Emergency Toolkit Generator

DK WordPress Rescue Kit

Configure a custom master password to generate and download your standalone WordPress emergency recovery script.

🛠️

WP_DEBUG Toggle

Instantly toggle PHP debugging mode on or off directly inside wp-config.php.

🚨

Core Reinstallation

Safely redownload and overwrite corrupted wp-admin and wp-includes directories from official sources.

🔑

Emergency Admin Injector

Directly inject a fresh administrator account into the WordPress database during admin lockouts.

🔌

Plugin & Theme Reinstaller

Fetch and overwrite broken plugins and themes individually or execute full sequential updates.

📄

Reset .htaccess Rules

Restore corrupted server rewrite rules back to the standard default WordPress configuration.

⚡

Maintenance Mode Unlocker

Remove stuck .maintenance lockfiles causing persistent site maintenance screens.

⚠️ Security Advisory: This tool possesses full administrative server access. Always use a strong custom password and delete dk-wp-rescue.php immediately after repairs are completed.

<?php

/**
 * DK WordPress Rescue Kit
 * Feature: Debug Toggle, Core Reinstall, Plugin & Theme Manager, Emergency Admin, Reset .htaccess, Remove Maintenance
 * Theme: Modern Light Clean SaaS - Full English Interface
 */

session_start();

// Initial standard state in source template
$secret = '';

// Safety Guard: Lock completely if $secret is empty
if (empty($secret)) {
    http_response_code(403);
    die('<!DOCTYPE html><html><body style="font-family:sans-serif;display:flex;align-items:center;justify-content:center;height:100vh;margin:0;background:#f8fafc;"><div style="text-align:center;background:#fff;padding:32px;border:1px solid #e2e8f0;border-radius:8px;box-shadow:0 4px 6px -1px rgba(0,0,0,0.1);"><h2 style="color:#dc2626;margin-0 0 8px 0;">DK Rescue Kit - Security Lock</h2><p style="color:#64748b;margin:0;">This script has not been configured with a master password. Please generate the file using the official landing page.</p></div></body></html>');
}

// Handle Logout
if (isset($_GET['action']) && $_GET['action'] === 'logout') {
    unset($_SESSION['rescue_auth']);
    header('Location: ' . strtok($_SERVER["REQUEST_URI"], '?'));
    exit;
}

// Check Authentication
$is_auth = false;
$auth_error = '';

if (isset($_POST['pwd'])) {
    if (hash_equals($secret, (string)$_POST['pwd'])) {
        $_SESSION['rescue_auth'] = true;
        $is_auth = true;
    } else {
        $auth_error = 'Incorrect password. Access denied.';
    }
} elseif (isset($_GET['pwd']) && hash_equals($secret, (string)$_GET['pwd'])) {
    $_SESSION['rescue_auth'] = true;
    $is_auth = true;
} elseif (!empty($_SESSION['rescue_auth'])) {
    $is_auth = true;
}

define('WP_CONTENT_DIR', __DIR__ . '/wp-content');
$config_path = __DIR__ . '/wp-config.php';

if (isset($_GET['task'])) {
    // Increase execution time limit and memory limit to handle large file extractions
    @set_time_limit(300);
    @ini_set('memory_limit', '256M');

// Clean output buffer so PHP warnings/notices do not break JSON output
    while (ob_get_level()) ob_end_clean();
    header('Content-Type: application/json; charset=utf-8');

$slug = $_GET['slug'] ?? '';
    $type = $_GET['type'] ?? '';
    $tmp_file = __DIR__ . "/temp_process_{$type}_{$slug}.zip";

// Helper download function using cURL with fallback to file_get_contents
    $download_file = function($url, $destination) {
        if (function_exists('curl_init')) {
            $ch = curl_init($url);
            $fp = fopen($destination, 'wb');
            curl_setopt_array($ch, [
                CURLOPT_FILE => $fp,
                CURLOPT_TIMEOUT => 120,
                CURLOPT_FOLLOWLOCATION => true,
                CURLOPT_USERAGENT => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)'
            ]);
            $success = curl_exec($ch);
            curl_close($ch);
            fclose($fp);
            if ($success && filesize($destination) > 0) return true;
        }

$options = ["http" => ["header" => "User-Agent: Mozilla/5.0\r\n", "timeout" => 120]];
        $file_data = @file_get_contents($url, false, stream_context_create($options));
        if ($file_data !== false && file_put_contents($destination, $file_data)) return true;

return false;
    };

try {
        switch ($_GET['task']) {
            case 'toggle_debug':
                if (!file_exists($config_path)) throw new Exception("wp-config.php not found.");
                $content = file_get_contents($config_path);
                $status = ($_GET['status'] ?? '') === 'true' ? 'true' : 'false';
                if (preg_match("/define$\s*'WP_DEBUG'\s*,\s*(true|false)\s*$;/i", $content)) {
                    $content = preg_replace("/define$\s*'WP_DEBUG'\s*,\s*(true|false)\s*$;/i", "define('WP_DEBUG', $status);", $content);
                } else {
                    $content = str_replace("/* That's all, stop editing!", "define('WP_DEBUG', $status);\n/* That's all, stop editing!", $content);
                }
                file_put_contents($config_path, $content);
                echo json_encode(['status' => 'success']);
                break;

case 'download':
                $url = ($type === 'core') 
                    ? "https://wordpress.org/latest.zip" 
                    : (($type === 'plugin') ? "https://downloads.wordpress.org/plugin/{$slug}.latest-stable.zip" : "https://downloads.wordpress.org/theme/{$slug}.latest-stable.zip");

if (!$download_file($url, $tmp_file)) {
                    throw new Exception("Failed to download package. Ensure cURL or allow_url_fopen extension is active on the server.");
                }
                echo json_encode(['status' => 'success']);
                break;

case 'extract':
                if (!class_exists('ZipArchive')) {
                    throw new Exception("php-zip extension not found on the server.");
                }

$zip = new ZipArchive;
                if ($zip->open($tmp_file) === TRUE) {
                    if ($type === 'core') {
                        $temp_extract = __DIR__ . '/wp_temp_core';
                        if (!is_dir($temp_extract)) mkdir($temp_extract, 0755, true);
                        $zip->extractTo($temp_extract);
                        $zip->close();
                        
                        $src = $temp_extract . '/wordpress';
                        foreach (['wp-admin', 'wp-includes'] as $f) {
                            if (is_dir("$src/$f")) self_copy("$src/$f", __DIR__ . "/$f");
                        }
                        foreach (glob("$src/*.php") as $f) {
                            copy($f, __DIR__ . '/' . basename($f));
                        }
                        self_delete($temp_extract);
                    } else {
                        $target = ($type === 'plugin') ? WP_CONTENT_DIR . '/plugins' : WP_CONTENT_DIR . '/themes';
                        $zip->extractTo($target);
                        $zip->close();
                    }
                    echo json_encode(['status' => 'success']);
                } else {
                    throw new Exception("Failed to extract ZIP archive.");
                }
                break;

case 'cleanup':
                if (file_exists($tmp_file)) @unlink($tmp_file);
                echo json_encode(['status' => 'success']);
                break;

case 'create_admin':
                $wp_load = __DIR__ . '/wp-load.php';
                if (!file_exists($wp_load)) {
                    throw new Exception("wp-load.php file not found. Ensure this script is placed in the WordPress root folder.");
                }

// Load WordPress environment
                require_once $wp_load;

$username = trim($_GET['user']);
                $password = $_GET['pass'];
                $email    = trim($_GET['email']);

// If username already exists, update password only
                if ($user_id = username_exists($username)) {
                    wp_set_password($password, $user_id);
                    $msg = "User '{$username}' already exists. Password successfully reset!";
                } else {
                    // Create new user
                    $user_id = wp_create_user($username, $password, $email);
                    
                    if (is_wp_error($user_id)) {
                        throw new Exception($user_id->get_error_message());
                    }

$user = new WP_User($user_id);
                    $user->set_role('administrator');
                    $msg = "New admin '{$username}' created successfully with Administrator role!";
                }

echo json_encode(['status' => 'success', 'message' => $msg]);
                break;
                
            case 'reset_htaccess':
                $htaccess_path = __DIR__ . '/.htaccess';
                $default_htaccess = "# BEGIN WordPress\n<IfModule mod_rewrite.c>\nRewriteEngine On\nRewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]\nRewriteBase /\nRewriteRule ^index\.php$ - [L]\nRewriteCond %{REQUEST_FILENAME} !-f\nRewriteCond %{REQUEST_FILENAME} !-d\nRewriteRule . /index.php [L]\n</IfModule>\n# END WordPress";
                file_put_contents($htaccess_path, $default_htaccess);
                echo json_encode(['status' => 'success', 'message' => '.htaccess file successfully reset to default.']);
                break;

case 'remove_maintenance':
                $maint_file = __DIR__ . '/.maintenance';
                if (file_exists($maint_file)) @unlink($maint_file);
                echo json_encode(['status' => 'success', 'message' => '.maintenance file successfully removed/cleaned.']);
                break;
        }
    } catch (Exception $e) {
        http_response_code(500);
        echo json_encode(['status' => 'error', 'message' => $e->getMessage()]);
    }
    exit;
}

function self_delete($dir) {
    if (!is_dir($dir)) return;
    foreach (array_diff(scandir($dir), array('.', '..')) as $file) {
        (is_dir("$dir/$file")) ? self_delete("$dir/$file") : unlink("$dir/$file");
    }
    return rmdir($dir);
}

$current_debug = false;
if (file_exists($config_path)) {
    $current_debug = preg_match("/define$\s*'WP_DEBUG'\s*,\s*true\s*$;/i", file_get_contents($config_path));
}
$plugins = array_filter(glob(WP_CONTENT_DIR . '/plugins/*'), 'is_dir');
$themes = array_filter(glob(WP_CONTENT_DIR . '/themes/*'), 'is_dir');

$plugin_slugs = array_values(array_map('basename', $plugins));
$theme_slugs = array_values(array_map('basename', $themes));

?>
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>DK Rescue Kit</title>
    <style>
        :root {
            --bg: #f8fafc;
            --surface: #f1f5f9;
            --card: #ffffff;
            --border: #e2e8f0;
            --border-hover: #cbd5e1;
            --text-main: #0f172a;
            --text-muted: #64748b;
            --primary: #2563eb;
            --primary-hover: #1d4ed8;
            --danger: #dc2626;
            --danger-hover: #b91c1c;
            --danger-bg: #fef2f2;
            --danger-border: #fecaca;
            --success: #059669;
            --warning: #d97706;
            --shadow-sm: 0 1px 2px 0 rgb(0 0 0 / 0.05);
            --shadow: 0 1px 3px 0 rgb(0 0 0 / 0.1), 0 1px 2px -1px rgb(0 0 0 / 0.1);
            --shadow-md: 0 4px 6px -1px rgb(0 0 0 / 0.1), 0 2px 4px -2px rgb(0 0 0 / 0.1);
            --font-sans: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ubuntu, Cantarell, sans-serif;
            --font-mono: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
        }

* {
            box-sizing: border-box;
            margin: 0;
            padding: 0;
        }

body {
            background-color: var(--bg);
            color: var(--text-main);
            font-family: var(--font-sans);
            padding: 32px 16px;
            min-height: 100vh;
            line-height: 1.5;
        }

.container {
            max-width: 1120px;
            margin: 0 auto;
        }

.login-wrapper {
            display: flex;
            align-items: center;
            justify-content: center;
            min-height: 80vh;
        }

.login-card {
            background: var(--card);
            border: 1px solid var(--border);
            border-radius: 12px;
            padding: 32px;
            width: 100%;
            max-width: 400px;
            box-shadow: var(--shadow-md);
        }

.login-header {
            text-align: center;
            margin-bottom: 24px;
        }

.login-title {
            font-size: 18px;
            font-weight: 700;
            color: var(--text-main);
        }

.login-sub {
            font-size: 13px;
            color: var(--text-muted);
            margin-top: 4px;
        }

.alert-error {
            background: var(--danger-bg);
            border: 1px solid var(--danger-border);
            color: var(--danger);
            font-size: 13px;
            padding: 10px 12px;
            border-radius: 6px;
            margin-bottom: 16px;
            text-align: center;
        }

header {
            display: flex;
            justify-content: space-between;
            align-items: center;
            padding-bottom: 20px;
            border-bottom: 1px solid var(--border);
            margin-bottom: 28px;
        }

.brand-title {
            font-size: 20px;
            font-weight: 700;
            letter-spacing: -0.02em;
            display: flex;
            align-items: center;
            gap: 10px;
        }

.brand-sub {
            font-size: 13px;
            color: var(--text-muted);
            margin-top: 2px;
        }

.header-actions {
            display: flex;
            align-items: center;
            gap: 12px;
        }

.debug-pill {
            display: flex;
            align-items: center;
            gap: 10px;
            background: var(--card);
            padding: 6px 14px;
            border: 1px solid var(--border);
            border-radius: 9999px;
            box-shadow: var(--shadow-sm);
        }

.debug-label {
            font-size: 12px;
            font-weight: 600;
            font-family: var(--font-mono);
            color: var(--text-muted);
        }

.switch {
            position: relative;
            display: inline-block;
            width: 36px;
            height: 20px;
        }

.switch input {
            opacity: 0;
            width: 0;
            height: 0;
        }

.slider {
            position: absolute;
            cursor: pointer;
            top: 0; left: 0; right: 0; bottom: 0;
            background-color: #cbd5e1;
            transition: .2s;
            border-radius: 20px;
        }

.slider:before {
            position: absolute;
            content: "";
            height: 14px;
            width: 14px;
            left: 3px;
            bottom: 3px;
            background-color: #ffffff;
            transition: .2s;
            border-radius: 50%;
            box-shadow: var(--shadow-sm);
        }

input:checked + .slider {
            background-color: var(--primary);
        }

input:checked + .slider:before {
            transform: translateX(16px);
        }

.card {
            background: var(--card);
            border: 1px solid var(--border);
            border-radius: 10px;
            padding: 20px;
            margin-bottom: 24px;
            box-shadow: var(--shadow-sm);
        }

.card-danger {
            border-color: var(--danger-border);
            background: linear-gradient(180deg, var(--danger-bg) 0%, var(--card) 100%);
        }

.card-header {
            display: flex;
            justify-content: space-between;
            align-items: center;
            margin-bottom: 16px;
        }

.card-title {
            font-size: 15px;
            font-weight: 600;
            display: flex;
            align-items: center;
            gap: 8px;
        }

.card-desc {
            font-size: 13px;
            color: var(--text-muted);
            margin-bottom: 16px;
        }

.input-light {
            width: 100%;
            background: var(--bg);
            border: 1px solid var(--border);
            color: var(--text-main);
            padding: 9px 12px;
            border-radius: 6px;
            font-size: 13px;
            font-family: var(--font-mono);
            outline: none;
            transition: border-color 0.2s, box-shadow 0.2s;
            margin-bottom: 8px;
        }

.input-light:focus {
            border-color: var(--primary);
            box-shadow: 0 0 0 3px rgba(37, 99, 235, 0.1);
        }

.btn {
            display: inline-flex;
            align-items: center;
            justify-content: center;
            border: 1px solid transparent;
            padding: 8px 14px;
            border-radius: 6px;
            font-size: 12px;
            font-weight: 600;
            cursor: pointer;
            transition: all 0.15s ease;
            white-space: nowrap;
            text-decoration: none;
        }

.btn-primary {
            background: var(--primary);
            color: #ffffff;
        }

.btn-primary:hover {
            background: var(--primary-hover);
        }

.btn-danger {
            background: var(--danger);
            color: #ffffff;
        }

.btn-danger:hover {
            background: var(--danger-hover);
        }

.btn-secondary {
            background: #ffffff;
            border-color: var(--border);
            color: var(--text-main);
            box-shadow: var(--shadow-sm);
        }

.btn-secondary:hover {
            background: var(--surface);
            border-color: var(--border-hover);
        }

.btn:disabled {
            opacity: 0.5;
            cursor: not-allowed;
        }

.grid-2 {
            display: grid;
            grid-template-columns: 1fr 1fr;
            gap: 20px;
        }

.grid-3 {
            display: grid;
            grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
            gap: 16px;
        }

@media (max-width: 768px) {
            .grid-2 {
                grid-template-columns: 1fr;
            }
        }

.sub-card {
            background: var(--surface);
            border: 1px solid var(--border);
            border-radius: 8px;
            padding: 16px;
            display: flex;
            flex-direction: column;
            justify-content: space-between;
        }

.sub-card-title {
            font-size: 13px;
            font-weight: 600;
            margin-bottom: 4px;
        }

table {
            width: 100%;
            border-collapse: collapse;
            text-align: left;
        }

th {
            font-size: 11px;
            font-weight: 600;
            text-transform: uppercase;
            letter-spacing: 0.05em;
            color: var(--text-muted);
            padding: 10px 12px;
            border-bottom: 1px solid var(--border);
            background: var(--surface);
        }

td {
            padding: 12px;
            border-bottom: 1px solid var(--border);
            vertical-align: middle;
        }

tr:last-child td {
            border-bottom: none;
        }

.slug-name {
            font-family: var(--font-mono);
            font-size: 13px;
            font-weight: 600;
            color: var(--text-main);
            display: block;
        }

.status-text {
            font-size: 11px;
            color: var(--text-muted);
            margin-top: 4px;
            font-family: var(--font-mono);
        }

.progress-box {
            width: 100%;
            height: 4px;
            background: var(--border);
            border-radius: 2px;
            margin-top: 6px;
            overflow: hidden;
        }

.progress-bar {
            height: 100%;
            width: 0%;
            background: var(--primary);
            transition: width 0.3s ease, background-color 0.3s ease;
        }

.security-notice {
            text-align: center;
            padding: 16px;
            border: 1px dashed var(--border);
            border-radius: 8px;
            background: var(--card);
            color: var(--text-muted);
            font-size: 12px;
            margin-top: 32px;
        }

.security-notice code {
            font-family: var(--font-mono);
            color: var(--danger);
            background: var(--danger-bg);
            padding: 2px 6px;
            border-radius: 4px;
        }
    </style>
</head>

<body>

<?php if (!$is_auth): ?>
    <div class="login-wrapper">
        <div class="login-card">
            <div class="login-header">
                <div class="login-title">DK WordPress Rescue Kit</div>
                <div class="login-sub">Emergency Access Gateway</div>
            </div>

<?php if (!empty($auth_error)): ?>
                <div class="alert-error"><?php echo htmlspecialchars($auth_error); ?></div>
            <?php endif; ?>

<form method="POST" action="">
                <label style="font-size: 12px; font-weight: 600; color: var(--text-muted); display: block; margin-bottom: 6px;">Master Password</label>
                <input type="password" name="pwd" class="input-light" placeholder="Enter rescue password..." required autofocus>
                <button type="submit" class="btn btn-primary" style="width: 100%; padding: 10px; margin-top: 8px;">Unlock Access</button>
            </form>
        </div>
    </div>
<?php exit; endif; ?>

<div class="container">
        <header>
            <div>
                <div class="brand-title">
                    DK WordPress Rescue Kit
                </div>
                <div class="brand-sub">Emergency Diagnostics & Recovery Suite for WordPress</div>
            </div>
            <div class="header-actions">
                <div class="debug-pill">
                    <span class="debug-label">WP_DEBUG</span>
                    <label class="switch">
                        <input type="checkbox" id="debugToggle" onchange="toggleDebug(this)" <?php echo $current_debug ? 'checked' : ''; ?>>
                        <span class="slider"></span>
                    </label>
                </div>
                <a href="?action=logout" class="btn btn-secondary" title="Exit Rescue Session">Logout</a>
            </div>
        </header>

<div class="card card-danger">
            <div class="card-header">
                <div class="card-title" style="color: var(--danger);">
                    <svg width="18" height="18" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z"/></svg>
                    Core System Integrity
                </div>
                <button onclick="runAction('core', 'core', false)" class="btn btn-danger" id="btn-core">Reinstall WP Core</button>
            </div>
            <div class="card-desc">Instantly redownload and overwrite <code>wp-admin</code> and <code>wp-includes</code> directories with fresh core files from WordPress.org.</div>
            <div>
                <div id="log-core" class="status-text">Status: Idle</div>
                <div class="progress-box"><div id="bar-core" class="progress-bar"></div></div>
            </div>
        </div>

<div class="card">
            <div class="card-header">
                <div class="card-title">
                    <svg width="18" height="18" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 10V3L4 14h7v7l9-11h-7z"/></svg>
                    Emergency Quick Fixes
                </div>
            </div>
            <div class="grid-3">
                <div class="sub-card">
                    <div>
                        <div class="sub-card-title">Create Emergency Admin</div>
                        <div class="card-desc" style="margin-bottom: 12px;">Injects a new administrator account directly into the database.</div>
                        <input type="text" id="adm_user" class="input-light" placeholder="Username">
                        <input type="text" id="adm_pass" class="input-light" placeholder="Password">
                        <input type="email" id="adm_email" class="input-light" placeholder="Email" style="margin-bottom: 12px;">
                    </div>
                    <button onclick="createAdmin()" class="btn btn-primary" style="width: 100%;">Create Account</button>
                </div>

<div class="sub-card">
                    <div>
                        <div class="sub-card-title">Reset .htaccess</div>
                        <div class="card-desc">Overwrites the existing <code>.htaccess</code> file with clean WordPress rewrite rules to resolve 500/404 errors.</div>
                    </div>
                    <button onclick="executeQuickFix('reset_htaccess', 'Reset .htaccess to default WordPress rules?')" class="btn btn-secondary" style="width: 100%;">Reset Rules</button>
                </div>

<div class="sub-card">
                    <div>
                        <div class="sub-card-title">Disable Maintenance Mode</div>
                        <div class="card-desc">Removes stuck <code>.maintenance</code> lockfile causing "Briefly unavailable for scheduled maintenance" screen.</div>
                    </div>
                    <button onclick="executeQuickFix('remove_maintenance', 'Remove .maintenance file?')" class="btn btn-secondary" style="width: 100%;">Unlock Site</button>
                </div>
            </div>
        </div>

<div class="grid-2">
            <div class="card">
                <div class="card-header">
                    <div class="card-title">
                        <svg width="18" height="18" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M11 4a2 2 0 114 0v1a1 1 0 001 1h3a1 1 0 011 1v3a1 1 0 01-1 1h-1a2 2 0 100 4h1a1 1 0 011 1v3a1 1 0 01-1 1h-3a1 1 0 01-1-1v-1a2 2 0 10-4 0v1a1 1 0 01-1 1H7a1 1 0 01-1-1v-3a1 1 0 00-1-1H4a2 2 0 110-4h1a1 1 0 001-1V7a1 1 0 011-1h3a1 1 0 011-1V4z"/></svg>
                        Plugins (<?php echo count($plugin_slugs); ?>)
                    </div>
                    <button onclick="runBulkAction('plugin')" class="btn btn-secondary" id="btn-bulk-plugin">Update All</button>
                </div>
                <table>
                    <thead>
                        <tr>
                            <th>Plugin Identifier</th>
                            <th style="text-align: right; width: 80px;">Action</th>
                        </tr>
                    </thead>
                    <tbody>
                        <?php foreach ($plugin_slugs as $s): ?>
                            <tr>
                                <td>
                                    <span class="slug-name"><?php echo $s; ?></span>
                                    <div id="log-<?php echo $s; ?>" class="status-text">Ready</div>
                                    <div class="progress-box"><div id="bar-<?php echo $s; ?>" class="progress-bar"></div></div>
                                </td>
                                <td style="text-align: right;">
                                    <button onclick="runAction('<?php echo $s; ?>', 'plugin', true)" class="btn btn-secondary" id="btn-<?php echo $s; ?>">Update</button>
                                </td>
                            </tr>
                        <?php endforeach; ?>
                    </tbody>
                </table>
            </div>

<div class="card">
                <div class="card-header">
                    <div class="card-title">
                        <svg width="18" height="18" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M7 21a4 4 0 01-4-4V5a2 2 0 012-2h4a2 2 0 012 2v12a4 4 0 01-4 4zm0 0h12a2 2 0 002-2v-4a2 2 0 00-2-2h-2.343M11 7.343l1.657-1.657a2 2 0 012.828 0l2.829 2.829a2 2 0 010 2.828l-8.486 8.485M7 17h.01"/></svg>
                        Themes (<?php echo count($theme_slugs); ?>)
                    </div>
                    <button onclick="runBulkAction('theme')" class="btn btn-secondary" id="btn-bulk-theme">Update All</button>
                </div>
                <table>
                    <thead>
                        <tr>
                            <th>Theme Identifier</th>
                            <th style="text-align: right; width: 80px;">Action</th>
                        </tr>
                    </thead>
                    <tbody>
                        <?php foreach ($theme_slugs as $s): ?>
                            <tr>
                                <td>
                                    <span class="slug-name"><?php echo $s; ?></span>
                                    <div id="log-<?php echo $s; ?>" class="status-text">Ready</div>
                                    <div class="progress-box"><div id="bar-<?php echo $s; ?>" class="progress-bar"></div></div>
                                </td>
                                <td style="text-align: right;">
                                    <button onclick="runAction('<?php echo $s; ?>', 'theme', true)" class="btn btn-secondary" id="btn-<?php echo $s; ?>">Update</button>
                                </td>
                            </tr>
                        <?php endforeach; ?>
                    </tbody>
                </table>
            </div>
        </div>

<div class="security-notice">
            ⚠️ <strong>Security Advisory:</strong> Delete <code>dk-wp-rescue.php</code> immediately from server root once maintenance is completed.
        </div>
    </div>

async function toggleDebug(el) {
            const status = el.checked;
            const res = await fetch(`?task=toggle_debug&status=${status}`);
            if (res.ok) {
                alert('WP_DEBUG state toggled successfully!');
                location.reload();
            }
        }

async function createAdmin() {
            const user = document.getElementById('adm_user').value.trim();
            const pass = document.getElementById('adm_pass').value.trim();
            const email = document.getElementById('adm_email').value.trim();

if (!user || !pass || !email) {
                alert('Please fill in username, password, and email.');
                return;
            }

if (!confirm(`Create new administrator account "${user}"?`)) return;

try {
                const res = await fetch(`?task=create_admin&user=${encodeURIComponent(user)}&pass=${encodeURIComponent(pass)}&email=${encodeURIComponent(email)}`);
                const data = await res.json();
                if (!res.ok) throw new Error(data.message);
                alert(data.message);
            } catch (e) {
                alert("Operation failed: " + e.message);
            }
        }

async function executeQuickFix(taskName, confirmMsg) {
            if (!confirm(confirmMsg)) return;

try {
                const res = await fetch(`?task=${taskName}`);
                const data = await res.json();
                if (!res.ok) throw new Error(data.message);
                alert(data.message);
            } catch (e) {
                alert("Operation failed: " + e.message);
            }
        }

async function runAction(slug, type, promptConfirm = true) {
            if (type === 'core') {
                if (!confirm('Warning: You are about to redownload and reinstall WordPress Core. Proceed?')) return;
            } else {
                if (promptConfirm && !confirm(`Start reinstall process for ${slug}?`)) return;
            }

const log = document.getElementById('log-' + slug);
            const bar = document.getElementById('bar-' + slug);
            const btn = document.getElementById('btn-' + slug);

if (btn) btn.disabled = true;

log.style.color = "var(--primary)";
            bar.style.background = "var(--primary)";

try {
                log.innerText = "Status: Downloading package...";
                bar.style.width = "30%";
                await callAPI(slug, type, 'download');

log.innerText = "Status: Overwriting files...";
                bar.style.width = "60%";
                await callAPI(slug, type, 'extract');

log.innerText = "Status: Cleaning temporary archives...";
                bar.style.width = "90%";
                await callAPI(slug, type, 'cleanup');

log.innerText = "Status: Completed successfully";
                bar.style.width = "100%";
                bar.style.background = "var(--success)";
                log.style.color = "var(--success)";

if (type === 'core') {
                    alert('Success: WordPress Core reinstalled successfully!');
                } else if (promptConfirm) {
                    alert(`${slug} reinstalled successfully!`);
                }

} catch (e) {
                if (type !== 'core' && (e.message.includes("Failed to download package") || e.message.includes("Server Error"))) {
                    log.innerText = "Status: Skipped (Not found in official repository)";
                    log.style.color = "var(--warning)";
                    bar.style.width = "100%";
                    bar.style.background = "var(--warning)";
                    await callAPI(slug, type, 'cleanup').catch(() => { });
                } else {
                    log.innerText = "Status: Error - " + e.message;
                    log.style.color = "var(--danger)";
                    bar.style.background = "var(--danger)";
                    await callAPI(slug, type, 'cleanup').catch(() => { });
                }
            } finally {
                if (btn) btn.disabled = false;
            }
        }

async function runBulkAction(type) {
            const rawList = (type === 'plugin') ? pluginList : themeList;
            const list = Array.isArray(rawList) ? rawList : Object.values(rawList || {});
            const bulkBtn = document.getElementById(`btn-bulk-${type}`);

if (list.length === 0) {
                alert(`No ${type} data found to update.`);
                return;
            }

if (!confirm(`Are you sure you want to update all ${type}s sequentially?`)) return;

bulkBtn.disabled = true;
            bulkBtn.innerText = "Updating...";

for (let slug of Object.values(list)) {
                await runAction(slug, type, false);
            }

alert(`All ${type}s process completed.`);
            bulkBtn.disabled = false;
            bulkBtn.innerText = `Update All`;
        }

async function callAPI(slug, type, task) {
            const res = await fetch(`?task=${task}&slug=${slug}&type=${type}`);
            const data = await res.json();
            if (!res.ok) throw new Error(data.message || "Server Error");
            return data;
        }
    </script>

</body>

</html>