=== Environment Diagnostics ===
PHP Version: 7.4.33
Server OS: Linux
Current Directory: /home/teac11783/dexprotection.teacherslex.site/yadav

Directory [temp] (/home/teac11783/dexprotection.teacherslex.site/yadav/temp):
  - Exists: Yes
  - Writable: Yes
  - Readable: Yes

Directory [data] (/home/teac11783/dexprotection.teacherslex.site/yadav/data):
  - Exists: Yes
  - Writable: Yes
  - Readable: Yes

Directory [fonts] (/home/teac11783/dexprotection.teacherslex.site/yadav/fonts):
  - Exists: Yes
  - Writable: Yes
  - Readable: Yes

=== Telegram API Webhook Info ===
Querying URL: https://api.telegram.org/bot<HIDDEN>/getWebhookInfo
HTTP Status Code: 401
Response:
{"ok":false,"error_code":401,"description":"Unauthorized"}

=== Log Diagnostics ===
webhook_last.log does not exist.

bot_error.log does not exist.

=== Server File Check (Diagnostic) ===
File [bot.php]: Exists (Size: 32166 bytes, Last Modified: 2026-06-29 22:32:54)
File [config.php]: Exists (Size: 2858 bytes, Last Modified: 2026-07-08 16:32:36)
File [points.php]: Exists (Size: 11292 bytes, Last Modified: 2026-06-29 22:15:30)
File [owner_panel.php]: Exists (Size: 17590 bytes, Last Modified: 2026-06-09 21:49:02)
File [worker.php]: Exists (Size: 18018 bytes, Last Modified: 2026-06-29 22:17:24)

=== .htaccess Check ===
.htaccess does not exist.

=== Server File Content Peek ===
--- Peek inside bot.php ---
1: <?php
2: // ============================================================
3: // bot.php — DexProtectX Telegram Bot (JSON Storage)
4: // ============================================================
5: require_once __DIR__ . '/config.php';
6: require_once __DIR__ . '/points.php';
7: require_once __DIR__ . '/fonts.php';
8: 
9: // ── Debug Logging ─────────────────────────────────────────────
10: ini_set('display_errors', 0);
11: ini_set('log_errors', 1);
12: ini_set('error_log', TEMP_DIR . '/bot_error.log');
13: 
14: // ── Parse incoming update ─────────────────────────────────────
15: $input = file_get_contents('php://input');
16: file_put_contents(TEMP_DIR . '/webhook_last.log', sanitizeText(date('Y-m-d H:i:s') . "\n" . $input . "\n"), FILE_APPEND);
17: 
18: $update = json_decode($input, true);
19: if (!$update) {
20:     file_put_contents(TEMP_DIR . '/bot_error.log', sanitizeText(date('Y-m-d H:i:s') . " - Error: Invalid JSON or empty input.\n"), FILE_APPEND);
21:     exit;
22: }
23: 
24: $msg = $update['message'] ?? $update['edited_message'] ?? null;
25: if (!$msg) {
26:     $callbackQuery = $update['callback_query'] ?? null;
27:     if ($callbackQuery) {
28:         $chatId = (int)$callbackQuery['message']['chat']['id'];
29:         $userId = (int)$callbackQuery['from']['id'];
30:         $msgId  = (int)$callbackQuery['message']['message_id'];
31:         $data   = $callbackQuery['data'];
32: 
33:         $user = getUser($userId);
34:         $isAdmin = $user && in_array($user['role'] ?? '', ['owner', 'admin']) && ($user['is_active'] ?? false);
35: 
36:         if (!$isAdmin) {
37:             $ch = curl_init(BOT_API . "/answerCallbackQuery");
38:             curl_setopt_array($ch, [
39:                 CURLOPT_POST => true,
40:                 CURLOPT_POSTFIELDS => ['callback_query_id' => $callbackQuery['id'], 'text' => '🔒 Access Denied', 'show_alert' => true],

--- Peek inside points.php ---
1: <?php
2: // ============================================================
3: // points.php — JSON-based Points System (No MySQL)
4: // ============================================================
5: require_once __DIR__ . '/config.php';
6: 
7: $root_data = (basename(__DIR__) === 'php') ? dirname(__DIR__) . '/data' : __DIR__ . '/data';
8: $php_data  = (basename(__DIR__) === 'php') ? __DIR__ . '/data' : __DIR__ . '/php/data';
9: 
10: define('DATA_DIR', $root_data);
11: if (!is_dir(DATA_DIR)) @mkdir(DATA_DIR, 0755, true);
12: 
13: if (!file_exists($root_data . '/users.json') && file_exists($php_data . '/users.json')) {
14:     @copy($php_data . '/users.json', $root_data . '/users.json');
15: }
16: if (!file_exists($root_data . '/jobs.json') && file_exists($php_data . '/jobs.json')) {
17:     @copy($php_data . '/jobs.json', $root_data . '/jobs.json');
18: }
19: 
20: $USERS_FILE = DATA_DIR . '/users.json';
21: $JOBS_FILE  = DATA_DIR . '/jobs.json';
22: 
23: // ── JSON Helpers ─────────────────────────────────────────────
24: 
25: function readJSON(string $file): array {
26:     if (!file_exists($file)) return [];
27:     $raw = @file_get_contents($file);
28:     $d = @json_decode($raw, true);
29:     return is_array($d) ? $d : [];
30: }
31: 
32: function writeJSON(string $file, array $data): void {
33:     file_put_contents($file, json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE), LOCK_EX);
34: }
35: 
36: function nextJobId(): int {
37:     global $JOBS_FILE;
38:     $jobs = readJSON($JOBS_FILE);
39:     if (empty($jobs)) return 1;
40:     return max(array_keys($jobs)) + 1;

--- Peek inside fonts.php ---
1: <?php
2: // ============================================================
3: // fonts.php — Font stubs (JSON system, no MySQL)
4: // ============================================================
5: require_once __DIR__ . '/config.php';
6: 
7: // No real font DB in JSON mode — all stubs return safe defaults
8: 
9: function getAllFonts(): array        { return []; }
10: function matchFont(string $n): ?string { return null; }
11: 
12: function registerFont(string $fontName, string $filename): bool {
13:     return true; // no-op
14: }
15: 
16: function deleteFont(int $fontId): bool {
17:     return false;
18: }
19: 
20: function handleFontUpload(array $fileData): array {
21:     $allowed = ['ttf', 'otf', 'woff', 'woff2'];
22:     $ext     = strtolower(pathinfo($fileData['name'] ?? '', PATHINFO_EXTENSION));
23:     if (!in_array($ext, $allowed)) {
24:         return ['success' => false, 'message' => '❌ Only TTF, OTF, WOFF, WOFF2 allowed.'];
25:     }
26:     if (($fileData['size'] ?? 0) > 5 * 1024 * 1024) {
27:         return ['success' => false, 'message' => '❌ Font too large (max 5MB).'];
28:     }
29:     $safeName = preg_replace('/[^a-zA-Z0-9_\-.]/', '_', $fileData['name']);
30:     $dest     = FONTS_DIR . '/' . $safeName;
31:     if (!move_uploaded_file($fileData['tmp_name'], $dest)) {
32:         return ['success' => false, 'message' => '❌ Failed to save font file.'];
33:     }
34:     return ['success' => true, 'message' => "✅ Font '$safeName' uploaded!"];
35: }
36: 
37: function handleTelegramFontUpload(int $chatId, array $doc): void {
38:     // stub — not used in JSON mode
39: }

--- Peek inside config.php ---
1: <?php
2: // ============================================================
3: // config.php — Central Configuration for GRAY HACKER SECURITY Bot
4: // ============================================================
5: 
6: // ── Telegram Bot ─────────────────────────────────────────────
7: define('BOT_TOKEN',   '8896716388:AAES52OUcbmrIPbkZuUv5coF3AdGH3obESk');
8: define('BOT_API',     'https://api.telegram.org/bot' . BOT_TOKEN);
9: 
10: // ── Protection Server Credentials ──────────────────────────────
11: define('DEX_BASE',    'https://dexshellx.com');
12: define('DEX_USER',    'slex2');
13: define('DEX_PASS',    'pppp0000');
14: 
15: // ── Owner Telegram ID (only this person is the OWNER) ────────
16: // Set your Telegram numeric user ID here
17: define('OWNER_ID',    7554081592);
18: 
19: // ── Points System ────────────────────────────────────────────
20: define('POINTS_PER_JOB',    200);   // Points deducted per successful APK
21: define('JOB_TIMEOUT_MIN',   30);    // Refund if APK not ready in 30 minutes
22: 
23: // ── Default Filter ───────────────────────────────────────────
24: define('DEFAULT_FILTER_TEXT', <<<EOT
25: !/
26: com/**
27: com/yadavapk/** 
28: EOT
29: );
30: 
31: // ── Database ─────────────────────────────────────────────────
32: define('DB_HOST', 'localhost');
33: define('DB_USER', 'root');
34: define('DB_PASS', '');
35: define('DB_NAME', 'dexprotect_bot');
36: 
37: // ── Paths ────────────────────────────────────────────────────
38: define('BASE_DIR',   dirname(__DIR__));
39: define('FONTS_DIR',  dirname(__DIR__) . '/fonts');
40: define('TEMP_DIR',   dirname(__DIR__) . '/temp');


=== Include & Compilation Test ===