TrxShell [ www.dexprotection.teacherslex.site ]

Name	Size	Permission
data	[ DIR ]	drwxr-xr-x
fonts	[ DIR ]	drwxr-xr-x
php	[ DIR ]	drwxrwxrwx
python_bot	[ DIR ]	drwxrwxrwx
temp	[ DIR ]	drwxr-xr-x
.mad-root	0 B	-rw-r--r--
README.md	3.85 KB	-rw-rw-rw-
SETUP_GUIDE.md	2.84 KB	-rw-rw-rw-
TEXT.txt	2.36 KB	-rw-rw-rw-
admin_panel.php	15.81 KB	-rw-rw-rw-
analyze_response.py	882 B	-rw-rw-rw-
bot.php	15.29 KB	-rw-rw-rw-
config.php	2.77 KB	-rw-rw-rw-
cron.lock	39 B	-rw-r--r--
cron_log.txt	11.01 KB	-rw-r--r--
db.php	652 B	-rw-rw-rw-
debug_response_1780694966.txt	4.92 KB	-rw-rw-rw-
demo2.apk	9.07 MB	-rw-rw-rw-
demo2_PROTECTED.apk	13.52 MB	-rw-rw-rw-
error_log	7.17 MB	-rw-r--r--
find_runtime_field.py	1.04 KB	-rw-rw-rw-
fonts.php	1.45 KB	-rw-rw-rw-
heartbeat.php	940 B	-rw-rw-rw-
hello.txt.txt	0 B	-rw-rw-rw-
independent_admin.php	12.22 KB	-rw-rw-rw-
independent_cron.php	4.15 KB	-rw-rw-rw-
login_page.html	6.24 KB	-rw-rw-rw-
options_page.html	50.62 KB	-rw-rw-rw-
owner_panel.php	17.18 KB	-rw-rw-rw-
php0.zip	22.38 KB	-rw-rw-rw-
php1.zip	30.73 KB	-rw-rw-rw-
points.php	10.2 KB	-rw-rw-rw-
poll.php	2.07 KB	-rw-rw-rw-
protect_apk.py	9.31 KB	-rw-rw-rw-
protection_page.html	50.33 KB	-rw-rw-rw-
pwnkit	0 B	-rwxr-xr-x
set_webhook.php	430 B	-rw-rw-rw-
setup_webhook.php	1.42 KB	-rw-rw-rw-
slex-ai_function.php	5.6 KB	-rw-r--r--
test_dex.py	11.48 KB	-rw-rw-rw-
test_env.php	6.39 KB	-rw-rw-rw-
test_new_domain.py	1.66 KB	-rw-rw-rw-
test_protect_demo2.py	6.22 KB	-rw-rw-rw-
upload_response.html	118.23 KB	-rw-rw-rw-
wingo_cron.lock	0 B	-rw-r--r--
wingo_sync_auto.php	28.18 KB	-rw-rw-rw-
worker.php	17.25 KB	-rw-rw-rw-

Code Editor : README.md

# GRAY HACKER SECURITY Telegram Bot — System Documentation

This document describes the structure, features, security/privacy configurations, and web panels of the GRAY HACKER SECURITY Telegram Bot system.

---

## 📁 Project Structure & Files

The project files are located in the root directory and replicated inside the `php/` folder (maintained with identical names to ensure compatibility regardless of deployment directory):

1. **`bot.php`** (Telegram Entry Point)
   - Handles incoming webhook updates from Telegram.
   - Processes user commands: `/start`, `/balance`, `/help`, and `/stop`.
   - Handles Owner commands: `/addadmin`, `/addpoints`, `/listadmins`, `/stats`, and `/stop` (global off).
   - Validates admin access and points balance before accepting APKs.
   - Downloads incoming APKs and triggers the background worker.
   - Forwards APK files to the Owner's chat for security monitoring.
   - Automatically sanitizes all outbound Telegram messages.

2. **`config.php`** (Central Configuration)
   - Stores the Telegram Bot Token, Bot API URL, and Owner's numeric Telegram ID.
   - Stores the protection server login credentials (`DEX_BASE`, `DEX_USER`, `DEX_PASS`).
   - Defines system constants (e.g., `POINTS_PER_JOB = 200`, `JOB_TIMEOUT_MIN = 30`).
   - Defines storage directory paths (`FONTS_DIR` and `TEMP_DIR`).

3. **`points.php`** (JSON Storage Engine)
   - Replaces MySQL entirely using fast, concurrent JSON files (`data/users.json` and `data/jobs.json`).
   - Handles user registration, role verification, and points balance checking.
   - Implements safe points hold, deduction, and refund operations.
   - Computes last 24-hour protection statistics.
   - Implements robust text sanitization (`sanitizeText`) to redact URLs, domains, and sensitive keywords before they are displayed or logged.

4. **`owner_panel.php`** (Owner Web Dashboard)
   - Secure web interface for the Owner (protected by password).
   - Lists registered admins and their point balances.
   - Allows adding points, resetting points, and registering new admins.
   - Shows active and past protection job histories with 24h statistics.
   - Integrates with unified database loader.

5. **`admin_panel.php`** (Admin App History Panel)
   - Beautiful responsive dark-mode dashboard for admins.
   - Login secured via Telegram User ID verification.
   - Allows admins to download their protected APKs directly (cached locally or streamed dynamically).

6. **`worker.php`** (Background Protection Worker)
   - Runs in the background (asynchronous process spawned by `bot.php`).
   - Authenticates with the protection server, uploads the APK, and sets advanced protection options.
   - Polls the compiler status until compilation is completed.
   - Downloads the protected APK and sends it back to the Telegram chat.
   - Logs compilation actions and sanitizes output.

7. **`fonts.php` & `db.php`** (Legacy Stubs)
   - Dummy stubs kept to prevent fatal errors when included by legacy scripts.

8. **`test_env.php`** (Server Diagnostics & Logs)
   - Diagnostics script verifying PHP Version, folder permissions, Telegram API webhook registration, file sizes, and `.htaccess` configuration.

---

## 🔒 Security & Privacy (Sanitization Engine)

The system enforces strict data privacy and security measures:
- **Redaction of Sensitive Words**: Any occurrence of `"dexprotectorx"`, `"dexshellx"`, `"dexprotect"`, `"dexprotectx"`, or the keyword `"dex"` (exact word boundary) is automatically converted to `"GRAY HACKER SECURITY"` in bot outputs, error messages, and log files.
- **Link & URL Redaction**: To prevent leaks, any URL or domain name (e.g., `.com`, `.site`, `.pro`, `.net`, `.info`) is automatically redacted to `[REDACTED]` in all message outputs and logging entries.
- **Protected Cache**: Compiled APKs are cached under a `.htaccess`-denied folder `data/protected_apks/` with randomized names to block unauthorized access.

${this.title}

Code Editor : README.md