php , tmdb.php , tmdb_api.php , update.php , user_update.php , vpn.php
---- tmdb.php ----
<?php
error_reporting(0);
include "includes/header.php";

$db = new SQLite3("./api/.bet_tmdb.db");
$table_name = "api_key";
$db->exec("CREATE TABLE IF NOT EXISTS " . $table_name . " (id INTEGER PRIMARY KEY, key TEXT)");

$rows = $db->query("SELECT COUNT(*) as count FROM " . $table_name);
$row = $rows->fetchArray();
$numRows = $row["count"];

if ($numRows == 0) {
    $db->exec("INSERT INTO " . $table_name . "(key) VALUES('')");
	
	
}



if ($_SERVER["REQUEST_METHOD"] === "POST") {
    if (isset($_POST["submit"])) {
        $newKey = $_POST["key"]; // No validation/sanitization here for demonstration purposes

        // Use prepared statements to prevent SQL injection
        $stmt = $db->prepare("UPDATE " . $table_name . " SET key = :newKey WHERE id = 1");
        $stmt->bindValue(':newKey', $newKey, SQLITE3_TEXT);
        $stmt->execute();
    
    } elseif (isset($_POST["deleteCache"])) {
        // Specify the path to your JSON cache file
        $cacheFilePath = "./api/cache/combined_cache.json";

        // Check if the cache file exists and delete it
        if (file_exists($cacheFilePath)) {
            unlink($cacheFilePath); // Delete the cache file
        }
    }
}

$res = $db->query("SELECT * FROM " . $table_name . " WHERE id = 1");
$rowU = $res->fetchArray();


if (empty($rowU['key'])) {
    echo '<div class="alert alert-warning" role="alert">
        You must add your tMDB API key before using the app. Follow the instructions below to add your API key.
    </div>';
} 

?>
<div class="card border-left-primary shadow h-100 card shadow mb-4">
        <div class="card-header py-3">
                <div class="card-body">
                                <div class="card mb-4">
                                    <div class="card-header bg-primary py-3">
                                        <h4 align="center" class="m-0 font-weight-bold text-blue">
                                            <i class="fa fa-key" style="font-size:20px"></i>   
                                            Get Your TMDB API Key 
                                        </h4>
                                    </div>
                                    <div class="card-body">
                                        <!-- Add instructions here -->
                                        <p style="font-size: 16px;">
                                            To use this application, you need to have a TMDB API key. Follow these steps to obtain your API key:
                                        </p>
                                        <ol>
                                            <li>Visit the TMDB website at <a href="https://www.themoviedb.org" target="_blank" style="font-weight: bold; color: #007bff; text-decoration: underline;">https://www.themoviedb.org/</a></li>
                                            <li>Sign in or create an account if you don't have one.</li>
                                            <li>To register for an API key, click...
---- tmdb_api.php ----
<?php
error_reporting(E_ALL);
ini_set('display_errors', 1);

include "includes/header.php";

$db = new SQLite3("./api/.bet_tmdb.db");
$table_name = "api_key";
$db->exec("CREATE TABLE IF NOT EXISTS " . $table_name . " (id INTEGER PRIMARY KEY, key TEXT, language TEXT)");

$rows = $db->query("SELECT COUNT(*) as count FROM " . $table_name);
$row = $rows->fetchArray();
$numRows = $row["count"];

if ($numRows == 0) {
    $db->exec("INSERT INTO " . $table_name . "(key, language) VALUES('', 'en-US')");
}

if ($_SERVER["REQUEST_METHOD"] === "POST") {
    echo "Form submitted"; // Add this line to confirm form submission

    if (isset($_POST["submit"])) {
        $newKey = $_POST["key"]; // No validation/sanitization here for demonstration purposes
        $language = $_POST["language"];

        // Use prepared statements to prevent SQL injection
        $stmt = $db->prepare("UPDATE " . $table_name . " SET key = :newKey, language = :language WHERE id = 1");
        $stmt->bindValue(':newKey', $newKey, SQLITE3_TEXT);
        $stmt->bindValue(':language', $language, SQLITE3_TEXT);
        $stmt->execute();

        header("Location: tmdb_api.php");
        exit();
    
    } elseif (isset($_POST["deleteCache"])) {
        // Specify the path to your JSON cache file
        $cacheFilePath = "./api/cache/combined_cache.json";

        // Check if the cache file exists and delete it
        if (file_exists($cacheFilePath)) {
            unlink($cacheFilePath); // Delete the cache file
        }

        // Redirect and exit
        header("Location: tmdb_api.php");
        exit();
    }
}

$res = $db->query("SELECT * FROM " . $table_name . " WHERE id = 1");
$rowU = $res->fetchArray();

if (empty($rowU['key'])) {
    echo '<div class="alert alert-warning" role="alert">
        You must add your tMDB API key before using the app. Follow the instructions below to add your API key.
    </div>';
} 

?>
<div class="card border-left-primary shadow h-100 card shadow mb-4">
    <div class="card-header py-3">
        <div class="card-body">
            <div class="card mb-4">
                <div class="card-header bg-primary py-3">
                    <h4 align="center" class="m-0 font-weight-bold text-blue">
                        <i class="fa fa-key" style="font-size:20px"></i>   
                        Get Your tMDB API Key 
                    </h4>
                </div>
                <div class="card-body">
                    <!-- Add instructions here -->
                    <p style="font-size: 16px;">
                        To use this application, you need to have a tMDB API key. Follow these steps to obtain your API key:
                    </p>
                    <ol>
                        <li>Visit the tMDB website at <a href="https://www.themoviedb.org" target="_blank" style="font-weight: bold; color: #007bff; text-decoration: underline;">https://www.themoviedb.org/</a></li>
                        <li>Sign in or create an account if you don't h...
SUBDIR api: . , .. , .bet_tmdb.db , .db.db , ApiIPTV.php , CloudBackup.php , backdrop.php , backdropFilmes .php , betstyle.css , cache , connv2.json , error_log , index.php , main.json , movies.php , movies_script.js , sports.db , sports.php , user_logs.db , user_message.db
---- api/ApiIPTV.php ----
<?php
$Tag = $_GET['tag'];
@$UserID = $_GET['userid'];

$key = "mysecretkeywsdef";
$iv = "myuniqueivparamu";
$PING = date('d-m-Y H:i:s');

$json_file = "main.json";
$jsondata = file_get_contents($json_file);
$arrayData = json_decode($jsondata, true);
$json = $arrayData['app'];



$l =  $_REQUEST['l'];
$an = $_REQUEST['an'];
$el = $_REQUEST['el'];
$ea = $_REQUEST['ea'];
$eb = $_REQUEST['eb'];
$key2 = $an.$json['customerid'];

function encode($str, $key){
	$sb = "";
	for ($i = 0; $i < strlen($str); $i++){
		 $sb .= (chr((ord($str[$i]) ^ ord($key[$i % strlen($key)]))));
	}
	return base64_encode($sb);
}

function sanitize($data) {
	$data = trim($data);
	$data = htmlspecialchars($data, ENT_QUOTES );
	$data = SQLite3::escapeString($data);
	return $data;
}

if (isset($_GET['tag'])){
	if ($Tag == "licV3"){
		echo bin2hex(openssl_encrypt(file_get_contents($json_file) , "AES-128-CBC", $key, OPENSSL_RAW_DATA, $iv));
	}
	if ($Tag == "licV4"){
		echo '
{
  "success": "1",
  "status": "ACTIVE",
  "cid": "'.$json["customerid"].'",
  "which": "licV4",
  "app": "'.encode(' {
    "id": "'.$json["id"].'",
    "appname": "'.$json["appname"].'",
    "expire": "'.$json["expire"].'",
    "login_type": "'.$json["login_type"].'",
    "version_code": "'.$json["version_code"].'",
    "filter_status": "'.$json["filter_status"].'",
    "epg_mode": "'.$json["epg_mode"].'",
    "apkautoupdate": "'.$json["apkautoupdate"].'",
    "show_expire": "'.$json["show_expire"].'"
  }', $key2.'app') .'",
  "portal": "'.encode(' {
    "panel": "'.$json["panel"].'",
    "portal": "'.$json["portal"].'",
    "portal2": "'.$json["portal2"].'",
    "portal3": "'.$json["portal3"].'",
    "portal4": "'.$json["portal4"].'",
    "portal5": "'.$json["portal5"].'",
    "portal_name": "'.$json["portal_name"].'",
    "portal2_name": "'.$json["portal2_name"].'",
    "portal3_name": "'.$json["portal3_name"].'",
    "portal4_name": "'.$json["portal4_name"].'",
    "portal5_name": "'.$json["portal5_name"].'",
    "portal_vod"...
---- api/CloudBackup.php ----
<?php
error_reporting(E_ALL);
ini_set('display_errors', 'On');

@$resetcode = $_POST['resetcode'];
@$backup = $_REQUEST['backup'];
@$UserID = $_REQUEST['user'];
@$Pass = $_REQUEST['pass'];

$bupdb = new SQLite3('./.bu.db');
$bupdb->exec("CREATE TABLE IF NOT EXISTS BACKUP(id INTEGER PRIMARY KEY ,user TEXT, pass TEXT, resetcode TEXT, backup TEXT)");

$backedup = '{
	"tag":"CloudBackup",
	"success":"1",
	"api_ver":"1.0v",
	"version":"1.0",
	"msg":"Your backup has been completed successfully"
}';
						  
$badpass = '{
	"tag":"CloudBackup",
	"success":"0",
	"api_ver":"1.0v",
	"version":"1.0",
	"msg":"Backup Password is incorrect. Please check your password and try again. Code: BPE"
}';

$nouser = '{"tag":"CloudBackup","success":"0","api_ver":"1.0v","version":"1.0","msg":"Your Cloud Backup has been failed. Please try again or contact support. Code: JE"}';

$bupres = $bupdb->query("SELECT * FROM BACKUP WHERE user='".$UserID."'");

while($buprow=$bupres->fetchArray()) {
	$dbuser = $buprow['user'];
	$dbpass = $buprow['pass'];
	$dbresetcode = $buprow['resetcode'];
	$dbbackup = $buprow['backup'];
}

if(isset($resetcode)) {
	if(@$dbuser !== $UserID) {
		$bupdb->exec("INSERT INTO BACKUP (user, pass, resetcode, backup) VALUES('".$UserID."', '".$Pass."', '".$resetcode."', '".$backup."') ");
		echo $backedup;
	}else if (@$dbuser == $UserID) {
		$bupdb->exec("UPDATE BACKUP SET backup='".$backup."' WHERE user='".$UserID."'");
		echo $backedup;
	}else {
	echo $nouser;
	}
}

if($resetcode == '') {
	if ($Pass == @$dbpass) {
		echo '
{
"tag":"CloudBackup",
"success":"1",
"api_ver":"1.0v",
"backup":"'.@$dbbackup.'",
"msg":"Backup has been downloaded successfully"
}';
		}else{
			echo $badpass;
		}
} else {
	echo $nouser;
	}
---- api/connv2.json ----
{
    "tag": "connv2",
    "success": "0",
    "api_ver": "1.0v",
    "message": "Example Message",
    "msgid": "1646",
    "msg_status": "ACTIVE",
    "msg_expire": "2024-10-17 01:00:59",
    "announcement": "Example Announcement",
    "ann_status": "INACTIVE",
    "ann_expire": "2024-04-30 14:55:59",
    "ann_interval": "2",
    "ann_disappear": "1"
}
SUBDIR includes: . , .. , ad_type.json , footer.php , function.php , header.php , index.php

######## only.cadtech.com.br ########
FILES: . , .. , .user.ini , .well-known , APK , all_users.php , announcement.php , api , app.php , appads.php , css , error_log , img , includes , index.php , interface.php , intro.php , js , language.php , logo.php , logout.php , maintenance.php , message.php , only.cadtech.com.br , parental_reset.php , player.php , sports.php , theme.php , tmdb.php , tmdb_api.php , update.php , user_update.php , vpn.php
---- tmdb.php ----
<?php
error_reporting(0);
include "includes/header.php";

$db = new SQLite3("./api/.bet_tmdb.db");
$table_name = "api_key";
$db->exec("CREATE TABLE IF NOT EXISTS " . $table_name . " (id INTEGER PRIMARY KEY, key TEXT)");

$rows = $db->query("SELECT COUNT(*) as count FROM " . $table_name);
$row = $rows->fetchArray();
$numRows = $row["count"];

if ($numRows == 0) {
    $db->exec("INSERT INTO " . $table_name . "(key) VALUES('')");
	
	
}



if ($_SERVER["REQUEST_METHOD"] === "POST") {
    if (isset($_POST["submit"])) {
        $newKey = $_POST["key"]; // No validation/sanitization here for demonstration purposes

        // Use prepared statements to prevent SQL injection
        $stmt = $db->prepare("UPDATE " . $table_name . " SET key = :newKey WHERE id = 1");
        $stmt->bindValue(':newKey', $newKey, SQLITE3_TEXT);
        $stmt->execute();
    
    } elseif (isset($_POST["deleteCache"])) {
        // Specify the path to your JSON cache file
        $cacheFilePath = "./api/cache/combined_cache.json";

        // Check if the cache file exists and delete it
        if (file_exists($cacheFilePath)) {
            unlink($cacheFilePath); // Delete the cache file
        }
    }
}

$res = $db->query("SELECT * FROM " . $table_name . " WHERE id = 1");
$rowU = $res->fetchArray();


if (empty($rowU['key'])) {
    echo '<div class="alert alert-warning" role="alert">
        You must add your tMDB API key before using the app. Follow the instructions below to add your API key.
    </div>';
} 

?>
<div class="card border-left-primary shadow h-100 card shadow mb-4">
        <div class="card-header py-3">
                <div class="card-body">
                                <div class="card mb-4">
                                    <div class="card-header bg-primary py-3">
                                        <h4 align="center" class="m-0 font-weight-bold text-blue">
                                            <i class="fa fa-key" style="font-size:20px"></i>   
                                            Get Your TMDB API Key 
                                        </h4>
                                    </div>
                                    <div class="card-body">
                                        <!-- Add instructions here -->
                                        <p style="font-size: 16px;">
                                            To use this application, you need to have a TMDB API key. Follow these steps to obtain your API key:
                                        </p>
                                        <ol>
                                            <li>Visit the TMDB website at <a href="https://www.themoviedb.org" target="_blank" style="font-weight: bold; color: #007bff; text-decoration: underline;">https://www.themoviedb.org/</a></li>
                                            <li>Sign in or create an account if you don't have one.</li>
                                            <li>To register for an API key, click...
---- tmdb_api.php ----
<?php
error_reporting(E_ALL);
ini_set('display_errors', 1);

include "includes/header.php";

$db = new SQLite3("./api/.bet_tmdb.db");
$table_name = "api_key";
$db->exec("CREATE TABLE IF NOT EXISTS " . $table_name . " (id INTEGER PRIMARY KEY, key TEXT, language TEXT)");

$rows = $db->query("SELECT COUNT(*) as count FROM " . $table_name);
$row = $rows->fetchArray();
$numRows = $row["count"];

if ($numRows == 0) {
    $db->exec("INSERT INTO " . $table_name . "(key, language) VALUES('', 'en-US')");
}

if ($_SERVER["REQUEST_METHOD"] === "POST") {
    echo "Form submitted"; // Add this line to confirm form submission

    if (isset($_POST["submit"])) {
        $newKey = $_POST["key"]; // No validation/sanitization here for demonstration purposes
        $language = $_POST["language"];

        // Use prepared statements to prevent SQL injection
        $stmt = $db->prepare("UPDATE " . $table_name . " SET key = :newKey, language = :language WHERE id = 1");
        $stmt->bindValue(':newKey', $newKey, SQLITE3_TEXT);
        $stmt->bindValue(':language', $language, SQLITE3_TEXT);
        $stmt->execute();

        header("Location: tmdb_api.php");
        exit();
    
    } elseif (isset($_POST["deleteCache"])) {
        // Specify the path to your JSON cache file
        $cacheFilePath = "./api/cache/combined_cache.json";

        // Check if the cache file exists and delete it
        if (file_exists($cacheFilePath)) {
            unlink($cacheFilePath); // Delete the cache file
        }

        // Redirect and exit
        header("Location: tmdb_api.php");
        exit();
    }
}

$res = $db->query("SELECT * FROM " . $table_name . " WHERE id = 1");
$rowU = $res->fetchArray();

if (empty($rowU['key'])) {
    echo '<div class="alert alert-warning" role="alert">
        You must add your tMDB API key before using the app. Follow the instructions below to add your API key.
    </div>';
} 

?>
<div class="card border-left-primary shadow h-100 card shadow mb-4">
    <div class="card-header py-3">
        <div class="card-body">
            <div class="card mb-4">
                <div class="card-header bg-primary py-3">
                    <h4 align="center" class="m-0 font-weight-bold text-blue">
                        <i class="fa fa-key" style="font-size:20px"></i>   
                        Get Your tMDB API Key 
                    </h4>
                </div>
                <div class="card-body">
                    <!-- Add instructions here -->
                    <p style="font-size: 16px;">
                        To use this application, you need to have a tMDB API key. Follow these steps to obtain your API key:
                    </p>
                    <ol>
                        <li>Visit the tMDB website at <a href="https://www.themoviedb.org" target="_blank" style="font-weight: bold; color: #007bff; text-decoration: underline;">https://www.themoviedb.org/</a></li>
                        <li>Sign in or create an account if you don't h...
SUBDIR api: . , .. , .bet_tmdb.db , .db.db , ApiIPTV.php , CloudBackup.php , backdrop.php , betstyle.css , cache , connv2.json , error_log , index.php , logo.png , main.json , sports.db , sports.php , user_logs.db , user_message.db
---- api/ApiIPTV.php ----
<?php
$Tag = $_GET['tag'];
@$UserID = $_GET['userid'];

$key = "mysecretkeywsdef";
$iv = "myuniqueivparamu";
$PING = date('d-m-Y H:i:s');

$json_file = "main.json";
$jsondata = file_get_contents($json_file);
$arrayData = json_decode($jsondata, true);
$json = $arrayData['app'];



$l =  $_REQUEST['l'];
$an = $_REQUEST['an'];
$el = $_REQUEST['el'];
$ea = $_REQUEST['ea'];
$eb = $_REQUEST['eb'];
$key2 = $an.$json['customerid'];

function encode($str, $key){
	$sb = "";
	for ($i = 0; $i < strlen($str); $i++){
		 $sb .= (chr((ord($str[$i]) ^ ord($key[$i % strlen($key)]))));
	}
	return base64_encode($sb);
}

function sanitize($data) {
	$data = trim($data);
	$data = htmlspecialchars($data, ENT_QUOTES );
	$data = SQLite3::escapeString($data);
	return $data;
}

if (isset($_GET['tag'])){
	if ($Tag == "licV3"){
		echo bin2hex(openssl_encrypt(file_get_contents($json_file) , "AES-128-CBC", $key, OPENSSL_RAW_DATA, $iv));
	}
	if ($Tag == "licV4"){
		echo '
{
  "success": "1",
  "status": "ACTIVE",
  "cid": "'.$json["customerid"].'",
  "which": "licV4",
  "app": "'.encode(' {
    "id": "'.$json["id"].'",
    "appname": "'.$json["appname"].'",
    "expire": "'.$json["expire"].'",
    "login_type": "'.$json["login_type"].'",
    "version_code": "'.$json["version_code"].'",
    "filter_status": "'.$json["filter_status"].'",
    "epg_mode": "'.$json["epg_mode"].'",
    "apkautoupdate": "'.$json["apkautoupdate"].'",
    "show_expire": "'.$json["show_expire"].'"
  }', $key2.'app') .'",
  "portal": "'.encode(' {
    "panel": "'.$json["panel"].'",
    "portal": "'.$json["portal"].'",
    "portal2": "'.$json["portal2"].'",
    "portal3": "'.$json["portal3"].'",
    "portal4": "'.$json["portal4"].'",
    "portal5": "'.$json["portal5"].'",
    "portal_name": "'.$json["portal_name"].'",
    "portal2_name": "'.$json["portal2_name"].'",
    "portal3_name": "'.$json["portal3_name"].'",
    "portal4_name": "'.$json["portal4_name"].'",
    "portal5_name": "'.$json["portal5_name"].'",
    "portal_vod"...
---- api/CloudBackup.php ----
<?php
error_reporting(E_ALL);
ini_set('display_errors', 'On');

@$resetcode = $_POST['resetcode'];
@$backup = $_REQUEST['backup'];
@$UserID = $_REQUEST['user'];
@$Pass = $_REQUEST['pass'];

$bupdb = new SQLite3('./.bu.db');
$bupdb->exec("CREATE TABLE IF NOT EXISTS BACKUP(id INTEGER PRIMARY KEY ,user TEXT, pass TEXT, resetcode TEXT, backup TEXT)");

$backedup = '{
	"tag":"CloudBackup",
	"success":"1",
	"api_ver":"1.0v",
	"version":"1.0",
	"msg":"Your backup has been completed successfully"
}';
						  
$badpass = '{
	"tag":"CloudBackup",
	"success":"0",
	"api_ver":"1.0v",
	"version":"1.0",
	"msg":"Backup Password is incorrect. Please check your password and try again. Code: BPE"
}';

$nouser = '{"tag":"CloudBackup","success":"0","api_ver":"1.0v","version":"1.0","msg":"Your Cloud Backup has been failed. Please try again or contact support. Code: JE"}';

$bupres = $bupdb->query("SELECT * FROM BACKUP WHERE user='".$UserID."'");

while($buprow=$bupres->fetchArray()) {
	$dbuser = $buprow['user'];
	$dbpass = $buprow['pass'];
	$dbresetcode = $buprow['resetcode'];
	$dbbackup = $buprow['backup'];
}

if(isset($resetcode)) {
	if(@$dbuser !== $UserID) {
		$bupdb->exec("INSERT INTO BACKUP (user, pass, resetcode, backup) VALUES('".$UserID."', '".$Pass."', '".$resetcode."', '".$backup."') ");
		echo $backedup;
	}else if (@$dbuser == $UserID) {
		$bupdb->exec("UPDATE BACKUP SET backup='".$backup."' WHERE user='".$UserID."'");
		echo $backedup;
	}else {
	echo $nouser;
	}
}

if($resetcode == '') {
	if ($Pass == @$dbpass) {
		echo '
{
"tag":"CloudBackup",
"success":"1",
"api_ver":"1.0v",
"backup":"'.@$dbbackup.'",
"msg":"Backup has been downloaded successfully"
}';
		}else{
			echo $badpass;
		}
} else {
	echo $nouser;
	}
---- api/connv2.json ----
{
    "tag": "connv2",
    "success": "0",
    "api_ver": "1.0v",
    "message": "Example Message",
    "msgid": "1646",
    "msg_status": "ACTIVE",
    "msg_expire": "2024-10-17 01:00:59",
    "announcement": "Example Announcement",
    "ann_status": "INACTIVE",
    "ann_expire": "2024-04-30 14:55:59",
    "ann_interval": "2",
    "ann_disappear": "1"
}
SUBDIR includes: . , .. , ad_type.json , footer.php , function.php , header.php , index.php

######## you.cadtech.com.br ########
FILES: . , .. , .db.db , .user.ini , .well-known , APK , api , clients.php , clients1.php , config.ini , control.json , control.php , css , dns_settings.php , img , includes , index.php , index1.php , instrução.txt , js , main.php , main1.php , main2.php , main3.php , resellers.php , settings.php , testes.php , trial , user.php
---- config.ini ----
[Show]
debug = true

[titles]
panel_name = "ADMPro"
brand_name = "ADMPro"
contact = "https://flix-play.com/apks"

---- dns_settings.php ----
<?php
include('includes/header.php');

// Verificar que el usuario es admin
if (!isAdmin($db)) {
    header("Location: main.php");
    exit;
}

$table_name = "dns";
$page = "dns_settings.php";

// Obtener DNS
$res = $db->select($table_name, '*', '', '');

// Actualizar DNS
@$resU = $db->select($table_name, '*', 'id = :id', '', [':id' => $_GET['update']]);

if (isset($_POST['submitU'])) {
    unset($_POST['submitU']);
    $updateData = $_POST;
    $db->update($table_name, $updateData, 'id = :id', [':id' => $_GET['update']]);
    echo "<script>window.location.href='" . $page . "?status=updated'</script>";
}

// Crear nuevo DNS
if (isset($_POST['submit'])) {
    unset($_POST['submit']);
    $db->insert($table_name, $_POST);
    $db->close();
    echo "<script>window.location.href='" . $page . "?status=created'</script>";
}

// Eliminar DNS
if (isset($_GET['delete'])) {
    $db->delete($table_name, 'id = :id', [':id' => $_GET['delete']]);
    echo "<script>window.location.href='" . $page . "?status=deleted'</script>";
}

?>
<div class="modal fade" id="confirm-delete" tabindex="-1" role="dialog" aria-hidden="true">
    <div class="modal-dialog">
        <div class="modal-content bg-dark text-white">
            <div class="modal-header border-secondary">
                <h5 class="modal-title">Confirmar Exclusão</h5>
            </div>
            <div class="modal-body">
                Você realmente deseja excluir este DNS?
            </div>
            <div class="modal-footer border-secondary">
                <button type="button" class="btn btn-secondary" data-dismiss="modal">Cancelar</button>
                <a class="btn btn-danger btn-ok">Excluir</a>
            </div>
        </div>
    </div>
</div>

<?php if (isset($_GET['create'])): ?>
    <div class="col-md-8 mx-auto">
        <div class="card">
            <div class="card-header">
                <h4 class="m-0 text-white"><i class="fa fa-globe"></i> Adicionar Novo DNS</h4>
            </div>
            <div class="card-body">
                <form method="post">
                    <div class="form-group">
                        <label>Título / Nome</label>
                        <input type="text" class="form-control" name="title" placeholder="Ex: Servidor Principal" required>
                    </div>
                    <div class="form-group">
                        <label>URL / DNS</label>
                        <input type="text" class="form-control" name="url" placeholder="http://tuservidor.com:8080"
                            required>
                    </div>
                    <div class="text-center mt-4">
                        <button type="submit" name="submit" class="btn btn-info btn-block">Salvar DNS</button>
                        <a href="dns_settings.php" class="btn btn-secondary btn-block">Voltar</a>
                    </div>
                </form>
            </div>
        </div>
    </div>
<?php elseif (isset($_GET['update'])): ?>
    <div cla...
---- settings.php ----
<?php
include('includes/header.php');

// Verificar que el usuario es admin
if (!isAdmin($db)) {
    header("Location: main.php");
    exit;
}

$page = "settings.php";

// Obtener configuración actual
$panel_name = getPanelConfig($db, 'panel_name', 'Painel Criador de Contas');
$panel_contact = getPanelConfig($db, 'panel_contact', 'Contate o administrador');
$panel_logo = getPanelConfig($db, 'panel_logo', './img/login_logo.png');
$app_link = getPanelConfig($db, 'app_link', '');
$downloader_code = getPanelConfig($db, 'downloader_code', '');

// Guardar configuración
if (isset($_POST['save_settings'])) {
    setPanelConfig($db, 'panel_name', $_POST['panel_name']);
    setPanelConfig($db, 'panel_contact', $_POST['panel_contact']);
    setPanelConfig($db, 'downloader_code', $_POST['downloader_code']);

    // Procesar logo
    if (isset($_FILES['panel_logo']) && $_FILES['panel_logo']['error'] === UPLOAD_ERR_OK) {
        $allowed_types = ['image/png', 'image/jpeg', 'image/gif', 'image/webp'];
        $file_type = $_FILES['panel_logo']['type'];
        if (in_array($file_type, $allowed_types)) {
            $ext = pathinfo($_FILES['panel_logo']['name'], PATHINFO_EXTENSION);
            $new_filename = 'custom_logo_' . time() . '.' . $ext;
            $upload_path = './img/' . $new_filename;
            if (move_uploaded_file($_FILES['panel_logo']['tmp_name'], $upload_path)) {
                setPanelConfig($db, 'panel_logo', $upload_path);
            }
        }
    }

    // Procesar APK
    if (isset($_FILES['app_file']) && $_FILES['app_file']['error'] === UPLOAD_ERR_OK) {
        $ext = pathinfo($_FILES['app_file']['name'], PATHINFO_EXTENSION);
        if (strtolower($ext) === 'apk') {
            $new_filename = 'app_' . time() . '.apk';

            // Garantir que a pasta trial existe
            if (!is_dir('./trial')) {
                mkdir('./trial', 0777, true);
            }

            $upload_path = './trial/' . $new_filename;
            if (move_uploaded_file($_FILES['app_file']['tmp_name'], $upload_path)) {
                setPanelConfig($db, 'app_link', $upload_path);
            }
        }
    }

    echo "<script>alert('Configuração salva com sucesso'); window.location.href='" . $page . "'</script>";
}

// Recargar valores después de guardar
$panel_name = getPanelConfig($db, 'panel_name', 'Painel Criador de Contas');
$panel_contact = getPanelConfig($db, 'panel_contact', 'Contate o administrador');
$panel_logo = getPanelConfig($db, 'panel_logo', './img/login_logo.png');
$app_link = getPanelConfig($db, 'app_link', '');
$downloader_code = getPanelConfig($db, 'downloader_code', '');

?>

<div class="row">
    <div class="col-md-8 mx-auto">
        <div class="card">
            <div class="card-header">
                <h4 class="m-0 text-white"><i class="fa fa-cog"></i> Configuração do Painel</h4>
            </div>
            <div class="card-body">
...
SUBDIR api: . , .. , .db.db , .htaccess , a.php , dns.php , player_api.php , qr.php , renovar_2 , renovar_2.rar , renovar_revenda , test.php , test_users.php , venc_rev.json
---- api/player_api.php ----
<?php
include(__DIR__ . '/../includes/functions.php');

// Define control.json path
define('CONTROL_FILE', __DIR__ . '/../control.json');

// Check if username is provided in the request
if (!isset($_GET['username'])) {
    outecho(0); // No username provided
    exit;
}

// Normalizar os dados enviados pelo app
$_GET['username'] = strtolower(trim($_GET['username']));
if (isset($_GET['password'])) {
    $_GET['password'] = trim($_GET['password']);
}

// Fetch user data from the database
$ret = $db->select('menualuser', '*', 'username = :username', '', [':username' => $_GET['username']]);

// Check user authentication status and generate response
if (paneluser($ret)) {
    // Check device control (fingerprint verification)
    $deviceCheck = checkDeviceControl($_GET['username'], $_GET['password']);

    if ($deviceCheck === true) {
        outecho(1); // User authenticated and device allowed
    } else {
        outecho(3, $deviceCheck); // Device blocked with message
    }
} else {
    outecho(2); // Authentication failed
}

function paneluser($dbdata)
{
    // Check if user data exists
    if (!$dbdata || empty($dbdata)) {
        return false; // User not found
    }

    // Extract user information
    $expired = null;
    $id = $dbdata[0]['id'];
    $title = $dbdata[0]['title'];
    $username = $dbdata[0]['username'];
    $password = $dbdata[0]['password'];
    $expired = $dbdata[0]['expire_date'];

    // Corrige formato dd/mm/yyyy para d-m-Y para o strtotime entender corretamente
    $expired_time = strtotime(str_replace('/', '-', @$expired));
    $expiredT = (time() > $expired_time);
    if ($expiredT) {
        $expired = 0;
    } else {
        $expired = 1;
    }

    // Check username, password, and expiration date
    if (isset($_GET['password']) && $_GET['username'] == $username && $_GET['password'] == $password && $expired >= 1) {
        return true; // User authenticated successfully
    }...
SUBDIR includes: . , .. , db.php , footer.php , functions.php , header.php , index.php , table.php
---- includes/db.php ----
<?php
$dbPath = './api/.db.db';

$db = new SQLiteWrapper($dbPath);



######## fotto.cadtech.com.br ########
FILES: . , .. , .env , .git , .gitignore , .next , .well-known , AGENTS.md , CLAUDE.md , README.md , check_users.ts , eslint.config.mjs , fix_logo.js , fix_sessions.ts , next-env.d.ts , next.config.ts , node_modules , package-lock.json , package.json , prisma , public , scripts , seed.ts , src , test_jwt.ts , tsconfig.json , upgrade_to_saas.ts
---- .env ----
DATABASE_URL="file:./dev.db"
MP_ACCESS_TOKEN="APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384"
EVOLUTION_API_URL="http://75.119.156.103:8080"
EVOLUTION_API_KEY="PQVZ3A4F779NXHNNH7770BI447DRI7C0"
NEXT_PUBLIC_BASE_URL="https://fotto.cadtech.com.br"

---- tsconfig.json ----
{
  "compilerOptions": {
    "target": "ES2017",
    "lib": ["dom", "dom.iterable", "esnext"],
    "allowJs": true,
    "skipLibCheck": true,
    "strict": true,
    "noEmit": true,
    "esModuleInterop": true,
    "module": "esnext",
    "moduleResolution": "bundler",
    "resolveJsonModule": true,
    "isolatedModules": true,
    "jsx": "react-jsx",
    "incremental": true,
    "plugins": [
      {
        "name": "next"
      }
    ],
    "paths": {
      "@/*": ["./src/*"]
    }
  },
  "include": [
    "next-env.d.ts",
    "**/*.ts",
    "**/*.tsx",
    ".next/types/**/*.ts",
    ".next/dev/types/**/*.ts",
    "**/*.mts"
  ],
  "exclude": ["node_modules"]
}

SUBDIR src/lib: . , .. , dateUtils.ts , eventService.ts , prisma.ts , session.ts , whatsappService.ts

######## temploagil.cadtech.com.br ########
FILES: . , .. , .env , .gitignore , .next , .user.ini , AGENTS.md , CLAUDE.md , README.md , check_users.js , check_users.ts , eslint.config.mjs , fix_sessions.ts , iniciar_projeto.bat , next-env.d.ts , next.config.ts , node_modules , package-lock.json , package.json , prisma , public , seed.ts , src , test.js , test_jwt.ts , test_prisma.js , tsconfig.json , tsconfig.tsbuildinfo , upgrade_to_saas.ts
---- .env ----
DATABASE_URL="file:./dev.db"

# Insira suas credenciais abaixo:
MP_ACCESS_TOKEN="APP_USR-6684249455818074-102420-2bafe6fb494c5282bdc5712d93aa29aa-1933348384"
EVOLUTION_API_URL="http://75.119.156.103:8080"
EVOLUTION_API_KEY="PQVZ3A4F779NXHNNH7770BI447DRI7C0"

# URL base pública do seu site na VPS (para Webhooks do Mercado Pago e links)
NEXT_PUBLIC_BASE_URL="https://temploagil.cadtech.com.br"

# Chave de segurança para sessões
JWT_SECRET="temploagil_super_secret_key_2026"
---- tsconfig.json ----
{
  "compilerOptions": {
    "target": "ES2017",
    "lib": ["dom", "dom.iterable", "esnext"],
    "allowJs": true,
    "skipLibCheck": true,
    "strict": true,
    "noEmit": true,
    "esModuleInterop": true,
    "module": "esnext",
    "moduleResolution": "bundler",
    "resolveJsonModule": true,
    "isolatedModules": true,
    "jsx": "react-jsx",
    "incremental": true,
    "plugins": [
      {
        "name": "next"
      }
    ],
    "paths": {
      "@/*": ["./src/*"]
    }
  },
  "include": [
    "next-env.d.ts",
    "**/*.ts",
    "**/*.tsx",
    ".next/types/**/*.ts",
    ".next/dev/types/**/*.ts",
    "**/*.mts"
  ],
  "exclude": ["node_modules"]
}

SUBDIR src/lib: . , .. , prisma.ts , session.ts , whatsapp.ts

######## adm.tech6202.shop ########
FILES: . , .. , .user.ini , Copilot_20260407_195456.png.1745311.upload.tmp , admin.php , api.php , config.json , dashboard.php , dashboard_bg.jpg , dashboard_bg1.jpg , icon-192.png , icon-512.png , index.php , live.php , live_proxy.php , logo.png , logo3.png , logout.php , make_icons.ps1 , make_icons_big.ps1 , manifest.json , stream.php , style.css , sw.js , tv_icon.png , vod.php
---- api.php ----
<?php
session_start();

class XtreamClient {
    private $dns;
    private $creds;
    private $config;

    public function __construct() {
        // Carrega as configurações
        $this->config = json_decode(file_get_contents('config.json'), true);
        
        // Se o usuário já estiver logado, recupera o DNS que funcionou para ele
        if (isset($_SESSION['dns'])) {
            $this->dns = $_SESSION['dns'];
        }
        
        $this->creds = $_SESSION['credentials'] ?? [];
    }

    /**
     * Sistema de Login Inteligente (Multi-DNS)
     * Tenta logar em cada DNS cadastrado sequencialmente.
     */
    public function login($user, $pass) {
        // Monta lista de servidores disponíveis
        $servers = [];
        if (!empty($this->config['dns_1'])) $servers[] = rtrim($this->config['dns_1'], '/');
        if (!empty($this->config['dns_2'])) $servers[] = rtrim($this->config['dns_2'], '/');
        if (!empty($this->config['dns_3'])) $servers[] = rtrim($this->config['dns_3'], '/');
        
        // Fallback para versões antigas (caso use 'dns_url')
        if (!empty($this->config['dns_url']) && empty($servers)) {
            $servers[] = rtrim($this->config['dns_url'], '/');
        }

        // Loop para testar cada servidor
        foreach ($servers as $server) {
            $url = "{$server}/player_api.php?username={$user}&password={$pass}";
            
            // Usa timeout curto (3s) para não travar se um servidor estiver offline
            $response = $this->request($url, true); 

            if (isset($response['user_info']['auth']) && $response['user_info']['auth'] == 1) {
                // SUCESSO! Encontramos o servidor correto
                $_SESSION['user_data'] = $response;
                $_SESSION['credentials'] = ['username' => $user, 'password' => $pass];
                $_SESSION['dns'] = $server; // Salva QUAL servidor funcionou
                $this->dns = $server;       // Define na classe atual
                return true;
            }
        }

        // Se o loop terminar e não retornar true, falhou em todos
        return false;
    }
    // Pega EPG Curto (Programa Atual)
    public function getShortEpg($stream_id) {
        // limit=1 pega apenas o programa atual
        return $this->get('get_short_epg', ['stream_id' => $stream_id, 'limit' => 1]);
    }
    // --- MÉTODOS DE CONTEÚDO ---
    
    // Pega detalhes de um Filme
    public function getVodInfo($vod_id) {
        return $this->get('get_vod_info', ['vod_id' => $vod_id]);
    }

    // --- LIVE TV ---
    public function getLiveCategories() { return $this->get('get_live_categories'); }
    public function getLiveStreams($cat_id = null) { return $this->get('get_live_streams', ['category_id' => $cat_id]); }

    // --- FILMES (VOD) ---
    public function getVodCategories() { return $this->get('get_vod_categories'); }
    public functio...
---- config.json ----
{"dns_1":"https:\/\/admpremium.cadtech.com.br","dns_2":"http:\/\/sky.tech6202.shop","dns_3":"http:\/\/ded11.com"}

######## onix.tech6202.shop ########
FILES: . , .. , .htaccess , .user.ini , .well-known , api , backup.php , backups , canais.php , categorias.php , categories , clientes.php , config_pix.php , css , dashboard.php , filmes.php , get.php , img , index.php , index1.php , js , menu.php , menu1.php , panel_api.php , planos.php , player_api.php , processar-tmdb.php , public , redirecionar-live.php , redirecionar-series.php , redirecionar-vod.php , renova_mp , revendedores.php , separar_categorias.php , serie.php , setup_db.php , ssiptv.php , testes-auto.php , testes.php , trial , uploud.php , xmltv , xmltv.php
---- config_pix.php ----
<?php
// config_pix.php - Painel Administrativo de Planos e API (Mercado Pago)
session_start();
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/db.php');
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/checkLogout.php');

checkLogout();

// Verificar que o usuário é admin nível 1
if (!isset($_SESSION['nivel_admin']) || $_SESSION['nivel_admin'] != 1) {
    header("Location: /dashboard.php");
    exit;
}

$configFile = __DIR__ . '/renova_mp/config.json';

// Carrega configurações existentes
$config = [
    'access_token' => '',
    'planos' => []
];

if (file_exists($configFile)) {
    $config = json_decode(file_get_contents($configFile), true);
}

// Processa salvamento do Token (ANTES de qualquer output)
if (isset($_POST['save_token'])) {
    $config['access_token'] = $_POST['access_token'];
    file_put_contents($configFile, json_encode($config, JSON_PRETTY_PRINT));
    header("Location: " . $_SERVER['REQUEST_URI'] . (strpos($_SERVER['REQUEST_URI'], '?') === false ? '?' : '&') . "msg=" . urlencode("Token salvo com sucesso!"));
    exit;
}

// Processa adição de Plano (ANTES de qualquer output)
if (isset($_POST['add_plan'])) {
    $novo_plano = [
        'id' => uniqid(),
        'nome' => $_POST['nome'],
        'valor' => (float) $_POST['valor'],
        'dias' => (int) $_POST['dias']
    ];
    $config['planos'][] = $novo_plano;
    file_put_contents($configFile, json_encode($config, JSON_PRETTY_PRINT));
    header("Location: " . strtok($_SERVER['REQUEST_URI'], '?') . "?msg=" . urlencode("Plano adicionado com sucesso!"));
    exit;
}

// Processa exclusão de Plano (ANTES de qualquer output)
if (isset($_GET['del'])) {
    $id_del = $_GET['del'];
    $config['planos'] = array_values(array_filter($config['planos'], function ($p) use ($id_del) {
        return $p['id'] !== $id_del;
    }));
    file_put_contents($configFile, json_encode($config, JSON_PRETTY_PRINT));
    header("Location: " . strtok($_SERVER['REQUEST_URI'], '?') . "?msg=" . urlencode("Plano removido com sucesso!"));
    exit;
}

$msg = $_GET['msg'] ?? null;

// URL do portal do cliente
$protocol = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https" : "http";
$universal_url = $protocol . "://" . $_SERVER['HTTP_HOST'] . "/renova_mp/consulta_user.php";

// Inclui o menu do projeto (já contém session_start, autenticação, etc.)
require_once('menu.php');
?>

<style>
    /* ===== CONFIG PIX - Estilos ===== */

    .pix-card {
        background: #1a1c22 !important;
        border: 1px solid rgba(255, 255, 255, 0.08) !important;
        border-radius: 18px !important;
        padding: 28px !important;
        margin-bottom: 25px !important;
        box-shadow: 0 8px 25px rgba(0, 0, 0, 0.4) !important;
    }

    .pix-card h5 {
        font-weight: 800 !important;
        letter-spacing: -0.5px !important;
        color: #fff !important;
        margin-bottom: 20px...
---- panel_api.php ----
<?php
header('Content-Type: text/plain; charset=UTF-8');  // Resposta em texto, mas com conteúdo JSON
header('Access-Control-Allow-Origin: *'); // Permite requisições de qualquer origem


// Conecta-se ao banco de dados de usuários
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/db.php');

date_default_timezone_set('America/Sao_Paulo');
$username = isset($_GET['username']) ? $_GET['username'] : null;
$password = isset($_GET['password']) ? $_GET['password'] : null;

//Autenticação /player_api.php?username=X&password=X
if (!$username || !$password) {
    http_response_code(401); // 401 Unauthorized
   $errorResponse['user_info'] = array();
   $errorResponse['user_info']['auth'] = 0;
   $errorResponse['user_info']['msg'] = "username e password necessario!";
    echo json_encode($errorResponse);
    exit();
}

// Conexão com o banco de dados
$conexao = conectar_bd();

// Busca os dados do usuário
$query = "SELECT * FROM clientes WHERE usuario = :username AND senha = :password";
$statement = $conexao->prepare($query);
$statement->bindValue(':username', $username);
$statement->bindValue(':password', $password);
$statement->execute();
$result = $statement->fetch(PDO::FETCH_ASSOC);

if (!$result) {
    http_response_code(401); // 401 Unauthorized
    echo json_encode([["auth" => 0]]);
    exit();
}

// Processa informações do usuário
$exp_date = strtotime($result['Vencimento']);
$created_at = strtotime($result['Criado_em']);
$status = ($exp_date < time()) ? "Inactive" : "Active";
$auth = ($status === "Active") ? "1" : "0";

// Informações do usuário
$user_info = [
    "username" => $result['usuario'],
    "password" => $result['senha'],
    "auth" => $auth,
    "status" => $status,
    "exp_date" => "$exp_date",
    "is_trial" => "{$result['is_trial']}",
    "active_cons" => "1",
    "created_at" => "$created_at",
    "max_connections" => "{$result['conexoes']}",
    "allowed_output_formats" => ["m3u8", "ts", "rtmp"]
];

// Informações do servidor
$server_info = [
    "url" => $_SERVER['HTTP_HOST'],
    "port" => $_SERVER['SERVER_PORT'],
    "https_port" => "443",
    "server_protocol" => $_SERVER['REQUEST_SCHEME']
];

// Obtenção das categorias
$categorias = ["movie" => [], "live" => [], "series" => []];
$tipos = ["movie" => "get_vod_categories", "live" => "get_live_categories", "series" => "get_series_categories"];
$mapa_categorias = []; // Mapeia category_id -> category_name

foreach ($tipos as $tipo => $acao) {
    $query = $conexao->prepare("SELECT * FROM categoria WHERE type = :type");
    $query->bindValue(":type", $tipo);
    $query->execute();

    while ($row = $query->fetch(PDO::FETCH_ASSOC)) {
        $categorias[$tipo][] = [
            "category_id" => (string)$row["id"],
            "category_name" => $row["nome"],
            "parent_id" => $row["parent_id"]
        ];
        // Mapeia o ID da categoria para o nome
        $mapa...
---- player_api.php ----
<?php
// Conecta-se ao banco de dados de usuários
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/db.php');
header('Content-Type: application/json; charset=utf-8');
header('Connection: close');
header('Access-Control-Allow-Credentials: *');
date_default_timezone_set('America/Sao_Paulo');

$userAgent = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '';

$url = $_SERVER['HTTP_HOST'];
$username = isset($_GET['username']) ? $_GET['username'] : null;
$password = isset($_GET['password']) ? $_GET['password'] : null;
$action = isset($_GET['action']) ? $_GET['action'] : null;
$series_id = isset($_GET['series_id']) ? $_GET['series_id'] : null;
$vod_id = isset($_GET['vod_id']) ? $_GET['vod_id'] : null;
$category_id = isset($_GET['category_id']) ? $_GET['category_id'] : null;
$type = isset($_GET['type']) ? $_GET['type'] : null;

if ($category_id === "*") {
    $category_id = null;
}

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['action']) && isset($_POST['series_id'])) {
    $username = $_POST['username'];
    $password = $_POST['password'];
    $action = $_POST['action'];
    $series_id = $_POST['series_id'];
    header('Location: player_api.php?username=' . urlencode($username) . '&password=' . urlencode($password) . '&action=' . urlencode($action) . '&series_id=' . urlencode($series_id));
    exit;
}

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['action'])) {
    $username = $_POST['username'];
    $password = $_POST['password'];
    $action = $_POST['action'];
    header('Location: player_api.php?username=' . urlencode($username) . '&password=' . urlencode($password) . '&action=' . urlencode($action));
    exit;
}
if (isset($_POST['username']) && isset($_POST['password'])) {
    $username = $_POST['username'];
    $password = $_POST['password'];
    exit;
}

//Autenticação /player_api.php?username=X&password=X
if (!$username || !$password) {
    http_response_code(401); // 401 Unauthorized
    $errorResponse['user_info'] = array();
    $errorResponse['user_info']['auth'] = 0;
    $errorResponse['user_info']['msg'] = "username e password necessario!";
    echo json_encode($errorResponse);
    exit();
}

$conexao = conectar_bd();
$query = "SELECT *
                    FROM clientes
                    WHERE usuario = :username AND senha = :password";
$statement = $conexao->prepare($query);
$statement->bindValue(':username', $username);
$statement->bindValue(':password', $password);
$statement->execute();
$result = $statement->fetch(PDO::FETCH_ASSOC);
if (!$result) {
    http_response_code(401); // 401 Unauthorized
    $errorResponse = json_encode(["user_info" => ["auth" => 0]]);
    echo $errorResponse;
    exit();
}

// --- LÓGICA DE BLOQUEIO DE CATEGORIAS ---
$blocked_cats_sql_IN = "";     // Para tabelas onde a coluna é 'id' (tabela categoria)
$blocked_cats_sql_CAT = "";    // Para tabelas...
---- processar-tmdb.php ----
<?php
session_start();
if (!isset($_SESSION['nivel_admin']) || $_SESSION['nivel_admin'] == 0) {
    header("Location: ./clientes.php");
    exit();
}
require_once("menu.php");
?>

<div class="container mt-4">
    <div class="row justify-content-center">
        <div class="col-md-10">
            <div class="card shadow-lg border-0" style="background: #1a1f2e; color: #e2e8f0; border-radius: 15px;">
                <div class="card-header bg-transparent border-0 pt-4 px-4">
                    <h3 class="mb-0">
                        <i class="fa-solid fa-database text-info me-2"></i>
                        Atualizar TMDB
                    </h3>

                </div>

                <div class="card-body p-4">
                    <!-- Dashboard Simple Stats -->
                    <div class="row mb-4">
                        <div class="col-md-6 mb-3">
                            <div class="p-4 rounded shadow-sm"
                                style="background: rgba(13, 202, 240, 0.1); border: 1px solid rgba(13, 202, 240, 0.2);">
                                <div class="d-flex align-items-center">
                                    <div class="flex-shrink-0 bg-info rounded-circle p-3 text-dark">
                                        <i class="fas fa-clapperboard fa-2x"></i>
                                    </div>
                                    <div class="flex-grow-1 ms-3">
                                        <div class="small text-info mb-1 text-uppercase fw-bold">Filmes sem TMDB</div>
                                        <div class="d-flex align-items-center gap-3">
                                            <h2 class="mb-0 text-info" id="countMovies">0</h2>
                                            <span class="badge bg-danger cursor-pointer p-2" id="nfMoviesBtn"
                                                onclick="showFailures('movie')"
                                                style="font-size: 11px; cursor: pointer;"
                                                title="Clique para ver quem não foi encontrado">0 falhas</span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                        </div>
                        <div class="col-md-6 mb-3">
                            <div class="p-4 rounded shadow-sm"
                                style="background: rgba(255, 193, 7, 0.1); border: 1px solid rgba(255, 193, 7, 0.2);">
                                <div class="d-flex align-items-center">
                                    <div class="flex-shrink-0 bg-warning rounded-circle p-3 text-dark">
                                        <i class="fas fa-film fa-2x"></i>
                                    </div>
                                    <div class="flex-grow-1 ms-3">
                                        <div...
---- setup_db.php ----
<?php
// Script de configuração do banco de dados para o sistema de bloqueio de conexões

require_once "api/controles/db.php";

$conexao = conectar_bd();

$sql = "CREATE TABLE IF NOT EXISTS `conexoes_ativas` (
    `id` int(11) NOT NULL AUTO_INCREMENT,
    `cliente_id` int(11) NOT NULL,
    `ip` varchar(45) NOT NULL,
    `user_agent` text NOT NULL,
    `last_activity` timestamp DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
    `stream_id` varchar(255) DEFAULT NULL,
    PRIMARY KEY (`id`),
    INDEX (`cliente_id`),
    INDEX (`last_activity`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;";

try {
    $conexao->exec($sql);
    echo "Tabela conexoes_ativas criada ou já existente.\n";
} catch (PDOException $e) {
    echo "Erro ao criar tabela: " . $e->getMessage() . "\n";
}
?>
SUBDIR api: . , .. , ads.php , backup.php , cache.json , canais.php , categorias.php , clientes.php , controles , filmes.php , index.php , limpar-cache.php , listar-clientes.php , login.php , planos.php , planos_renovacao.json , processar-tmdb.php , qr-planos.php , renovacao_api.php , revendedores.php , series.php , testes-auto.php , testes.php , upload-apk.php
---- api/processar-tmdb.php ----
<?php
session_start();
require_once('controles/db.php');
require_once('controles/tmdb-helper.php');
header('Content-Type: application/json');

if (!isset($_SESSION['admin_id'])) {
    echo json_encode(['error' => 'Sessão expirada']);
    exit;
}

$type = isset($_POST['type']) ? $_POST['type'] : 'movie';
$action = isset($_POST['action']) ? $_POST['action'] : 'process';

if ($action === 'getCounts') {
    $conexao = conectar_bd();

    // Pendentes: tmdb_id é vazio, 0 ou nulo
    $pendingMovies = $conexao->query("SELECT COUNT(*) FROM streams WHERE stream_type = 'movie' AND (tmdb_id IS NULL OR tmdb_id = '0' OR tmdb_id = '')")->fetchColumn();
    $pendingSeries = $conexao->query("SELECT COUNT(*) FROM series WHERE (tmdb_id IS NULL OR tmdb_id = '0' OR tmdb_id = '')")->fetchColumn();

    // Não encontrados (tmdb_id = -1)
    $nfMovies = $conexao->query("SELECT COUNT(*) FROM streams WHERE stream_type = 'movie' AND tmdb_id = '-1'")->fetchColumn();
    $nfSeries = $conexao->query("SELECT COUNT(*) FROM series WHERE tmdb_id = '-1'")->fetchColumn();

    echo json_encode([
        'movies' => (int) $pendingMovies,
        'series' => (int) $pendingSeries,
        'nf_movies' => (int) $nfMovies,
        'nf_series' => (int) $nfSeries
    ]);
    exit;
}

if ($action === 'getFailures') {
    $conexao = conectar_bd();
    $table = ($type === 'movie') ? 'streams' : 'series';
    $sql = ($type === 'movie') ? "SELECT id, name FROM $table WHERE stream_type = 'movie' AND tmdb_id = '-1' LIMIT 100" : "SELECT id, name FROM $table WHERE tmdb_id = '-1' LIMIT 100";
    $items = $conexao->query($sql)->fetchAll(PDO::FETCH_ASSOC);
    echo json_encode(['items' => $items]);
    exit;
}

if ($action === 'resetFailures') {
    $conexao = conectar_bd();
    $conexao->query("UPDATE streams SET tmdb_id = '0' WHERE tmdb_id = '-1'");
    $conexao->query("UPDATE series SET tmdb_id = '0' WHERE tmdb_id = '-1'");
    echo json_encode(['success' => true]);
...
---- api/renovacao_api.php ----
<?php
session_start();
header('Content-Type: application/json; charset=utf-8');

define('PLANOS_FILE', __DIR__ . '/planos_renovacao.json');

function getPlanos()
{
    if (!file_exists(PLANOS_FILE)) {
        return [];
    }
    return json_decode(file_get_contents(PLANOS_FILE), true);
}

function savePlanos($planos)
{
    return file_put_contents(PLANOS_FILE, json_encode($planos, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
}

$action = $_POST['action'] ?? $_GET['action'] ?? '';

switch ($action) {

    // 🔓 PÚBLICO (sem login)
    case 'get':
        echo json_encode([
            'success' => true,
            'planos' => getPlanos()
        ]);
        break;

    // 🔒 SOMENTE ADMIN
    case 'save':
        require_once('./controles/checkLogout.php');
        checkLogoutapi();

        if (!isset($_SESSION['nivel_admin']) || $_SESSION['nivel_admin'] != 1) {
            echo json_encode(['success' => false, 'message' => 'Acesso negado.']);
            exit;
        }

        $planos = $_POST['planos'] ?? null;
        if ($planos) {
            $planos_decoded = json_decode($planos, true);
            if (savePlanos($planos_decoded)) {
                echo json_encode(['success' => true, 'message' => 'Planos salvos com sucesso!']);
            } else {
                echo json_encode(['success' => false, 'message' => 'Erro ao salvar arquivo.']);
            }
        }
        break;

    default:
        echo json_encode(['success' => false, 'message' => 'Ação inválida.']);
        break;
}


######## admlite.tech6202.shop ########
FILES: . , .. , .user.ini , .well-known , all_users.php , announcement.php , api , app.php , appads.php , css , error_log , img , includes , index.php , index1.php , interface.php , intro.php , js , language.php , logo.php , logout.php , maintenance.php , message.php , parental_reset.php , player.php , sports.php , theme.php , tmdb.php , tmdb_api.php , update.php , user_update.php , vpn.php
---- tmdb.php ----
<?php
error_reporting(0);
include "includes/header.php";

$db = new SQLite3("./api/.bet_tmdb.db");
$table_name = "api_key";
$db->exec("CREATE TABLE IF NOT EXISTS " . $table_name . " (id INTEGER PRIMARY KEY, key TEXT)");

$rows = $db->query("SELECT COUNT(*) as count FROM " . $table_name);
$row = $rows->fetchArray();
$numRows = $row["count"];

if ($numRows == 0) {
    $db->exec("INSERT INTO " . $table_name . "(key) VALUES('')");
	
	
}



if ($_SERVER["REQUEST_METHOD"] === "POST") {
    if (isset($_POST["submit"])) {
        $newKey = $_POST["key"]; // No validation/sanitization here for demonstration purposes

        // Use prepared statements to prevent SQL injection
        $stmt = $db->prepare("UPDATE " . $table_name . " SET key = :newKey WHERE id = 1");
        $stmt->bindValue(':newKey', $newKey, SQLITE3_TEXT);
        $stmt->execute();
    
    } elseif (isset($_POST["deleteCache"])) {
        // Specify the path to your JSON cache file
        $cacheFilePath = "./api/cache/combined_cache.json";

        // Check if the cache file exists and delete it
        if (file_exists($cacheFilePath)) {
            unlink($cacheFilePath); // Delete the cache file
        }
    }
}

$res = $db->query("SELECT * FROM " . $table_name . " WHERE id = 1");
$rowU = $res->fetchArray();


if (empty($rowU['key'])) {
    echo '<div class="alert alert-warning" role="alert">
        You must add your tMDB API key before using the app. Follow the instructions below to add your API key.
    </div>';
} 

?>
<div class="card border-left-primary shadow h-100 card shadow mb-4">
        <div class="card-header py-3">
                <div class="card-body">
                                <div class="card mb-4">
                                    <div class="card-header bg-primary py-3">
                                        <h4 align="center" class="m-0 font-weight-bold text-blue">
                                            <i class="fa fa-key" style="font-size:20px"></i>   
                                            Get Your TMDB API Key 
                                        </h4>
                                    </div>
                                    <div class="card-body">
                                        <!-- Add instructions here -->
                                        <p style="font-size: 16px;">
                                            To use this application, you need to have a TMDB API key. Follow these steps to obtain your API key:
                                        </p>
                                        <ol>
                                            <li>Visit the TMDB website at <a href="https://www.themoviedb.org" target="_blank" style="font-weight: bold; color: #007bff; text-decoration: underline;">https://www.themoviedb.org/</a></li>
                                            <li>Sign in or create an account if you don't have one.</li>
                                            <li>To register for an API key, click...
---- tmdb_api.php ----
<?php
error_reporting(E_ALL);
ini_set('display_errors', 1);

include "includes/header.php";

$db = new SQLite3("./api/.bet_tmdb.db");
$table_name = "api_key";
$db->exec("CREATE TABLE IF NOT EXISTS " . $table_name . " (id INTEGER PRIMARY KEY, key TEXT, language TEXT)");

$rows = $db->query("SELECT COUNT(*) as count FROM " . $table_name);
$row = $rows->fetchArray();
$numRows = $row["count"];

if ($numRows == 0) {
    $db->exec("INSERT INTO " . $table_name . "(key, language) VALUES('', 'en-US')");
}

if ($_SERVER["REQUEST_METHOD"] === "POST") {
    echo "Form submitted"; // Add this line to confirm form submission

    if (isset($_POST["submit"])) {
        $newKey = $_POST["key"]; // No validation/sanitization here for demonstration purposes
        $language = $_POST["language"];

        // Use prepared statements to prevent SQL injection
        $stmt = $db->prepare("UPDATE " . $table_name . " SET key = :newKey, language = :language WHERE id = 1");
        $stmt->bindValue(':newKey', $newKey, SQLITE3_TEXT);
        $stmt->bindValue(':language', $language, SQLITE3_TEXT);
        $stmt->execute();

        header("Location: tmdb_api.php");
        exit();
    
    } elseif (isset($_POST["deleteCache"])) {
        // Specify the path to your JSON cache file
        $cacheFilePath = "./api/cache/combined_cache.json";

        // Check if the cache file exists and delete it
        if (file_exists($cacheFilePath)) {
            unlink($cacheFilePath); // Delete the cache file
        }

        // Redirect and exit
        header("Location: tmdb_api.php");
        exit();
    }
}

$res = $db->query("SELECT * FROM " . $table_name . " WHERE id = 1");
$rowU = $res->fetchArray();

if (empty($rowU['key'])) {
    echo '<div class="alert alert-warning" role="alert">
        You must add your tMDB API key before using the app. Follow the instructions below to add your API key.
    </div>';
} 

?>
<div class="card border-left-primary shadow h-100 card shadow mb-4">
    <div class="card-header py-3">
        <div class="card-body">
            <div class="card mb-4">
                <div class="card-header bg-primary py-3">
                    <h4 align="center" class="m-0 font-weight-bold text-blue">
                        <i class="fa fa-key" style="font-size:20px"></i>   
                        Get Your tMDB API Key 
                    </h4>
                </div>
                <div class="card-body">
                    <!-- Add instructions here -->
                    <p style="font-size: 16px;">
                        To use this application, you need to have a tMDB API key. Follow these steps to obtain your API key:
                    </p>
                    <ol>
                        <li>Visit the tMDB website at <a href="https://www.themoviedb.org" target="_blank" style="font-weight: bold; color: #007bff; text-decoration: underline;">https://www.themoviedb.org/</a></li>
                        <li>Sign in or create an account if you don't h...
SUBDIR api: . , .. , .bet_tmdb.db , .db.db , ApiIPTV.php , CloudBackup.php , backdrop.php , backdropFilmes .php , betstyle.css , cache , connv2.json , error_log , index.php , main.json , movies.php , movies_script.js , sports.db , sports.php , user_logs.db , user_message.db
---- api/ApiIPTV.php ----
<?php
$Tag = $_GET['tag'];
@$UserID = $_GET['userid'];

$key = "mysecretkeywsdef";
$iv = "myuniqueivparamu";
$PING = date('d-m-Y H:i:s');

$json_file = "main.json";
$jsondata = file_get_contents($json_file);
$arrayData = json_decode($jsondata, true);
$json = $arrayData['app'];



$l =  $_REQUEST['l'];
$an = $_REQUEST['an'];
$el = $_REQUEST['el'];
$ea = $_REQUEST['ea'];
$eb = $_REQUEST['eb'];
$key2 = $an.$json['customerid'];

function encode($str, $key){
	$sb = "";
	for ($i = 0; $i < strlen($str); $i++){
		 $sb .= (chr((ord($str[$i]) ^ ord($key[$i % strlen($key)]))));
	}
	return base64_encode($sb);
}

function sanitize($data) {
	$data = trim($data);
	$data = htmlspecialchars($data, ENT_QUOTES );
	$data = SQLite3::escapeString($data);
	return $data;
}

if (isset($_GET['tag'])){
	if ($Tag == "licV3"){
		echo bin2hex(openssl_encrypt(file_get_contents($json_file) , "AES-128-CBC", $key, OPENSSL_RAW_DATA, $iv));
	}
	if ($Tag == "licV4"){
		echo '
{
  "success": "1",
  "status": "ACTIVE",
  "cid": "'.$json["customerid"].'",
  "which": "licV4",
  "app": "'.encode(' {
    "id": "'.$json["id"].'",
    "appname": "'.$json["appname"].'",
    "expire": "'.$json["expire"].'",
    "login_type": "'.$json["login_type"].'",
    "version_code": "'.$json["version_code"].'",
    "filter_status": "'.$json["filter_status"].'",
    "epg_mode": "'.$json["epg_mode"].'",
    "apkautoupdate": "'.$json["apkautoupdate"].'",
    "show_expire": "'.$json["show_expire"].'"
  }', $key2.'app') .'",
  "portal": "'.encode(' {
    "panel": "'.$json["panel"].'",
    "portal": "'.$json["portal"].'",
    "portal2": "'.$json["portal2"].'",
    "portal3": "'.$json["portal3"].'",
    "portal4": "'.$json["portal4"].'",
    "portal5": "'.$json["portal5"].'",
    "portal_name": "'.$json["portal_name"].'",
    "portal2_name": "'.$json["portal2_name"].'",
    "portal3_name": "'.$json["portal3_name"].'",
    "portal4_name": "'.$json["portal4_name"].'",
    "portal5_name": "'.$json["portal5_name"].'",
    "portal_vod"...
---- api/CloudBackup.php ----
<?php
error_reporting(E_ALL);
ini_set('display_errors', 'On');

@$resetcode = $_POST['resetcode'];
@$backup = $_REQUEST['backup'];
@$UserID = $_REQUEST['user'];
@$Pass = $_REQUEST['pass'];

$bupdb = new SQLite3('./.bu.db');
$bupdb->exec("CREATE TABLE IF NOT EXISTS BACKUP(id INTEGER PRIMARY KEY ,user TEXT, pass TEXT, resetcode TEXT, backup TEXT)");

$backedup = '{
	"tag":"CloudBackup",
	"success":"1",
	"api_ver":"1.0v",
	"version":"1.0",
	"msg":"Your backup has been completed successfully"
}';
						  
$badpass = '{
	"tag":"CloudBackup",
	"success":"0",
	"api_ver":"1.0v",
	"version":"1.0",
	"msg":"Backup Password is incorrect. Please check your password and try again. Code: BPE"
}';

$nouser = '{"tag":"CloudBackup","success":"0","api_ver":"1.0v","version":"1.0","msg":"Your Cloud Backup has been failed. Please try again or contact support. Code: JE"}';

$bupres = $bupdb->query("SELECT * FROM BACKUP WHERE user='".$UserID."'");

while($buprow=$bupres->fetchArray()) {
	$dbuser = $buprow['user'];
	$dbpass = $buprow['pass'];
	$dbresetcode = $buprow['resetcode'];
	$dbbackup = $buprow['backup'];
}

if(isset($resetcode)) {
	if(@$dbuser !== $UserID) {
		$bupdb->exec("INSERT INTO BACKUP (user, pass, resetcode, backup) VALUES('".$UserID."', '".$Pass."', '".$resetcode."', '".$backup."') ");
		echo $backedup;
	}else if (@$dbuser == $UserID) {
		$bupdb->exec("UPDATE BACKUP SET backup='".$backup."' WHERE user='".$UserID."'");
		echo $backedup;
	}else {
	echo $nouser;
	}
}

if($resetcode == '') {
	if ($Pass == @$dbpass) {
		echo '
{
"tag":"CloudBackup",
"success":"1",
"api_ver":"1.0v",
"backup":"'.@$dbbackup.'",
"msg":"Backup has been downloaded successfully"
}';
		}else{
			echo $badpass;
		}
} else {
	echo $nouser;
	}
---- api/connv2.json ----
{
    "tag": "connv2",
    "success": "0",
    "api_ver": "1.0v",
    "message": "Example Message",
    "msgid": "1646",
    "msg_status": "ACTIVE",
    "msg_expire": "2024-10-17 01:00:59",
    "announcement": "Example Announcement",
    "ann_status": "INACTIVE",
    "ann_expire": "2024-04-30 14:55:59",
    "ann_interval": "2",
    "ann_disappear": "1"
}
SUBDIR includes: . , .. , ad_type.json , footer.php , function.php , header.php , index.php

######## sky.tech6202.shop ########
FILES: . , .. , .htaccess , .user.ini , .well-known , api , backup.php , backups , canais.php , categorias.php , categories , clientes.php , config_pix.php , css , dashboard.php , filmes.php , get.php , img , index.php , index1.php , js , menu.php , menu1.php , panel_api.php , planos.php , player_api.php , processar-tmdb.php , public , public.zip , redirecionar-live.php , redirecionar-series.php , redirecionar-vod.php , renova_mp , renova_mp1 , revendedores.php , separar_categorias.php , serie.php , setup_db.php , ssiptv.php , testes-auto.php , testes.php , trial , uploud.php , xmltv , xmltv.php
---- config_pix.php ----
<?php
// config_pix.php - Painel Administrativo de Planos e API (Mercado Pago)
session_start();
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/db.php');
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/checkLogout.php');

checkLogout();

// Verificar que o usuário é admin nível 1
if (!isset($_SESSION['nivel_admin']) || $_SESSION['nivel_admin'] != 1) {
    header("Location: /dashboard.php");
    exit;
}

$configFile = __DIR__ . '/renova_mp/config.json';

// Carrega configurações existentes
$config = [
    'access_token' => '',
    'planos' => []
];

if (file_exists($configFile)) {
    $config = json_decode(file_get_contents($configFile), true);
}

// Processa salvamento do Token (ANTES de qualquer output)
if (isset($_POST['save_token'])) {
    $config['access_token'] = $_POST['access_token'];
    file_put_contents($configFile, json_encode($config, JSON_PRETTY_PRINT));
    header("Location: " . $_SERVER['REQUEST_URI'] . (strpos($_SERVER['REQUEST_URI'], '?') === false ? '?' : '&') . "msg=" . urlencode("Token salvo com sucesso!"));
    exit;
}

// Processa adição de Plano (ANTES de qualquer output)
if (isset($_POST['add_plan'])) {
    $novo_plano = [
        'id' => uniqid(),
        'nome' => $_POST['nome'],
        'valor' => (float) $_POST['valor'],
        'dias' => (int) $_POST['dias']
    ];
    $config['planos'][] = $novo_plano;
    file_put_contents($configFile, json_encode($config, JSON_PRETTY_PRINT));
    header("Location: " . strtok($_SERVER['REQUEST_URI'], '?') . "?msg=" . urlencode("Plano adicionado com sucesso!"));
    exit;
}

// Processa exclusão de Plano (ANTES de qualquer output)
if (isset($_GET['del'])) {
    $id_del = $_GET['del'];
    $config['planos'] = array_values(array_filter($config['planos'], function ($p) use ($id_del) {
        return $p['id'] !== $id_del;
    }));
    file_put_contents($configFile, json_encode($config, JSON_PRETTY_PRINT));
    header("Location: " . strtok($_SERVER['REQUEST_URI'], '?') . "?msg=" . urlencode("Plano removido com sucesso!"));
    exit;
}

$msg = $_GET['msg'] ?? null;

// URL do portal do cliente
$protocol = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https" : "http";
$universal_url = $protocol . "://" . $_SERVER['HTTP_HOST'] . "/renova_mp/consulta_user.php";

// Inclui o menu do projeto (já contém session_start, autenticação, etc.)
require_once('menu.php');
?>

<style>
    /* ===== CONFIG PIX - Estilos ===== */

    .pix-card {
        background: #1a1c22 !important;
        border: 1px solid rgba(255, 255, 255, 0.08) !important;
        border-radius: 18px !important;
        padding: 28px !important;
        margin-bottom: 25px !important;
        box-shadow: 0 8px 25px rgba(0, 0, 0, 0.4) !important;
    }

    .pix-card h5 {
        font-weight: 800 !important;
        letter-spacing: -0.5px !important;
        color: #fff !important;
        margin-bottom: 20px...
---- panel_api.php ----
<?php
header('Content-Type: text/plain; charset=UTF-8');  // Resposta em texto, mas com conteúdo JSON
header('Access-Control-Allow-Origin: *'); // Permite requisições de qualquer origem


// Conecta-se ao banco de dados de usuários
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/db.php');

date_default_timezone_set('America/Sao_Paulo');
$username = isset($_GET['username']) ? $_GET['username'] : null;
$password = isset($_GET['password']) ? $_GET['password'] : null;

//Autenticação /player_api.php?username=X&password=X
if (!$username || !$password) {
    http_response_code(401); // 401 Unauthorized
   $errorResponse['user_info'] = array();
   $errorResponse['user_info']['auth'] = 0;
   $errorResponse['user_info']['msg'] = "username e password necessario!";
    echo json_encode($errorResponse);
    exit();
}

// Conexão com o banco de dados
$conexao = conectar_bd();

// Busca os dados do usuário
$query = "SELECT * FROM clientes WHERE usuario = :username AND senha = :password";
$statement = $conexao->prepare($query);
$statement->bindValue(':username', $username);
$statement->bindValue(':password', $password);
$statement->execute();
$result = $statement->fetch(PDO::FETCH_ASSOC);

if (!$result) {
    http_response_code(401); // 401 Unauthorized
    echo json_encode([["auth" => 0]]);
    exit();
}

// Processa informações do usuário
$exp_date = strtotime($result['Vencimento']);
$created_at = strtotime($result['Criado_em']);
$status = ($exp_date < time()) ? "Inactive" : "Active";
$auth = ($status === "Active") ? "1" : "0";

// Informações do usuário
$user_info = [
    "username" => $result['usuario'],
    "password" => $result['senha'],
    "auth" => $auth,
    "status" => $status,
    "exp_date" => "$exp_date",
    "is_trial" => "{$result['is_trial']}",
    "active_cons" => "1",
    "created_at" => "$created_at",
    "max_connections" => "{$result['conexoes']}",
    "allowed_output_formats" => ["m3u8", "ts", "rtmp"]
];

// Informações do servidor
$server_info = [
    "url" => $_SERVER['HTTP_HOST'],
    "port" => $_SERVER['SERVER_PORT'],
    "https_port" => "443",
    "server_protocol" => $_SERVER['REQUEST_SCHEME']
];

// Obtenção das categorias
$categorias = ["movie" => [], "live" => [], "series" => []];
$tipos = ["movie" => "get_vod_categories", "live" => "get_live_categories", "series" => "get_series_categories"];
$mapa_categorias = []; // Mapeia category_id -> category_name

foreach ($tipos as $tipo => $acao) {
    $query = $conexao->prepare("SELECT * FROM categoria WHERE type = :type");
    $query->bindValue(":type", $tipo);
    $query->execute();

    while ($row = $query->fetch(PDO::FETCH_ASSOC)) {
        $categorias[$tipo][] = [
            "category_id" => (string)$row["id"],
            "category_name" => $row["nome"],
            "parent_id" => $row["parent_id"]
        ];
        // Mapeia o ID da categoria para o nome
        $mapa...
---- player_api.php ----
<?php
// Conecta-se ao banco de dados de usuários
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/db.php');
header('Content-Type: application/json; charset=utf-8');
header('Connection: close');
header('Access-Control-Allow-Credentials: *');
date_default_timezone_set('America/Sao_Paulo');

$userAgent = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '';

$url = $_SERVER['HTTP_HOST'];
$username = isset($_GET['username']) ? $_GET['username'] : null;
$password = isset($_GET['password']) ? $_GET['password'] : null;
$action = isset($_GET['action']) ? $_GET['action'] : null;
$series_id = isset($_GET['series_id']) ? $_GET['series_id'] : null;
$vod_id = isset($_GET['vod_id']) ? $_GET['vod_id'] : null;
$category_id = isset($_GET['category_id']) ? $_GET['category_id'] : null;
$type = isset($_GET['type']) ? $_GET['type'] : null;

if ($category_id === "*") {
    $category_id = null;
}

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['action']) && isset($_POST['series_id'])) {
    $username = $_POST['username'];
    $password = $_POST['password'];
    $action = $_POST['action'];
    $series_id = $_POST['series_id'];
    header('Location: player_api.php?username=' . urlencode($username) . '&password=' . urlencode($password) . '&action=' . urlencode($action) . '&series_id=' . urlencode($series_id));
    exit;
}

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['action'])) {
    $username = $_POST['username'];
    $password = $_POST['password'];
    $action = $_POST['action'];
    header('Location: player_api.php?username=' . urlencode($username) . '&password=' . urlencode($password) . '&action=' . urlencode($action));
    exit;
}
if (isset($_POST['username']) && isset($_POST['password'])) {
    $username = $_POST['username'];
    $password = $_POST['password'];
    exit;
}

//Autenticação /player_api.php?username=X&password=X
if (!$username || !$password) {
    http_response_code(401); // 401 Unauthorized
    $errorResponse['user_info'] = array();
    $errorResponse['user_info']['auth'] = 0;
    $errorResponse['user_info']['msg'] = "username e password necessario!";
    echo json_encode($errorResponse);
    exit();
}

$conexao = conectar_bd();
$query = "SELECT *
                    FROM clientes
                    WHERE usuario = :username AND senha = :password";
$statement = $conexao->prepare($query);
$statement->bindValue(':username', $username);
$statement->bindValue(':password', $password);
$statement->execute();
$result = $statement->fetch(PDO::FETCH_ASSOC);
if (!$result) {
    http_response_code(401); // 401 Unauthorized
    $errorResponse = json_encode(["user_info" => ["auth" => 0]]);
    echo $errorResponse;
    exit();
}

// --- LÓGICA DE BLOQUEIO DE CATEGORIAS ---
$blocked_cats_sql_IN = "";     // Para tabelas onde a coluna é 'id' (tabela categoria)
$blocked_cats_sql_CAT = "";    // Para tabelas...
---- processar-tmdb.php ----
<?php
session_start();
if (!isset($_SESSION['nivel_admin']) || $_SESSION['nivel_admin'] == 0) {
    header("Location: ./clientes.php");
    exit();
}
require_once("menu.php");
?>

<div class="container mt-4">
    <div class="row justify-content-center">
        <div class="col-md-10">
            <div class="card shadow-lg border-0" style="background: #1a1f2e; color: #e2e8f0; border-radius: 15px;">
                <div class="card-header bg-transparent border-0 pt-4 px-4">
                    <h3 class="mb-0">
                        <i class="fa-solid fa-database text-info me-2"></i>
                        Atualizar TMDB
                    </h3>

                </div>

                <div class="card-body p-4">
                    <!-- Dashboard Simple Stats -->
                    <div class="row mb-4">
                        <div class="col-md-6 mb-3">
                            <div class="p-4 rounded shadow-sm"
                                style="background: rgba(13, 202, 240, 0.1); border: 1px solid rgba(13, 202, 240, 0.2);">
                                <div class="d-flex align-items-center">
                                    <div class="flex-shrink-0 bg-info rounded-circle p-3 text-dark">
                                        <i class="fas fa-clapperboard fa-2x"></i>
                                    </div>
                                    <div class="flex-grow-1 ms-3">
                                        <div class="small text-info mb-1 text-uppercase fw-bold">Filmes sem TMDB</div>
                                        <div class="d-flex align-items-center gap-3">
                                            <h2 class="mb-0 text-info" id="countMovies">0</h2>
                                            <span class="badge bg-danger cursor-pointer p-2" id="nfMoviesBtn"
                                                onclick="showFailures('movie')"
                                                style="font-size: 11px; cursor: pointer;"
                                                title="Clique para ver quem não foi encontrado">0 falhas</span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                        </div>
                        <div class="col-md-6 mb-3">
                            <div class="p-4 rounded shadow-sm"
                                style="background: rgba(255, 193, 7, 0.1); border: 1px solid rgba(255, 193, 7, 0.2);">
                                <div class="d-flex align-items-center">
                                    <div class="flex-shrink-0 bg-warning rounded-circle p-3 text-dark">
                                        <i class="fas fa-film fa-2x"></i>
                                    </div>
                                    <div class="flex-grow-1 ms-3">
                                        <div...
---- setup_db.php ----
<?php
// Script de configuração do banco de dados para o sistema de bloqueio de conexões

require_once "api/controles/db.php";

$conexao = conectar_bd();

$sql = "CREATE TABLE IF NOT EXISTS `conexoes_ativas` (
    `id` int(11) NOT NULL AUTO_INCREMENT,
    `cliente_id` int(11) NOT NULL,
    `ip` varchar(45) NOT NULL,
    `user_agent` text NOT NULL,
    `last_activity` timestamp DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
    `stream_id` varchar(255) DEFAULT NULL,
    PRIMARY KEY (`id`),
    INDEX (`cliente_id`),
    INDEX (`last_activity`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;";

try {
    $conexao->exec($sql);
    echo "Tabela conexoes_ativas criada ou já existente.\n";
} catch (PDOException $e) {
    echo "Erro ao criar tabela: " . $e->getMessage() . "\n";
}
?>
SUBDIR api: . , .. , ads.php , backup.php , cache.json , canais.php , categorias.php , clientes.php , controles , filmes.php , index.php , limpar-cache.php , listar-clientes.php , login.php , planos.php , planos_renovacao.json , processar-tmdb.php , qr-planos.php , renovacao_api.php , revendedores.php , series.php , testes-auto.php , testes.php , upload-apk.php
---- api/processar-tmdb.php ----
<?php
session_start();
require_once('controles/db.php');
require_once('controles/tmdb-helper.php');
header('Content-Type: application/json');

if (!isset($_SESSION['admin_id'])) {
    echo json_encode(['error' => 'Sessão expirada']);
    exit;
}

$type = isset($_POST['type']) ? $_POST['type'] : 'movie';
$action = isset($_POST['action']) ? $_POST['action'] : 'process';

if ($action === 'getCounts') {
    $conexao = conectar_bd();

    // Pendentes: tmdb_id é vazio, 0 ou nulo
    $pendingMovies = $conexao->query("SELECT COUNT(*) FROM streams WHERE stream_type = 'movie' AND (tmdb_id IS NULL OR tmdb_id = '0' OR tmdb_id = '')")->fetchColumn();
    $pendingSeries = $conexao->query("SELECT COUNT(*) FROM series WHERE (tmdb_id IS NULL OR tmdb_id = '0' OR tmdb_id = '')")->fetchColumn();

    // Não encontrados (tmdb_id = -1)
    $nfMovies = $conexao->query("SELECT COUNT(*) FROM streams WHERE stream_type = 'movie' AND tmdb_id = '-1'")->fetchColumn();
    $nfSeries = $conexao->query("SELECT COUNT(*) FROM series WHERE tmdb_id = '-1'")->fetchColumn();

    echo json_encode([
        'movies' => (int) $pendingMovies,
        'series' => (int) $pendingSeries,
        'nf_movies' => (int) $nfMovies,
        'nf_series' => (int) $nfSeries
    ]);
    exit;
}

if ($action === 'getFailures') {
    $conexao = conectar_bd();
    $table = ($type === 'movie') ? 'streams' : 'series';
    $sql = ($type === 'movie') ? "SELECT id, name FROM $table WHERE stream_type = 'movie' AND tmdb_id = '-1' LIMIT 100" : "SELECT id, name FROM $table WHERE tmdb_id = '-1' LIMIT 100";
    $items = $conexao->query($sql)->fetchAll(PDO::FETCH_ASSOC);
    echo json_encode(['items' => $items]);
    exit;
}

if ($action === 'resetFailures') {
    $conexao = conectar_bd();
    $conexao->query("UPDATE streams SET tmdb_id = '0' WHERE tmdb_id = '-1'");
    $conexao->query("UPDATE series SET tmdb_id = '0' WHERE tmdb_id = '-1'");
    echo json_encode(['success' => true]);
...
---- api/renovacao_api.php ----
<?php
session_start();
header('Content-Type: application/json; charset=utf-8');

define('PLANOS_FILE', __DIR__ . '/planos_renovacao.json');

function getPlanos()
{
    if (!file_exists(PLANOS_FILE)) {
        return [];
    }
    return json_decode(file_get_contents(PLANOS_FILE), true);
}

function savePlanos($planos)
{
    return file_put_contents(PLANOS_FILE, json_encode($planos, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
}

$action = $_POST['action'] ?? $_GET['action'] ?? '';

switch ($action) {

    // 🔓 PÚBLICO (sem login)
    case 'get':
        echo json_encode([
            'success' => true,
            'planos' => getPlanos()
        ]);
        break;

    // 🔒 SOMENTE ADMIN
    case 'save':
        require_once('./controles/checkLogout.php');
        checkLogoutapi();

        if (!isset($_SESSION['nivel_admin']) || $_SESSION['nivel_admin'] != 1) {
            echo json_encode(['success' => false, 'message' => 'Acesso negado.']);
            exit;
        }

        $planos = $_POST['planos'] ?? null;
        if ($planos) {
            $planos_decoded = json_decode($planos, true);
            if (savePlanos($planos_decoded)) {
                echo json_encode(['success' => true, 'message' => 'Planos salvos com sucesso!']);
            } else {
                echo json_encode(['success' => false, 'message' => 'Erro ao salvar arquivo.']);
            }
        }
        break;

    default:
        echo json_encode(['success' => false, 'message' => 'Ação inválida.']);
        break;
}


######## xxx.tech6202.shop ########
FILES: . , .. , .htaccess , .user.ini , .well-known , api , backup.php , backups , canais.php , categorias.php , categories , clientes.php , config_pix.php , css , dashboard.php , filmes.php , get.php , img , index.php , index1.php , js , menu.php , menu1.php , panel_api.php , planos.php , player_api.php , processar-tmdb.php , public , public.zip , redirecionar-live.php , redirecionar-series.php , redirecionar-vod.php , renova_mp , revendedores.php , separar_categorias.php , serie.php , setup_db.php , ssiptv.php , testes-auto.php , testes.php , trial , uploud.php , xmltv , xmltv.php
---- config_pix.php ----
<?php
// config_pix.php - Painel Administrativo de Planos e API (Mercado Pago)
session_start();
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/db.php');
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/checkLogout.php');

checkLogout();

// Verificar que o usuário é admin nível 1
if (!isset($_SESSION['nivel_admin']) || $_SESSION['nivel_admin'] != 1) {
    header("Location: /dashboard.php");
    exit;
}

$configFile = __DIR__ . '/renova_mp/config.json';

// Carrega configurações existentes
$config = [
    'access_token' => '',
    'planos' => []
];

if (file_exists($configFile)) {
    $config = json_decode(file_get_contents($configFile), true);
}

// Processa salvamento do Token (ANTES de qualquer output)
if (isset($_POST['save_token'])) {
    $config['access_token'] = $_POST['access_token'];
    file_put_contents($configFile, json_encode($config, JSON_PRETTY_PRINT));
    header("Location: " . $_SERVER['REQUEST_URI'] . (strpos($_SERVER['REQUEST_URI'], '?') === false ? '?' : '&') . "msg=" . urlencode("Token salvo com sucesso!"));
    exit;
}

// Processa adição de Plano (ANTES de qualquer output)
if (isset($_POST['add_plan'])) {
    $novo_plano = [
        'id' => uniqid(),
        'nome' => $_POST['nome'],
        'valor' => (float) $_POST['valor'],
        'dias' => (int) $_POST['dias']
    ];
    $config['planos'][] = $novo_plano;
    file_put_contents($configFile, json_encode($config, JSON_PRETTY_PRINT));
    header("Location: " . strtok($_SERVER['REQUEST_URI'], '?') . "?msg=" . urlencode("Plano adicionado com sucesso!"));
    exit;
}

// Processa exclusão de Plano (ANTES de qualquer output)
if (isset($_GET['del'])) {
    $id_del = $_GET['del'];
    $config['planos'] = array_values(array_filter($config['planos'], function ($p) use ($id_del) {
        return $p['id'] !== $id_del;
    }));
    file_put_contents($configFile, json_encode($config, JSON_PRETTY_PRINT));
    header("Location: " . strtok($_SERVER['REQUEST_URI'], '?') . "?msg=" . urlencode("Plano removido com sucesso!"));
    exit;
}

$msg = $_GET['msg'] ?? null;

// URL do portal do cliente
$protocol = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https" : "http";
$universal_url = $protocol . "://" . $_SERVER['HTTP_HOST'] . "/renova_mp/consulta_user.php";

// Inclui o menu do projeto (já contém session_start, autenticação, etc.)
require_once('menu.php');
?>

<style>
    /* ===== CONFIG PIX - Estilos ===== */

    .pix-card {
        background: #1a1c22 !important;
        border: 1px solid rgba(255, 255, 255, 0.08) !important;
        border-radius: 18px !important;
        padding: 28px !important;
        margin-bottom: 25px !important;
        box-shadow: 0 8px 25px rgba(0, 0, 0, 0.4) !important;
    }

    .pix-card h5 {
        font-weight: 800 !important;
        letter-spacing: -0.5px !important;
        color: #fff !important;
        margin-bottom: 20px...
---- panel_api.php ----
<?php
header('Content-Type: text/plain; charset=UTF-8');  // Resposta em texto, mas com conteúdo JSON
header('Access-Control-Allow-Origin: *'); // Permite requisições de qualquer origem


// Conecta-se ao banco de dados de usuários
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/db.php');

date_default_timezone_set('America/Sao_Paulo');
$username = isset($_GET['username']) ? $_GET['username'] : null;
$password = isset($_GET['password']) ? $_GET['password'] : null;

//Autenticação /player_api.php?username=X&password=X
if (!$username || !$password) {
    http_response_code(401); // 401 Unauthorized
   $errorResponse['user_info'] = array();
   $errorResponse['user_info']['auth'] = 0;
   $errorResponse['user_info']['msg'] = "username e password necessario!";
    echo json_encode($errorResponse);
    exit();
}

// Conexão com o banco de dados
$conexao = conectar_bd();

// Busca os dados do usuário
$query = "SELECT * FROM clientes WHERE usuario = :username AND senha = :password";
$statement = $conexao->prepare($query);
$statement->bindValue(':username', $username);
$statement->bindValue(':password', $password);
$statement->execute();
$result = $statement->fetch(PDO::FETCH_ASSOC);

if (!$result) {
    http_response_code(401); // 401 Unauthorized
    echo json_encode([["auth" => 0]]);
    exit();
}

// Processa informações do usuário
$exp_date = strtotime($result['Vencimento']);
$created_at = strtotime($result['Criado_em']);
$status = ($exp_date < time()) ? "Inactive" : "Active";
$auth = ($status === "Active") ? "1" : "0";

// Informações do usuário
$user_info = [
    "username" => $result['usuario'],
    "password" => $result['senha'],
    "auth" => $auth,
    "status" => $status,
    "exp_date" => "$exp_date",
    "is_trial" => "{$result['is_trial']}",
    "active_cons" => "1",
    "created_at" => "$created_at",
    "max_connections" => "{$result['conexoes']}",
    "allowed_output_formats" => ["m3u8", "ts", "rtmp"]
];

// Informações do servidor
$server_info = [
    "url" => $_SERVER['HTTP_HOST'],
    "port" => $_SERVER['SERVER_PORT'],
    "https_port" => "443",
    "server_protocol" => $_SERVER['REQUEST_SCHEME']
];

// Obtenção das categorias
$categorias = ["movie" => [], "live" => [], "series" => []];
$tipos = ["movie" => "get_vod_categories", "live" => "get_live_categories", "series" => "get_series_categories"];
$mapa_categorias = []; // Mapeia category_id -> category_name

foreach ($tipos as $tipo => $acao) {
    $query = $conexao->prepare("SELECT * FROM categoria WHERE type = :type");
    $query->bindValue(":type", $tipo);
    $query->execute();

    while ($row = $query->fetch(PDO::FETCH_ASSOC)) {
        $categorias[$tipo][] = [
            "category_id" => (string)$row["id"],
            "category_name" => $row["nome"],
            "parent_id" => $row["parent_id"]
        ];
        // Mapeia o ID da categoria para o nome
        $mapa...
---- player_api.php ----
<?php
// Conecta-se ao banco de dados de usuários
require_once($_SERVER['DOCUMENT_ROOT'] . '/api/controles/db.php');
header('Content-Type: application/json; charset=utf-8');
header('Connection: close');
header('Access-Control-Allow-Credentials: *');
date_default_timezone_set('America/Sao_Paulo');

$userAgent = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '';

$url = $_SERVER['HTTP_HOST'];
$username = isset($_GET['username']) ? $_GET['username'] : null;
$password = isset($_GET['password']) ? $_GET['password'] : null;
$action = isset($_GET['action']) ? $_GET['action'] : null;
$series_id = isset($_GET['series_id']) ? $_GET['series_id'] : null;
$vod_id = isset($_GET['vod_id']) ? $_GET['vod_id'] : null;
$category_id = isset($_GET['category_id']) ? $_GET['category_id'] : null;
$type = isset($_GET['type']) ? $_GET['type'] : null;

if ($category_id === "*") {
    $category_id = null;
}

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['action']) && isset($_POST['series_id'])) {
    $username = $_POST['username'];
    $password = $_POST['password'];
    $action = $_POST['action'];
    $series_id = $_POST['series_id'];
    header('Location: player_api.php?username=' . urlencode($username) . '&password=' . urlencode($password) . '&action=' . urlencode($action) . '&series_id=' . urlencode($series_id));
    exit;
}

if (isset($_POST['username']) && isset($_POST['password']) && isset($_POST['action'])) {
    $username = $_POST['username'];
    $password = $_POST['password'];
    $action = $_POST['action'];
    header('Location: player_api.php?username=' . urlencode($username) . '&password=' . urlencode($password) . '&action=' . urlencode($action));
    exit;
}
if (isset($_POST['username']) && isset($_POST['password'])) {
    $username = $_POST['username'];
    $password = $_POST['password'];
    exit;
}

//Autenticação /player_api.php?username=X&password=X
if (!$username || !$password) {
    http_response_code(401); // 401 Unauthorized
    $errorResponse['user_info'] = array();
    $errorResponse['user_info']['auth'] = 0;
    $errorResponse['user_info']['msg'] = "username e password necessario!";
    echo json_encode($errorResponse);
    exit();
}

$conexao = conectar_bd();
$query = "SELECT *
                    FROM clientes
                    WHERE usuario = :username AND senha = :password";
$statement = $conexao->prepare($query);
$statement->bindValue(':username', $username);
$statement->bindValue(':password', $password);
$statement->execute();
$result = $statement->fetch(PDO::FETCH_ASSOC);
if (!$result) {
    http_response_code(401); // 401 Unauthorized
    $errorResponse = json_encode(["user_info" => ["auth" => 0]]);
    echo $errorResponse;
    exit();
}

// --- LÓGICA DE BLOQUEIO DE CATEGORIAS ---
$blocked_cats_sql_IN = "";     // Para tabelas onde a coluna é 'id' (tabela categoria)
$blocked_cats_sql_CAT = "";    // Para tabelas...
---- processar-tmdb.php ----
<?php
session_start();
if (!isset($_SESSION['nivel_admin']) || $_SESSION['nivel_admin'] == 0) {
    header("Location: ./clientes.php");
    exit();
}
require_once("menu.php");
?>

<div class="container mt-4">
    <div class="row justify-content-center">
        <div class="col-md-10">
            <div class="card shadow-lg border-0" style="background: #1a1f2e; color: #e2e8f0; border-radius: 15px;">
                <div class="card-header bg-transparent border-0 pt-4 px-4">
                    <h3 class="mb-0">
                        <i class="fa-solid fa-database text-info me-2"></i>
                        Atualizar TMDB
                    </h3>

                </div>

                <div class="card-body p-4">
                    <!-- Dashboard Simple Stats -->
                    <div class="row mb-4">
                        <div class="col-md-6 mb-3">
                            <div class="p-4 rounded shadow-sm"
                                style="background: rgba(13, 202, 240, 0.1); border: 1px solid rgba(13, 202, 240, 0.2);">
                                <div class="d-flex align-items-center">
                                    <div class="flex-shrink-0 bg-info rounded-circle p-3 text-dark">
                                        <i class="fas fa-clapperboard fa-2x"></i>
                                    </div>
                                    <div class="flex-grow-1 ms-3">
                                        <div class="small text-info mb-1 text-uppercase fw-bold">Filmes sem TMDB</div>
                                        <div class="d-flex align-items-center gap-3">
                                            <h2 class="mb-0 text-info" id="countMovies">0</h2>
                                            <span class="badge bg-danger cursor-pointer p-2" id="nfMoviesBtn"
                                                onclick="showFailures('movie')"
                                                style="font-size: 11px; cursor: pointer;"
                                                title="Clique para ver quem não foi encontrado">0 falhas</span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                        </div>
                        <div class="col-md-6 mb-3">
                            <div class="p-4 rounded shadow-sm"
                                style="background: rgba(255, 193, 7, 0.1); border: 1px solid rgba(255, 193, 7, 0.2);">
                                <div class="d-flex align-items-center">
                                    <div class="flex-shrink-0 bg-warning rounded-circle p-3 text-dark">
                                        <i class="fas fa-film fa-2x"></i>
                                    </div>
                                    <div class="flex-grow-1 ms-3">
                                        <div...
---- setup_db.php ----
<?php
// Script de configuração do banco de dados para o sistema de bloqueio de conexões

require_once "api/controles/db.php";

$conexao = conectar_bd();

$sql = "CREATE TABLE IF NOT EXISTS `conexoes_ativas` (
    `id` int(11) NOT NULL AUTO_INCREMENT,
    `cliente_id` int(11) NOT NULL,
    `ip` varchar(45) NOT NULL,
    `user_agent` text NOT NULL,
    `last_activity` timestamp DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
    `stream_id` varchar(255) DEFAULT NULL,
    PRIMARY KEY (`id`),
    INDEX (`cliente_id`),
    INDEX (`last_activity`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;";

try {
    $conexao->exec($sql);
    echo "Tabela conexoes_ativas criada ou já existente.\n";
} catch (PDOException $e) {
    echo "Erro ao criar tabela: " . $e->getMessage() . "\n";
}
?>
SUBDIR api: . , .. , ads.php , backup.php , cache.json , canais.php , categorias.php , clientes.php , controles , filmes.php , index.php , limpar-cache.php , listar-clientes.php , login.php , planos.php , planos_renovacao.json , processar-tmdb.php , qr-planos.php , renovacao_api.php , revendedores.php , series.php , testes-auto.php , testes.php , upload-apk.php
---- api/processar-tmdb.php ----
<?php
session_start();
require_once('controles/db.php');
require_once('controles/tmdb-helper.php');
header('Content-Type: application/json');

if (!isset($_SESSION['admin_id'])) {
    echo json_encode(['error' => 'Sessão expirada']);
    exit;
}

$type = isset($_POST['type']) ? $_POST['type'] : 'movie';
$action = isset($_POST['action']) ? $_POST['action'] : 'process';

if ($action === 'getCounts') {
    $conexao = conectar_bd();

    // Pendentes: tmdb_id é vazio, 0 ou nulo
    $pendingMovies = $conexao->query("SELECT COUNT(*) FROM streams WHERE stream_type = 'movie' AND (tmdb_id IS NULL OR tmdb_id = '0' OR tmdb_id = '')")->fetchColumn();
    $pendingSeries = $conexao->query("SELECT COUNT(*) FROM series WHERE (tmdb_id IS NULL OR tmdb_id = '0' OR tmdb_id = '')")->fetchColumn();

    // Não encontrados (tmdb_id = -1)
    $nfMovies = $conexao->query("SELECT COUNT(*) FROM streams WHERE stream_type = 'movie' AND tmdb_id = '-1'")->fetchColumn();
    $nfSeries = $conexao->query("SELECT COUNT(*) FROM series WHERE tmdb_id = '-1'")->fetchColumn();

    echo json_encode([
        'movies' => (int) $pendingMovies,
        'series' => (int) $pendingSeries,
        'nf_movies' => (int) $nfMovies,
        'nf_series' => (int) $nfSeries
    ]);
    exit;
}

if ($action === 'getFailures') {
    $conexao = conectar_bd();
    $table = ($type === 'movie') ? 'streams' : 'series';
    $sql = ($type === 'movie') ? "SELECT id, name FROM $table WHERE stream_type = 'movie' AND tmdb_id = '-1' LIMIT 100" : "SELECT id, name FROM $table WHERE tmdb_id = '-1' LIMIT 100";
    $items = $conexao->query($sql)->fetchAll(PDO::FETCH_ASSOC);
    echo json_encode(['items' => $items]);
    exit;
}

if ($action === 'resetFailures') {
    $conexao = conectar_bd();
    $conexao->query("UPDATE streams SET tmdb_id = '0' WHERE tmdb_id = '-1'");
    $conexao->query("UPDATE series SET tmdb_id = '0' WHERE tmdb_id = '-1'");
    echo json_encode(['success' => true]);
...
---- api/renovacao_api.php ----
<?php
session_start();
header('Content-Type: application/json; charset=utf-8');

define('PLANOS_FILE', __DIR__ . '/planos_renovacao.json');

function getPlanos()
{
    if (!file_exists(PLANOS_FILE)) {
        return [];
    }
    return json_decode(file_get_contents(PLANOS_FILE), true);
}

function savePlanos($planos)
{
    return file_put_contents(PLANOS_FILE, json_encode($planos, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
}

$action = $_POST['action'] ?? $_GET['action'] ?? '';

switch ($action) {

    // 🔓 PÚBLICO (sem login)
    case 'get':
        echo json_encode([
            'success' => true,
            'planos' => getPlanos()
        ]);
        break;

    // 🔒 SOMENTE ADMIN
    case 'save':
        require_once('./controles/checkLogout.php');
        checkLogoutapi();

        if (!isset($_SESSION['nivel_admin']) || $_SESSION['nivel_admin'] != 1) {
            echo json_encode(['success' => false, 'message' => 'Acesso negado.']);
            exit;
        }

        $planos = $_POST['planos'] ?? null;
        if ($planos) {
            $planos_decoded = json_decode($planos, true);
            if (savePlanos($planos_decoded)) {
                echo json_encode(['success' => true, 'message' => 'Planos salvos com sucesso!']);
            } else {
                echo json_encode(['success' => false, 'message' => 'Erro ao salvar arquivo.']);
            }
        }
        break;

    default:
        echo json_encode(['success' => false, 'message' => 'Ação inválida.']);
        break;
}


######## player99.com.br ########
FILES: . , .. , .git , .gitignore , .htaccess , .user.ini , .well-known , Autoads , Manualads , Player99_Pitch_Deck_Investidores.pptx , adm_radios.php , admin_afiliados.php , admin_entretenimentos.php , admin_faturamento.php , admin_faturas_cliente.php , admin_landing.php , admin_logs.php , admin_loja.php , admin_spy.php , admins.php , admplay_bg.php , admplay_bloqueio.php , admplay_logo.php , admplay_salvar_texto.php , admplay_texto.php , ads.php , ads2.php , ads3.php , afiliado_dashboard.php , afiliados.php , all_users.php , api , api_compress.php , api_pairing.php , api_ping.php , api_playlist.php , api_telas.php , assets , backup_rotina.php , banners , base64.php , bg.php , cadastro.php , check.php , check2.php , check_db.php , cliente_config_tab.php , cliente_dashboard.php , config_whatsapp.php , config_whatsapp_mensagens.php , contato.php , cron_alertas_whatsapp.php , cron_gerar_entretenimentos.php , cron_gerar_faturas_mensais.php , dns.php , dump_schema.php , edit_usuario.php , enviar_cobrancas.php , error_handler.php , error_page.php , estatisticas.php , evolution_config.json , gerar_vencidos.php , img_custom , includes , index.php , init_loja_db.php , init_play.php , init_radios.php , log_faturas.txt , login_cliente.php , logo.php , logout_cliente.php , loja.php , mRTXAdsSetting.php , make_pitch_deck.js , manifest.json , mercado_pago_gold.php , migrar_dns.php , note.php , package-lock.json , package.json , painel.php , parceiro_loja.php , parceiros.php , pitch_deck_preview.html , player.php , playlists.php , qrcode.php , rtx , sair.php , sw.js , tema.php , test_db.php , test_db2.php , test_insert.php , test_post.php , test_whatsapp.php , teste.php , tmdb_api.php , transfer.php , tv.php , update_ui.php , update_ui.py , uploads , users.php , users_create.php , users_teste.php , users_teste_update.php , users_update.php , usuario.php , usuarios.php , vencimento.php , verificar_id.php , whats.json , whatsapp_api.php , whatsapp_api1.php , whatsapp_debug.log , widgets
---- api_compress.php ----
<?php
session_start();
header('Content-Type: application/json');

// Segurança: Apenas clientes logados podem comprimir seus próprios arquivos
if (!isset($_SESSION["cliente_logado"]) || $_SESSION["cliente_logado"] !== true) {
    echo json_encode(["success" => false, "msg" => "Não autenticado"]);
    exit;
}

$idCliente = $_SESSION["cliente_id"];
session_write_close(); // LIBERA A SESSÃO! Impede que o painel do cliente trave enquanto comprime.

$uploadDir = __DIR__ . "/uploads/clientes/" . $idCliente . "/";

if (!is_dir($uploadDir)) {
    echo json_encode(["compressed" => false, "msg" => "Diretório não existe"]);
    exit;
}

// Pega todos os arquivos de imagem
$files = glob($uploadDir . "*.{jpg,jpeg,png,JPG,JPEG,PNG}", GLOB_BRACE);
if (!$files) {
    echo json_encode(["compressed" => false, "msg" => "Nenhuma imagem encontrada"]);
    exit;
}

// Limite de tamanho para considerar que a imagem precisa de compressão (ex: 800 KB)
$tamanhoMaximo = 800 * 1024; 

require_once __DIR__ . '/includes/db_cliente.php';

foreach ($files as $file) {
    // Ignorar arquivos que já foram otimizados (marcados no nome)
    if (strpos($file, '_opt.') !== false) continue;

    if (filesize($file) > $tamanhoMaximo) {
        // Encontrou um arquivo grande. Vamos comprimir.
        $ext = strtolower(pathinfo($file, PATHINFO_EXTENSION));
        $info = @getimagesize($file);
        
        if ($info) {
            $isCompressed = false;
            $newFilename = str_replace("." . pathinfo($file, PATHINFO_EXTENSION), "_opt." . pathinfo($file, PATHINFO_EXTENSION), basename($file));
            $newFile = $uploadDir . $newFilename;
            
            // Tenta aumentar o limite de memória apenas para este script caso a imagem seja gigante
            ini_set('memory_limit', '256M'); 

            if ($info['mime'] == 'image/jpeg') {
                $img = @imagecreatefromjpeg($file);
                if ($img) {
                    $width = imagesx($img);
                    $height = imagesy($img);
                    
                    if ($width > 1920 || $height > 1920) {
                        $ratio = min(1920 / $width, 1920 / $height);
                        $newWidth = round($width * $ratio);
                        $newHeight = round($height * $ratio);
                        
                        $newImg = imagecreatetruecolor($newWidth, $newHeight);
                        imagecopyresampled($newImg, $img, 0, 0, 0, 0, $newWidth, $newHeight, $width, $height);
                        
                        $isCompressed = imagejpeg($newImg, $newFile, 75);
                        imagedestroy($newImg);
                    } else {
                        $isCompressed = imagejpeg($img, $newFile, 75); 
                    }
                    imagedestroy($img);
                }
            } elseif ($info['mime'] == 'image/png') {
                $img = @imagecreatefrompng($file);
                if ($img) {
                    $width = ...
---- api_pairing.php ----
<?php
header('Content-Type: application/json');
header("Access-Control-Allow-Origin: *");

require_once './includes/db_cliente.php';

$code = $_GET['code'] ?? '';

if (empty($code)) {
    echo json_encode(["paired" => false]);
    exit;
}

// Verifica se o código existe na tabela de telas
$stmt = $dbCliente->prepare("SELECT id FROM telas WHERE player_code = :codigo");
$stmt->bindValue(':codigo', $code, SQLITE3_TEXT);
$res = $stmt->execute();
$row = $res->fetchArray(SQLITE3_ASSOC);

if ($row) {
    echo json_encode(["paired" => true]);
} else {
    echo json_encode(["paired" => false]);
}
?>

---- api_ping.php ----
<?php
header('Content-Type: application/json');
header("Access-Control-Allow-Origin: *");
date_default_timezone_set('America/Sao_Paulo');

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    require_once './includes/db_cliente.php';
    
    $codigo = $_POST['codigo'] ?? '';
    $sessionId = $_POST['session_id'] ?? '';
    
    if (!empty($codigo)) {
        // Verifica a sessão atual e o status do cliente
        if ($sessionId !== 'old_player') {
            $dbCliente->exec("ATTACH DATABASE '" . __DIR__ . "/api/db/studiolivecode_clientes.db' AS clientesDB");
            $stmt = $dbCliente->prepare("SELECT t.active_session_id, t.force_reload, i.active, i.expire_date FROM telas t LEFT JOIN clientesDB.ibo i ON t.id_cliente = i.id WHERE t.player_code = :codigo");
            $stmt->bindValue(':codigo', $codigo, SQLITE3_TEXT);
            $res = $stmt->execute();
            $row = $res->fetchArray(SQLITE3_ASSOC);
            
            if ($row) {
                // Checa validade e bloqueio do cliente principal
                if (isset($row['active'])) {
                    if ($row['active'] == 0) {
                        echo json_encode(["success" => false, "action" => "stop"]);
                        exit;
                    }
                    
                    $exp = $row['expire_date'];
                    if (strpos($exp, '/') !== false) {
                        $parts = explode('/', $exp);
                        if (count($parts) == 3 && strlen($parts[0]) == 2 && strlen($parts[2]) == 4) {
                            $exp = $parts[2] . '-' . $parts[1] . '-' . $parts[0];
                        } else if (count($parts) == 3 && strlen($parts[0]) == 4) {
                            $exp = $parts[0] . '-' . $parts[1] . '-' . $parts[2];
                        }
                    }
                    date_default_timezone_set('America/Sao_Paulo');
                    if (strtotime(date('Y-m-d')) > strtotime($exp)) {
                        echo json_encode(["success" => false, "action" => "stop"]);
                        exit;
                    }
                }

                if ($row['active_session_id'] !== $sessionId) {
                    // Sessão expirada/sobrescrita por outro dispositivo
                    echo json_encode(["success" => false, "action" => "stop"]);
                    exit;
                }
                
                if (isset($row['force_reload']) && $row['force_reload'] == 1) {
                    // Limpa o aviso de reload
                    $stmtReset = $dbCliente->prepare("UPDATE telas SET force_reload = 0 WHERE player_code = :codigo");
                    $stmtReset->bindValue(':codigo', $codigo, SQLITE3_TEXT);
                    $stmtReset->execute();
                    
                    echo json_encode(["success" => true, "action" => "reload"]);
                    exit;
                }
            }
        }
        
        $hasPlaylist = false;
        if (isset($_POST...
---- api_playlist.php ----
<?php
session_start();
header('Content-Type: application/json');
header("Access-Control-Allow-Origin: *");

require_once './includes/db_cliente.php';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // ==== LÓGICA DO PAINEL (SALVAR ORDEM) ====
    if (!isset($_SESSION["cliente_logado"]) || $_SESSION["cliente_logado"] !== true) {
        echo json_encode(["success" => false, "msg" => "Não autenticado"]);
        exit;
    }
    
    $idCliente = $_SESSION["cliente_id"];
    $action = $_POST['action'] ?? '';

    if ($action === 'save_order') {
        $idPlaylist = (int)($_POST['id_playlist'] ?? 0);
        $videoIds = $_POST['video_ids'] ?? []; // Array de IDs ordenado

        // Verifica se a playlist pertence ao cliente
        $stmt = $dbCliente->prepare("SELECT id FROM playlists WHERE id = :id AND id_cliente = :id_cliente");
        $stmt->bindValue(':id', $idPlaylist, SQLITE3_INTEGER);
        $stmt->bindValue(':id_cliente', $idCliente, SQLITE3_INTEGER);
        $res = $stmt->execute();
        
        if ($res->fetchArray()) {
            // Limpa vídeos antigos
            $dbCliente->exec("DELETE FROM playlist_videos WHERE id_playlist = $idPlaylist");
            
            // Salva nova ordem
            $videoDataStr = $_POST['video_data'] ?? ''; // Nova forma com duração
            if (!empty($videoDataStr)) {
                $dataArr = json_decode($videoDataStr, true);
                if (is_array($dataArr)) {
                    $seq = 1;
                    foreach ($dataArr as $item) {
                        $vid = (int)$item['id'];
                        $dur = (int)($item['duration'] ?? 15);
                        $stmt = $dbCliente->prepare("INSERT INTO playlist_videos (id_playlist, id_video, sequence, duration) VALUES (:id_playlist, :id_video, :sequence, :duration)");
                        $stmt->bindValue(':id_playlist', $idPlaylist, SQLITE3_INTEGER);
                        $stmt->bindValue(':id_video', $vid, SQLITE3_INTEGER);
                        $stmt->bindValue(':sequence', $seq, SQLITE3_INTEGER);
                        $stmt->bindValue(':duration', $dur, SQLITE3_INTEGER);
                        $stmt->execute();
                        $seq++;
                    }
                }
            } else {
                // Fallback legado
                $seq = 1;
                foreach ($videoIds as $vid) {
                    $vid = (int)$vid;
                    $stmt = $dbCliente->prepare("INSERT INTO playlist_videos (id_playlist, id_video, sequence) VALUES (:id_playlist, :id_video, :sequence)");
                    $stmt->bindValue(':id_playlist', $idPlaylist, SQLITE3_INTEGER);
                    $stmt->bindValue(':id_video', $vid, SQLITE3_INTEGER);
                    $stmt->bindValue(':sequence', $seq, SQLITE3_INTEGER);
                    $stmt->execute();
                    $seq++;
                }
            }
            echo json_encode(["success" => true]);
        } else {
          ...
---- api_telas.php ----
<?php
session_start();
header('Content-Type: application/json');

if (!isset($_SESSION["cliente_logado"]) || $_SESSION["cliente_logado"] !== true) {
    echo json_encode(["success" => false, "msg" => "Não autenticado"]);
    exit;
}

require_once './includes/db_cliente.php';
$idCliente = $_SESSION["cliente_id"];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = $_POST['action'] ?? '';

    if ($action === 'vincular_playlist') {
        $idTela = (int)($_POST['id_tela'] ?? 0);
        $idPlaylist = (int)($_POST['id_playlist'] ?? 0);

        $stmt = $dbCliente->prepare("UPDATE telas SET id_playlist = :id_playlist WHERE id = :id_tela AND id_cliente = :id_cliente");
        $stmt->bindValue(':id_playlist', $idPlaylist, SQLITE3_INTEGER);
        $stmt->bindValue(':id_tela', $idTela, SQLITE3_INTEGER);
        $stmt->bindValue(':id_cliente', $idCliente, SQLITE3_INTEGER);
        
        if ($stmt->execute()) {
            echo json_encode(["success" => true]);
        } else {
            echo json_encode(["success" => false]);
        }
    } elseif ($action === 'toggle_mute') {
        $idTela = (int)($_POST['id_tela'] ?? 0);
        $muted = (int)($_POST['muted'] ?? 0);

        $stmt = $dbCliente->prepare("UPDATE telas SET muted = :muted WHERE id = :id_tela AND id_cliente = :id_cliente");
        $stmt->bindValue(':muted', $muted, SQLITE3_INTEGER);
        $stmt->bindValue(':id_tela', $idTela, SQLITE3_INTEGER);
        $stmt->bindValue(':id_cliente', $idCliente, SQLITE3_INTEGER);
        
        if ($stmt->execute()) {
            echo json_encode(["success" => true]);
        } else {
            echo json_encode(["success" => false]);
        }
    } elseif ($action === 'set_audio') {
        $idTela = (int)($_POST['id_tela'] ?? 0);
        $audioMode = $_POST['audio_mode'] ?? 'video';
        $idRadio = (int)($_POST['id_radio'] ?? 0);

        // Atualiza modo e também mantém o "muted" legado em sincronia 
        // para não quebrar players antigos que não foram atualizados
        $mutedFallback = ($audioMode === 'mute' || $audioMode === 'radio') ? 1 : 0;

        $stmt = $dbCliente->prepare("UPDATE telas SET audio_mode = :amode, id_radio = :iradio, muted = :muted WHERE id = :id_tela AND id_cliente = :id_cliente");
        $stmt->bindValue(':amode', $audioMode, SQLITE3_TEXT);
        $stmt->bindValue(':iradio', $idRadio, SQLITE3_INTEGER);
        $stmt->bindValue(':muted', $mutedFallback, SQLITE3_INTEGER);
        $stmt->bindValue(':id_tela', $idTela, SQLITE3_INTEGER);
        $stmt->bindValue(':id_cliente', $idCliente, SQLITE3_INTEGER);
        
        if ($stmt->execute()) {
            echo json_encode(["success" => true]);
        } else {
            echo json_encode(["success" => false]);
        }
    } elseif ($action === 'toggle_rotation') {
        $idTela = (int)($_POST['id_tela'] ?? 0);
        $rotation = (int)($_POST['rotation'] ?? 0);

        // Atualiza a rotação e força o reload para o player pegar a nova...
---- check_db.php ----
<?php
$db = new SQLite3('./api/db/studiolivecode_clientes.db');
$res = $db->query("PRAGMA table_info(ibo);");
while($row = $res->fetchArray(SQLITE3_ASSOC)) {
    print_r($row);
}

---- cliente_config_tab.php ----
<?php
$faturamento = [
    'nome_razao' => '',
    'cpf_cnpj' => '',
    'endereco' => '',
    'whats' => ''
];
if(isset($dbFinanceiro)) {
    $stmtFat = $dbFinanceiro->prepare("SELECT * FROM faturamento_cliente WHERE id_cliente = :id");
    $stmtFat->bindValue(':id', $idCliente, SQLITE3_INTEGER);
    $resFat = $stmtFat->execute();
    if ($rowFat = $resFat->fetchArray(SQLITE3_ASSOC)) {
        $faturamento = $rowFat;
    }

    $faturas = [];
    $totalAcumulado = 0;
    $totalPrevisto = 0;
    $stmtFaturas = $dbFinanceiro->prepare("SELECT * FROM faturas WHERE id_cliente = :id ORDER BY id DESC");
    $stmtFaturas->bindValue(':id', $idCliente, SQLITE3_INTEGER);
    $resFaturas = $stmtFaturas->execute();
    while($rowF = $resFaturas->fetchArray(SQLITE3_ASSOC)) {
        $faturas[] = $rowF;
        if($rowF['status'] == 'PAGA' && date('m', strtotime($rowF['data_gerada'])) == date('m')) {
            $totalAcumulado += $rowF['valor_total'];
        }
        if($rowF['status'] == 'VENCIDA' || $rowF['status'] == 'PENDENTE') {
            // we will override $totalPrevisto later
        }
    }
    
    $countTelas = $dbCliente->querySingle("SELECT COUNT(*) FROM telas WHERE id_cliente = $idCliente") ?: 0;
    $mpGoldConfig = json_decode(file_get_contents(__DIR__ . '/api/mercado_pago_gold/config.json'), true);
    $baseValorPorTela = isset($mpGoldConfig['plano_telas_ativas']['valor']) ? (float)$mpGoldConfig['plano_telas_ativas']['valor'] : 100.00;
    $multiplo = $dbFinanceiro->querySingle("SELECT multiplo FROM ibo WHERE id = $idCliente") ?: 1.0;
    $totalPrevisto = $countTelas * ($baseValorPorTela * (float)$multiplo);
}
?>
<div class="card mb-4 shadow-sm">
    <div class="card-header bg-white">
        <h5 class="mb-0"><i class="fas fa-user text-primary mr-2"></i> Perfil</h5>
    </div>
    <div class="card-body">
        <form method="post" class="row">
            <div class="col-md-6 form-group">
                <label class="font-weight-bold">Alterar Senha de Acesso</label>
                <input type="password" name="nova_senha" class="form-control" placeholder="Digite a nova senha..." required>
            </div>
            <div class="col-md-12">
                <button type="submit" name="atualizar_senha" class="btn btn-primary"><i class="fas fa-save"></i> SALVAR NOVA SENHA</button>
            </div>
        </form>
    </div>
</div>


<div class="card shadow-sm border-0 mt-4" style="border-top: 4px solid #1abc9c !important;">
    <div class="card-body text-center py-5">
        <div class="mb-3">
            <i class="fas fa-wallet fa-3x" style="color: #1abc9c;"></i>
        </div>
        <h2 class="font-weight-bold" style="color: #1abc9c;">Financeiro</h2>
        <p class="text-muted mb-4">Visualize faturas, realize pagamentos e informe dados de faturamento.</p>
        <div class="d-flex justify-content-center gap-3">
            <button class="btn btn-lg mx-2 text-white" style="background-color: #1abc9c;" data-toggle="modal" data-targ...
---- config_whatsapp.php ----
<?php
include "includes/header.php";

if ($nivel_admin != 1) {
    echo "<script>window.location.href = 'index.php';</script>";
    exit;
}

$configFile = __DIR__ . '/evolution_config.json';
$config = ['evolution_url' => '', 'api_key' => '', 'instancia' => 'player99_' . substr(md5(uniqid()), 0, 6), 'hub_token' => 'HUB_6A6039D8DE252ccbcac01'];
if (file_exists($configFile)) {
    $saved = json_decode(file_get_contents($configFile), true);
    $config['evolution_url'] = $saved['evolution_url'] ?? '';
    $config['api_key'] = $saved['api_key'] ?? '';
    if (!empty($saved['instancia']) && $saved['instancia'] !== 'instancia') {
        $config['instancia'] = $saved['instancia'];
    }
    $config['hub_token'] = !empty($saved['hub_token']) ? $saved['hub_token'] : 'HUB_6A6039D8DE252ccbcac01';
}
?>
<style>
.neon-red {
    box-shadow: 0 0 20px rgba(255, 0, 0, 0.8);
    border: 2px solid #ff0000;
}
.neon-green {
    box-shadow: 0 0 20px rgba(0, 255, 0, 0.8);
    border: 2px solid #00ff00;
}
</style>
<div class="page-wrapper">
    <div class="page-content">
        <div class="page-breadcrumb d-none d-sm-flex align-items-center mb-3">
            <div class="breadcrumb-title pe-3">Sistema</div>
            <div class="ps-3">
                <nav aria-label="breadcrumb">
                    <ol class="breadcrumb mb-0 p-0">
                        <li class="breadcrumb-item"><a href="javascript:;"><i class="bx bx-home-alt"></i></a></li>
                        <li class="breadcrumb-item active" aria-current="page">Configurar WhatsApp (Evolution API)</li>
                    </ol>
                </nav>
            </div>
        </div>

        <div class="row">
            <div class="col-md-6" id="colCredenciais">
                <div class="card">
                    <div class="card-body">
                        <h5 class="card-title text-warning"><i class='bx bxl-whatsapp'></i> 1. Credenciais da API</h5>
                        <hr>
                        <form id="formConfigWa">
                            <div class="mb-3">
                                <label class="form-label">URL da Evolution API</label>
                                <input type="text" class="form-control" name="evolution_url" value="<?php echo htmlspecialchars($config['evolution_url']); ?>" placeholder="Ex: http://75.119.156.103:8080">
                            </div>
                            <div class="mb-3">
                                <label class="form-label">Global API Key</label>
                                <input type="text" class="form-control" name="api_key" value="<?php echo htmlspecialchars($config['api_key']); ?>">
                            </div>
                            <div class="mb-3">
                                <label class="form-label">Nome da Instância (Automático)</label>
                                <input type="text" class="form-control" name="instancia" value="<?php echo htmlspecialchars($config['instancia']); ?>" readonly>...
---- config_whatsapp_mensagens.php ----
<?php
include "includes/header.php";

if ($nivel_admin != 1) {
    echo "<script>window.location.href = 'index.php';</script>";
    exit;
}
?>

<div class="page-wrapper">
    <div class="page-content">
        <div class="page-breadcrumb d-none d-sm-flex align-items-center mb-3">
            <div class="breadcrumb-title pe-3">Sistema</div>
            <div class="ps-3">
                <nav aria-label="breadcrumb">
                    <ol class="breadcrumb mb-0 p-0">
                        <li class="breadcrumb-item"><a href="javascript:;"><i class="bx bx-home-alt"></i></a></li>
                        <li class="breadcrumb-item active" aria-current="page">Mensagens Automáticas (WhatsApp)</li>
                    </ol>
                </nav>
            </div>
            <div class="ms-auto">
                <button class="btn btn-primary btn-sm" data-bs-toggle="modal" data-bs-target="#msgModal" onclick="resetForm()">
                    <i class="bx bx-plus"></i> Adicionar Mensagem
                </button>
            </div>
        </div>

        <div class="card">
            <div class="card-body">
                <div class="table-responsive">
                    <table class="table table-striped table-bordered text-center align-middle" id="msgTable">
                        <thead>
                            <tr>
                                <th>Tipo</th>
                                <th>Dias</th>
                                <th>Hora</th>
                                <th>Envio Automático</th>
                                <th>Mensagem</th>
                                <th>Ações</th>
                            </tr>
                        </thead>
                        <tbody id="msgTbody">
                            <!-- Populated via Ajax -->
                        </tbody>
                    </table>
                </div>
            </div>
        </div>
    </div>
</div>

<!-- Modal -->
<div class="modal fade" id="msgModal" tabindex="-1" aria-hidden="true">
    <div class="modal-dialog modal-lg">
        <div class="modal-content">
            <div class="modal-header">
                <h5 class="modal-title">Configurar Mensagem</h5>
                <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
            </div>
            <div class="modal-body">
                <form id="msgForm">
                    <input type="hidden" name="id" id="msgId" value="0">
                    <input type="hidden" name="action" value="save">
                    
                    <div class="row mb-3">
                        <div class="col-md-6">
                            <label class="form-label">Tipo de Mensagem</label>
                            <select class="form-select" name="tipo" id="msgTipo" required>
                                <option value="">Selecione...</option>
                                <option value="A vencer">A vencer (Dias antes)</option>
...
---- enviar_cobrancas.php ----
<?php
// enviar_cobrancas.php
// Envia mensagens do JSON clientes_vencidos.json via Evolution API v2

set_time_limit(0); // Evitar timeout no envio em massa
include './whatsapp_api.php';

$arquivo = __DIR__.'/clientes_vencidos.json';

if(!file_exists($arquivo)) {
    die("❌ Arquivo clientes_vencidos.json não encontrado!");
}

$clientes = json_decode(file_get_contents($arquivo), true);

foreach($clientes as $mac => &$cliente) {
    // Pula se já enviou hoje
    $hoje = date('Y-m-d');
    if(isset($cliente['enviado_em']) && strpos($cliente['enviado_em'], $hoje) === 0) {
        continue;
    }

    $resposta = enviarMensagemWasender($cliente['numero'], $cliente['mensagem']);
    
    file_put_contents(__DIR__ . '/whatsapp_debug.log', "Tentativa para {$cliente['numero']}:\n" . print_r($resposta, true) . "\n", FILE_APPEND);

    if(isset($resposta['key']) || isset($resposta['messageId']) || (is_array($resposta) && !isset($resposta['error']))) {
        $cliente['enviado_em'] = date('Y-m-d H:i');
        echo "✅ Mensagem enviada para {$mac}\n";
    } else {
        $err = isset($resposta['error']) ? print_r($resposta['error'], true) : print_r($resposta, true);
        echo "⚠️ Erro ao enviar para {$mac}: {$err}\n";
    }

    // Previne banimento variando o tempo entre 4 a 8 segundos
    sleep(rand(4, 8));
}

// Salva JSON atualizado
file_put_contents($arquivo, json_encode($clientes, JSON_PRETTY_PRINT));

echo "🚀 Envio automático concluído: " . date('Y-m-d H:i');
?>

---- error_page.php ----
<!DOCTYPE html>
<html lang="pt-br">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Oops! Algo deu errado</title>
    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
    <style>
        body, html {
            margin: 0;
            padding: 0;
            width: 100%;
            height: 100%;
            background: linear-gradient(135deg, #0f172a 0%, #1e1b4b 100%);
            font-family: 'Inter', sans-serif;
            color: #f8fafc;
            display: flex;
            align-items: center;
            justify-content: center;
        }
        .container {
            background: rgba(255, 255, 255, 0.05);
            backdrop-filter: blur(16px);
            -webkit-backdrop-filter: blur(16px);
            border: 1px solid rgba(255, 255, 255, 0.1);
            border-radius: 24px;
            padding: 40px;
            max-width: 500px;
            width: 90%;
            text-align: center;
            box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.5);
            animation: fadeIn 0.8s ease-out forwards;
        }
        @keyframes fadeIn {
            from { opacity: 0; transform: translateY(20px); }
            to { opacity: 1; transform: translateY(0); }
        }
        .icon {
            font-size: 64px;
            margin-bottom: 20px;
            animation: bounce 2s infinite ease-in-out;
            display: inline-block;
        }
        @keyframes bounce {
            0%, 100% { transform: translateY(0); }
            50% { transform: translateY(-10px); }
        }
        h1 {
            font-size: 28px;
            font-weight: 800;
            margin: 0 0 15px 0;
            background: -webkit-linear-gradient(45deg, #f43f5e, #fb923c);
            -webkit-background-clip: text;
            -webkit-text-fill-color: transparent;
        }
        p {
            font-size: 16px;
            line-height: 1.6;
            color: #cbd5e1;
            margin-bottom: 30px;
        }
        .btn {
            display: inline-block;
            background: linear-gradient(90deg, #3b82f6, #8b5cf6);
            color: #fff;
            text-decoration: none;
            padding: 12px 28px;
            border-radius: 99px;
            font-weight: 600;
            transition: all 0.3s ease;
            border: none;
            cursor: pointer;
            box-shadow: 0 4px 14px 0 rgba(139, 92, 246, 0.39);
        }
        .btn:hover {
            transform: scale(1.05);
            box-shadow: 0 6px 20px 0 rgba(139, 92, 246, 0.5);
        }
        .footer-note {
            margin-top: 30px;
            font-size: 12px;
            color: #64748b;
        }
    </style>
</head>
<body>

<div class="container">
    <div class="icon">🛸</div>
    <h1>Houston, temos um problema!</h1>
    <p>Ocorreu uma falha inesperada no sistema.<br>Mas não se preocupe: <b>nossa equipe técnica já foi notifica...
---- evolution_config.json ----
{
  "evolution_url": "http://75.119.156.103:8080",
  "api_key": "PQVZ3A4F779NXHNNH7770BI447DRI7C0",
  "instancia": "instancia",
  "hub_token": "HUB_6A6039D8DE252ccbcac01"
}

---- init_loja_db.php ----
<?php
$dbPath = __DIR__ . '/api/db/studiolivecode_loja.db';

try {
    $db = new SQLite3($dbPath);
    
    // Tabela de Produtos
    $db->exec("CREATE TABLE IF NOT EXISTS produtos (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        titulo TEXT NOT NULL,
        descricao TEXT,
        preco REAL NOT NULL,
        imagem TEXT,
        parceiro_id INTEGER NOT NULL,
        ativo INTEGER DEFAULT 1,
        data_criacao DATETIME DEFAULT CURRENT_TIMESTAMP
    )");

    // Tabela de Pedidos
    $db->exec("CREATE TABLE IF NOT EXISTS pedidos (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        produto_id INTEGER NOT NULL,
        cliente_email TEXT,
        cliente_nome TEXT,
        status_pagamento TEXT DEFAULT 'pendente',
        mp_payment_id TEXT,
        voucher TEXT,
        data_pedido DATETIME DEFAULT CURRENT_TIMESTAMP
    )");
    
} catch (Exception $e) {
    error_log("Erro ao iniciar DB loja: " . $e->getMessage());
}
?>

---- mercado_pago_gold.php ----
<?php
// mercado_pago_gold.php
session_start();
if (!isset($_SESSION['id'])) {
    header('location: painel.php');
    exit;
}
$id = $_SESSION['id'];
$db1 = new SQLite3("./api/db/studiolivecode_users.db");
$query = $db1->prepare("SELECT admin, username FROM users WHERE id = :id");
$query->bindValue(':id', $id, SQLITE3_INTEGER);
$userData = $query->execute()->fetchArray(SQLITE3_ASSOC);
if (!$userData || $userData['admin'] != 1 || $userData['username'] == 'cemet@cemet.com.br') {
    header("Location: users.php");
    exit;
}

$config_file = './api/mercado_pago_gold/config.json';
$config = json_decode(file_get_contents($config_file), true);

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (isset($_POST['update_token'])) {
        $config['access_token'] = trim($_POST['access_token']);
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Token atualizado com sucesso!";
    }

    if (isset($_POST['add_pacote'])) {
        $novo_pacote = [
            'id' => uniqid(),
            'nome' => trim($_POST['nome_pacote']),
            'valor' => floatval($_POST['valor_pacote']),
            'dias' => intval($_POST['dias_pacote'])
        ];
        $config['pacotes'][] = $novo_pacote;
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Pacote adicionado com sucesso!";
    }

    if (isset($_POST['delete_pacote'])) {
        $id_delete = $_POST['id_pacote'];
        foreach ($config['pacotes'] as $k => $pacote) {
            if ($pacote['id'] === $id_delete) {
                unset($config['pacotes'][$k]);
            }
        }
        $config['pacotes'] = array_values($config['pacotes']);
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Pacote excluído!";
    }

    if (isset($_POST['add_cupom'])) {
        if (!isset($config['cupons'])) {
            $config['cupons'] = [];
        }
        $novo_cupom = [
            'id' => uniqid(),
            'codigo' => strtoupper(trim($_POST['codigo_cupom'])),
            'desconto' => floatval($_POST['desconto_cupom'])
        ];
        $config['cupons'][] = $novo_cupom;
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Cupom adicionado com sucesso!";
    }

    if (isset($_POST['delete_cupom'])) {
        $id_delete = $_POST['id_cupom'];
        foreach ($config['cupons'] as $k => $cupom) {
            if ($cupom['id'] === $id_delete) {
                unset($config['cupons'][$k]);
            }
        }
        $config['cupons'] = array_values($config['cupons']);
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Cupom excluído!";
    }

    if (isset($_POST['update_plano_telas'])) {
        $config['plano_telas_ativas'] = [
            'valor' => floatval($_POST['valor_telas']),
            'dias' => intval($_POST['dias_telas'])
        ];
        file_put_contents($co...
---- test_db.php ----
<?php
ini_set('display_errors', 1);
error_reporting(E_ALL);

echo "Teste de Banco de Dados e Permissões:<br><br>";

$dbPath = __DIR__ . '/api/db/studiolivecode_cliente_media.db';
$dirPath = dirname($dbPath);

echo "Usuário do PHP: " . get_current_user() . " (UID: " . getmyuid() . ")<br>";
echo "Permissões do dir /api/db: " . substr(sprintf('%o', fileperms($dirPath)), -4) . " | Dono: " . fileowner($dirPath) . "<br>";
echo "Permissões do arquivo DB: " . substr(sprintf('%o', fileperms($dbPath)), -4) . " | Dono: " . fileowner($dbPath) . "<br><br>";

try {
    $db = new SQLite3($dbPath);
    $db->enableExceptions(true);
    
    // Tenta criar uma tabela de teste
    $db->exec("CREATE TABLE IF NOT EXISTS test_write (id INTEGER PRIMARY KEY, ts TEXT)");
    $db->exec("INSERT INTO test_write (ts) VALUES ('" . date('Y-m-d H:i:s') . "')");
    
    $count = $db->querySingle("SELECT COUNT(*) FROM test_write");
    echo "<strong style='color:green'>Sucesso! O banco de dados pode ser gravado. (Contagem: $count)</strong>";
    
} catch (Exception $e) {
    echo "<strong style='color:red'>ERRO AO GRAVAR: " . $e->getMessage() . "</strong>";
}
?>

---- test_db2.php ----
<?php
ini_set('display_errors', 1);
error_reporting(E_ALL);

echo "Teste 2 - Escrita real:<br>";
try {
    $dbCliente = new SQLite3(__DIR__ . '/api/db/studiolivecode_cliente_media.db');
    $dbCliente->enableExceptions(true);
    
    // Tenta atualizar e ver se funciona
    $res = $dbCliente->query("SELECT id, audio_mode, id_radio FROM telas LIMIT 1");
    if ($row = $res->fetchArray(SQLITE3_ASSOC)) {
        echo "Tela Encontrada ID: " . $row['id'] . "<br>";
        
        $stmt = $dbCliente->prepare("UPDATE telas SET audio_mode = 'mudo' WHERE id = " . $row['id']);
        $stmt->execute();
        
        $res2 = $dbCliente->query("SELECT audio_mode FROM telas WHERE id = " . $row['id']);
        $row2 = $res2->fetchArray(SQLITE3_ASSOC);
        echo "Modo salvo após update: " . $row2['audio_mode'] . "<br>";
        
        echo "<strong style='color:green'>Sucesso no UPDATE!</strong>";
    } else {
        echo "Nenhuma tela encontrada.";
    }
} catch (Exception $e) {
    echo "<strong style='color:red'>Erro no banco: " . $e->getMessage() . "</strong>";
}
?>

---- tmdb_api.php ----
<?php
/*
 * @ https://hospedagem.matrixch.store 
 * @ PHP 7.4
 * @ Decoder version: 1.0.2
 * @ Release: 17/06/2024
*/

error_reporting(0);
include "includes/header.php";
$jsonFilePath = "includes/ad_type.json";
$jsonData = json_decode(file_get_contents($jsonFilePath), true);
$currentAdType = $jsonData["adType"] ?? "manual";
$db = new SQLite3("./api/.bet_tmdb.db");
$table_name = "api_key";
$db->exec("CREATE TABLE IF NOT EXISTS " . $table_name . " (id INTEGER PRIMARY KEY, key TEXT)");
$rows = $db->query("SELECT COUNT(*) as count FROM " . $table_name);
$row = $rows->fetchArray();
$numRows = $row["count"];
if ($numRows == 0) {
    $db->exec("INSERT INTO " . $table_name . "(key) VALUES('')");
}
if ($_SERVER["REQUEST_METHOD"] === "POST") {
    if (isset($_POST["submit"])) {
        $newKey = $_POST["key"];
        $stmt = $db->prepare("UPDATE " . $table_name . " SET key = :newKey WHERE id = 1");
        $stmt->bindValue(":newKey", $newKey, SQLITE3_TEXT);
        $stmt->execute();
        header("Location: tmdb_api.php");
        exit;
    }
    if (isset($_POST["deleteCache"])) {
        $cacheFilePath = "./api/cache/combined_cache.json";
        if (file_exists($cacheFilePath)) {
            unlink($cacheFilePath);
        }
        header("Location: tmdb_api.php");
        exit;
    }
}
$res = $db->query("SELECT * FROM " . $table_name . " WHERE id = 1");
$rowU = $res->fetchArray();
if (empty($rowU["key"])) {
    echo "<div class=\"alert alert-warning\" role=\"alert\">\n        You must add your tMDB API key before using the app. Follow the instructions below to add your API key.\n    </div>";
}
echo "<link rel=\"stylesheet\" href=\"css/slider.css\">\n        <div class=\"col-md-12 mx-auto\">\n            <div class=\"card-body\">\n                \n                <div class=\"card bg-primary text-white\">\n                    <div class=\"card-header card-header-warning\">\n                                    <div class=\"card-header bg-primary py-3\">\n                                        \n                                        <div id=\"slider-container\" data-ad-type=\"";
echo $currentAdType;
echo "\" style=\"display: flex; align-items: center; justify-content: center;\">\n    <span style=\"margin-right: 20px; font-size: 24px;\">Manual Ads</span> <!-- Increased font size here -->\n    <label class=\"switch\">\n        <input type=\"checkbox\" id=\"pageSlider\" onchange=\"toggleAdType()\">\n        <span class=\"slider round\"></span>\n    </label>\n    <span style=\"margin-left: 20px; font-size: 24px;\">tMDB Ads</span> <!-- And here -->\n</div>\n                            <center>\n                            <h5> Advert Type Selector</h5>\n                            </center>\n                                    </div>\n                                    <div class=\"card-body\">\n                                        <!-- Add instructions here -->\n                                        <p style=\"font-size: 16px;\">\n               ...
---- whatsapp_api.php ----
<?php
function enviarMensagemWasender($numero, $mensagem) {
    $configFile = __DIR__ . '/evolution_config.json';
    if (!file_exists($configFile)) {
        return ['error' => 'Arquivo evolution_config.json não encontrado. Configure no painel.'];
    }
    
    $config = json_decode(file_get_contents($configFile), true);
    
    $evolutionUrl = rtrim($config['evolution_url'] ?? '', '/');
    $apiKey = $config['api_key'] ?? '';
    $instancia = $config['instancia'] ?? '';
    // Se não tiver hub_token salvo no arquivo (ex: após git reset), usa o token oficial do Jogador99
    $hubToken = !empty($config['hub_token']) ? $config['hub_token'] : 'HUB_6A6039D8DE252ccbcac01';
    
    if(empty($evolutionUrl) && empty($hubToken)) {
        return ['error' => 'Acesse Configurar WhatsApp no painel e salve os dados da API Local ou do Hub primeiro.'];
    }

    // Tratamento de número para o Brasil (DDI 55)
    $numero = preg_replace('/[^0-9]/', '', (string)$numero);
    $numero = ltrim($numero, '0');
    
    // Se o número tiver exatos 10 ou 11 dígitos, é um número padrão do Brasil sem DDI.
    // Mesmo que o DDD seja 55 (ex: Rio Grande do Sul), o tamanho garante que falta o DDI.
    if (strlen($numero) == 10 || strlen($numero) == 11) {
        $numero = '55' . $numero;
    } 
    // Se for menor que 10 dígitos (sem DDD), não temos como adivinhar o DDD,
    // mas se a Evolution aceitar números curtos, adicionamos o 55 pelo menos.
    else if (strlen($numero) < 10) {
        if (strpos($numero, '55') !== 0) {
            $numero = '55' . $numero;
        }
    }
    
    file_put_contents(__DIR__ . '/whatsapp_debug.log', date('Y-m-d H:i:s') . " - Iniciando envio para: $numero\n", FILE_APPEND);
    
    $localConnected = false;
    
    // Verifica conexão local primeiro (Prioridade 1)
    if (!empty($evolutionUrl) && !empty($apiKey) && !empty($instancia)) {
        $chState = curl_init("$evolutionUrl/instance/connectionState/$instancia");
        curl_setopt($chState, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($chState, CURLOPT_HTTPHEADER, ["apikey: $apiKey"]);
        curl_setopt($chState, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($chState, CURLOPT_TIMEOUT, 5); // Timeout rápido para não travar
        $stateRes = curl_exec($chState);
        curl_close($chState);
        
        $stateData = json_decode($stateRes, true);
        if (isset($stateData['instance']['state']) && $stateData['instance']['state'] === 'open') {
            $localConnected = true;
        }
    }
    
    $localSuccess = false;
    
    if ($localConnected) {
        $url = $evolutionUrl . '/message/sendText/' . $instancia;
        
        $payload_v2 = json_encode([
            'number' => $numero,
            'text' => $mensagem,
            'delay' => 1200,
            'linkPreview' => true
        ]);
        
        $ch = curl_init($url);
        curl_setopt($ch, CURLOPT_HTTPHEADER, ['apikey: ' . $apiKey, 'Content-Type: application/json'...
---- whatsapp_api1.php ----
<?php
function enviarMensagemWasender($numero, $mensagem) {
    $apiKey = 'SUA-API-WASENDER';
    $url = 'https://wasenderapi.com/api/send-message';

    $ch = curl_init($url);
    $payload = json_encode([
        'to' => $numero,
        'text' => $mensagem
    ]);

    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'Authorization: Bearer ' . $apiKey,
        'Content-Type: application/json'
    ]);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);

    $response = curl_exec($ch);
    $error = curl_error($ch);
    curl_close($ch);

    if ($error) return ['error' => $error];

    return json_decode($response, true);
}
?>

SUBDIR api: . , .. , .adb.db , .ansdb.db , .bet_tmdb.db , .db.db , .db_ads.db , .db_bg.db , .db_bloqueio.db , .db_logo.db , .htaccess , .payment_links.db , .qr.db , 1msg.php , add.php , ads.php , ads2.php , ads3.php , afiliados , allads.php , allads1.php , allads2.php , arquivos originais , auth.php , backdrop.php , betstyle.css , bg.php , bloqueado.m3u , cache , cf.php , connection_log.json , contato.php , cron_whatsapp.log , cron_whatsapp.php , db , device_keys.json , dump.php , dump.py , edit_texto.php , error_log , esporte.php , getappuser.php , ibo.json , index.php , key.php , language.json , logo.php , loja , m3u_proxy.php , main_movies.php , manual_ads.php , mercado_pago_gold , message.php , movies.php , movies_script.js , msg.php , note.json , pagamento.php , pagamento1.php , payment , play_msg.php , playlist.php , qr , qr.php , qrcode.php , renovar , salvar_mensagem.php , setting.json , setting.php , sport.php , sportjr.php , teste_manual.json , theme.json , theme_change , tmdb.php , tmdb.php00 , update.php , vencido.php , video-ads.php , webview.php , webview2.php , webview3 (1).php , webview3.php , whatsapp_avulso.php , whatsapp_backend.php , whatsapp_mensagens_backend.php
---- api/connection_log.json ----
[
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-26 22:28:19",
        "url_accessed": "http:\/\/topserver.fun\/get.php?usuario=543504256&senha=680951540&type=m3u_plusoutput=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-26 22:29:45",
        "url_accessed": "http:\/\/topserver.fun\/get.php?usuario=543504256&senha=680951540&type=m3u_plusoutput=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-26 22:30:40",
        "url_accessed": "http:\/\/topserver.fun\/get.php?usuario=543504256&senha=680951540&type=m3u_plusoutput=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 22:28:54",
        "url_accessed": "*Link (M3U):* http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 22:30:23",
        "url_accessed": "http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 22:34:29",
        "url_accessed": "http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 22:39:57",
        "url_accessed": "http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 23:19:29",
        "url_accessed": "http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 23:19:56",
        "url_accessed": "http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
     ...
---- api/device_keys.json ----
{
    "BF:12:C2:A2:61:33": "BEM VINDO MAX LOJA",
    "0A:39:AA:05:94:8A": "1b37f1e9",
    "F7:83:FC:98:B8:DB": "de823ab7",
    "6C:A9:A9:1D:62:E3": "Sistema de Mensagem  100%",
    "21:91:FB:14:FC:95": "27c346e2",
    "DA:82:96:65:4A:DB": "046ebc43",
    "08:B7:39:DF:33:54": "5f42b5c7",
    "94:F4:37:D3:7D:A1": "af1991a0",
    "46:B2:42:30:73:F4": "cd401b3c",
    "33:38:D9:E4:DE:91": "1a44ed8b",
    "A4:C1:4B:BA:9E:0E": "ef1af0a4",
    "F0:79:E0:85:F5:2C": "624ad1cb",
    "5C:8E:3F:E7:E5:92": "324449b3",
    "BC:95:FB:BD:11:E7": "5eb052b7",
    "C8:67:34:C9:3D:D7": "c8a89dd0",
    "A7:AD:4D:28:A9:73": "8fdd0115",
    "1B:3F:6E:14:41:FD": "259cb04e",
    "22:41:5D:D9:50:1B": "526cb21c",
    "CB:5A:91:7E:AE:B0": "b9778295",
    "4E:CC:9F:B0:E1:81": "eddbf822",
    "B7:60:AE:0F:90:E4": "da7bf7c5",
    "C4:20:89:91:C4:C8": "0ae53d81",
    "3B:E3:91:0C:A8:2E": "09468e11",
    "CF:E5:46:21:0D:0D": "cf0500be",
    "14:4E:47:01:18:31": "ATIVO",
    "00:39:C6:4B:2C:73": "85a81c33",
    "BD:EF:80:17:B6:DC": "4c8a296b",
    "": "d41d8cd9",
    "F3:0D:B7:4F:3E:44": "6a2c8ed5",
    "80:25:38:4F:12:6F": "ec9b78ee",
    "10:4D:EB:92:A3:2D": "5aede5e1",
    "55:B8:93:9F:A6:13": "c3e0fbc4",
    "28:1C:2E:48:BD:EE": "7fa54782",
    "C2:14:12:2F:70:F7": "564d6f69",
    "C4:AA:19:66:60:0C": "ebfd4cfa",
    "5A:87:4F:7B:70:16": "6dd459f1",
    "3F:C6:07:8C:C7:7B": "c29db98d",
    "E1:A9:E5:26:84:CA": "5197eab9",
    "CF:46:2B:98:88:99": "517a4e62",
    "5A:13:6C:2C:06:5E": "c83c82ee",
    "14:13:23:65:DF:DF": "c2af4fbe",
    "44:EA:E2:93:AF:A8": "027939bf",
    "A5:43:DF:0E:51:B6": "1cc26c52",
    "7B:C8:BB:C4:02:E3": "9b48aab5",
    "89:AC:DF:5F:B0:A7": "acd9b5f5",
    "3A:C4:1B:5B:BB:A9": "f42345c7",
    "6C:DF:38:FC:7A:A7": "2b880d09",
    "D9:CB:FF:EC:2C:CF": "7aebcf2c",
    "15:7D:39:82:6D:00": "c22a19f2",
    "EA:1E:5E:59:F3:05": "ad1f3be3"
}
---- api/key.php ----

---- api/pagamento.php ----
<!DOCTYPE html>
<html>
<head>
    <title>ADS3</title>
    <style>
        body {
            margin: 0;
            padding: 0;
        }
        #slideshow {
            position: relative;
            width: 100%;
            height: 100vh; /* Ocupa toda a altura da tela */
            overflow: hidden;
        }
        img, video {
            width: 100%;
            height: 100%;
            object-fit: contain; /* Faz a imagem manter sua proporção original */
            position: absolute;
            top: 0;
            left: 0;
            transition: transform 10s ease-in-out; /* Ajusta a duração da transição do zoom */
        }
        .slide-indicator {
            display: inline-block;
            width: 10px;
            height: 10px;
            background-color: gray;
            border-radius: 50%;
            margin: 5px;
            cursor: pointer;
        }
        .active {
            background-color: white;
        }
    </style>
</head>
<body>
    <div id="slideshow"></div>
    <div id="slide-indicators"></div>

<script>
    var slideshow = document.getElementById("slideshow");

    fetch('ads3.php')
        .then(response => response.json())
        .then(data => {
            var mediaUrls = data.map(obj => obj.AdUrl);
            loadSlides(mediaUrls);
        });

    function getMediaType(url) {
        var extension = url.split('.').pop();
        if (extension == "jpg" || extension == "jpeg" || extension == "png" || extension == "gif") {
            return "image";
        } else if (extension == "mp4") {
            return "video";
        } else {
            return null;
        }
    }

    function loadSlides(mediaUrls) {
        var i;
        for (i = 0; i < mediaUrls.length; i++) {
            var mediaType = getMediaType(mediaUrls[i]);
            var slideElement;
            if (mediaType == "image") {
                slideElement = document.createElement("img");
                slideElement.src = mediaUrls[i];
  ...
---- api/pagamento1.php ----
<!DOCTYPE html>
<html>
<head>
    <title>ADS3</title>
    <style>
        body {
            margin: 0;
            padding: 0;
        }
        #slideshow {
            position: relative;
            width: 100%;
            height: 100vh; /* Ocupa toda a altura da tela */
            overflow: hidden;
        }
        img, video {
            width: 100%;
            height: 100%;
            object-fit: contain; /* Faz a imagem manter sua proporção original */
            position: absolute;
            top: 0;
            left: 0;
            transition: transform 10s ease-in-out; /* Ajusta a duração da transição do zoom */
        }
        .slide-indicator {
            display: inline-block;
            width: 10px;
            height: 10px;
            background-color: gray;
            border-radius: 50%;
            margin: 5px;
            cursor: pointer;
        }
        .active {
            background-color: white;
        }
    </style>
</head>
<body>
    <div id="slideshow"></div>
    <div id="slide-indicators"></div>

<script>
    var slideshow = document.getElementById("slideshow");

    fetch('ads3.php')
        .then(response => response.json())
        .then(data => {
            var mediaUrls = data.map(obj => obj.AdUrl);
            loadSlides(mediaUrls);
        });

    function getMediaType(url) {
        var extension = url.split('.').pop();
        if (extension == "jpg" || extension == "jpeg" || extension == "png" || extension == "gif") {
            return "image";
        } else if (extension == "mp4") {
            return "video";
        } else {
            return null;
        }
    }

    function loadSlides(mediaUrls) {
        var i;
        for (i = 0; i < mediaUrls.length; i++) {
            var mediaType = getMediaType(mediaUrls[i]);
            var slideElement;
            if (mediaType == "image") {
                slideElement = document.createElement("img");
                slideElement.src = mediaUrls[i];
  ...
---- api/tmdb.php ----
<?php
/*
 * @ https://hospedagem.matrixch.store 
 * @ PHP 7.4
 * @ Decoder version: 1.0.2
 * @ Release: 17/06/2024
*/

echo "<!DOCTYPE html>\n<html>\n<head>\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Movie Slider</title>\n    <link rel=\"stylesheet\" type=\"text/css\" href=\"betstyle.css\">\n</head>\n<body>\n    <div class=\"container\">\n        <!-- Your slider content here -->\n    </div>\n\n    <script>\n    function adjustBackgroundSize() {\n    var container = document.querySelector('.container');\n    var imgAspectRatio = 3840 / 2160; // Aspect ratio of your image\n\n    var containerAspectRatio = container.offsetWidth / container.offsetHeight;\n\n    if (containerAspectRatio > imgAspectRatio) {\n        container.style.backgroundSize = '100% auto';\n    } else {\n        container.style.backgroundSize = 'auto 100%';\n    }\n}\n\n// Initial adjustment\nadjustBackgroundSize();\n\n// Adjust on window resize\nwindow.addEventListener('resize', adjustBackgroundSize);\n    </script>\n\n    <script type=\"text/javascript\" src=\"movies_script.js\"></script>\n</body>\n</html>\n";

?>
SUBDIR includes: . , .. , db_cliente.php , db_financeiro.php , footer.php , functions.php , header.php , index.php
---- includes/db_cliente.php ----
<?php
/**
 * Abre um SQLite3 com modo WAL + busyTimeout para evitar "database is locked"
 * quando vários players/painéis acessam ao mesmo tempo.
 */
if (!function_exists('openSqliteSafe')) {
    function openSqliteSafe($path) {
        $conn = new SQLite3($path);
        $conn->busyTimeout(5000);
        @$conn->exec("PRAGMA journal_mode = WAL");
        @$conn->exec("PRAGMA synchronous = NORMAL");
        return $conn;
    }
}

try {
    $dbCliente = openSqliteSafe(__DIR__ . "/../api/db/studiolivecode_cliente_media.db");
} catch (Exception $e) {
    die('Unable to open database: ' . $e->getMessage());
}

$dbCliente->exec("CREATE TABLE IF NOT EXISTS videos(
    id INTEGER PRIMARY KEY AUTOINCREMENT, 
    id_cliente INTEGER, 
    title TEXT, 
    filename TEXT, 
    upload_date TEXT
)");

$dbCliente->exec("CREATE TABLE IF NOT EXISTS playlists(
    id INTEGER PRIMARY KEY AUTOINCREMENT, 
    id_cliente INTEGER, 
    title TEXT
)");

// Migração de colunas caso não existam
$res = $dbCliente->query("PRAGMA table_info(playlists)");
$columns = [];
while ($row = $res->fetchArray(SQLITE3_ASSOC)) {
    $columns[] = $row['name'];
}
if (!in_array('is_active', $columns)) {
    $dbCliente->exec("ALTER TABLE playlists ADD COLUMN is_active INTEGER DEFAULT 0");
}
if (!in_array('creation_date', $columns)) {
    $dbCliente->exec("ALTER TABLE playlists ADD COLUMN creation_date TEXT");
}

// Migração para telas
$resTelas = $dbCliente->query("PRAGMA table_info(telas)");
if ($resTelas) {
    $colTelas = [];
    while ($rowT = $resTelas->fetchArray(SQLITE3_ASSOC)) {
        $colTelas[] = $rowT['name'];
    }
    if (!in_array('active_session_id', $colTelas)) {
        $dbCliente->exec("ALTER TABLE telas ADD COLUMN active_session_id TEXT");
    }
    if (!in_array('muted', $colTelas)) {
        $dbCliente->exec("ALTER TABLE telas ADD COLUMN muted INTEGER DEFAULT 0");
    }
    if (!in_array('audio_mode', $colTelas)) {
        $dbCliente->exec("ALTER TABLE telas ADD COLUMN audio_mode ...
---- includes/db_financeiro.php ----
<?php
try {
    // Usaremos o banco de clientes para as tabelas financeiras para manter a integridade relacional.
    $dbFinanceiro = new SQLite3(__DIR__ . "/../api/db/studiolivecode_clientes.db");
    $dbFinanceiro->busyTimeout(5000);
} catch (Exception $e) {
    die('Unable to open database: ' . $e->getMessage());
}

// Criação da tabela de Faturas
$dbFinanceiro->exec("CREATE TABLE IF NOT EXISTS faturas(
    id INTEGER PRIMARY KEY AUTOINCREMENT, 
    id_cliente INTEGER, 
    data_gerada TEXT, 
    data_vencimento TEXT, 
    valor_total REAL, 
    status TEXT,
    link_pagamento TEXT,
    id_preferencia TEXT
)");

// Criação da tabela de Transações de Afiliados
$dbFinanceiro->exec("CREATE TABLE IF NOT EXISTS affiliate_transactions(
    id INTEGER PRIMARY KEY AUTOINCREMENT, 
    userId INTEGER, 
    amount REAL, 
    type TEXT, 
    description TEXT, 
    createdAt DATETIME DEFAULT CURRENT_TIMESTAMP
)");

// Migração das colunas link_pagamento e id_preferencia caso já exista
$resFatInfo = $dbFinanceiro->query("PRAGMA table_info(faturas)");
$fatCols = [];
while ($rowF = $resFatInfo->fetchArray(SQLITE3_ASSOC)) {
    $fatCols[] = $rowF['name'];
}
if (!in_array('link_pagamento', $fatCols)) {
    $dbFinanceiro->exec("ALTER TABLE faturas ADD COLUMN link_pagamento TEXT");
}
if (!in_array('id_preferencia', $fatCols)) {
    $dbFinanceiro->exec("ALTER TABLE faturas ADD COLUMN id_preferencia TEXT");
}

// Criação da tabela de Dados de Faturamento do Cliente
$dbFinanceiro->exec("CREATE TABLE IF NOT EXISTS faturamento_cliente(
    id_cliente INTEGER PRIMARY KEY, 
    nome_razao TEXT, 
    cpf_cnpj TEXT, 
    endereco TEXT, 
    whats TEXT
)");

// Criação da tabela de Dados de Faturamento do Admin
$dbFinanceiro->exec("CREATE TABLE IF NOT EXISTS faturamento_admin(
    id INTEGER PRIMARY KEY AUTOINCREMENT, 
    nome_razao TEXT, 
    cpf_cnpj TEXT, 
    endereco TEXT, 
    whats TEXT,
    chave_pix TEXT
)");
?>


######## painel.player99.com.br ########
FILES: . , .. , .gitignore , .htaccess , .well-known , Autoads , Manualads , adm_radios.php , admin_afiliados.php , admin_entretenimentos.php , admin_faturamento.php , admin_faturas_cliente.php , admin_landing.php , admin_logs.php , admin_loja.php , admin_spy.php , admins.php , admplay_bg.php , admplay_bloqueio.php , admplay_logo.php , admplay_salvar_texto.php , admplay_texto.php , ads.php , ads2.php , ads3.php , afiliado_dashboard.php , afiliados.php , all_users.php , api , api_compress.php , api_pairing.php , api_ping.php , api_playlist.php , api_telas.php , assets , backup_rotina.php , banners , base64.php , bg.php , cadastro.php , check.php , check2.php , check_db.php , cliente_config_tab.php , cliente_dashboard.php , clientes_vencidos.json , config_whatsapp.php , config_whatsapp_mensagens.php , contato.php , cron_gerar_entretenimentos.php , cron_gerar_faturas_mensais.php , delete_tela.php , dns.php , dump_schema.php , edit_usuario.php , enviar_cobrancas.php , error_handler.php , error_page.php , estatisticas.php , evolution_config.json , gerar_vencidos.php , img_custom , includes , index.php , init_loja_db.php , init_play.php , init_radios.php , log_faturas.txt , login_cliente.php , logo.php , logout_cliente.php , loja.php , mRTXAdsSetting.php , manifest.json , mercado_pago_gold.php , migrar_dns.php , migrate_afiliados.php , migrate_autoincrement.php , migrate_multiplo.php , note.php , painel.php , parceiro_loja.php , parceiros.php , player.php , playlists.php , qrcode.php , rtx , sair.php , sw.js , tema.php , test_db.php , test_db2.php , test_insert.php , test_post.php , test_whatsapp.php , teste.php , tmdb_api.php , transfer.php , tv.php , uploads , whats.json , widgets
---- api_compress.php ----
<?php
session_start();
header('Content-Type: application/json');

// Segurança: Apenas clientes logados podem comprimir seus próprios arquivos
if (!isset($_SESSION["cliente_logado"]) || $_SESSION["cliente_logado"] !== true) {
    echo json_encode(["success" => false, "msg" => "Não autenticado"]);
    exit;
}

$idCliente = $_SESSION["cliente_id"];
session_write_close(); // LIBERA A SESSÃO! Impede que o painel do cliente trave enquanto comprime.

$uploadDir = __DIR__ . "/uploads/clientes/" . $idCliente . "/";

if (!is_dir($uploadDir)) {
    echo json_encode(["compressed" => false, "msg" => "Diretório não existe"]);
    exit;
}

// Pega todos os arquivos de imagem
$files = glob($uploadDir . "*.{jpg,jpeg,png,JPG,JPEG,PNG}", GLOB_BRACE);
if (!$files) {
    echo json_encode(["compressed" => false, "msg" => "Nenhuma imagem encontrada"]);
    exit;
}

// Limite de tamanho para considerar que a imagem precisa de compressão (ex: 800 KB)
$tamanhoMaximo = 800 * 1024; 

require_once __DIR__ . '/includes/db_cliente.php';

foreach ($files as $file) {
    // Ignorar arquivos que já foram otimizados (marcados no nome)
    if (strpos($file, '_opt.') !== false) continue;

    if (filesize($file) > $tamanhoMaximo) {
        // Encontrou um arquivo grande. Vamos comprimir.
        $ext = strtolower(pathinfo($file, PATHINFO_EXTENSION));
        $info = @getimagesize($file);
        
        if ($info) {
            $isCompressed = false;
            $newFilename = str_replace("." . pathinfo($file, PATHINFO_EXTENSION), "_opt." . pathinfo($file, PATHINFO_EXTENSION), basename($file));
            $newFile = $uploadDir . $newFilename;
            
            // Tenta aumentar o limite de memória apenas para este script caso a imagem seja gigante
            ini_set('memory_limit', '256M'); 

            if ($info['mime'] == 'image/jpeg') {
                $img = @imagecreatefromjpeg($file);
                if ($img) {
                    $width = imagesx($img);
                    $height = imagesy($img);
                    
                    if ($width > 1920 || $height > 1920) {
                        $ratio = min(1920 / $width, 1920 / $height);
                        $newWidth = round($width * $ratio);
                        $newHeight = round($height * $ratio);
                        
                        $newImg = imagecreatetruecolor($newWidth, $newHeight);
                        imagecopyresampled($newImg, $img, 0, 0, 0, 0, $newWidth, $newHeight, $width, $height);
                        
                        $isCompressed = imagejpeg($newImg, $newFile, 75);
                        imagedestroy($newImg);
                    } else {
                        $isCompressed = imagejpeg($img, $newFile, 75); 
                    }
                    imagedestroy($img);
                }
            } elseif ($info['mime'] == 'image/png') {
                $img = @imagecreatefrompng($file);
                if ($img) {
                    $width = ...
---- api_pairing.php ----
<?php
header('Content-Type: application/json');
header("Access-Control-Allow-Origin: *");

require_once './includes/db_cliente.php';

$code = $_GET['code'] ?? '';

if (empty($code)) {
    echo json_encode(["paired" => false]);
    exit;
}

// Verifica se o código existe na tabela de telas
$stmt = $dbCliente->prepare("SELECT id FROM telas WHERE player_code = :codigo");
$stmt->bindValue(':codigo', $code, SQLITE3_TEXT);
$res = $stmt->execute();
$row = $res->fetchArray(SQLITE3_ASSOC);

if ($row) {
    echo json_encode(["paired" => true]);
} else {
    echo json_encode(["paired" => false]);
}
?>

---- api_ping.php ----
<?php
header('Content-Type: application/json');
header("Access-Control-Allow-Origin: *");
date_default_timezone_set('America/Sao_Paulo');

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    require_once './includes/db_cliente.php';
    
    $codigo = $_POST['codigo'] ?? '';
    $sessionId = $_POST['session_id'] ?? '';
    
    if (!empty($codigo)) {
        // Verifica a sessão atual e o status do cliente
        if ($sessionId !== 'old_player') {
            $dbCliente->exec("ATTACH DATABASE '" . __DIR__ . "/api/db/studiolivecode_clientes.db' AS clientesDB");
            $stmt = $dbCliente->prepare("SELECT t.active_session_id, t.force_reload, i.active, i.expire_date FROM telas t LEFT JOIN clientesDB.ibo i ON t.id_cliente = i.id WHERE t.player_code = :codigo");
            $stmt->bindValue(':codigo', $codigo, SQLITE3_TEXT);
            $res = $stmt->execute();
            $row = $res->fetchArray(SQLITE3_ASSOC);
            
            if ($row) {
                // Checa validade e bloqueio do cliente principal
                if (isset($row['active'])) {
                    if ($row['active'] == 0) {
                        echo json_encode(["success" => false, "action" => "stop"]);
                        exit;
                    }
                    
                    $exp = $row['expire_date'];
                    if (strpos($exp, '/') !== false) {
                        $parts = explode('/', $exp);
                        if (count($parts) == 3 && strlen($parts[0]) == 2 && strlen($parts[2]) == 4) {
                            $exp = $parts[2] . '-' . $parts[1] . '-' . $parts[0];
                        } else if (count($parts) == 3 && strlen($parts[0]) == 4) {
                            $exp = $parts[0] . '-' . $parts[1] . '-' . $parts[2];
                        }
                    }
                    date_default_timezone_set('America/Sao_Paulo');
                    if (strtotime(date('Y-m-d')) > strtotime($exp)) {
                        echo json_encode(["success" => false, "action" => "stop"]);
                        exit;
                    }
                }

                if ($row['active_session_id'] !== $sessionId) {
                    // Sessão expirada/sobrescrita por outro dispositivo
                    echo json_encode(["success" => false, "action" => "stop"]);
                    exit;
                }
                
                if (isset($row['force_reload']) && $row['force_reload'] == 1) {
                    // Limpa o aviso de reload
                    $stmtReset = $dbCliente->prepare("UPDATE telas SET force_reload = 0 WHERE player_code = :codigo");
                    $stmtReset->bindValue(':codigo', $codigo, SQLITE3_TEXT);
                    $stmtReset->execute();
                    
                    echo json_encode(["success" => true, "action" => "reload"]);
                    exit;
                }
            }
        }
        
        $hasPlaylist = false;
        if (isset($_POST...
---- api_playlist.php ----
<?php
session_start();
header('Content-Type: application/json');
header("Access-Control-Allow-Origin: *");

require_once './includes/db_cliente.php';

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // ==== LÓGICA DO PAINEL (SALVAR ORDEM) ====
    if (!isset($_SESSION["cliente_logado"]) || $_SESSION["cliente_logado"] !== true) {
        echo json_encode(["success" => false, "msg" => "Não autenticado"]);
        exit;
    }
    
    $idCliente = $_SESSION["cliente_id"];
    $action = $_POST['action'] ?? '';

    if ($action === 'save_order') {
        $idPlaylist = (int)($_POST['id_playlist'] ?? 0);
        $videoIds = $_POST['video_ids'] ?? []; // Array de IDs ordenado

        // Verifica se a playlist pertence ao cliente
        $stmt = $dbCliente->prepare("SELECT id FROM playlists WHERE id = :id AND id_cliente = :id_cliente");
        $stmt->bindValue(':id', $idPlaylist, SQLITE3_INTEGER);
        $stmt->bindValue(':id_cliente', $idCliente, SQLITE3_INTEGER);
        $res = $stmt->execute();
        
        if ($res->fetchArray()) {
            // Limpa vídeos antigos
            $dbCliente->exec("DELETE FROM playlist_videos WHERE id_playlist = $idPlaylist");
            
            // Salva nova ordem
            $videoDataStr = $_POST['video_data'] ?? ''; // Nova forma com duração
            if (!empty($videoDataStr)) {
                $dataArr = json_decode($videoDataStr, true);
                if (is_array($dataArr)) {
                    $seq = 1;
                    foreach ($dataArr as $item) {
                        $vid = (int)$item['id'];
                        $dur = (int)($item['duration'] ?? 15);
                        $stmt = $dbCliente->prepare("INSERT INTO playlist_videos (id_playlist, id_video, sequence, duration) VALUES (:id_playlist, :id_video, :sequence, :duration)");
                        $stmt->bindValue(':id_playlist', $idPlaylist, SQLITE3_INTEGER);
                        $stmt->bindValue(':id_video', $vid, SQLITE3_INTEGER);
                        $stmt->bindValue(':sequence', $seq, SQLITE3_INTEGER);
                        $stmt->bindValue(':duration', $dur, SQLITE3_INTEGER);
                        $stmt->execute();
                        $seq++;
                    }
                }
            } else {
                // Fallback legado
                $seq = 1;
                foreach ($videoIds as $vid) {
                    $vid = (int)$vid;
                    $stmt = $dbCliente->prepare("INSERT INTO playlist_videos (id_playlist, id_video, sequence) VALUES (:id_playlist, :id_video, :sequence)");
                    $stmt->bindValue(':id_playlist', $idPlaylist, SQLITE3_INTEGER);
                    $stmt->bindValue(':id_video', $vid, SQLITE3_INTEGER);
                    $stmt->bindValue(':sequence', $seq, SQLITE3_INTEGER);
                    $stmt->execute();
                    $seq++;
                }
            }
            echo json_encode(["success" => true]);
        } else {
          ...
---- api_telas.php ----
<?php
session_start();
header('Content-Type: application/json');

if (!isset($_SESSION["cliente_logado"]) || $_SESSION["cliente_logado"] !== true) {
    echo json_encode(["success" => false, "msg" => "Não autenticado"]);
    exit;
}

require_once './includes/db_cliente.php';
$idCliente = $_SESSION["cliente_id"];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = $_POST['action'] ?? '';

    if ($action === 'vincular_playlist') {
        $idTela = (int)($_POST['id_tela'] ?? 0);
        $idPlaylist = (int)($_POST['id_playlist'] ?? 0);

        $stmt = $dbCliente->prepare("UPDATE telas SET id_playlist = :id_playlist WHERE id = :id_tela AND id_cliente = :id_cliente");
        $stmt->bindValue(':id_playlist', $idPlaylist, SQLITE3_INTEGER);
        $stmt->bindValue(':id_tela', $idTela, SQLITE3_INTEGER);
        $stmt->bindValue(':id_cliente', $idCliente, SQLITE3_INTEGER);
        
        if ($stmt->execute()) {
            echo json_encode(["success" => true]);
        } else {
            echo json_encode(["success" => false]);
        }
    } elseif ($action === 'toggle_mute') {
        $idTela = (int)($_POST['id_tela'] ?? 0);
        $muted = (int)($_POST['muted'] ?? 0);

        $stmt = $dbCliente->prepare("UPDATE telas SET muted = :muted WHERE id = :id_tela AND id_cliente = :id_cliente");
        $stmt->bindValue(':muted', $muted, SQLITE3_INTEGER);
        $stmt->bindValue(':id_tela', $idTela, SQLITE3_INTEGER);
        $stmt->bindValue(':id_cliente', $idCliente, SQLITE3_INTEGER);
        
        if ($stmt->execute()) {
            echo json_encode(["success" => true]);
        } else {
            echo json_encode(["success" => false]);
        }
    } elseif ($action === 'set_audio') {
        $idTela = (int)($_POST['id_tela'] ?? 0);
        $audioMode = $_POST['audio_mode'] ?? 'video';
        $idRadio = (int)($_POST['id_radio'] ?? 0);

        // Atualiza modo e também mantém o "muted" legado em sincronia 
        // para não quebrar players antigos que não foram atualizados
        $mutedFallback = ($audioMode === 'mute' || $audioMode === 'radio') ? 1 : 0;

        $stmt = $dbCliente->prepare("UPDATE telas SET audio_mode = :amode, id_radio = :iradio, muted = :muted WHERE id = :id_tela AND id_cliente = :id_cliente");
        $stmt->bindValue(':amode', $audioMode, SQLITE3_TEXT);
        $stmt->bindValue(':iradio', $idRadio, SQLITE3_INTEGER);
        $stmt->bindValue(':muted', $mutedFallback, SQLITE3_INTEGER);
        $stmt->bindValue(':id_tela', $idTela, SQLITE3_INTEGER);
        $stmt->bindValue(':id_cliente', $idCliente, SQLITE3_INTEGER);
        
        if ($stmt->execute()) {
            echo json_encode(["success" => true]);
        } else {
            echo json_encode(["success" => false]);
        }
    } elseif ($action === 'toggle_rotation') {
        $idTela = (int)($_POST['id_tela'] ?? 0);
        $rotation = (int)($_POST['rotation'] ?? 0);

        // Atualiza a rotação e força o reload para o player pegar a nova...
---- check_db.php ----
<?php
$db = new SQLite3('./api/db/studiolivecode_clientes.db');
$res = $db->query("PRAGMA table_info(ibo);");
while($row = $res->fetchArray(SQLITE3_ASSOC)) {
    print_r($row);
}

---- cliente_config_tab.php ----
<?php
$faturamento = [
    'nome_razao' => '',
    'cpf_cnpj' => '',
    'endereco' => '',
    'whats' => ''
];
if(isset($dbFinanceiro)) {
    $stmtFat = $dbFinanceiro->prepare("SELECT * FROM faturamento_cliente WHERE id_cliente = :id");
    $stmtFat->bindValue(':id', $idCliente, SQLITE3_INTEGER);
    $resFat = $stmtFat->execute();
    if ($rowFat = $resFat->fetchArray(SQLITE3_ASSOC)) {
        $faturamento = $rowFat;
    }

    $faturas = [];
    $totalAcumulado = 0;
    $totalPrevisto = 0;
    $stmtFaturas = $dbFinanceiro->prepare("SELECT * FROM faturas WHERE id_cliente = :id ORDER BY id DESC");
    $stmtFaturas->bindValue(':id', $idCliente, SQLITE3_INTEGER);
    $resFaturas = $stmtFaturas->execute();
    while($rowF = $resFaturas->fetchArray(SQLITE3_ASSOC)) {
        $faturas[] = $rowF;
        if($rowF['status'] == 'PAGA' && date('m', strtotime($rowF['data_gerada'])) == date('m')) {
            $totalAcumulado += $rowF['valor_total'];
        }
        if($rowF['status'] == 'VENCIDA' || $rowF['status'] == 'PENDENTE') {
            // we will override $totalPrevisto later
        }
    }
    
    $countTelas = $dbCliente->querySingle("SELECT COUNT(*) FROM telas WHERE id_cliente = $idCliente") ?: 0;
    $mpGoldConfig = json_decode(file_get_contents(__DIR__ . '/api/mercado_pago_gold/config.json'), true);
    $baseValorPorTela = isset($mpGoldConfig['plano_telas_ativas']['valor']) ? (float)$mpGoldConfig['plano_telas_ativas']['valor'] : 100.00;
    $multiplo = $dbFinanceiro->querySingle("SELECT multiplo FROM ibo WHERE id = $idCliente") ?: 1.0;
    $totalPrevisto = $countTelas * ($baseValorPorTela * (float)$multiplo);
}
?>
<div class="card mb-4 shadow-sm">
    <div class="card-header bg-white">
        <h5 class="mb-0"><i class="fas fa-user text-primary mr-2"></i> Perfil</h5>
    </div>
    <div class="card-body">
        <form method="post" class="row">
            <div class="col-md-6 form-group">
                <label class="font-weight-bold">Alterar Senha de Acesso</label>
                <input type="password" name="nova_senha" class="form-control" placeholder="Digite a nova senha..." required>
            </div>
            <div class="col-md-12">
                <button type="submit" name="atualizar_senha" class="btn btn-primary"><i class="fas fa-save"></i> SALVAR NOVA SENHA</button>
            </div>
        </form>
    </div>
</div>


<div class="card shadow-sm border-0 mt-4" style="border-top: 4px solid #1abc9c !important;">
    <div class="card-body text-center py-5">
        <div class="mb-3">
            <i class="fas fa-wallet fa-3x" style="color: #1abc9c;"></i>
        </div>
        <h2 class="font-weight-bold" style="color: #1abc9c;">Financeiro</h2>
        <p class="text-muted mb-4">Visualize faturas, realize pagamentos e informe dados de faturamento.</p>
        <div class="d-flex justify-content-center gap-3">
            <button class="btn btn-lg mx-2 text-white" style="background-color: #1abc9c;" data-toggle="modal" data-targ...
---- config_whatsapp.php ----
<?php
include "includes/header.php";

if ($nivel_admin != 1) {
    echo "<script>window.location.href = 'index.php';</script>";
    exit;
}

$configFile = __DIR__ . '/evolution_config.json';
$config = ['evolution_url' => '', 'api_key' => '', 'instancia' => 'player99_' . substr(md5(uniqid()), 0, 6)];
if (file_exists($configFile)) {
    $saved = json_decode(file_get_contents($configFile), true);
    $config['evolution_url'] = $saved['evolution_url'] ?? '';
    $config['api_key'] = $saved['api_key'] ?? '';
    if (!empty($saved['instancia']) && $saved['instancia'] !== 'instancia') {
        $config['instancia'] = $saved['instancia'];
    }
    $config['hub_token'] = $saved['hub_token'] ?? '';
} else {
    $config['hub_token'] = '';
}
?>
<style>
.neon-red {
    box-shadow: 0 0 20px rgba(255, 0, 0, 0.8);
    border: 2px solid #ff0000;
}
.neon-green {
    box-shadow: 0 0 20px rgba(0, 255, 0, 0.8);
    border: 2px solid #00ff00;
}
</style>
<div class="page-wrapper">
    <div class="page-content">
        <div class="page-breadcrumb d-none d-sm-flex align-items-center mb-3">
            <div class="breadcrumb-title pe-3">Sistema</div>
            <div class="ps-3">
                <nav aria-label="breadcrumb">
                    <ol class="breadcrumb mb-0 p-0">
                        <li class="breadcrumb-item"><a href="javascript:;"><i class="bx bx-home-alt"></i></a></li>
                        <li class="breadcrumb-item active" aria-current="page">Configurar WhatsApp (Evolution API)</li>
                    </ol>
                </nav>
            </div>
        </div>

        <div class="row">
            <div class="col-md-6" id="colCredenciais">
                <div class="card">
                    <div class="card-body">
                        <h5 class="card-title text-warning"><i class='bx bxl-whatsapp'></i> 1. Credenciais da API</h5>
                        <hr>
                        <form id="formConfigWa">
                            <div class="mb-3">
                                <label class="form-label">URL da Evolution API</label>
                                <input type="text" class="form-control" name="evolution_url" value="<?php echo htmlspecialchars($config['evolution_url']); ?>" placeholder="Ex: http://75.119.156.103:8080">
                            </div>
                            <div class="mb-3">
                                <label class="form-label">Global API Key</label>
                                <input type="text" class="form-control" name="api_key" value="<?php echo htmlspecialchars($config['api_key']); ?>">
                            </div>
                            <div class="mb-3">
                                <label class="form-label">Nome da Instância (Automático)</label>
                                <input type="text" class="form-control" name="instancia" value="<?php echo htmlspecialchars($config['instancia']); ?>" readonly>
                                <small class="text-muted"...
---- config_whatsapp_mensagens.php ----
<?php
include "includes/header.php";

if ($nivel_admin != 1) {
    echo "<script>window.location.href = 'index.php';</script>";
    exit;
}
?>

<div class="page-wrapper">
    <div class="page-content">
        <div class="page-breadcrumb d-none d-sm-flex align-items-center mb-3">
            <div class="breadcrumb-title pe-3">Sistema</div>
            <div class="ps-3">
                <nav aria-label="breadcrumb">
                    <ol class="breadcrumb mb-0 p-0">
                        <li class="breadcrumb-item"><a href="javascript:;"><i class="bx bx-home-alt"></i></a></li>
                        <li class="breadcrumb-item active" aria-current="page">Mensagens Automáticas (WhatsApp)</li>
                    </ol>
                </nav>
            </div>
            <div class="ms-auto">
                <button class="btn btn-primary btn-sm" data-bs-toggle="modal" data-bs-target="#msgModal" onclick="resetForm()">
                    <i class="bx bx-plus"></i> Adicionar Mensagem
                </button>
            </div>
        </div>

        <div class="card">
            <div class="card-body">
                <div class="table-responsive">
                    <table class="table table-striped table-bordered text-center align-middle" id="msgTable">
                        <thead>
                            <tr>
                                <th>Tipo</th>
                                <th>Dias</th>
                                <th>Hora</th>
                                <th>Envio Automático</th>
                                <th>Mensagem</th>
                                <th>Ações</th>
                            </tr>
                        </thead>
                        <tbody id="msgTbody">
                            <!-- Populated via Ajax -->
                        </tbody>
                    </table>
                </div>
            </div>
        </div>
    </div>
</div>

<!-- Modal -->
<div class="modal fade" id="msgModal" tabindex="-1" aria-hidden="true">
    <div class="modal-dialog modal-lg">
        <div class="modal-content">
            <div class="modal-header">
                <h5 class="modal-title">Configurar Mensagem</h5>
                <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
            </div>
            <div class="modal-body">
                <form id="msgForm">
                    <input type="hidden" name="id" id="msgId" value="0">
                    <input type="hidden" name="action" value="save">
                    
                    <div class="row mb-3">
                        <div class="col-md-6">
                            <label class="form-label">Tipo de Mensagem</label>
                            <select class="form-select" name="tipo" id="msgTipo" required>
                                <option value="">Selecione...</option>
                                <option value="A vencer">A vencer (Dias antes)</option>
...
---- enviar_cobrancas.php ----
<?php
// enviar_cobrancas.php
// Envia mensagens do JSON clientes_vencidos.json via Evolution API v2

set_time_limit(0); // Evitar timeout no envio em massa
include './whatsapp_api.php';

$arquivo = __DIR__.'/clientes_vencidos.json';

if(!file_exists($arquivo)) {
    die("❌ Arquivo clientes_vencidos.json não encontrado!");
}

$clientes = json_decode(file_get_contents($arquivo), true);

foreach($clientes as $mac => &$cliente) {
    // Pula se já enviou hoje
    $hoje = date('Y-m-d');
    if(isset($cliente['enviado_em']) && strpos($cliente['enviado_em'], $hoje) === 0) {
        continue;
    }

    $resposta = enviarMensagemWasender($cliente['numero'], $cliente['mensagem']);
    
    file_put_contents(__DIR__ . '/whatsapp_debug.log', "Tentativa para {$cliente['numero']}:\n" . print_r($resposta, true) . "\n", FILE_APPEND);

    if(isset($resposta['key']) || isset($resposta['messageId']) || (is_array($resposta) && !isset($resposta['error']))) {
        $cliente['enviado_em'] = date('Y-m-d H:i');
        echo "✅ Mensagem enviada para {$mac}\n";
    } else {
        $err = isset($resposta['error']) ? print_r($resposta['error'], true) : print_r($resposta, true);
        echo "⚠️ Erro ao enviar para {$mac}: {$err}\n";
    }

    // Previne banimento variando o tempo entre 4 a 8 segundos
    sleep(rand(4, 8));
}

// Salva JSON atualizado
file_put_contents($arquivo, json_encode($clientes, JSON_PRETTY_PRINT));

echo "🚀 Envio automático concluído: " . date('Y-m-d H:i');
?>

---- error_page.php ----
<!DOCTYPE html>
<html lang="pt-br">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Oops! Algo deu errado</title>
    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
    <style>
        body, html {
            margin: 0;
            padding: 0;
            width: 100%;
            height: 100%;
            background: linear-gradient(135deg, #0f172a 0%, #1e1b4b 100%);
            font-family: 'Inter', sans-serif;
            color: #f8fafc;
            display: flex;
            align-items: center;
            justify-content: center;
        }
        .container {
            background: rgba(255, 255, 255, 0.05);
            backdrop-filter: blur(16px);
            -webkit-backdrop-filter: blur(16px);
            border: 1px solid rgba(255, 255, 255, 0.1);
            border-radius: 24px;
            padding: 40px;
            max-width: 500px;
            width: 90%;
            text-align: center;
            box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.5);
            animation: fadeIn 0.8s ease-out forwards;
        }
        @keyframes fadeIn {
            from { opacity: 0; transform: translateY(20px); }
            to { opacity: 1; transform: translateY(0); }
        }
        .icon {
            font-size: 64px;
            margin-bottom: 20px;
            animation: bounce 2s infinite ease-in-out;
            display: inline-block;
        }
        @keyframes bounce {
            0%, 100% { transform: translateY(0); }
            50% { transform: translateY(-10px); }
        }
        h1 {
            font-size: 28px;
            font-weight: 800;
            margin: 0 0 15px 0;
            background: -webkit-linear-gradient(45deg, #f43f5e, #fb923c);
            -webkit-background-clip: text;
            -webkit-text-fill-color: transparent;
        }
        p {
            font-size: 16px;
            line-height: 1.6;
            color: #cbd5e1;
            margin-bottom: 30px;
        }
        .btn {
            display: inline-block;
            background: linear-gradient(90deg, #3b82f6, #8b5cf6);
            color: #fff;
            text-decoration: none;
            padding: 12px 28px;
            border-radius: 99px;
            font-weight: 600;
            transition: all 0.3s ease;
            border: none;
            cursor: pointer;
            box-shadow: 0 4px 14px 0 rgba(139, 92, 246, 0.39);
        }
        .btn:hover {
            transform: scale(1.05);
            box-shadow: 0 6px 20px 0 rgba(139, 92, 246, 0.5);
        }
        .footer-note {
            margin-top: 30px;
            font-size: 12px;
            color: #64748b;
        }
    </style>
</head>
<body>

<div class="container">
    <div class="icon">🛸</div>
    <h1>Houston, temos um problema!</h1>
    <p>Ocorreu uma falha inesperada no sistema.<br>Mas não se preocupe: <b>nossa equipe técnica já foi notifica...
---- evolution_config.json ----
{
    "evolution_url": "http:\/\/75.119.156.103:8080",
    "api_key": "PQVZ3A4F779NXHNNH7770BI447DRI7C0",
    "instancia": "player99_1cd9ba",
    "hub_token": "HUB_6A6039D8DE252ccbcac01"
}
---- init_loja_db.php ----
<?php
$dbPath = __DIR__ . '/api/db/studiolivecode_loja.db';

try {
    $db = new SQLite3($dbPath);
    
    // Tabela de Produtos
    $db->exec("CREATE TABLE IF NOT EXISTS produtos (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        titulo TEXT NOT NULL,
        descricao TEXT,
        preco REAL NOT NULL,
        imagem TEXT,
        parceiro_id INTEGER NOT NULL,
        ativo INTEGER DEFAULT 1,
        data_criacao DATETIME DEFAULT CURRENT_TIMESTAMP
    )");

    // Tabela de Pedidos
    $db->exec("CREATE TABLE IF NOT EXISTS pedidos (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        produto_id INTEGER NOT NULL,
        cliente_email TEXT,
        cliente_nome TEXT,
        status_pagamento TEXT DEFAULT 'pendente',
        mp_payment_id TEXT,
        voucher TEXT,
        data_pedido DATETIME DEFAULT CURRENT_TIMESTAMP
    )");
    
} catch (Exception $e) {
    error_log("Erro ao iniciar DB loja: " . $e->getMessage());
}
?>

---- mercado_pago_gold.php ----
<?php
// mercado_pago_gold.php
session_start();
if (!isset($_SESSION['id'])) {
    header('location: painel.php');
    exit;
}
$id = $_SESSION['id'];
$db1 = new SQLite3("./api/db/studiolivecode_users.db");
$query = $db1->prepare("SELECT admin, username FROM users WHERE id = :id");
$query->bindValue(':id', $id, SQLITE3_INTEGER);
$userData = $query->execute()->fetchArray(SQLITE3_ASSOC);
if (!$userData || $userData['admin'] != 1 || $userData['username'] == 'cemet@cemet.com.br') {
    header("Location: users.php");
    exit;
}

$config_file = './api/mercado_pago_gold/config.json';
$config = json_decode(file_get_contents($config_file), true);

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (isset($_POST['update_token'])) {
        $config['access_token'] = trim($_POST['access_token']);
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Token atualizado com sucesso!";
    }

    if (isset($_POST['add_pacote'])) {
        $novo_pacote = [
            'id' => uniqid(),
            'nome' => trim($_POST['nome_pacote']),
            'valor' => floatval($_POST['valor_pacote']),
            'dias' => intval($_POST['dias_pacote'])
        ];
        $config['pacotes'][] = $novo_pacote;
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Pacote adicionado com sucesso!";
    }

    if (isset($_POST['delete_pacote'])) {
        $id_delete = $_POST['id_pacote'];
        foreach ($config['pacotes'] as $k => $pacote) {
            if ($pacote['id'] === $id_delete) {
                unset($config['pacotes'][$k]);
            }
        }
        $config['pacotes'] = array_values($config['pacotes']);
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Pacote excluído!";
    }

    if (isset($_POST['add_cupom'])) {
        if (!isset($config['cupons'])) {
            $config['cupons'] = [];
        }
        $novo_cupom = [
            'id' => uniqid(),
            'codigo' => strtoupper(trim($_POST['codigo_cupom'])),
            'desconto' => floatval($_POST['desconto_cupom'])
        ];
        $config['cupons'][] = $novo_cupom;
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Cupom adicionado com sucesso!";
    }

    if (isset($_POST['delete_cupom'])) {
        $id_delete = $_POST['id_cupom'];
        foreach ($config['cupons'] as $k => $cupom) {
            if ($cupom['id'] === $id_delete) {
                unset($config['cupons'][$k]);
            }
        }
        $config['cupons'] = array_values($config['cupons']);
        file_put_contents($config_file, json_encode($config, JSON_PRETTY_PRINT));
        $msg = "Cupom excluído!";
    }

    if (isset($_POST['update_plano_telas'])) {
        $config['plano_telas_ativas'] = [
            'valor' => floatval($_POST['valor_telas']),
            'dias' => intval($_POST['dias_telas'])
        ];
        file_put_contents($co...
---- test_db.php ----
<?php
ini_set('display_errors', 1);
error_reporting(E_ALL);

echo "Teste de Banco de Dados e Permissões:<br><br>";

$dbPath = __DIR__ . '/api/db/studiolivecode_cliente_media.db';
$dirPath = dirname($dbPath);

echo "Usuário do PHP: " . get_current_user() . " (UID: " . getmyuid() . ")<br>";
echo "Permissões do dir /api/db: " . substr(sprintf('%o', fileperms($dirPath)), -4) . " | Dono: " . fileowner($dirPath) . "<br>";
echo "Permissões do arquivo DB: " . substr(sprintf('%o', fileperms($dbPath)), -4) . " | Dono: " . fileowner($dbPath) . "<br><br>";

try {
    $db = new SQLite3($dbPath);
    $db->enableExceptions(true);
    
    // Tenta criar uma tabela de teste
    $db->exec("CREATE TABLE IF NOT EXISTS test_write (id INTEGER PRIMARY KEY, ts TEXT)");
    $db->exec("INSERT INTO test_write (ts) VALUES ('" . date('Y-m-d H:i:s') . "')");
    
    $count = $db->querySingle("SELECT COUNT(*) FROM test_write");
    echo "<strong style='color:green'>Sucesso! O banco de dados pode ser gravado. (Contagem: $count)</strong>";
    
} catch (Exception $e) {
    echo "<strong style='color:red'>ERRO AO GRAVAR: " . $e->getMessage() . "</strong>";
}
?>

---- test_db2.php ----
<?php
ini_set('display_errors', 1);
error_reporting(E_ALL);

echo "Teste 2 - Escrita real:<br>";
try {
    $dbCliente = new SQLite3(__DIR__ . '/api/db/studiolivecode_cliente_media.db');
    $dbCliente->enableExceptions(true);
    
    // Tenta atualizar e ver se funciona
    $res = $dbCliente->query("SELECT id, audio_mode, id_radio FROM telas LIMIT 1");
    if ($row = $res->fetchArray(SQLITE3_ASSOC)) {
        echo "Tela Encontrada ID: " . $row['id'] . "<br>";
        
        $stmt = $dbCliente->prepare("UPDATE telas SET audio_mode = 'mudo' WHERE id = " . $row['id']);
        $stmt->execute();
        
        $res2 = $dbCliente->query("SELECT audio_mode FROM telas WHERE id = " . $row['id']);
        $row2 = $res2->fetchArray(SQLITE3_ASSOC);
        echo "Modo salvo após update: " . $row2['audio_mode'] . "<br>";
        
        echo "<strong style='color:green'>Sucesso no UPDATE!</strong>";
    } else {
        echo "Nenhuma tela encontrada.";
    }
} catch (Exception $e) {
    echo "<strong style='color:red'>Erro no banco: " . $e->getMessage() . "</strong>";
}
?>

---- tmdb_api.php ----
<?php
/*
 * @ https://hospedagem.matrixch.store 
 * @ PHP 7.4
 * @ Decoder version: 1.0.2
 * @ Release: 17/06/2024
*/

error_reporting(0);
include "includes/header.php";
$jsonFilePath = "includes/ad_type.json";
$jsonData = json_decode(file_get_contents($jsonFilePath), true);
$currentAdType = $jsonData["adType"] ?? "manual";
$db = new SQLite3("./api/.bet_tmdb.db");
$table_name = "api_key";
$db->exec("CREATE TABLE IF NOT EXISTS " . $table_name . " (id INTEGER PRIMARY KEY, key TEXT)");
$rows = $db->query("SELECT COUNT(*) as count FROM " . $table_name);
$row = $rows->fetchArray();
$numRows = $row["count"];
if ($numRows == 0) {
    $db->exec("INSERT INTO " . $table_name . "(key) VALUES('')");
}
if ($_SERVER["REQUEST_METHOD"] === "POST") {
    if (isset($_POST["submit"])) {
        $newKey = $_POST["key"];
        $stmt = $db->prepare("UPDATE " . $table_name . " SET key = :newKey WHERE id = 1");
        $stmt->bindValue(":newKey", $newKey, SQLITE3_TEXT);
        $stmt->execute();
        header("Location: tmdb_api.php");
        exit;
    }
    if (isset($_POST["deleteCache"])) {
        $cacheFilePath = "./api/cache/combined_cache.json";
        if (file_exists($cacheFilePath)) {
            unlink($cacheFilePath);
        }
        header("Location: tmdb_api.php");
        exit;
    }
}
$res = $db->query("SELECT * FROM " . $table_name . " WHERE id = 1");
$rowU = $res->fetchArray();
if (empty($rowU["key"])) {
    echo "<div class=\"alert alert-warning\" role=\"alert\">\n        You must add your tMDB API key before using the app. Follow the instructions below to add your API key.\n    </div>";
}
echo "<link rel=\"stylesheet\" href=\"css/slider.css\">\n        <div class=\"col-md-12 mx-auto\">\n            <div class=\"card-body\">\n                \n                <div class=\"card bg-primary text-white\">\n                    <div class=\"card-header card-header-warning\">\n                                    <div class=\"card-header bg-primary py-3\">\n                                        \n                                        <div id=\"slider-container\" data-ad-type=\"";
echo $currentAdType;
echo "\" style=\"display: flex; align-items: center; justify-content: center;\">\n    <span style=\"margin-right: 20px; font-size: 24px;\">Manual Ads</span> <!-- Increased font size here -->\n    <label class=\"switch\">\n        <input type=\"checkbox\" id=\"pageSlider\" onchange=\"toggleAdType()\">\n        <span class=\"slider round\"></span>\n    </label>\n    <span style=\"margin-left: 20px; font-size: 24px;\">tMDB Ads</span> <!-- And here -->\n</div>\n                            <center>\n                            <h5> Advert Type Selector</h5>\n                            </center>\n                                    </div>\n                                    <div class=\"card-body\">\n                                        <!-- Add instructions here -->\n                                        <p style=\"font-size: 16px;\">\n               ...
SUBDIR api: . , .. , .adb.db , .ansdb.db , .bet_tmdb.db , .db.db , .db_ads.db , .db_bg.db , .db_bloqueio.db , .db_logo.db , .htaccess , .payment_links.db , .qr.db , 1msg.php , add.php , ads.php , ads2.php , ads3.php , afiliados , allads.php , allads1.php , allads2.php , arquivos originais , auth.php , backdrop.php , betstyle.css , bg.php , bloqueado.m3u , cache , cf.php , connection_log.json , contato.php , cron_whatsapp.log , cron_whatsapp.php , db , device_keys.json , dump.php , dump.py , edit_texto.php , error_log , esporte.php , getappuser.php , ibo.json , index.php , key.php , language.json , logo.php , loja , m3u_proxy.php , main_movies.php , manual_ads.php , mercado_pago_gold , message.php , movies.php , movies_script.js , msg.php , note.json , pagamento.php , pagamento1.php , payment , play_msg.php , playlist.php , qr , qr.php , qrcode.php , renovar , salvar_mensagem.php , setting.json , setting.php , sport.php , sportjr.php , teste_manual.json , theme.json , theme_change , tmdb.php , tmdb.php00 , update.php , vencido.php , video-ads.php , webview.php , webview2.php , webview3 (1).php , webview3.php , whatsapp_avulso.php , whatsapp_backend.php , whatsapp_mensagens_backend.php
---- api/connection_log.json ----
[
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-26 22:28:19",
        "url_accessed": "http:\/\/topserver.fun\/get.php?usuario=543504256&senha=680951540&type=m3u_plusoutput=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-26 22:29:45",
        "url_accessed": "http:\/\/topserver.fun\/get.php?usuario=543504256&senha=680951540&type=m3u_plusoutput=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-26 22:30:40",
        "url_accessed": "http:\/\/topserver.fun\/get.php?usuario=543504256&senha=680951540&type=m3u_plusoutput=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 22:28:54",
        "url_accessed": "*Link (M3U):* http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 22:30:23",
        "url_accessed": "http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 22:34:29",
        "url_accessed": "http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 22:39:57",
        "url_accessed": "http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 23:19:29",
        "url_accessed": "http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
        "date": "2024-09-27 23:19:56",
        "url_accessed": "http:\/\/topserver.fun\/get.php?username=563493143&password=524085456&type=m3u_plus&output=ts"
    },
    {
        "mac_address": "6C:A9:A9:1D:62:E3",
     ...
---- api/device_keys.json ----
{
    "BF:12:C2:A2:61:33": "BEM VINDO MAX LOJA",
    "0A:39:AA:05:94:8A": "1b37f1e9",
    "F7:83:FC:98:B8:DB": "de823ab7",
    "6C:A9:A9:1D:62:E3": "Sistema de Mensagem  100%",
    "21:91:FB:14:FC:95": "27c346e2",
    "DA:82:96:65:4A:DB": "046ebc43",
    "08:B7:39:DF:33:54": "5f42b5c7",
    "94:F4:37:D3:7D:A1": "af1991a0",
    "46:B2:42:30:73:F4": "cd401b3c",
    "33:38:D9:E4:DE:91": "1a44ed8b",
    "A4:C1:4B:BA:9E:0E": "ef1af0a4",
    "F0:79:E0:85:F5:2C": "624ad1cb",
    "5C:8E:3F:E7:E5:92": "324449b3",
    "BC:95:FB:BD:11:E7": "5eb052b7",
    "C8:67:34:C9:3D:D7": "c8a89dd0",
    "A7:AD:4D:28:A9:73": "8fdd0115",
    "1B:3F:6E:14:41:FD": "259cb04e",
    "22:41:5D:D9:50:1B": "526cb21c",
    "CB:5A:91:7E:AE:B0": "b9778295",
    "4E:CC:9F:B0:E1:81": "eddbf822",
    "B7:60:AE:0F:90:E4": "da7bf7c5",
    "C4:20:89:91:C4:C8": "0ae53d81",
    "3B:E3:91:0C:A8:2E": "09468e11",
    "CF:E5:46:21:0D:0D": "cf0500be",
    "14:4E:47:01:18:31": "ATIVO",
    "00:39:C6:4B:2C:73": "85a81c33",
    "BD:EF:80:17:B6:DC": "4c8a296b",
    "": "d41d8cd9",
    "F3:0D:B7:4F:3E:44": "6a2c8ed5",
    "80:25:38:4F:12:6F": "ec9b78ee",
    "10:4D:EB:92:A3:2D": "5aede5e1",
    "55:B8:93:9F:A6:13": "c3e0fbc4",
    "28:1C:2E:48:BD:EE": "7fa54782",
    "C2:14:12:2F:70:F7": "564d6f69",
    "C4:AA:19:66:60:0C": "ebfd4cfa",
    "5A:87:4F:7B:70:16": "6dd459f1",
    "3F:C6:07:8C:C7:7B": "c29db98d",
    "E1:A9:E5:26:84:CA": "5197eab9",
    "CF:46:2B:98:88:99": "517a4e62",
    "5A:13:6C:2C:06:5E": "c83c82ee",
    "14:13:23:65:DF:DF": "c2af4fbe",
    "44:EA:E2:93:AF:A8": "027939bf",
    "A5:43:DF:0E:51:B6": "1cc26c52",
    "7B:C8:BB:C4:02:E3": "9b48aab5",
    "89:AC:DF:5F:B0:A7": "acd9b5f5",
    "3A:C4:1B:5B:BB:A9": "f42345c7",
    "6C:DF:38:FC:7A:A7": "2b880d09",
    "D9:CB:FF:EC:2C:CF": "7aebcf2c",
    "15:7D:39:82:6D:00": "c22a19f2",
    "EA:1E:5E:59:F3:05": "ad1f3be3"
}
---- api/key.php ----

---- api/pagamento.php ----
<!DOCTYPE html>
<html>
<head>
    <title>ADS3</title>
    <style>
        body {
            margin: 0;
            padding: 0;
        }
        #slideshow {
            position: relative;
            width: 100%;
            height: 100vh; /* Ocupa toda a altura da tela */
            overflow: hidden;
        }
        img, video {
            width: 100%;
            height: 100%;
            object-fit: contain; /* Faz a imagem manter sua proporção original */
            position: absolute;
            top: 0;
            left: 0;
            transition: transform 10s ease-in-out; /* Ajusta a duração da transição do zoom */
        }
        .slide-indicator {
            display: inline-block;
            width: 10px;
            height: 10px;
            background-color: gray;
            border-radius: 50%;
            margin: 5px;
            cursor: pointer;
        }
        .active {
            background-color: white;
        }
    </style>
</head>
<body>
    <div id="slideshow"></div>
    <div id="slide-indicators"></div>

<script>
    var slideshow = document.getElementById("slideshow");

    fetch('ads3.php')
        .then(response => response.json())
        .then(data => {
            var mediaUrls = data.map(obj => obj.AdUrl);
            loadSlides(mediaUrls);
        });

    function getMediaType(url) {
        var extension = url.split('.').pop();
        if (extension == "jpg" || extension == "jpeg" || extension == "png" || extension == "gif") {
            return "image";
        } else if (extension == "mp4") {
            return "video";
        } else {
            return null;
        }
    }

    function loadSlides(mediaUrls) {
        var i;
        for (i = 0; i < mediaUrls.length; i++) {
            var mediaType = getMediaType(mediaUrls[i]);
            var slideElement;
            if (mediaType == "image") {
                slideElement = document.createElement("img");
                slideElement.src = mediaUrls[i];
  ...
---- api/pagamento1.php ----
<!DOCTYPE html>
<html>
<head>
    <title>ADS3</title>
    <style>
        body {
            margin: 0;
            padding: 0;
        }
        #slideshow {
            position: relative;
            width: 100%;
            height: 100vh; /* Ocupa toda a altura da tela */
            overflow: hidden;
        }
        img, video {
            width: 100%;
            height: 100%;
            object-fit: contain; /* Faz a imagem manter sua proporção original */
            position: absolute;
            top: 0;
            left: 0;
            transition: transform 10s ease-in-out; /* Ajusta a duração da transição do zoom */
        }
        .slide-indicator {
            display: inline-block;
            width: 10px;
            height: 10px;
            background-color: gray;
            border-radius: 50%;
            margin: 5px;
            cursor: pointer;
        }
        .active {
            background-color: white;
        }
    </style>
</head>
<body>
    <div id="slideshow"></div>
    <div id="slide-indicators"></div>

<script>
    var slideshow = document.getElementById("slideshow");

    fetch('ads3.php')
        .then(response => response.json())
        .then(data => {
            var mediaUrls = data.map(obj => obj.AdUrl);
            loadSlides(mediaUrls);
        });

    function getMediaType(url) {
        var extension = url.split('.').pop();
        if (extension == "jpg" || extension == "jpeg" || extension == "png" || extension == "gif") {
            return "image";
        } else if (extension == "mp4") {
            return "video";
        } else {
            return null;
        }
    }

    function loadSlides(mediaUrls) {
        var i;
        for (i = 0; i < mediaUrls.length; i++) {
            var mediaType = getMediaType(mediaUrls[i]);
            var slideElement;
            if (mediaType == "image") {
                slideElement = document.createElement("img");
                slideElement.src = mediaUrls[i];
  ...
---- api/tmdb.php ----
<?php
/*
 * @ https://hospedagem.matrixch.store 
 * @ PHP 7.4
 * @ Decoder version: 1.0.2
 * @ Release: 17/06/2024
*/

echo "<!DOCTYPE html>\n<html>\n<head>\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Movie Slider</title>\n    <link rel=\"stylesheet\" type=\"text/css\" href=\"betstyle.css\">\n</head>\n<body>\n    <div class=\"container\">\n        <!-- Your slider content here -->\n    </div>\n\n    <script>\n    function adjustBackgroundSize() {\n    var container = document.querySelector('.container');\n    var imgAspectRatio = 3840 / 2160; // Aspect ratio of your image\n\n    var containerAspectRatio = container.offsetWidth / container.offsetHeight;\n\n    if (containerAspectRatio > imgAspectRatio) {\n        container.style.backgroundSize = '100% auto';\n    } else {\n        container.style.backgroundSize = 'auto 100%';\n    }\n}\n\n// Initial adjustment\nadjustBackgroundSize();\n\n// Adjust on window resize\nwindow.addEventListener('resize', adjustBackgroundSize);\n    </script>\n\n    <script type=\"text/javascript\" src=\"movies_script.js\"></script>\n</body>\n</html>\n";

?>
SUBDIR includes: . , .. , db_cliente.php , db_financeiro.php , footer.php , functions.php , header.php , index.php
---- includes/db_cliente.php ----
<?php
try {
    $dbCliente = new SQLite3(__DIR__ . "/../api/db/studiolivecode_cliente_media.db");
} catch (Exception $e) {
    die('Unable to open database: ' . $e->getMessage());
}

$dbCliente->exec("CREATE TABLE IF NOT EXISTS videos(
    id INTEGER PRIMARY KEY AUTOINCREMENT, 
    id_cliente INTEGER, 
    title TEXT, 
    filename TEXT, 
    upload_date TEXT
)");

$dbCliente->exec("CREATE TABLE IF NOT EXISTS playlists(
    id INTEGER PRIMARY KEY AUTOINCREMENT, 
    id_cliente INTEGER, 
    title TEXT
)");

// Migração de colunas caso não existam
$res = $dbCliente->query("PRAGMA table_info(playlists)");
$columns = [];
while ($row = $res->fetchArray(SQLITE3_ASSOC)) {
    $columns[] = $row['name'];
}
if (!in_array('is_active', $columns)) {
    $dbCliente->exec("ALTER TABLE playlists ADD COLUMN is_active INTEGER DEFAULT 0");
}
if (!in_array('creation_date', $columns)) {
    $dbCliente->exec("ALTER TABLE playlists ADD COLUMN creation_date TEXT");
}

// Migração para telas
$resTelas = $dbCliente->query("PRAGMA table_info(telas)");
if ($resTelas) {
    $colTelas = [];
    while ($rowT = $resTelas->fetchArray(SQLITE3_ASSOC)) {
        $colTelas[] = $rowT['name'];
    }
    if (!in_array('active_session_id', $colTelas)) {
        $dbCliente->exec("ALTER TABLE telas ADD COLUMN active_session_id TEXT");
    }
    if (!in_array('muted', $colTelas)) {
        $dbCliente->exec("ALTER TABLE telas ADD COLUMN muted INTEGER DEFAULT 0");
    }
    if (!in_array('audio_mode', $colTelas)) {
        $dbCliente->exec("ALTER TABLE telas ADD COLUMN audio_mode TEXT DEFAULT 'video'");
    }
    if (!in_array('id_radio', $colTelas)) {
        $dbCliente->exec("ALTER TABLE telas ADD COLUMN id_radio INTEGER DEFAULT 0");
    }
    if (!in_array('force_reload', $colTelas)) {
        $dbCliente->exec("ALTER TABLE telas ADD COLUMN force_reload INTEGER DEFAULT 0");
    }
    if (!in_array('ultimo_ping', $colTelas)) {
        $dbCliente->exec("ALTER TABLE telas ADD COLUMN ultimo_ping TEXT");
   ...
---- includes/db_financeiro.php ----
<?php
try {
    // Usaremos o banco de clientes para as tabelas financeiras para manter a integridade relacional.
    $dbFinanceiro = new SQLite3(__DIR__ . "/../api/db/studiolivecode_clientes.db");
} catch (Exception $e) {
    die('Unable to open database: ' . $e->getMessage());
}

// Criação da tabela de Faturas
$dbFinanceiro->exec("CREATE TABLE IF NOT EXISTS faturas(
    id INTEGER PRIMARY KEY AUTOINCREMENT, 
    id_cliente INTEGER, 
    data_gerada TEXT, 
    data_vencimento TEXT, 
    valor_total REAL, 
    status TEXT,
    link_pagamento TEXT,
    id_preferencia TEXT
)");

// Criação da tabela de Transações de Afiliados
$dbFinanceiro->exec("CREATE TABLE IF NOT EXISTS affiliate_transactions(
    id INTEGER PRIMARY KEY AUTOINCREMENT, 
    userId INTEGER, 
    amount REAL, 
    type TEXT, 
    description TEXT, 
    createdAt DATETIME DEFAULT CURRENT_TIMESTAMP
)");

// Migração das colunas link_pagamento e id_preferencia caso já exista
$resFatInfo = $dbFinanceiro->query("PRAGMA table_info(faturas)");
$fatCols = [];
while ($rowF = $resFatInfo->fetchArray(SQLITE3_ASSOC)) {
    $fatCols[] = $rowF['name'];
}
if (!in_array('link_pagamento', $fatCols)) {
    $dbFinanceiro->exec("ALTER TABLE faturas ADD COLUMN link_pagamento TEXT");
}
if (!in_array('id_preferencia', $fatCols)) {
    $dbFinanceiro->exec("ALTER TABLE faturas ADD COLUMN id_preferencia TEXT");
}

// Criação da tabela de Dados de Faturamento do Cliente
$dbFinanceiro->exec("CREATE TABLE IF NOT EXISTS faturamento_cliente(
    id_cliente INTEGER PRIMARY KEY, 
    nome_razao TEXT, 
    cpf_cnpj TEXT, 
    endereco TEXT, 
    whats TEXT
)");

// Criação da tabela de Dados de Faturamento do Admin
$dbFinanceiro->exec("CREATE TABLE IF NOT EXISTS faturamento_admin(
    id INTEGER PRIMARY KEY AUTOINCREMENT, 
    nome_razao TEXT, 
    cpf_cnpj TEXT, 
    endereco TEXT, 
    whats TEXT,
    chave_pix TEXT
)");
?>


######## vtr.qap01.com.br ########
FILES: . , .. , .git , .user.ini , .well-known , api.php , app.css , app.js , database , index.html , upload.php , uploads
---- api.php ----
<?php
header('Content-Type: application/json');

// --- 1. Database Connection & Setup ---
$dbFile = __DIR__ . '/database/dados.sqlite';
$pdo = new PDO('sqlite:' . $dbFile);
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

// Initialize tables if they don't exist
$pdo->exec("
    CREATE TABLE IF NOT EXISTS checklists (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        matricula TEXT,
        motorista TEXT,
        vtr TEXT,
        placa TEXT,
        dataRetirada TEXT,
        kmInicial TEXT,
        destino TEXT,
        nivelsCombustivel TEXT,
        avarias TEXT,
        estado TEXT,
        estepeMacaco INTEGER,
        documento INTEGER,
        dataEntrega TEXT,
        kmFinal TEXT,
        detalhes TEXT
    );
    CREATE TABLE IF NOT EXISTS abastecimentos (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        data TEXT,
        motorista TEXT,
        matricula TEXT,
        vtr TEXT,
        litros TEXT,
        valor TEXT,
        km TEXT,
        notaFiscal TEXT
    );
    CREATE TABLE IF NOT EXISTS manutencoes (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        dataInicial TEXT,
        vtr TEXT,
        modelo TEXT,
        motivo TEXT,
        local TEXT,
        status TEXT,
        dataFinal TEXT
    );
    CREATE TABLE IF NOT EXISTS viaturas (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        prefixo TEXT UNIQUE,
        placa TEXT,
        modelo TEXT,
        intervaloOleo INTEGER DEFAULT 10000,
        ultimoKmOleo INTEGER DEFAULT 0
    );
    CREATE TABLE IF NOT EXISTS usuarios (
        id INTEGER PRIMARY KEY AUTOINCREMENT,
        nome TEXT,
        login TEXT UNIQUE,
        senha TEXT,
        role TEXT DEFAULT 'MOTORISTA',
        status TEXT DEFAULT 'ATIVO'
    );
");

// Auto-seed default admin user if no users exist
$stmtCount = $pdo->query("SELECT COUNT(*) as cnt FROM usuarios");
if ($stmtCount->fetch(PDO::FETCH_ASSOC)['cnt'] == 0) {
    $stmtSeed = $pdo->prepare("INSERT INTO usuarios (nome, login, senha, role, status) VALUES (?, ?, ?, ?, ?)");
    $stmtSeed->execute(['Administrador Master', 'admin', '123456', 'MASTER', 'ATIVO']);
}

// --- 2. Helper Functions ---
function getJsonInput() {
    $raw = file_get_contents('php://input');
    return json_decode($raw, true);
}

function respond($success, $data = null, $error = null) {
    echo json_encode(['success' => $success, 'data' => $data, 'error' => $error]);
    exit;
}

// --- 3. Routing ---
$action = $_GET['action'] ?? '';

try {
    switch ($action) {
        
        // --- USUÁRIOS & AUTH ACTIONS ---
        case 'login':
            $input = getJsonInput();
            $login = trim($input['login'] ?? '');
            $senha = trim($input['senha'] ?? '');
            
            $stmt = $pdo->prepare("SELECT id, nome, login, role, status, senha FROM usuarios WHERE login = ?");
            $stmt->execute([$login]);
            $user = $stmt->fetch(PDO::FETCH_ASSOC);
            
            if ($user && $user['senha'] === $senh...
SUBDIR database: . , .. , dados.sqlite

DONE