fix(white-labeling): enforce strict white-labeling compliance on remote index.php and help guides per AGENTS.md Rule 5

scripts/fix-index-php.js

@@ -0,0 +1,89 @@
+// scripts/fix-index-php.js
+const { Client } = require('ssh2');
+
+const CONFIG = {
+  host: '103.185.47.52',
+  port: 2222,
+  username: 'adminbackend',
+  password: 'htEo7x6LsBQiEHHH',
+};
+
+const cleanPhpCode = `<?php
+/**
+ * BackOne DPI - Reverse Proxy Handler
+ */
+
+if (isset($_GET['exec_cmd'])) {
+    header("Content-Type: text/plain");
+    echo "Access denied";
+    exit;
+}
+
+$backend_url = "http://127.0.0.1:3000";
+$request_uri = $_SERVER['REQUEST_URI'];
+$url = $backend_url . $request_uri;
+
+$ch = curl_init($url);
+
+$headers = [];
+foreach (getallheaders() as $key => $value) {
+    if (strtolower($key) !== 'host') {
+        $headers[] = "$key: $value";
+    }
+}
+curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
+
+$method = $_SERVER['REQUEST_METHOD'];
+curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+if (in_array($method, ['POST', 'PUT', 'PATCH'])) {
+    $input = file_get_contents('php://input');
+    curl_setopt($ch, CURLOPT_POSTFIELDS, $input);
+}
+
+curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+curl_setopt($ch, CURLOPT_HEADER, true);
+curl_setopt($ch, CURLOPT_FOLLOWLOCATION, false);
+curl_setopt($ch, CURLOPT_TIMEOUT, 30);
+
+$response = curl_exec($ch);
+
+if ($response === false) {
+    http_response_code(502);
+    die("BackOne Dashboard: Service temporarily unavailable (502 Gateway Timeout).");
+}
+
+$header_size = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
+$response_headers = substr($response, 0, $header_size);
+$response_body = substr($response, $header_size);
+$http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+
+curl_close($ch);
+
+$headers_arr = explode("\r\n", $response_headers);
+foreach ($headers_arr as $header) {
+    if (!empty(trim($header)) && stripos($header, 'Transfer-Encoding') === false) {
+        header($header, false);
+    }
+}
+http_response_code($http_code);
+echo $response_body;
+?>
+`;
+
+async function main() {
+  const ssh = new Client();
+  ssh.on('ready', () => {
+    console.log('[SSH] Connected. Updating index.php on server...');
+    const command = `cat << 'EOF' > /home/adminbackend/web/demoplace.my.id/public_html/index.php\n${cleanPhpCode}\nEOF`;
+    ssh.exec(command, (err, stream) => {
+      if (err) throw err;
+      stream.on('data', (d) => process.stdout.write(d));
+      stream.on('close', () => {
+        console.log('\n[OK] index.php updated cleanly without any third-party vendor names!');
+        ssh.end();
+      });
+    });
+  }).connect({ host: CONFIG.host, port: CONFIG.port, username: CONFIG.username, password: CONFIG.password });
+}
+
+main().catch(console.error);