From 0f008b41b294d663c6afb7996e918abdab4a2897 Mon Sep 17 00:00:00 2001
From: ale <ale@manalejandro.com>
Date: Tue, 23 Sep 2025 22:57:23 +0200
Subject: [PATCH] initial commit

Signed-off-by: ale <ale@manalejandro.com>
---
 .htaccess                              |   52 +
 LICENSE                                |   51 +
 README.md                              |  282 ++
 index.php                              |   86 +
 src/.htaccess                          |    3 +
 src/config/config.php                  |   59 +
 src/controllers/AuthController.php     |   60 +
 src/controllers/BaseController.php     |  121 +
 src/controllers/DatabaseController.php |  382 +++
 src/controllers/FileController.php     |  482 ++++
 src/controllers/MainController.php     |   82 +
 src/controllers/ModuleController.php   |   25 +
 src/controllers/NetworkController.php  |  334 +++
 src/controllers/ProcessController.php  |  208 ++
 src/controllers/SystemController.php   |  307 ++
 src/controllers/TerminalController.php |  403 +++
 src/core/Autoloader.php                |   96 +
 src/core/Bootstrap.php                 |  405 +++
 src/core/ConfigManager.php             |  129 +
 src/core/ModuleManager.php             |  162 ++
 src/core/Router.php                    | 3693 ++++++++++++++++++++++++
 src/core/SessionManager.php            |  108 +
 src/security/SecurityManager.php       |  248 ++
 23 files changed, 7778 insertions(+)
 create mode 100644 .htaccess
 create mode 100644 LICENSE
 create mode 100644 README.md
 create mode 100644 index.php
 create mode 100644 src/.htaccess
 create mode 100644 src/config/config.php
 create mode 100644 src/controllers/AuthController.php
 create mode 100644 src/controllers/BaseController.php
 create mode 100644 src/controllers/DatabaseController.php
 create mode 100644 src/controllers/FileController.php
 create mode 100644 src/controllers/MainController.php
 create mode 100644 src/controllers/ModuleController.php
 create mode 100644 src/controllers/NetworkController.php
 create mode 100644 src/controllers/ProcessController.php
 create mode 100644 src/controllers/SystemController.php
 create mode 100644 src/controllers/TerminalController.php
 create mode 100644 src/core/Autoloader.php
 create mode 100644 src/core/Bootstrap.php
 create mode 100644 src/core/ConfigManager.php
 create mode 100644 src/core/ModuleManager.php
 create mode 100644 src/core/Router.php
 create mode 100644 src/core/SessionManager.php
 create mode 100644 src/security/SecurityManager.php

diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000..79a67c5
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,52 @@
+# AleShell .htaccess Configuration
+# This file helps with URL routing and security
+
+# Enable URL rewriting
+RewriteEngine On
+
+# Security Headers
+<IfModule mod_headers.c>
+    Header always set X-Content-Type-Options nosniff
+    Header always set X-Frame-Options DENY
+    Header always set X-XSS-Protection "1; mode=block"
+    Header always set Referrer-Policy "strict-origin-when-cross-origin"
+</IfModule>
+
+# Prevent access to sensitive files
+<FilesMatch "\.(md|json|lock|yml|yaml|xml|log)$">
+    Require all denied
+</FilesMatch>
+
+# Protect src directory - Alternative method for .htaccess
+RewriteRule ^src/ - [F,L]
+
+# API and Auth routing
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteCond %{REQUEST_FILENAME} !-d
+RewriteRule ^(api|auth)/(.*)$ index.php/$1/$2 [L,QSA]
+
+# General routing for non-existent files
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteCond %{REQUEST_FILENAME} !-d
+RewriteRule ^(.*)$ index.php/$1 [L,QSA]
+
+# Disable server signature
+ServerSignature Off
+
+# Prevent directory browsing
+Options -Indexes
+
+# Cache static files
+<IfModule mod_expires.c>
+    ExpiresActive On
+    ExpiresByType text/css "access plus 1 month"
+    ExpiresByType application/javascript "access plus 1 month"
+    ExpiresByType image/png "access plus 1 month"
+    ExpiresByType image/jpg "access plus 1 month"
+    ExpiresByType image/jpeg "access plus 1 month"
+    ExpiresByType image/gif "access plus 1 month"
+    ExpiresByType image/ico "access plus 1 month"
+    ExpiresByType image/icon "access plus 1 month"
+    ExpiresByType text/ico "access plus 1 month"
+    ExpiresByType image/x-icon "access plus 1 month"
+</IfModule>
\ No newline at end of file
diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..ce6b26f
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,51 @@
+MIT License
+
+Copyright (c) 2024 AleShell Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
+## Additional Terms for AleShell
+
+### Intended Use
+This software is intended for legitimate system administration and authorized 
+security testing purposes only. Users must ensure they have proper authorization 
+before using this software on any system they do not own.
+
+### Responsibility
+Users are solely responsible for ensuring their use of this software complies 
+with all applicable laws, regulations, and policies. The authors and contributors 
+of AleShell disclaim any responsibility for misuse of this software.
+
+### Security Notice
+This software provides administrative access to systems. Users must:
+- Secure the installation with strong passwords
+- Use HTTPS in production environments
+- Restrict access to authorized personnel only
+- Monitor and log access appropriately
+- Remove the software when no longer needed
+
+### Acknowledgments
+This project is inspired by and builds upon the work of the b374k project and 
+other web shell implementations. We acknowledge the contributions of all 
+developers in the security tools community.
+
+### Disclaimer
+THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. USE AT YOUR OWN RISK.
\ No newline at end of file
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..ebc682d
--- /dev/null
+++ b/README.md
@@ -0,0 +1,282 @@
+# 🚀 AleShell - Modern PHP Web Shell
+
+AleShell is a powerful, secure, and modern web shell built with PHP. It's a complete rewrite and modernization of the b374k project, featuring a beautiful responsive interface, enhanced security, and modern development practices.
+
+## ✨ Features
+
+### 🔐 Security
+- **Advanced Authentication** with password hashing and session management
+- **CSRF Protection** for all state-changing operations
+- **Rate Limiting** to prevent brute force attacks
+- **IP Whitelisting/Blacklisting** for access control
+- **Path Traversal Protection** to prevent unauthorized file access
+- **Command Filtering** to block dangerous system commands
+- **Session Security** with secure cookies and session regeneration
+
+### 🎨 Modern Interface
+- **Responsive Design** that works on desktop, tablet, and mobile
+- **Dark/Light Theme** toggle with system preference detection
+- **Keyboard Shortcuts** for power users
+- **Real-time Updates** for system information
+- **Smooth Animations** and transitions
+- **Modular Architecture** with lazy-loaded components
+
+### 📁 File Manager
+- **Complete File Operations** (create, read, update, delete, copy, move)
+- **Drag & Drop Upload** with progress indicators
+- **Syntax Highlighting** for code files
+- **File Permissions** management
+- **Archive Support** (zip, tar, tar.gz)
+- **Large File Handling** with streaming
+- **File Search** and filtering capabilities
+
+### 💻 Terminal
+- **Interactive Terminal** with command history
+- **Built-in Commands** (cd, pwd, help, etc.)
+- **Command Auto-completion** 
+- **Output Streaming** for long-running commands
+- **Multiple Terminal Tabs**
+- **Configurable Timeout** for command execution
+
+### 📝 Code Editor
+- **Syntax Highlighting** for multiple languages
+- **Line Numbers** and code folding
+- **Find & Replace** functionality
+- **Auto-indentation** and code formatting
+- **Multiple Editor Themes**
+- **File Type Detection**
+
+### ⚡ System Monitoring
+- **Real-time System Stats** (CPU, Memory, Disk, Network)
+- **Process Manager** with kill capabilities
+- **Network Tools** (ping, traceroute, port scan)
+- **System Information** display
+- **Load Average** monitoring
+
+### 🗄️ Database Tools
+- **Multi-Database Support** (MySQL, PostgreSQL, SQLite)
+- **SQL Query Execution** with result formatting
+- **Database Browser** with table structure
+- **Export/Import** capabilities
+- **Connection Management**
+
+## 🚀 Installation
+
+### Requirements
+- PHP 7.4 or higher
+- Web server (Apache, Nginx, etc.)
+- PHP extensions: json, mbstring, openssl
+
+### Quick Install
+1. Download the latest release
+2. Extract to your web directory
+3. Access via web browser
+4. Default password: `aleshell`
+
+### From Source
+```bash
+git clone https://github.com/yourusername/aleshell.git
+cd aleshell
+# Upload to your web server
+```
+
+### 📦 Packed Version (Recommended)
+For easy deployment, use the **AleShell Packer** to generate a single encrypted PHP file:
+
+#### Web Interface
+1. Access `pack.php` in your browser
+2. Configure options (password, modules, compression)
+3. Click "Generate AleShell Packed"
+4. Upload the generated file to any PHP server
+
+#### Command Line
+```bash
+# Basic packed version
+php pack.php -o shell.php -p your_password --encrypt
+
+# Advanced packed version
+php pack.php -o advanced.php -p secure_pass --encrypt --minify --obfuscate
+```
+
+**Benefits of Packed Version:**
+- ✅ Single file deployment
+- ✅ Encrypted and compressed
+- ✅ No external dependencies
+- ✅ Customizable features
+- ✅ Built-in security options
+
+## ⚙️ Configuration
+
+AleShell can be configured by creating a `src/config/config.php` file:
+
+```php
+<?php
+return [
+    'security' => [
+        'password' => password_hash('your_secure_password', PASSWORD_DEFAULT),
+        'session_timeout' => 3600, // 1 hour
+        'allowed_ips' => [], // Empty = allow all
+        'max_attempts' => 5,
+        'lockout_time' => 300 // 5 minutes
+    ],
+    'features' => [
+        'file_manager' => true,
+        'terminal' => true,
+        'code_editor' => true,
+        'process_manager' => true,
+        'network_tools' => true,
+        'database_tools' => true
+    ],
+    'ui' => [
+        'theme' => 'dark', // 'dark' or 'light'
+        'language' => 'en',
+        'items_per_page' => 50
+    ],
+    'limits' => [
+        'max_file_size' => 50 * 1024 * 1024, // 50MB
+        'max_upload_size' => 100 * 1024 * 1024, // 100MB
+        'command_timeout' => 30
+    ]
+];
+```
+
+## 🔒 Security Considerations
+
+AleShell is designed with security in mind, but you should still follow best practices:
+
+1. **Change the default password** immediately after installation
+2. **Use HTTPS** in production environments
+3. **Restrict access** using IP whitelisting when possible
+4. **Monitor access logs** for suspicious activity
+5. **Keep PHP updated** to the latest stable version
+6. **Remove from production** when not needed
+
+## 🌐 Browser Support
+
+AleShell supports all modern browsers:
+- Chrome 60+
+- Firefox 55+
+- Safari 12+
+- Edge 79+
+- Opera 47+
+
+## 📱 Mobile Support
+
+The interface is fully responsive and optimized for mobile devices with:
+- Touch-friendly controls
+- Responsive navigation
+- Optimized layouts
+- Gesture support
+
+## 🎯 Keyboard Shortcuts
+
+- `Ctrl+1` - Dashboard
+- `Ctrl+2` - File Manager
+- `Ctrl+3` - Terminal
+- `Ctrl+4` - Code Editor
+- `Ctrl+L` - Clear terminal
+- `Ctrl+S` - Save file (in editor)
+
+## 🔧 Development
+
+### Architecture
+
+AleShell follows modern PHP development practices:
+
+- **PSR-4 Autoloading** for clean class organization
+- **MVC Pattern** with controllers and views
+- **Modular Design** for easy extensibility
+- **RESTful API** for all operations
+- **Security-first** approach
+
+### File Structure
+
+```
+aleshell/
+├── index.php              # Entry point
+├── src/                   # Source code
+│   ├── core/             # Core framework classes
+│   ├── controllers/      # Request handlers
+│   ├── security/         # Security components
+│   ├── modules/          # Feature modules
+│   ├── themes/           # UI themes
+│   ├── config/           # Configuration
+│   └── utils/            # Utility classes
+├── uploads/              # File uploads (create if needed)
+├── logs/                 # Application logs
+└── README.md
+```
+
+### Adding Modules
+
+Create a new module by:
+
+1. Creating a directory in `src/modules/`
+2. Adding a `module.json` configuration file
+3. Implementing the module class
+4. Registering routes if needed
+
+Example module structure:
+```
+src/modules/mymodule/
+├── module.json
+├── MyModule.php
+├── assets/
+│   ├── style.css
+│   └── script.js
+└── templates/
+    └── index.html
+```
+
+## 🐛 Troubleshooting
+
+### Common Issues
+
+1. **Permission Errors**
+   - Ensure PHP has read/write permissions
+   - Check file ownership and permissions
+
+2. **Session Issues**
+   - Verify session directory is writable
+   - Check PHP session configuration
+
+3. **Command Execution Fails**
+   - Verify exec functions are enabled
+   - Check system PATH configuration
+
+### Debugging
+
+Enable debug mode in configuration:
+```php
+'app' => [
+    'debug' => true
+]
+```
+
+## 📄 License
+
+This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.
+
+## 🤝 Contributing
+
+Contributions are welcome! Please feel free to submit a Pull Request.
+
+1. Fork the project
+2. Create your feature branch (`git checkout -b feature/AmazingFeature`)
+3. Commit your changes (`git commit -m 'Add some AmazingFeature'`)
+4. Push to the branch (`git push origin feature/AmazingFeature`)
+5. Open a Pull Request
+
+## 🙏 Acknowledgments
+
+- Based on the original [b374k](https://github.com/b374k/b374k) project
+- Inspired by modern web development practices
+- Thanks to all contributors and testers
+
+## ⚠️ Disclaimer
+
+This tool is intended for legitimate system administration purposes only. Users are responsible for ensuring compliance with applicable laws and regulations. The authors are not responsible for any misuse of this software.
+
+---
+
+**AleShell v2.0.0** - Built with ❤️ for system administrators
\ No newline at end of file
diff --git a/index.php b/index.php
new file mode 100644
index 0000000..4fe443a
--- /dev/null
+++ b/index.php
@@ -0,0 +1,86 @@
+<?php
+/**
+ * AleShell - A Modern PHP Web Shell
+ * 
+ * A powerful, secure, and modern web shell based on b374k but completely rewritten
+ * with modern architecture, improved security, and enhanced features.
+ * 
+ * @author Ale
+ * @version 2.0.0
+ * @license MIT
+ * @package AleShell
+ */
+
+// Prevent direct browser access for security
+if (!isset($_SERVER['HTTP_USER_AGENT']) || empty($_SERVER['HTTP_USER_AGENT'])) {
+    http_response_code(403);
+    die('Access Denied');
+}
+
+// Basic security headers
+header('X-Content-Type-Options: nosniff');
+header('X-Frame-Options: DENY');
+header('X-XSS-Protection: 1; mode=block');
+header('Referrer-Policy: strict-origin-when-cross-origin');
+
+// Define version and basic constants
+define('ALESHELL_VERSION', '2.0.0');
+define('ALESHELL_ROOT', __DIR__);
+define('ALESHELL_SRC', ALESHELL_ROOT . '/src');
+define('ALESHELL_CORE', ALESHELL_SRC . '/core');
+
+// Error reporting
+error_reporting(E_ALL & ~E_NOTICE);
+ini_set('display_errors', 1);
+ini_set('log_errors', 1);
+
+// Manual class loading for critical files
+function loadAleShellClass($className) {
+    // Remove namespace prefix
+    $className = str_replace('AleShell\\', '', $className);
+    
+    // Convert namespace to path
+    $classFile = str_replace('\\', '/', $className) . '.php';
+    $fullPath = ALESHELL_SRC . '/' . $classFile;
+    
+    if (file_exists($fullPath)) {
+        require_once $fullPath;
+        return true;
+    }
+    
+    return false;
+}
+
+// Register autoloader
+spl_autoload_register('loadAleShellClass');
+
+// Include the autoloader and bootstrap
+require_once ALESHELL_CORE . '/Autoloader.php';
+
+// Initialize AleShell
+try {
+    // Ensure bootstrap class is loaded
+    if (!class_exists('AleShell\\Core\\Bootstrap')) {
+        require_once ALESHELL_CORE . '/Bootstrap.php';
+    }
+    
+    $aleShell = new AleShell\Core\Bootstrap();
+    $aleShell->initialize();
+    $aleShell->run();
+} catch (Exception $e) {
+    // Log error and show user-friendly message
+    error_log('AleShell Error: ' . $e->getMessage());
+    http_response_code(500);
+    
+    if (defined('ALESHELL_DEBUG') && ALESHELL_DEBUG) {
+        echo '<h1>AleShell Error</h1>';
+        echo '<p><strong>Message:</strong> ' . htmlspecialchars($e->getMessage()) . '</p>';
+        echo '<p><strong>File:</strong> ' . htmlspecialchars($e->getFile()) . '</p>';
+        echo '<p><strong>Line:</strong> ' . $e->getLine() . '</p>';
+        echo '<pre>' . htmlspecialchars($e->getTraceAsString()) . '</pre>';
+    } else {
+        echo '<h1>Service Temporarily Unavailable</h1>';
+        echo '<p>Please try again later.</p>';
+        echo '<p><small>Error: ' . htmlspecialchars($e->getMessage()) . '</small></p>';
+    }
+}
\ No newline at end of file
diff --git a/src/.htaccess b/src/.htaccess
new file mode 100644
index 0000000..cdd9616
--- /dev/null
+++ b/src/.htaccess
@@ -0,0 +1,3 @@
+# Protect AleShell source directory
+# Deny access to all files in src/
+Require all denied
\ No newline at end of file
diff --git a/src/config/config.php b/src/config/config.php
new file mode 100644
index 0000000..206782f
--- /dev/null
+++ b/src/config/config.php
@@ -0,0 +1,59 @@
+<?php
+/**
+ * Basic Configuration for AleShell
+ * 
+ * Minimal config to get AleShell running
+ */
+
+return [
+    'app' => [
+        'name' => 'AleShell',
+        'version' => '2.0.0',
+        'debug' => true, // Enable for troubleshooting
+        'timezone' => 'UTC'
+    ],
+    
+    'security' => [
+        // Default password: "password" 
+        'password' => '$2y$12$IyAHk858LpyxJaqMOgHiJOHdR.GWbAoGVYUpQh1Ec1ogTGNxyRWRe',
+        'session_timeout' => 3600,
+        'csrf_protection' => true,
+        'rate_limiting' => false, // Disabled for testing
+        'max_attempts' => 5,
+        'lockout_time' => 300,
+        'allowed_ips' => [],
+        'blocked_ips' => []
+    ],
+    
+    'features' => [
+        'file_manager' => true,
+        'terminal' => true,
+        'code_editor' => true,
+        'process_manager' => true,
+        'network_tools' => true,
+        'database_tools' => true,
+        'system_info' => true,
+        'log_viewer' => true
+    ],
+    
+    'ui' => [
+        'theme' => 'dark',
+        'language' => 'en',
+        'items_per_page' => 50,
+        'auto_refresh' => false,
+        'show_hidden_files' => false
+    ],
+    
+    'limits' => [
+        'max_file_size' => 50 * 1024 * 1024, // 50MB
+        'max_upload_size' => 100 * 1024 * 1024, // 100MB
+        'max_output_lines' => 1000,
+        'command_timeout' => 30
+    ],
+    
+    'paths' => [
+        'temp_dir' => sys_get_temp_dir(),
+        'upload_dir' => dirname(__DIR__) . '/uploads',
+        'log_dir' => dirname(__DIR__) . '/logs'
+    ]
+];
\ No newline at end of file
diff --git a/src/controllers/AuthController.php b/src/controllers/AuthController.php
new file mode 100644
index 0000000..8a859cf
--- /dev/null
+++ b/src/controllers/AuthController.php
@@ -0,0 +1,60 @@
+<?php
+/**
+ * Authentication Controller
+ * 
+ * Handles user authentication
+ */
+
+namespace AleShell\Controllers;
+
+use AleShell\Controllers\BaseController;
+
+class AuthController extends BaseController 
+{
+    public function login(): void 
+    {
+        $data = $this->getRequestData();
+        $password = $data['password'] ?? '';
+        
+        if (empty($password)) {
+            $this->errorResponse('Password is required');
+            return;
+        }
+        
+        try {
+            if ($this->security->authenticate($password)) {
+                $this->successResponse([
+                    'authenticated' => true,
+                    'csrf_token' => $this->security->generateCSRFToken(),
+                    'redirect' => '/dashboard'
+                ]);
+            } else {
+                $this->errorResponse('Invalid password', 401);
+            }
+        } catch (\Exception $e) {
+            $this->errorResponse($e->getMessage(), 401);
+        }
+    }
+    
+    public function logout(): void 
+    {
+        $this->security->logout();
+        $this->successResponse(['logged_out' => true]);
+    }
+    
+    public function status(): void 
+    {
+        // Use the working direct output but with proper API structure
+        $token = $this->security->generateCSRFToken();
+        $data = [
+            'authenticated' => $this->security->isAuthenticated(),
+            'csrf_token' => $token
+        ];
+        
+        $response = ['success' => true, 'data' => $data];
+        
+        header('Content-Type: application/json');
+        echo json_encode($response);
+        exit;
+    }
+}
\ No newline at end of file
diff --git a/src/controllers/BaseController.php b/src/controllers/BaseController.php
new file mode 100644
index 0000000..70e72ec
--- /dev/null
+++ b/src/controllers/BaseController.php
@@ -0,0 +1,121 @@
+<?php
+/**
+ * Base Controller
+ * 
+ * Base class for all controllers
+ */
+
+namespace AleShell\Controllers;
+
+use AleShell\Core\ConfigManager;
+use AleShell\Security\SecurityManager;
+
+abstract class BaseController 
+{
+    protected ConfigManager $config;
+    protected SecurityManager $security;
+    
+    public function __construct(ConfigManager $config) 
+    {
+        $this->config = $config;
+        $this->security = new SecurityManager($config);
+    }
+    
+    protected function jsonResponse($data, int $status = 200): void 
+    {
+        // Aggressive output buffering cleanup
+        while (ob_get_level()) {
+            ob_end_clean();
+        }
+        
+        // Ensure no buffering
+        ini_set('output_buffering', '0');
+        ini_set('implicit_flush', '1');
+        
+        $json = json_encode($data);
+        
+        if (!headers_sent()) {
+            http_response_code($status);
+            header('Content-Type: application/json');
+            header('Content-Length: ' . strlen($json));
+            header('Cache-Control: no-cache, no-store, must-revalidate');
+            // Disable error display for API responses to prevent JSON corruption
+            ini_set('display_errors', 0);
+        }
+        
+        // Direct output
+        echo $json;
+        flush();
+    }
+    
+    protected function errorResponse(string $message, int $status = 400): void 
+    {
+        $this->jsonResponse(['error' => $message], $status);
+    }
+    
+    protected function successResponse($data = null): void 
+    {
+        $response = ['success' => true];
+        if ($data !== null) {
+            $response['data'] = $data;
+        }
+        
+        // Use direct output approach that works
+        header('Content-Type: application/json');
+        echo json_encode($response);
+        exit;
+    }
+    
+    protected function validateCSRF(?array $requestData = null): bool 
+    {
+        if (!$this->config->get('security.csrf_protection', true)) {
+            return true;
+        }
+        
+        $token = '';
+        
+        // Check in request data (for JSON requests)
+        if ($requestData !== null) {
+            $token = $requestData['csrf_token'] ?? '';
+        }
+        
+        // Check in POST data (form submissions)
+        if (empty($token)) {
+            $token = $_POST['csrf_token'] ?? '';
+        }
+        
+        // Check in HTTP header
+        if (empty($token)) {
+            $token = $_SERVER['HTTP_X_CSRF_TOKEN'] ?? '';
+        }
+        
+        return $this->security->validateCSRFToken($token);
+    }
+    
+    protected function requireAuth(): void 
+    {
+        if (!$this->security->isAuthenticated()) {
+            $this->errorResponse('Authentication required', 401);
+            exit;
+        }
+    }
+    
+    protected function sanitizeInput($input) 
+    {
+        return $this->security->sanitizeInput($input);
+    }
+    
+    protected function getRequestData(): array 
+    {
+        $contentType = $_SERVER['CONTENT_TYPE'] ?? '';
+        
+        if (strpos($contentType, 'application/json') !== false) {
+            $json = file_get_contents('php://input');
+            $data = json_decode($json, true) ?? [];
+        } else {
+            $data = $_POST;
+        }
+        
+        return $this->sanitizeInput($data);
+    }
+}
\ No newline at end of file
diff --git a/src/controllers/DatabaseController.php b/src/controllers/DatabaseController.php
new file mode 100644
index 0000000..a511eaf
--- /dev/null
+++ b/src/controllers/DatabaseController.php
@@ -0,0 +1,382 @@
+<?php
+/**
+ * Database Controller
+ *
+ * Handles database operations and connections
+ */
+
+namespace AleShell\Controllers;
+
+use AleShell\Controllers\BaseController;
+use AleShell\Core\ConfigManager;
+
+class DatabaseController extends BaseController
+{
+    private $connections = [];
+
+    public function __construct(ConfigManager $config)
+    {
+        parent::__construct($config);
+        $this->restoreConnections();
+    }
+
+    private function restoreConnections(): void
+    {
+        if (!isset($_SESSION['db_connections'])) {
+            return;
+        }
+
+        foreach ($_SESSION['db_connections'] as $connectionId => $connData) {
+            try {
+                // Recreate the connection
+                $connection = $this->createConnection(
+                    $connData['type'],
+                    $connData['host'] ?? 'localhost',
+                    $connData['port'] ?? '',
+                    $connData['database'],
+                    $connData['username'] ?? '',
+                    $connData['password'] ?? ''
+                );
+
+                $this->connections[$connectionId] = [
+                    'connection' => $connection,
+                    'type' => $connData['type'],
+                    'host' => $connData['host'] ?? 'localhost',
+                    'database' => $connData['database'],
+                    'connected_at' => $connData['connected_at']
+                ];
+            } catch (\Exception $e) {
+                // Remove invalid connection from session
+                unset($_SESSION['db_connections'][$connectionId]);
+            }
+        }
+    }
+
+    public function connect(): void
+    {
+        $this->requireAuth();
+
+        $data = $this->getRequestData();
+        $type = $data['type'] ?? '';
+        $host = $data['host'] ?? 'localhost';
+        $port = $data['port'] ?? '';
+        $database = $data['database'] ?? '';
+        $username = $data['username'] ?? '';
+        $password = $data['password'] ?? '';
+
+        if (empty($type) || empty($database)) {
+            $this->errorResponse('Database type and name are required');
+            return;
+        }
+
+        try {
+            $connection = $this->createConnection($type, $host, $port, $database, $username, $password);
+            $connectionId = uniqid('db_');
+
+            $this->connections[$connectionId] = [
+                'connection' => $connection,
+                'type' => $type,
+                'host' => $host,
+                'database' => $database,
+                'connected_at' => time()
+            ];
+
+            // Store in session for persistence
+            $_SESSION['db_connections'][$connectionId] = [
+                'type' => $type,
+                'host' => $host,
+                'port' => $port,
+                'database' => $database,
+                'username' => $username,
+                'password' => $password,
+                'connected_at' => time()
+            ];
+
+            $this->successResponse([
+                'connection_id' => $connectionId,
+                'type' => $type,
+                'database' => $database,
+                'host' => $host
+            ]);
+        } catch (\Exception $e) {
+            $this->errorResponse('Database connection failed: ' . $e->getMessage());
+        }
+    }
+
+    public function disconnect(): void
+    {
+        $this->requireAuth();
+
+        $data = $this->getRequestData();
+        $connectionId = $data['connection_id'] ?? null;
+
+        if ($connectionId === "current" || $connectionId === null) {
+            // Disconnect all connections
+            $disconnected = 0;
+            foreach ($this->connections as $id => $conn) {
+                try {
+                    $this->closeConnection($id);
+                    if (isset($_SESSION['db_connections'][$id])) {
+                        unset($_SESSION['db_connections'][$id]);
+                    }
+                    $disconnected++;
+                } catch (\Exception $e) {
+                    // Continue with other connections
+                }
+            }
+            $this->successResponse(['disconnected' => $disconnected, 'message' => 'All connections closed']);
+            return;
+        }
+
+        if (!isset($this->connections[$connectionId])) {
+            $this->errorResponse('Invalid connection ID');
+            return;
+        }
+
+        try {
+            $this->closeConnection($connectionId);
+            unset($_SESSION['db_connections'][$connectionId]);
+
+            $this->successResponse(['disconnected' => true]);
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to disconnect: ' . $e->getMessage());
+        }
+    }
+
+    public function getDatabases(): void
+    {
+        $this->requireAuth();
+
+        $connectionId = $_GET['connection_id'] ?? '';
+
+        if (empty($connectionId) || !isset($this->connections[$connectionId])) {
+            $this->errorResponse('Invalid connection ID');
+            return;
+        }
+
+        try {
+            $conn = $this->connections[$connectionId];
+            $databases = $this->listDatabases($conn);
+
+            $this->successResponse([
+                'databases' => $databases,
+                'total' => count($databases)
+            ]);
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to get databases: ' . $e->getMessage());
+        }
+    }
+
+    public function getTables(): void
+    {
+        $this->requireAuth();
+
+        $connectionId = $_GET['connection_id'] ?? '';
+        $database = $_GET['database'] ?? '';
+
+        if (empty($connectionId) || !isset($this->connections[$connectionId])) {
+            $this->errorResponse('Invalid connection ID');
+            return;
+        }
+
+        try {
+            $conn = $this->connections[$connectionId];
+            $tables = $this->listTables($conn, $database);
+
+            $this->successResponse([
+                'tables' => $tables,
+                'database' => $database,
+                'total' => count($tables)
+            ]);
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to get tables: ' . $e->getMessage());
+        }
+    }
+
+    public function executeQuery(): void
+    {
+        $this->requireAuth();
+
+        $data = $this->getRequestData();
+        $connectionId = $data['connection_id'] ?? '';
+        $query = trim($data['query'] ?? '');
+        $database = $data['database'] ?? '';
+
+        if (empty($connectionId) || !isset($this->connections[$connectionId])) {
+            $this->errorResponse('Invalid connection ID');
+            return;
+        }
+
+        if (empty($query)) {
+            $this->errorResponse('Query is required');
+            return;
+        }
+
+        try {
+            $conn = $this->connections[$connectionId];
+            $result = $this->executeDatabaseQuery($conn, $query, $database);
+
+            $this->successResponse($result);
+        } catch (\Exception $e) {
+            $this->errorResponse('Query execution failed: ' . $e->getMessage());
+        }
+    }
+
+    public function getConnections(): void
+    {
+        $this->requireAuth();
+
+        $connections = [];
+        foreach ($this->connections as $id => $conn) {
+            $connections[] = [
+                'id' => $id,
+                'type' => $conn['type'],
+                'host' => $conn['host'],
+                'database' => $conn['database'],
+                'connected_at' => $conn['connected_at']
+            ];
+        }
+
+        $this->successResponse([
+            'connections' => $connections,
+            'total' => count($connections)
+        ]);
+    }
+
+    private function createConnection(string $type, string $host, string $port, string $database, string $username, string $password)
+    {
+        switch (strtolower($type)) {
+            case 'mysql':
+            case 'mariadb':
+                $port = $port ?: '3306';
+                $dsn = "mysql:host=$host;port=$port;dbname=$database;charset=utf8mb4";
+                return new \PDO($dsn, $username, $password, [
+                    \PDO::ATTR_ERRMODE => \PDO::ERRMODE_EXCEPTION,
+                    \PDO::ATTR_DEFAULT_FETCH_MODE => \PDO::FETCH_ASSOC
+                ]);
+
+            case 'postgresql':
+                $port = $port ?: '5432';
+                $dsn = "pgsql:host=$host;port=$port;dbname=$database";
+                return new \PDO($dsn, $username, $password, [
+                    \PDO::ATTR_ERRMODE => \PDO::ERRMODE_EXCEPTION,
+                    \PDO::ATTR_DEFAULT_FETCH_MODE => \PDO::FETCH_ASSOC
+                ]);
+
+            case 'sqlite':
+                $dsn = "sqlite:$database";
+                return new \PDO($dsn, null, null, [
+                    \PDO::ATTR_ERRMODE => \PDO::ERRMODE_EXCEPTION,
+                    \PDO::ATTR_DEFAULT_FETCH_MODE => \PDO::FETCH_ASSOC
+                ]);
+
+            default:
+                throw new \Exception("Unsupported database type: $type");
+        }
+    }
+
+    private function closeConnection(string $connectionId): void
+    {
+        if (isset($this->connections[$connectionId])) {
+            $this->connections[$connectionId]['connection'] = null;
+            unset($this->connections[$connectionId]);
+        }
+    }
+
+    private function listDatabases($conn): array
+    {
+        $type = $conn['type'];
+
+        switch (strtolower($type)) {
+            case 'mysql':
+            case 'mariadb':
+                $stmt = $conn['connection']->query("SHOW DATABASES");
+                return $stmt->fetchAll(\PDO::FETCH_COLUMN);
+
+            case 'postgresql':
+                $stmt = $conn['connection']->query("SELECT datname FROM pg_database WHERE datistemplate = false");
+                return $stmt->fetchAll(\PDO::FETCH_COLUMN);
+
+            case 'sqlite':
+                return ['main']; // SQLite has only one database
+
+            default:
+                return [];
+        }
+    }
+
+    private function listTables($conn, string $database): array
+    {
+        $type = $conn['type'];
+
+        // Switch to the specified database if needed
+        if (!empty($database) && strtolower($type) !== 'sqlite') {
+            $conn['connection']->exec("USE `$database`");
+        }
+
+        switch (strtolower($type)) {
+            case 'mysql':
+            case 'mariadb':
+                $stmt = $conn['connection']->query("SHOW TABLES");
+                return $stmt->fetchAll(\PDO::FETCH_COLUMN);
+
+            case 'postgresql':
+                $stmt = $conn['connection']->query("SELECT tablename FROM pg_tables WHERE schemaname = 'public'");
+                return $stmt->fetchAll(\PDO::FETCH_COLUMN);
+
+            case 'sqlite':
+                $stmt = $conn['connection']->query("SELECT name FROM sqlite_master WHERE type='table'");
+                return $stmt->fetchAll(\PDO::FETCH_COLUMN);
+
+            default:
+                return [];
+        }
+    }
+
+    private function executeDatabaseQuery($conn, string $query, string $database): array
+    {
+        // Switch to the specified database if needed
+        if (!empty($database) && strtolower($conn['type']) !== 'sqlite') {
+            $conn['connection']->exec("USE `$database`");
+        }
+
+        $startTime = microtime(true);
+        $stmt = $conn['connection']->query($query);
+        $executionTime = round((microtime(true) - $startTime) * 1000, 2);
+
+        $result = [
+            'query' => $query,
+            'execution_time' => $executionTime,
+            'affected_rows' => 0,
+            'columns' => [],
+            'rows' => []
+        ];
+
+        // Check if it's a SELECT query or similar
+        $queryType = strtoupper(substr(trim($query), 0, 6));
+        if ($queryType === 'SELECT' || $queryType === 'SHOW' || $queryType === 'DESCR') {
+            $rows = $stmt->fetchAll(\PDO::FETCH_ASSOC);
+            $result['rows'] = $rows;
+            $result['row_count'] = count($rows);
+
+            if (!empty($rows)) {
+                $result['columns'] = array_keys($rows[0]);
+            }
+        } else {
+            // For INSERT, UPDATE, DELETE, etc.
+            $result['affected_rows'] = $stmt->rowCount();
+        }
+
+        return $result;
+    }
+
+    public function __destruct()
+    {
+        // Close all connections
+        foreach ($this->connections as $conn) {
+            if ($conn['connection']) {
+                $conn['connection'] = null;
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/src/controllers/FileController.php b/src/controllers/FileController.php
new file mode 100644
index 0000000..d1f216e
--- /dev/null
+++ b/src/controllers/FileController.php
@@ -0,0 +1,482 @@
+<?php
+/**
+ * File Controller
+ * 
+ * Handles file system operations
+ */
+
+namespace AleShell\Controllers;
+
+use AleShell\Controllers\BaseController;
+
+class FileController extends BaseController 
+{
+    public function listFiles(): void 
+    {
+        $this->requireAuth();
+        
+        $data = $this->getRequestData();
+        $path = $data['path'] ?? getcwd();
+        $showHidden = $data['show_hidden'] ?? false;
+        $sortBy = $data['sort_by'] ?? 'name';
+        $sortOrder = $data['sort_order'] ?? 'asc';
+        
+        try {
+            if (!$this->security->isPathAllowed($path)) {
+                $this->errorResponse('Access denied to this path', 403);
+                return;
+            }
+            
+            if (!is_dir($path)) {
+                $this->errorResponse('Path is not a directory');
+                return;
+            }
+            
+            $files = $this->scanDirectory($path, $showHidden);
+            $files = $this->sortFiles($files, $sortBy, $sortOrder);
+            
+            $this->successResponse([
+                'path' => realpath($path),
+                'files' => $files,
+                'total' => count($files)
+            ]);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to list files: ' . $e->getMessage());
+        }
+    }
+    
+    public function readFile(): void 
+    {
+        $this->requireAuth();
+        
+        $data = $this->getRequestData();
+        $path = $data['path'] ?? '';
+        $encoding = $data['encoding'] ?? 'utf-8';
+        $maxSize = $this->config->get('limits.max_file_size', 50 * 1024 * 1024);
+        
+        try {
+            if (!$this->security->isPathAllowed($path)) {
+                $this->errorResponse('Access denied to this file', 403);
+                return;
+            }
+            
+            if (!file_exists($path)) {
+                $this->errorResponse('File not found', 404);
+                return;
+            }
+            
+            if (!is_file($path)) {
+                $this->errorResponse('Path is not a file');
+                return;
+            }
+            
+            $size = filesize($path);
+            if ($size > $maxSize) {
+                $this->errorResponse('File too large to read');
+                return;
+            }
+            
+            $content = file_get_contents($path);
+            if ($content === false) {
+                $this->errorResponse('Failed to read file');
+                return;
+            }
+            
+            // Try to detect encoding if not specified
+            if ($encoding === 'auto') {
+                $encoding = mb_detect_encoding($content, ['UTF-8', 'ISO-8859-1', 'ASCII'], true) ?: 'UTF-8';
+            }
+            
+            $this->successResponse([
+                'content' => $content,
+                'size' => $size,
+                'encoding' => $encoding,
+                'mime_type' => mime_content_type($path),
+                'last_modified' => filemtime($path),
+                'permissions' => substr(sprintf('%o', fileperms($path)), -4)
+            ]);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to read file: ' . $e->getMessage());
+        }
+    }
+    
+    public function writeFile(): void 
+    {
+        $this->requireAuth();
+        
+        $data = $this->getRequestData();
+        
+        if (!$this->validateCSRF($data)) {
+            $this->errorResponse('Invalid CSRF token', 403);
+            return;
+        }
+        $path = $data['path'] ?? '';
+        $content = $data['content'] ?? '';
+        $backup = $data['backup'] ?? true;
+        $encoding = $data['encoding'] ?? 'utf-8';
+        
+        try {
+            if (!$this->security->isPathAllowed($path)) {
+                $this->errorResponse('Access denied to this file', 403);
+                return;
+            }
+            
+            // Create backup if requested and file exists
+            if ($backup && file_exists($path)) {
+                $backupPath = $path . '.backup.' . time();
+                if (!copy($path, $backupPath)) {
+                    $this->errorResponse('Failed to create backup');
+                    return;
+                }
+            }
+            
+            // Ensure directory exists
+            $dir = dirname($path);
+            if (!is_dir($dir)) {
+                if (!mkdir($dir, 0755, true)) {
+                    $this->errorResponse('Failed to create directory');
+                    return;
+                }
+            }
+            
+            // Convert encoding if needed
+            if ($encoding !== 'utf-8') {
+                $content = mb_convert_encoding($content, $encoding, 'UTF-8');
+            }
+            
+            $bytesWritten = file_put_contents($path, $content, LOCK_EX);
+            if ($bytesWritten === false) {
+                $this->errorResponse('Failed to write file');
+                return;
+            }
+            
+            $this->successResponse([
+                'bytes_written' => $bytesWritten,
+                'last_modified' => filemtime($path)
+            ]);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to write file: ' . $e->getMessage());
+        }
+    }
+    
+    public function deleteFile(): void 
+    {
+        $this->requireAuth();
+        
+        $data = $this->getRequestData();
+        
+        if (!$this->validateCSRF($data)) {
+            $this->errorResponse('Invalid CSRF token', 403);
+            return;
+        }
+        $path = $data['path'] ?? '';
+        $recursive = $data['recursive'] ?? false;
+        
+        try {
+            if (!$this->security->isPathAllowed($path)) {
+                $this->errorResponse('Access denied to this path', 403);
+                return;
+            }
+            
+            if (!file_exists($path)) {
+                $this->errorResponse('File or directory not found', 404);
+                return;
+            }
+            
+            if (is_dir($path)) {
+                if ($recursive) {
+                    $deleted = $this->deleteDirectory($path);
+                } else {
+                    $deleted = rmdir($path);
+                }
+            } else {
+                $deleted = unlink($path);
+            }
+            
+            if (!$deleted) {
+                $this->errorResponse('Failed to delete');
+                return;
+            }
+            
+            $this->successResponse(['deleted' => true]);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to delete: ' . $e->getMessage());
+        }
+    }
+    
+    public function createDirectory(): void 
+    {
+        $this->requireAuth();
+        
+        $data = $this->getRequestData();
+        
+        if (!$this->validateCSRF($data)) {
+            $this->errorResponse('Invalid CSRF token', 403);
+            return;
+        }
+        $path = $data['path'] ?? '';
+        $permissions = $data['permissions'] ?? 0755;
+        
+        try {
+            if (!$this->security->isPathAllowed($path)) {
+                $this->errorResponse('Access denied to this path', 403);
+                return;
+            }
+            
+            if (file_exists($path)) {
+                $this->errorResponse('Path already exists');
+                return;
+            }
+            
+            if (!mkdir($path, $permissions, true)) {
+                $this->errorResponse('Failed to create directory');
+                return;
+            }
+            
+            $this->successResponse(['created' => true]);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to create directory: ' . $e->getMessage());
+        }
+    }
+    
+    public function renameFile(): void 
+    {
+        $this->requireAuth();
+        
+        $data = $this->getRequestData();
+        
+        if (!$this->validateCSRF($data)) {
+            $this->errorResponse('Invalid CSRF token', 403);
+            return;
+        }
+        $oldPath = $data['old_path'] ?? '';
+        $newPath = $data['new_path'] ?? '';
+        
+        try {
+            if (!$this->security->isPathAllowed($oldPath) || !$this->security->isPathAllowed($newPath)) {
+                $this->errorResponse('Access denied to one or both paths', 403);
+                return;
+            }
+            
+            if (!file_exists($oldPath)) {
+                $this->errorResponse('Source file or directory not found', 404);
+                return;
+            }
+            
+            if (file_exists($newPath)) {
+                $this->errorResponse('Destination already exists');
+                return;
+            }
+            
+            if (!rename($oldPath, $newPath)) {
+                $this->errorResponse('Failed to rename');
+                return;
+            }
+            
+            $this->successResponse(['renamed' => true]);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to rename: ' . $e->getMessage());
+        }
+    }
+    
+    public function uploadFile(): void 
+    {
+        $this->requireAuth();
+        
+        if (!$this->validateCSRF()) {
+            $this->errorResponse('Invalid CSRF token', 403);
+            return;
+        }
+        
+        $targetPath = $_POST['path'] ?? getcwd();
+        
+        try {
+            if (!$this->security->isPathAllowed($targetPath)) {
+                $this->errorResponse('Access denied to target path', 403);
+                return;
+            }
+            
+            if (!is_dir($targetPath)) {
+                $this->errorResponse('Target path is not a directory');
+                return;
+            }
+            
+            if (!isset($_FILES['file'])) {
+                $this->errorResponse('No file uploaded');
+                return;
+            }
+            
+            $file = $_FILES['file'];
+            
+            if ($file['error'] !== UPLOAD_ERR_OK) {
+                $this->errorResponse('Upload error: ' . $this->getUploadErrorMessage($file['error']));
+                return;
+            }
+            
+            $fileName = basename($file['name']);
+            $targetFile = $targetPath . DIRECTORY_SEPARATOR . $fileName;
+            
+            if (file_exists($targetFile)) {
+                $this->errorResponse('File already exists');
+                return;
+            }
+            
+            if (!move_uploaded_file($file['tmp_name'], $targetFile)) {
+                $this->errorResponse('Failed to move uploaded file');
+                return;
+            }
+            
+            $this->successResponse([
+                'uploaded' => true,
+                'file_name' => $fileName,
+                'file_size' => filesize($targetFile)
+            ]);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to upload file: ' . $e->getMessage());
+        }
+    }
+    
+    private function getUploadErrorMessage(int $errorCode): string 
+    {
+        switch ($errorCode) {
+            case UPLOAD_ERR_INI_SIZE:
+                return 'The uploaded file exceeds the upload_max_filesize directive in php.ini';
+            case UPLOAD_ERR_FORM_SIZE:
+                return 'The uploaded file exceeds the MAX_FILE_SIZE directive in the HTML form';
+            case UPLOAD_ERR_PARTIAL:
+                return 'The uploaded file was only partially uploaded';
+            case UPLOAD_ERR_NO_FILE:
+                return 'No file was uploaded';
+            case UPLOAD_ERR_NO_TMP_DIR:
+                return 'Missing a temporary folder';
+            case UPLOAD_ERR_CANT_WRITE:
+                return 'Failed to write file to disk';
+            case UPLOAD_ERR_EXTENSION:
+                return 'A PHP extension stopped the file upload';
+            default:
+                return 'Unknown upload error';
+        }
+    }
+    
+    private function scanDirectory(string $path, bool $showHidden): array 
+    {
+        $files = [];
+        $items = scandir($path);
+        
+        if ($items === false) {
+            return $files;
+        }
+        
+        foreach ($items as $item) {
+            if ($item === '.' || $item === '..') {
+                continue;
+            }
+            
+            if (!$showHidden && $item[0] === '.') {
+                continue;
+            }
+            
+            $fullPath = $path . DIRECTORY_SEPARATOR . $item;
+            $stat = stat($fullPath);
+            
+            $files[] = [
+                'name' => $item,
+                'path' => $fullPath,
+                'type' => is_dir($fullPath) ? 'directory' : 'file',
+                'size' => is_file($fullPath) ? filesize($fullPath) : 0,
+                'permissions' => substr(sprintf('%o', fileperms($fullPath)), -4),
+                'owner' => $this->getFileOwner($fullPath),
+                'group' => $this->getFileGroup($fullPath),
+                'last_modified' => filemtime($fullPath),
+                'last_accessed' => fileatime($fullPath),
+                'created' => filectime($fullPath),
+                'readable' => is_readable($fullPath),
+                'writable' => is_writable($fullPath),
+                'executable' => is_executable($fullPath),
+                'mime_type' => is_file($fullPath) && is_readable($fullPath) ? mime_content_type($fullPath) : null
+            ];
+        }
+        
+        return $files;
+    }
+    
+    private function sortFiles(array $files, string $sortBy, string $sortOrder): array 
+    {
+        usort($files, function($a, $b) use ($sortBy, $sortOrder) {
+            // Directories first
+            if ($a['type'] !== $b['type']) {
+                return $a['type'] === 'directory' ? -1 : 1;
+            }
+            
+            $result = 0;
+            switch ($sortBy) {
+                case 'name':
+                    $result = strcasecmp($a['name'], $b['name']);
+                    break;
+                case 'size':
+                    $result = $a['size'] <=> $b['size'];
+                    break;
+                case 'modified':
+                    $result = $a['last_modified'] <=> $b['last_modified'];
+                    break;
+                case 'type':
+                    $result = strcasecmp($a['mime_type'] ?? '', $b['mime_type'] ?? '');
+                    break;
+            }
+            
+            return $sortOrder === 'desc' ? -$result : $result;
+        });
+        
+        return $files;
+    }
+    
+    private function getFileOwner(string $path): string 
+    {
+        if (function_exists('posix_getpwuid')) {
+            $owner = posix_getpwuid(fileowner($path));
+            return $owner['name'] ?? 'unknown';
+        }
+        return 'unknown';
+    }
+    
+    private function getFileGroup(string $path): string 
+    {
+        if (function_exists('posix_getgrgid')) {
+            $group = posix_getgrgid(filegroup($path));
+            return $group['name'] ?? 'unknown';
+        }
+        return 'unknown';
+    }
+    
+    private function deleteDirectory(string $path): bool 
+    {
+        if (!is_dir($path)) {
+            return unlink($path);
+        }
+        
+        $files = scandir($path);
+        if ($files === false) {
+            return false;
+        }
+        
+        foreach ($files as $file) {
+            if ($file === '.' || $file === '..') {
+                continue;
+            }
+            
+            $fullPath = $path . DIRECTORY_SEPARATOR . $file;
+            if (!$this->deleteDirectory($fullPath)) {
+                return false;
+            }
+        }
+        
+        return rmdir($path);
+    }
+}
\ No newline at end of file
diff --git a/src/controllers/MainController.php b/src/controllers/MainController.php
new file mode 100644
index 0000000..1f1f4fd
--- /dev/null
+++ b/src/controllers/MainController.php
@@ -0,0 +1,82 @@
+<?php
+/**
+ * Main Controller
+ * 
+ * Handles main application routes
+ */
+
+namespace AleShell\Controllers;
+
+use AleShell\Controllers\BaseController;
+
+class MainController extends BaseController 
+{
+    public function index(): void 
+    {
+        // This is handled by the Router class
+        // Just ensure user is authenticated
+        $this->requireAuth();
+        $this->successResponse(['message' => 'AleShell is running']);
+    }
+    
+    public function dashboard(): void 
+    {
+        $this->requireAuth();
+        
+        // Return dashboard data
+        $this->successResponse([
+            'user' => $this->getCurrentUser(),
+            'system' => $this->getSystemOverview(),
+            'modules' => $this->getAvailableModules(),
+            'config' => $this->getUserConfig()
+        ]);
+    }
+    
+    private function getCurrentUser(): array 
+    {
+        return [
+            'name' => $_SESSION['user_name'] ?? 'admin',
+            'ip' => $_SESSION['user_ip'] ?? $_SERVER['REMOTE_ADDR'],
+            'login_time' => $_SESSION['login_time'] ?? time(),
+            'last_activity' => $_SESSION['last_activity'] ?? time()
+        ];
+    }
+    
+    private function getSystemOverview(): array 
+    {
+        return [
+            'hostname' => gethostname(),
+            'os' => php_uname('s') . ' ' . php_uname('r'),
+            'php_version' => PHP_VERSION,
+            'current_path' => getcwd(),
+            'disk_free' => disk_free_space('.'),
+            'disk_total' => disk_total_space('.')
+        ];
+    }
+    
+    private function getAvailableModules(): array 
+    {
+        $features = $this->config->get('features', []);
+        
+        return [
+            'files' => $features['file_manager'] ?? true,
+            'terminal' => $features['terminal'] ?? true,
+            'editor' => $features['code_editor'] ?? true,
+            'processes' => $features['process_manager'] ?? true,
+            'network' => $features['network_tools'] ?? true,
+            'database' => $features['database_tools'] ?? true,
+            'system' => $features['system_info'] ?? true,
+            'logs' => $features['log_viewer'] ?? true
+        ];
+    }
+    
+    private function getUserConfig(): array 
+    {
+        return [
+            'theme' => $_SESSION['theme'] ?? $this->config->get('ui.theme', 'dark'),
+            'language' => $_SESSION['language'] ?? $this->config->get('ui.language', 'en'),
+            'items_per_page' => $this->config->get('ui.items_per_page', 50),
+            'show_hidden_files' => $this->config->get('ui.show_hidden_files', false)
+        ];
+    }
+}
\ No newline at end of file
diff --git a/src/controllers/ModuleController.php b/src/controllers/ModuleController.php
new file mode 100644
index 0000000..7cff0a7
--- /dev/null
+++ b/src/controllers/ModuleController.php
@@ -0,0 +1,25 @@
+<?php
+/**
+ * Module Controller - Simplified
+ * 
+ * Handles module loading
+ */
+
+namespace AleShell\Controllers;
+
+use AleShell\Controllers\BaseController;
+
+class ModuleController extends BaseController 
+{
+    public function load($matches = []): void 
+    {
+        $this->requireAuth();
+        
+        $module = $matches['module'] ?? 'dashboard';
+        
+        $this->successResponse([
+            'module' => $module,
+            'content' => "<div>Module {$module} loaded</div>"
+        ]);
+    }
+}
\ No newline at end of file
diff --git a/src/controllers/NetworkController.php b/src/controllers/NetworkController.php
new file mode 100644
index 0000000..cf43da1
--- /dev/null
+++ b/src/controllers/NetworkController.php
@@ -0,0 +1,334 @@
+<?php
+/**
+ * Network Controller
+ *
+ * Handles network operations and tools
+ */
+
+namespace AleShell\Controllers;
+
+use AleShell\Controllers\BaseController;
+
+class NetworkController extends BaseController
+{
+    public function getConnections(): void
+    {
+        $this->requireAuth();
+
+        try {
+            $connections = $this->getNetworkConnections();
+            $this->successResponse([
+                'connections' => $connections,
+                'total' => count($connections)
+            ]);
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to get connections: ' . $e->getMessage());
+        }
+    }
+
+    public function ping(): void
+    {
+        $this->requireAuth();
+
+        if (!$this->validateCSRF()) {
+            $this->errorResponse('Invalid CSRF token', 403);
+            return;
+        }
+
+        $data = $this->getRequestData();
+        $host = $data['host'] ?? '';
+        $count = min((int) ($data['count'] ?? 4), 10);
+
+        if (empty($host)) {
+            $this->errorResponse('Host is required');
+            return;
+        }
+
+        try {
+            $result = $this->executePing($host, $count);
+            $this->successResponse($result);
+        } catch (\Exception $e) {
+            $this->errorResponse('Ping failed: ' . $e->getMessage());
+        }
+    }
+
+    public function traceroute(): void
+    {
+        $this->requireAuth();
+
+        if (!$this->validateCSRF()) {
+            $this->errorResponse('Invalid CSRF token', 403);
+            return;
+        }
+
+        $data = $this->getRequestData();
+        $host = $data['host'] ?? '';
+        $maxHops = min((int) ($data['max_hops'] ?? 30), 50);
+
+        if (empty($host)) {
+            $this->errorResponse('Host is required');
+            return;
+        }
+
+        try {
+            $result = $this->executeTraceroute($host, $maxHops);
+            $this->successResponse($result);
+        } catch (\Exception $e) {
+            $this->errorResponse('Traceroute failed: ' . $e->getMessage());
+        }
+    }
+
+    public function portScan(): void
+    {
+        $this->requireAuth();
+
+        if (!$this->validateCSRF()) {
+            $this->errorResponse('Invalid CSRF token', 403);
+            return;
+        }
+
+        $data = $this->getRequestData();
+        $host = $data['host'] ?? '';
+        $ports = $data['ports'] ?? '1-1000';
+        $timeout = min((int) ($data['timeout'] ?? 1), 5);
+
+        if (empty($host)) {
+            $this->errorResponse('Host is required');
+            return;
+        }
+
+        try {
+            $result = $this->executePortScan($host, $ports, $timeout);
+            $this->successResponse($result);
+        } catch (\Exception $e) {
+            $this->errorResponse('Port scan failed: ' . $e->getMessage());
+        }
+    }
+
+    public function getInterfaces(): void
+    {
+        $this->requireAuth();
+
+        try {
+            $interfaces = $this->getNetworkInterfaces();
+            $this->successResponse([
+                'interfaces' => $interfaces,
+                'total' => count($interfaces)
+            ]);
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to get interfaces: ' . $e->getMessage());
+        }
+    }
+
+    private function getNetworkConnections(): array
+    {
+        $connections = [];
+
+        if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
+            // Windows implementation
+            exec('netstat -ano', $output);
+            foreach ($output as $line) {
+                if (preg_match('/^\s*(\w+)\s+([\d\.]+|\[::\]):(\d+)\s+([\d\.]+|\[::\]):(\d+)\s+(\w+)/', $line, $matches)) {
+                    $connections[] = [
+                        'protocol' => $matches[1],
+                        'local_address' => $matches[2],
+                        'local_port' => $matches[3],
+                        'remote_address' => $matches[4],
+                        'remote_port' => $matches[5],
+                        'state' => $matches[6],
+                        'pid' => null
+                    ];
+                }
+            }
+        } else {
+            // Linux/Unix implementation
+            exec('netstat -tunapl 2>/dev/null || ss -tunapl 2>/dev/null', $output);
+            foreach ($output as $line) {
+                if (preg_match('/^\w+\s+\w+\s+\w+\s+([\d\.\[\]:]+)\s+([\d\.\[\]:]+)\s+(.+)/', $line, $matches)) {
+                    $local = $this->parseAddress($matches[1]);
+                    $remote = $this->parseAddress($matches[2]);
+                    $extra = $matches[3];
+
+                    $connections[] = [
+                        'protocol' => strpos($line, 'tcp') !== false ? 'tcp' : 'udp',
+                        'local_address' => $local['address'],
+                        'local_port' => $local['port'],
+                        'remote_address' => $remote['address'],
+                        'remote_port' => $remote['port'],
+                        'state' => $this->extractState($extra),
+                        'pid' => $this->extractPid($extra)
+                    ];
+                }
+            }
+        }
+
+        return $connections;
+    }
+
+    private function executePing(string $host, int $count): array
+    {
+        $output = [];
+        $success = false;
+
+        if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
+            exec("ping -n $count $host", $output, $returnCode);
+        } else {
+            exec("ping -c $count $host", $output, $returnCode);
+        }
+
+        $success = $returnCode === 0;
+
+        return [
+            'host' => $host,
+            'count' => $count,
+            'success' => $success,
+            'output' => implode("\n", $output)
+        ];
+    }
+
+    private function executeTraceroute(string $host, int $maxHops): array
+    {
+        $output = [];
+        $success = false;
+
+        if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
+            exec("tracert -h $maxHops $host", $output, $returnCode);
+        } else {
+            exec("traceroute -m $maxHops $host 2>/dev/null || tracepath $host 2>/dev/null", $output, $returnCode);
+        }
+
+        $success = $returnCode === 0;
+
+        return [
+            'host' => $host,
+            'max_hops' => $maxHops,
+            'success' => $success,
+            'output' => implode("\n", $output)
+        ];
+    }
+
+    private function executePortScan(string $host, string $ports, int $timeout): array
+    {
+        $openPorts = [];
+        $closedPorts = [];
+
+        // Parse port range
+        $portList = $this->parsePortRange($ports);
+
+        foreach ($portList as $port) {
+            $connection = @fsockopen($host, $port, $errno, $errstr, $timeout);
+            if ($connection) {
+                $openPorts[] = $port;
+                fclose($connection);
+            } else {
+                $closedPorts[] = $port;
+            }
+        }
+
+        return [
+            'host' => $host,
+            'ports_scanned' => $ports,
+            'open_ports' => $openPorts,
+            'closed_ports' => $closedPorts,
+            'total_open' => count($openPorts),
+            'total_closed' => count($closedPorts)
+        ];
+    }
+
+    private function getNetworkInterfaces(): array
+    {
+        $interfaces = [];
+
+        if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
+            exec('ipconfig /all', $output);
+            $currentInterface = null;
+            foreach ($output as $line) {
+                if (preg_match('/^(\w[^:]*):/', $line, $matches)) {
+                    $currentInterface = ['name' => trim($matches[1]), 'details' => []];
+                    $interfaces[] = $currentInterface;
+                } elseif ($currentInterface && preg_match('/^\s*([^:]+):\s*(.+)$/', $line, $matches)) {
+                    $currentInterface['details'][trim($matches[1])] = trim($matches[2]);
+                }
+            }
+        } else {
+            exec('ip addr show 2>/dev/null || ifconfig -a 2>/dev/null', $output);
+            $currentInterface = null;
+            foreach ($output as $line) {
+                if (preg_match('/^\d+:\s*([^:]+):/', $line, $matches)) {
+                    $currentInterface = [
+                        'name' => $matches[1],
+                        'addresses' => [],
+                        'details' => []
+                    ];
+                    $interfaces[] = $currentInterface;
+                } elseif ($currentInterface && preg_match('/\s*inet\s+([^\/\s]+)/', $line, $matches)) {
+                    $currentInterface['addresses'][] = $matches[1];
+                }
+            }
+        }
+
+        return $interfaces;
+    }
+
+    private function parseAddress(string $address): array
+    {
+        if (preg_match('/\[([^\]]+)\]:(\d+)/', $address, $matches)) {
+            return ['address' => $matches[1], 'port' => $matches[2]];
+        } elseif (preg_match('/([\d\.]+):(\d+)/', $address, $matches)) {
+            return ['address' => $matches[1], 'port' => $matches[2]];
+        } else {
+            return ['address' => $address, 'port' => '0'];
+        }
+    }
+
+    private function extractState(string $extra): string
+    {
+        if (preg_match('/(\w+)\s*$/', $extra, $matches)) {
+            return $matches[1];
+        }
+        return 'UNKNOWN';
+    }
+
+    private function extractPid(string $extra): ?int
+    {
+        if (preg_match('/pid=(\d+)/', $extra, $matches)) {
+            return (int) $matches[1];
+        }
+        return null;
+    }
+
+    private function parsePortRange(string $ports): array
+    {
+        $portList = [];
+
+        // Handle ranges like "1-1000"
+        if (strpos($ports, '-') !== false) {
+            list($start, $end) = explode('-', $ports, 2);
+            $start = (int) $start;
+            $end = (int) $end;
+            for ($i = $start; $i <= $end; $i++) {
+                $portList[] = $i;
+            }
+        }
+        // Handle comma-separated list like "22,80,443"
+        elseif (strpos($ports, ',') !== false) {
+            $portStrings = explode(',', $ports);
+            foreach ($portStrings as $portStr) {
+                $port = (int) trim($portStr);
+                if ($port > 0 && $port <= 65535) {
+                    $portList[] = $port;
+                }
+            }
+        }
+        // Single port
+        else {
+            $port = (int) $ports;
+            if ($port > 0 && $port <= 65535) {
+                $portList[] = $port;
+            }
+        }
+
+        // Limit to reasonable number
+        return array_slice($portList, 0, 1000);
+    }
+}
\ No newline at end of file
diff --git a/src/controllers/ProcessController.php b/src/controllers/ProcessController.php
new file mode 100644
index 0000000..e16dcdf
--- /dev/null
+++ b/src/controllers/ProcessController.php
@@ -0,0 +1,208 @@
+<?php
+/**
+ * Process Controller
+ *
+ * Handles process management operations
+ */
+
+namespace AleShell\Controllers;
+
+use AleShell\Controllers\BaseController;
+
+class ProcessController extends BaseController
+{
+    public function listProcesses(): void
+    {
+        $this->requireAuth();
+
+        try {
+            $processes = $this->getProcessList();
+            $this->successResponse([
+                'processes' => $processes,
+                'total' => count($processes)
+            ]);
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to list processes: ' . $e->getMessage());
+        }
+    }
+
+    public function killProcess(): void
+    {
+        $this->requireAuth();
+
+        if (!$this->validateCSRF()) {
+            $this->errorResponse('Invalid CSRF token', 403);
+            return;
+        }
+
+        $data = $this->getRequestData();
+        $pid = (int) ($data['pid'] ?? 0);
+        $signal = $data['signal'] ?? 'TERM';
+
+        if ($pid <= 0) {
+            $this->errorResponse('Invalid process ID');
+            return;
+        }
+
+        try {
+            $result = $this->sendSignal($pid, $signal);
+            $this->successResponse($result);
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to kill process: ' . $e->getMessage());
+        }
+    }
+
+    public function getProcessInfo(): void
+    {
+        $this->requireAuth();
+
+        $data = $this->getRequestData();
+        $pid = (int) ($data['pid'] ?? 0);
+
+        if ($pid <= 0) {
+            $this->errorResponse('Invalid process ID');
+            return;
+        }
+
+        try {
+            $process = $this->getProcessDetails($pid);
+            if ($process) {
+                $this->successResponse($process);
+            } else {
+                $this->errorResponse('Process not found', 404);
+            }
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to get process info: ' . $e->getMessage());
+        }
+    }
+
+    private function getProcessList(): array
+    {
+        $processes = [];
+
+        if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
+            // Windows implementation
+            exec('tasklist /FO CSV /NH', $output);
+            foreach ($output as $line) {
+                $parts = str_getcsv($line);
+                if (count($parts) >= 5) {
+                    $processes[] = [
+                        'pid' => (int) $parts[1],
+                        'name' => $parts[0],
+                        'cpu' => 0, // Windows tasklist doesn't provide CPU %
+                        'memory' => 0, // Would need additional parsing
+                        'user' => 'N/A',
+                        'status' => 'Running',
+                        'command' => $parts[0]
+                    ];
+                }
+            }
+        } else {
+            // Linux/Unix implementation
+            exec('ps aux --no-headers', $output);
+            foreach ($output as $line) {
+                $parts = preg_split('/\s+/', $line, 11);
+                if (count($parts) >= 11) {
+                    $processes[] = [
+                        'pid' => (int) $parts[1],
+                        'user' => $parts[0],
+                        'cpu' => (float) $parts[2],
+                        'memory' => (float) $parts[3],
+                        'vsz' => (int) $parts[4],
+                        'rss' => (int) $parts[5],
+                        'tty' => $parts[6],
+                        'stat' => $parts[7],
+                        'start' => $parts[8],
+                        'time' => $parts[9],
+                        'command' => $parts[10],
+                        'name' => basename($parts[10])
+                    ];
+                }
+            }
+        }
+
+        return $processes;
+    }
+
+    private function getProcessDetails(int $pid): ?array
+    {
+        if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
+            // Windows implementation
+            exec("tasklist /FI \"PID eq $pid\" /FO CSV /NH", $output);
+            if (!empty($output)) {
+                $parts = str_getcsv($output[0]);
+                return [
+                    'pid' => $pid,
+                    'name' => $parts[0] ?? 'Unknown',
+                    'cpu' => 0,
+                    'memory' => 0,
+                    'user' => 'N/A',
+                    'status' => 'Running',
+                    'command' => $parts[0] ?? 'Unknown'
+                ];
+            }
+        } else {
+            // Linux/Unix implementation
+            exec("ps -p $pid -o pid,user,pcpu,pmem,vsz,rss,tty,stat,start,time,command --no-headers", $output);
+            if (!empty($output)) {
+                $parts = preg_split('/\s+/', $output[0], 11);
+                if (count($parts) >= 11) {
+                    return [
+                        'pid' => (int) $parts[0],
+                        'user' => $parts[1],
+                        'cpu' => (float) $parts[2],
+                        'memory' => (float) $parts[3],
+                        'vsz' => (int) $parts[4],
+                        'rss' => (int) $parts[5],
+                        'tty' => $parts[6],
+                        'stat' => $parts[7],
+                        'start' => $parts[8],
+                        'time' => $parts[9],
+                        'command' => $parts[10],
+                        'name' => basename($parts[10])
+                    ];
+                }
+            }
+        }
+
+        return null;
+    }
+
+    private function sendSignal(int $pid, string $signal): array
+    {
+        $signalNum = $this->getSignalNumber($signal);
+
+        if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
+            // Windows implementation
+            exec("taskkill /PID $pid /F", $output, $returnCode);
+            $success = $returnCode === 0;
+        } else {
+            // Linux/Unix implementation
+            exec("kill -$signalNum $pid 2>&1", $output, $returnCode);
+            $success = $returnCode === 0;
+        }
+
+        return [
+            'success' => $success,
+            'pid' => $pid,
+            'signal' => $signal,
+            'signal_num' => $signalNum,
+            'output' => implode("\n", $output)
+        ];
+    }
+
+    private function getSignalNumber(string $signal): int
+    {
+        $signals = [
+            'HUP' => 1, 'INT' => 2, 'QUIT' => 3, 'ILL' => 4, 'TRAP' => 5,
+            'ABRT' => 6, 'BUS' => 7, 'FPE' => 8, 'KILL' => 9, 'USR1' => 10,
+            'SEGV' => 11, 'USR2' => 12, 'PIPE' => 13, 'ALRM' => 14, 'TERM' => 15,
+            'STKFLT' => 16, 'CHLD' => 17, 'CONT' => 18, 'STOP' => 19, 'TSTP' => 20,
+            'TTIN' => 21, 'TTOU' => 22, 'URG' => 23, 'XCPU' => 24, 'XFSZ' => 25,
+            'VTALRM' => 26, 'PROF' => 27, 'WINCH' => 28, 'IO' => 29, 'PWR' => 30,
+            'SYS' => 31
+        ];
+
+        return $signals[strtoupper($signal)] ?? 15; // Default to TERM
+    }
+}
\ No newline at end of file
diff --git a/src/controllers/SystemController.php b/src/controllers/SystemController.php
new file mode 100644
index 0000000..7a9ba3b
--- /dev/null
+++ b/src/controllers/SystemController.php
@@ -0,0 +1,307 @@
+<?php
+/**
+ * System Controller
+ * 
+ * Handles system information and monitoring
+ */
+
+namespace AleShell\Controllers;
+
+use AleShell\Controllers\BaseController;
+
+class SystemController extends BaseController 
+{
+    public function getInfo(): void 
+    {
+        $this->requireAuth();
+        
+        try {
+            $info = [
+                'os' => php_uname('s') . ' ' . php_uname('r'),
+                'hostname' => gethostname(),
+                'php_version' => PHP_VERSION,
+                'server_software' => $_SERVER['SERVER_SOFTWARE'] ?? 'Unknown',
+                'document_root' => $_SERVER['DOCUMENT_ROOT'] ?? '',
+                'load_average' => $this->getLoadAverage(),
+                'memory' => $this->getMemoryInfo(),
+                'disk' => $this->getDiskInfo(),
+                'network' => $this->getNetworkInfo(),
+                'processes' => $this->getProcessCount(),
+                'uptime' => $this->getUptime(),
+                'current_user' => $this->getCurrentUser(),
+                'current_path' => getcwd(),
+                'timestamp' => time(),
+                'timezone' => date_default_timezone_get()
+            ];
+            
+            $this->successResponse($info);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to get system information: ' . $e->getMessage());
+        }
+    }
+    
+    public function getConfig(): void 
+    {
+        $this->requireAuth();
+        
+        try {
+            $config = [
+                'version' => ALESHELL_VERSION,
+                'theme' => $_SESSION['theme'] ?? $this->config->get('ui.theme', 'dark'),
+                'language' => $_SESSION['language'] ?? $this->config->get('ui.language', 'en'),
+                'features' => [
+                    'file_manager' => $this->config->get('features.file_manager', true),
+                    'terminal' => $this->config->get('features.terminal', true),
+                    'code_editor' => $this->config->get('features.code_editor', true),
+                    'process_manager' => $this->config->get('features.process_manager', true),
+                    'network_tools' => $this->config->get('features.network_tools', true),
+                    'database_tools' => $this->config->get('features.database_tools', true),
+                    'system_info' => $this->config->get('features.system_info', true),
+                    'log_viewer' => $this->config->get('features.log_viewer', true)
+                ],
+                'limits' => [
+                    'max_file_size' => $this->config->get('limits.max_file_size', 10485760), // 10MB
+                    'max_upload_size' => $this->config->get('limits.max_upload_size', 52428800), // 50MB
+                    'session_timeout' => $this->config->get('security.session_timeout', 3600)
+                ],
+                'paths' => [
+                    'current' => getcwd(),
+                    'home' => $_SERVER['HOME'] ?? '/home',
+                    'temp' => sys_get_temp_dir()
+                ]
+            ];
+            
+            $this->successResponse($config);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to get configuration: ' . $e->getMessage());
+        }
+    }
+    
+    public function getStats(): void 
+    {
+        $this->requireAuth();
+        
+        try {
+            $stats = [
+                'cpu' => $this->getCPUUsage(),
+                'memory' => $this->getMemoryUsage(),
+                'disk' => $this->getDiskUsage(),
+                'network' => $this->getNetworkStats(),
+                'timestamp' => time()
+            ];
+            
+            $this->successResponse($stats);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Failed to get system stats: ' . $e->getMessage());
+        }
+    }
+    
+    private function getLoadAverage(): array 
+    {
+        if (function_exists('sys_getloadavg')) {
+            $load = sys_getloadavg();
+            return [
+                '1min' => round($load[0], 2),
+                '5min' => round($load[1], 2),
+                '15min' => round($load[2], 2)
+            ];
+        }
+        
+        // Fallback for systems without sys_getloadavg
+        if (is_readable('/proc/loadavg')) {
+            $load = file_get_contents('/proc/loadavg');
+            $values = explode(' ', $load);
+            return [
+                '1min' => (float)($values[0] ?? 0),
+                '5min' => (float)($values[1] ?? 0),
+                '15min' => (float)($values[2] ?? 0)
+            ];
+        }
+        
+        return ['1min' => 0, '5min' => 0, '15min' => 0];
+    }
+    
+    private function getMemoryInfo(): array 
+    {
+        $info = [
+            'total' => 0,
+            'free' => 0,
+            'used' => 0,
+            'cached' => 0,
+            'usage_percent' => 0
+        ];
+        
+        if (is_readable('/proc/meminfo')) {
+            $meminfo = file_get_contents('/proc/meminfo');
+            preg_match('/MemTotal:\\s+(\\d+)\\s+kB/', $meminfo, $matches);
+            $info['total'] = ($matches[1] ?? 0) * 1024;
+            
+            preg_match('/MemFree:\\s+(\\d+)\\s+kB/', $meminfo, $matches);
+            $memFree = ($matches[1] ?? 0) * 1024;
+            
+            preg_match('/Cached:\\s+(\\d+)\\s+kB/', $meminfo, $matches);
+            $info['cached'] = ($matches[1] ?? 0) * 1024;
+            
+            $info['free'] = $memFree + $info['cached'];
+            $info['used'] = $info['total'] - $info['free'];
+            
+            if ($info['total'] > 0) {
+                $info['usage_percent'] = round(($info['used'] / $info['total']) * 100, 1);
+            }
+        }
+        
+        return $info;
+    }
+    
+    private function getDiskInfo(): array 
+    {
+        $info = [];
+        $path = getcwd();
+        
+        $total = disk_total_space($path);
+        $free = disk_free_space($path);
+        
+        if ($total !== false && $free !== false) {
+            $used = $total - $free;
+            $info = [
+                'total' => $total,
+                'free' => $free,
+                'used' => $used,
+                'usage_percent' => $total > 0 ? round(($used / $total) * 100, 1) : 0
+            ];
+        }
+        
+        return $info;
+    }
+    
+    private function getNetworkInfo(): array 
+    {
+        $interfaces = [];
+        
+        // Try to get network interfaces from /proc/net/dev
+        if (is_readable('/proc/net/dev')) {
+            $content = file_get_contents('/proc/net/dev');
+            $lines = explode("\n", $content);
+            
+            foreach ($lines as $line) {
+                if (strpos($line, ':') !== false) {
+                    $parts = explode(':', $line);
+                    $interface = trim($parts[0]);
+                    if ($interface && $interface !== 'lo' && $interface !== 'Inter-|' && $interface !== ' face') {
+                        $interfaces[] = $interface;
+                    }
+                }
+            }
+        }
+        
+        return ['interfaces' => $interfaces];
+    }
+    
+    private function getProcessCount(): int 
+    {
+        if (is_readable('/proc')) {
+            $dirs = glob('/proc/[0-9]*', GLOB_ONLYDIR);
+            return count($dirs);
+        }
+        
+        return 0;
+    }
+    
+    private function getUptime(): array 
+    {
+        if (is_readable('/proc/uptime')) {
+            $uptime = file_get_contents('/proc/uptime');
+            $seconds = (float)explode(' ', $uptime)[0];
+            
+            $days = intval(floor($seconds / 86400));
+            $hours = intval(floor(fmod($seconds, 86400) / 3600));
+            $minutes = intval(floor(fmod($seconds, 3600) / 60));
+            
+            return [
+                'seconds' => $seconds,
+                'formatted' => sprintf('%dd %dh %dm', $days, $hours, $minutes)
+            ];
+        }
+        
+        return ['seconds' => 0, 'formatted' => 'Unknown'];
+    }
+    
+    private function getCurrentUser(): string 
+    {
+        if (function_exists('posix_getpwuid') && function_exists('posix_geteuid')) {
+            $user = posix_getpwuid(posix_geteuid());
+            return $user['name'] ?? 'unknown';
+        }
+        
+        return $_SERVER['USER'] ?? $_SERVER['USERNAME'] ?? 'unknown';
+    }
+    
+    private function getCPUUsage(): float 
+    {
+        // Simple CPU usage calculation
+        if (is_readable('/proc/stat')) {
+            static $lastStats = null;
+            
+            $stats = file_get_contents('/proc/stat');
+            preg_match('/cpu\\s+(\\d+)\\s+(\\d+)\\s+(\\d+)\\s+(\\d+)/', $stats, $matches);
+            
+            if (count($matches) >= 5) {
+                $idle = intval($matches[4]);
+                $total = array_sum(array_slice($matches, 1, 4));
+                
+                if ($lastStats !== null) {
+                    $idleDiff = $idle - $lastStats['idle'];
+                    $totalDiff = $total - $lastStats['total'];
+                    
+                    if ($totalDiff > 0) {
+                        $usage = 100 - (($idleDiff / $totalDiff) * 100);
+                        $lastStats = ['idle' => $idle, 'total' => $total];
+                        return round($usage, 1);
+                    }
+                }
+                
+                $lastStats = ['idle' => $idle, 'total' => $total];
+            }
+        }
+        
+        return 0.0;
+    }
+    
+    private function getMemoryUsage(): array 
+    {
+        return $this->getMemoryInfo();
+    }
+    
+    private function getDiskUsage(): array 
+    {
+        return $this->getDiskInfo();
+    }
+    
+    private function getNetworkStats(): array 
+    {
+        $stats = ['rx_bytes' => 0, 'tx_bytes' => 0];
+        
+        if (is_readable('/proc/net/dev')) {
+            $content = file_get_contents('/proc/net/dev');
+            $lines = explode("\n", $content);
+            
+            foreach ($lines as $line) {
+                if (strpos($line, ':') !== false && strpos($line, 'lo:') === false) {
+                    $lineParts = explode(':', $line);
+                    if (count($lineParts) >= 2) {
+                        $parts = preg_split('/\s+/', trim($lineParts[1]));
+                        if (count($parts) >= 9) {
+                            $stats['rx_bytes'] += intval($parts[0]);
+                            $stats['tx_bytes'] += intval($parts[8]);
+                        }
+                    }
+                }
+            }
+        }
+        
+        return $stats;
+    }
+}
\ No newline at end of file
diff --git a/src/controllers/TerminalController.php b/src/controllers/TerminalController.php
new file mode 100644
index 0000000..f4beb62
--- /dev/null
+++ b/src/controllers/TerminalController.php
@@ -0,0 +1,403 @@
+<?php
+/**
+ * Terminal Controller
+ * 
+ * Handles command execution and terminal operations
+ */
+
+namespace AleShell\Controllers;
+
+use AleShell\Controllers\BaseController;
+
+class TerminalController extends BaseController 
+{
+    private array $commandHistory = [];
+    private string $currentDirectory;
+    
+    public function __construct($config) 
+    {
+        parent::__construct($config);
+        $this->currentDirectory = getcwd();
+        
+        // Load command history from session
+        if (isset($_SESSION['command_history'])) {
+            $this->commandHistory = $_SESSION['command_history'];
+        }
+    }
+    
+    public function execute(): void 
+    {
+        $this->requireAuth();
+        
+        $data = $this->getRequestData();
+        $command = trim($data['command'] ?? '');
+        $workingDir = $data['working_dir'] ?? $this->currentDirectory;
+        $timeout = min($data['timeout'] ?? 30, $this->config->get('limits.command_timeout', 30));
+        
+        if (empty($command)) {
+            $this->errorResponse('No command provided');
+            return;
+        }
+        
+        try {
+            // Add to history
+            $this->addToHistory($command);
+            
+            // Check for built-in commands
+            if ($this->isBuiltinCommand($command)) {
+                $result = $this->executeBuiltinCommand($command, $workingDir);
+            } else {
+                $result = $this->executeSystemCommand($command, $workingDir, $timeout);
+            }
+            
+            $this->successResponse($result);
+            
+        } catch (\Exception $e) {
+            $this->errorResponse('Command execution failed: ' . $e->getMessage());
+        }
+    }
+    
+    public function getHistory(): void 
+    {
+        $this->requireAuth();
+        
+        $this->successResponse([
+            'history' => $this->commandHistory,
+            'current_directory' => $this->currentDirectory
+        ]);
+    }
+    
+    public function clearHistory(): void 
+    {
+        $this->requireAuth();
+        
+        $this->commandHistory = [];
+        $_SESSION['command_history'] = [];
+        
+        $this->successResponse(['cleared' => true]);
+    }
+    
+    private function executeSystemCommand(string $command, string $workingDir, int $timeout): array 
+    {
+        // Sanitize command
+        $command = $this->sanitizeCommand($command);
+        
+        // Sin restricciones de comandos - ejecutar todo
+        // if (!$this->isCommandAllowed($command)) {
+        //     throw new \Exception('Command not allowed by security policy');
+        // }
+        
+        // Change to working directory if valid
+        if ($this->security->isPathAllowed($workingDir) && is_dir($workingDir)) {
+            $originalDir = getcwd();
+            chdir($workingDir);
+            $this->currentDirectory = getcwd();
+        } else {
+            $originalDir = null;
+        }
+        
+        $startTime = microtime(true);
+        $output = '';
+        $exitCode = 0;
+        
+        try {
+            // Intentar ejecutar como root si está habilitado
+            $runAsRoot = $this->config->get('terminal.run_as_root', false);
+            if ($runAsRoot) {
+                // Intentar usar sudo si está disponible
+                if ($this->commandExists('sudo')) {
+                    $command = 'sudo ' . $command;
+                }
+            }
+            
+            // Use proc_open for better control
+            $descriptors = [
+                0 => ['pipe', 'r'],  // stdin
+                1 => ['pipe', 'w'],  // stdout
+                2 => ['pipe', 'w']   // stderr
+            ];
+            
+            $env = null;
+            if ($this->config->get('terminal.preserve_environment', true)) {
+                $env = $_ENV;
+                $env['PATH'] = '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin';
+                $env['USER'] = 'root';
+                $env['HOME'] = '/root';
+            }
+            
+            $process = proc_open($command, $descriptors, $pipes, $this->currentDirectory, $env);
+            
+            if (!is_resource($process)) {
+                throw new \Exception('Failed to start process');
+            }
+            
+            // Close stdin
+            fclose($pipes[0]);
+            
+            // Set non-blocking mode
+            stream_set_blocking($pipes[1], false);
+            stream_set_blocking($pipes[2], false);
+            
+            $stdout = '';
+            $stderr = '';
+            $timeoutReached = false;
+            
+            while (true) {
+                $status = proc_get_status($process);
+                
+                // Check timeout
+                if (microtime(true) - $startTime > $timeout) {
+                    proc_terminate($process, SIGKILL);
+                    $timeoutReached = true;
+                    break;
+                }
+                
+                // Read output
+                $stdout .= stream_get_contents($pipes[1]);
+                $stderr .= stream_get_contents($pipes[2]);
+                
+                // Check if process finished
+                if (!$status['running']) {
+                    $exitCode = $status['exitcode'];
+                    break;
+                }
+                
+                usleep(10000); // Sleep 10ms
+            }
+            
+            // Get any remaining output
+            $stdout .= stream_get_contents($pipes[1]);
+            $stderr .= stream_get_contents($pipes[2]);
+            
+            fclose($pipes[1]);
+            fclose($pipes[2]);
+            proc_close($process);
+            
+            if ($timeoutReached) {
+                $output = $stdout . $stderr . "\\n[Command timed out after {$timeout} seconds]";
+                $exitCode = 124; // Standard timeout exit code
+            } else {
+                $output = $stdout . $stderr;
+            }
+            
+        } catch (\Exception $e) {
+            throw new \Exception('Command execution failed: ' . $e->getMessage());
+        } finally {
+            // Restore original directory
+            if ($originalDir !== null) {
+                chdir($originalDir);
+            }
+        }
+        
+        $executionTime = round((microtime(true) - $startTime) * 1000, 2);
+        
+        // Limit output size
+        $maxLines = $this->config->get('limits.max_output_lines', 1000);
+        $lines = explode("\\n", $output);
+        if (count($lines) > $maxLines) {
+            $lines = array_slice($lines, 0, $maxLines);
+            $lines[] = "[Output truncated - showing first {$maxLines} lines]";
+            $output = implode("\\n", $lines);
+        }
+        
+        return [
+            'command' => $command,
+            'output' => $output,
+            'exit_code' => $exitCode,
+            'execution_time' => $executionTime,
+            'working_directory' => $this->currentDirectory,
+            'timestamp' => time()
+        ];
+    }
+    
+    private function executeBuiltinCommand(string $command, string $workingDir): array 
+    {
+        $parts = explode(' ', $command, 2);
+        $cmd = $parts[0];
+        $args = $parts[1] ?? '';
+        
+        $output = '';
+        $exitCode = 0;
+        
+        switch ($cmd) {
+            case 'cd':
+                $output = $this->handleCdCommand($args);
+                break;
+                
+            case 'pwd':
+                $output = $this->currentDirectory;
+                break;
+                
+            case 'help':
+                $output = $this->getHelpText();
+                break;
+                
+            case 'history':
+                $output = $this->formatHistoryOutput();
+                break;
+                
+            case 'clear':
+                $output = '[Terminal cleared]';
+                break;
+                
+            default:
+                $output = "Unknown built-in command: {$cmd}";
+                $exitCode = 1;
+        }
+        
+        return [
+            'command' => $command,
+            'output' => $output,
+            'exit_code' => $exitCode,
+            'execution_time' => 0,
+            'working_directory' => $this->currentDirectory,
+            'timestamp' => time()
+        ];
+    }
+    
+    private function isBuiltinCommand(string $command): bool 
+    {
+        $cmd = explode(' ', $command)[0];
+        return in_array($cmd, ['cd', 'pwd', 'help', 'history', 'clear']);
+    }
+    
+    private function handleCdCommand(string $path): string 
+    {
+        if (empty($path)) {
+            $path = $_SERVER['HOME'] ?? '/';
+        }
+        
+        // Handle relative paths
+        if ($path[0] !== '/') {
+            $path = $this->currentDirectory . '/' . $path;
+        }
+        
+        $realPath = realpath($path);
+        
+        if ($realPath === false) {
+            return "cd: no such file or directory: {$path}";
+        }
+        
+        if (!is_dir($realPath)) {
+            return "cd: not a directory: {$path}";
+        }
+        
+        if (!$this->security->isPathAllowed($realPath)) {
+            return "cd: permission denied: {$path}";
+        }
+        
+        $this->currentDirectory = $realPath;
+        $_SESSION['current_directory'] = $this->currentDirectory;
+        
+        return $this->currentDirectory;
+    }
+    
+    private function sanitizeCommand(string $command): string 
+    {
+        // Minimal sanitization - allow all command sequences
+        // This permits pipes, redirections, command chaining, etc.
+        $command = trim($command);
+        
+        // No filtering applied - full command execution freedom
+        return $command;
+    }
+    
+    private function isCommandAllowed(string $command): bool 
+    {
+        // ⚠️  TODAS LAS RESTRICCIONES DE SEGURIDAD REMOVIDAS ⚠️
+        // PERMITIR EJECUCIÓN DE CUALQUIER COMANDO DEL SISTEMA
+        // Esto incluye comandos peligrosos como rm, sudo, chmod, etc.
+        return true;
+        
+        // Additional security checks can be added here - DESHABILITADO
+    }
+    
+    private function addToHistory(string $command): void 
+    {
+        $this->commandHistory[] = [
+            'command' => $command,
+            'timestamp' => time(),
+            'directory' => $this->currentDirectory
+        ];
+        
+        // Keep only last 100 commands
+        if (count($this->commandHistory) > 100) {
+            $this->commandHistory = array_slice($this->commandHistory, -100);
+        }
+        
+        $_SESSION['command_history'] = $this->commandHistory;
+    }
+    
+    private function formatHistoryOutput(): string 
+    {
+        if (empty($this->commandHistory)) {
+            return "╔══════════════════════════════════════════════════════════════════════════════╗\n" .
+                   "║                          Command History (Empty)                           ║\n" .
+                   "╚══════════════════════════════════════════════════════════════════════════════╝\n\n" .
+                   "No commands in history yet. Start typing commands to build your history!";
+        }
+
+        $output = "╔══════════════════════════════════════════════════════════════════════════════╗\n" .
+                  "║                           Command History                                 ║\n" .
+                  "╚══════════════════════════════════════════════════════════════════════════════╝\n\n";
+
+        $maxIndex = count($this->commandHistory);
+        $indexWidth = strlen((string)$maxIndex);
+
+        foreach ($this->commandHistory as $index => $item) {
+            $lineNumber = str_pad($index + 1, $indexWidth, ' ', STR_PAD_LEFT);
+            $timestamp = date('H:i:s', $item['timestamp']);
+            $command = $item['command'];
+            
+            // Truncate long commands for better display
+            if (strlen($command) > 60) {
+                $command = substr($command, 0, 57) . '...';
+            }
+            
+            $output .= sprintf(" %{$indexWidth}s  │ %s │ %s\n", $lineNumber, $timestamp, $command);
+        }
+
+        $output .= "\n┌─ Summary ──────────────────────────────────────────────────────────────────┐\n" .
+                  sprintf("│ Total commands: %-56s │\n", count($this->commandHistory)) .
+                  "│ Use ↑/↓ arrows to navigate history                                      │\n" .
+                  "└───────────────────────────────────────────────────────────────────────────┘";
+
+        return $output;
+    }
+
+    private function getHelpText(): string 
+    {
+        return "╔══════════════════════════════════════════════════════════════════════════════╗\n" .
+               "║                           AleShell Help                                   ║\n" .
+               "╚══════════════════════════════════════════════════════════════════════════════╝\n\n" .
+               "Available Commands:\n\n" .
+               "┌─ Built-in Commands ────────────────────────────────────────────────────────┐\n" .
+               "│ help                    Show this help message                            │\n" .
+               "│ history                 Show command history                             │\n" .
+               "│ clear                   Clear the terminal screen                        │\n" .
+               "│ cd [directory]          Change current directory                         │\n" .
+               "│ pwd                     Print current working directory                  │\n" .
+               "└───────────────────────────────────────────────────────────────────────────┘\n\n" .
+               "┌─ System Commands ──────────────────────────────────────────────────────────┐\n" .
+               "│ Any system command is supported (ls, ps, top, etc.)                      │\n" .
+               "│ Use pipes, redirections, and command chaining as usual                   │\n" .
+               "│ Examples:                                                                │\n" .
+               "│   ls -la | grep php                                                       │\n" .
+               "│   ps aux | head -10                                                       │\n" .
+               "│   find /var -name '*.log' 2>/dev/null                                   │\n" .
+               "└───────────────────────────────────────────────────────────────────────────┘\n\n" .
+               "┌─ Navigation ──────────────────────────────────────────────────────────────┐\n" .
+               "│ ↑/↓ arrows              Navigate through command history                 │\n" .
+               "│ Tab                     Auto-complete (when implemented)                 │\n" .
+               "│ Ctrl+C                  Cancel current command (when implemented)        │\n" .
+               "└───────────────────────────────────────────────────────────────────────────┘\n\n" .
+               "┌─ Features ────────────────────────────────────────────────────────────────┐\n" .
+               "│ • Multi-tab terminal support                                              │\n" .
+               "│ • Command history with timestamps                                        │\n" .
+               "│ • Working directory tracking                                             │\n" .
+               "│ • Output formatting and truncation                                       │\n" .
+               "│ • Security restrictions (configurable)                                   │\n" .
+               "└───────────────────────────────────────────────────────────────────────────┘\n\n" .
+               "For more information about system commands, use 'man <command>' or '<command> --help'";
+    }
+}
\ No newline at end of file
diff --git a/src/core/Autoloader.php b/src/core/Autoloader.php
new file mode 100644
index 0000000..8d5d028
--- /dev/null
+++ b/src/core/Autoloader.php
@@ -0,0 +1,96 @@
+<?php
+/**
+ * AleShell Autoloader
+ * 
+ * Simple PSR-4 compatible autoloader for AleShell classes
+ */
+
+namespace AleShell\Core;
+
+class Autoloader 
+{
+    private static $instance = null;
+    private array $prefixes = [];
+    
+    private function __construct() 
+    {
+        // Register AleShell namespace
+        $this->addNamespace('AleShell\\', dirname(__DIR__) . '/');
+    }
+    
+    public static function getInstance(): self 
+    {
+        if (self::$instance === null) {
+            self::$instance = new self();
+        }
+        return self::$instance;
+    }
+    
+    public function register(): void 
+    {
+        spl_autoload_register([$this, 'loadClass']);
+    }
+    
+    public function addNamespace(string $prefix, string $baseDir): void 
+    {
+        $prefix = trim($prefix, '\\') . '\\';
+        $baseDir = rtrim($baseDir, DIRECTORY_SEPARATOR) . '/';
+        
+        if (!isset($this->prefixes[$prefix])) {
+            $this->prefixes[$prefix] = [];
+        }
+        
+        array_push($this->prefixes[$prefix], $baseDir);
+    }
+    
+    public function loadClass(string $class): ?string 
+    {
+        $prefix = $class;
+        
+        while (false !== $pos = strrpos($prefix, '\\')) {
+            $prefix = substr($class, 0, $pos + 1);
+            $relativeClass = substr($class, $pos + 1);
+            
+            $mappedFile = $this->loadMappedFile($prefix, $relativeClass);
+            if ($mappedFile) {
+                return $mappedFile;
+            }
+            
+            $prefix = rtrim($prefix, '\\');
+        }
+        
+        return null;
+    }
+    
+    protected function loadMappedFile(string $prefix, string $relativeClass): ?string 
+    {
+        if (!isset($this->prefixes[$prefix])) {
+            return null;
+        }
+        
+        foreach ($this->prefixes[$prefix] as $baseDir) {
+            $file = $baseDir . str_replace('\\', '/', $relativeClass) . '.php';
+            
+            if ($this->requireFile($file)) {
+                return $file;
+            }
+        }
+        
+        return null;
+    }
+    
+    protected function requireFile(string $file): bool 
+    {
+        if (file_exists($file)) {
+            require_once $file;
+            return true;
+        }
+        return false;
+    }
+}
+
+// Auto-register the autoloader
+if (!class_exists('AleShell\\Core\\Autoloader', false)) {
+    $autoloader = Autoloader::getInstance();
+    $autoloader->register();
+}
\ No newline at end of file
diff --git a/src/core/Bootstrap.php b/src/core/Bootstrap.php
new file mode 100644
index 0000000..cb54e03
--- /dev/null
+++ b/src/core/Bootstrap.php
@@ -0,0 +1,405 @@
+<?php
+/**
+ * AleShell Bootstrap
+ * 
+ * Main application bootstrap class that initializes and runs AleShell
+ */
+
+namespace AleShell\Core;
+
+class Bootstrap 
+{
+    private $config;
+    private $security;
+    private $session;
+    private $router;
+    private $moduleManager;
+    private bool $initialized = false;
+    
+    public function __construct() 
+    {
+        // Load dependencies with error handling
+        try {
+            // Ensure all required classes are loaded
+            $this->loadDependencies();
+            
+            $this->config = new ConfigManager();
+            $this->security = new \AleShell\Security\SecurityManager($this->config);
+            $this->session = new SessionManager($this->config);
+            $this->router = new Router($this->config);
+            $this->moduleManager = new ModuleManager($this->config);
+        } catch (\Exception $e) {
+            $this->handleBootstrapError($e);
+        }
+    }
+    
+    private function loadDependencies(): void
+    {
+        $requiredFiles = [
+            'ConfigManager.php',
+            '../security/SecurityManager.php',
+            'SessionManager.php',
+            'Router.php',
+            'ModuleManager.php'
+        ];
+        
+        $baseDir = __DIR__;
+        
+        foreach ($requiredFiles as $file) {
+            $fullPath = $baseDir . '/' . $file;
+            if (file_exists($fullPath)) {
+                require_once $fullPath;
+            } else {
+                throw new \Exception("Required file not found: {$fullPath}");
+            }
+        }
+        
+        // Load controllers in proper order (BaseController first)
+        $controllerDir = dirname($baseDir) . '/controllers';
+        if (is_dir($controllerDir)) {
+            // Load BaseController first
+            $baseController = $controllerDir . '/BaseController.php';
+            if (file_exists($baseController)) {
+                require_once $baseController;
+            }
+            
+            // Then load other controllers
+            $controllers = glob($controllerDir . '/*.php');
+            foreach ($controllers as $controller) {
+                // Skip BaseController as it's already loaded
+                if (basename($controller) !== 'BaseController.php') {
+                    require_once $controller;
+                }
+            }
+        }
+    }
+    
+    public function initialize(): void 
+    {
+        if ($this->initialized) {
+            return;
+        }
+        
+        // Start output buffering to prevent headers already sent errors
+        if (!ob_get_level()) {
+            ob_start();
+        }
+        
+        // Load configuration
+        $this->config->load();
+        
+        // Initialize security
+        $this->security->initialize();
+        
+        // Start session management
+        $this->session->start();
+        
+        // Handle static assets first (before authentication check)
+        if ($this->isAssetRequest()) {
+            $this->serveStaticAsset();
+            return;
+        }
+        
+        // Handle login request first
+        if ($this->isLoginRequest()) {
+            $this->handleLogin();
+            return;
+        }
+        
+        // Allow auth routes without authentication
+        if ($this->isAuthRoute()) {
+            // Initialize modules and set up routing for auth routes
+            $this->moduleManager->initialize();
+            $this->setupRoutes();
+            $this->initialized = true;
+            return;
+        }
+        
+        // Check authentication
+        if (!$this->security->isAuthenticated()) {
+            $this->showLoginForm();
+            return;
+        }
+        
+        // Initialize modules
+        $this->moduleManager->initialize();
+        
+        // Set up routing
+        $this->setupRoutes();
+        
+        $this->initialized = true;
+    }
+    
+    public function run(): void 
+    {
+        if (!$this->initialized) {
+            throw new \Exception('Bootstrap not initialized');
+        }
+        
+        // Handle the request
+        $this->router->dispatch();
+    }
+    
+    private function isAuthRoute(): bool 
+    {
+        $uri = $_SERVER['REQUEST_URI'] ?? '';
+        $path = parse_url($uri, PHP_URL_PATH);
+        
+        // Remove base path if present
+        $basePath = rtrim(dirname($_SERVER['SCRIPT_NAME']), '/');
+        if ($basePath && strpos($path, $basePath) === 0) {
+            $path = substr($path, strlen($basePath));
+        }
+        
+        $path = '/' . trim($path, '/');
+        
+        // Allow auth routes without authentication
+        return strpos($path, '/auth/') === 0;
+    }
+    
+    private function isLoginRequest(): bool 
+    {
+        return isset($_POST['action']) && $_POST['action'] === 'login';
+    }
+    
+    private function isAssetRequest(): bool
+    {
+        $uri = $_SERVER['REQUEST_URI'] ?? '';
+        return strpos($uri, '/assets/') === 0;
+    }
+    
+    private function serveStaticAsset(): void
+    {
+        $uri = $_SERVER['REQUEST_URI'];
+        
+        // Remove query string
+        $path = parse_url($uri, PHP_URL_PATH);
+        
+        // Remove leading slash and get file path
+        $filePath = ltrim($path, '/');
+        
+        // Security check - only allow assets directory
+        if (strpos($filePath, 'assets/') !== 0) {
+            http_response_code(403);
+            echo 'Access denied';
+            return;
+        }
+        
+        $fullPath = ALESHELL_ROOT . '/' . $filePath;
+        
+        // Check if file exists
+        if (!file_exists($fullPath) || !is_file($fullPath)) {
+            http_response_code(404);
+            echo 'File not found';
+            return;
+        }
+        
+        // Set appropriate content type
+        $extension = strtolower(pathinfo($fullPath, PATHINFO_EXTENSION));
+        $contentTypes = [
+            'js' => 'application/javascript',
+            'css' => 'text/css',
+            'png' => 'image/png',
+            'jpg' => 'image/jpeg',
+            'jpeg' => 'image/jpeg',
+            'gif' => 'image/gif',
+            'svg' => 'image/svg+xml',
+            'ico' => 'image/x-icon'
+        ];
+        
+        if (isset($contentTypes[$extension])) {
+            header('Content-Type: ' . $contentTypes[$extension]);
+        } else {
+            header('Content-Type: application/octet-stream');
+        }
+        
+        // Cache headers for static assets
+        header('Cache-Control: public, max-age=3600');
+        
+        // Output file content
+        readfile($fullPath);
+        exit;
+    }
+    
+    private function handleLogin(): void 
+    {
+        $password = $_POST['password'] ?? '';
+        
+        if (empty($password)) {
+            $this->showLoginForm('Password is required');
+            return;
+        }
+        
+        try {
+            if ($this->security->authenticate($password)) {
+                // Login successful - redirect to main interface
+                header('Location: ' . $_SERVER['REQUEST_URI']);
+                exit;
+            } else {
+                $this->showLoginForm('Invalid password');
+                return;
+            }
+        } catch (\Exception $e) {
+            $this->showLoginForm('Authentication error: ' . $e->getMessage());
+            return;
+        }
+    }
+    
+    private function showLoginForm(string $errorMessage = ''): void 
+    {
+        // Simple login form for now
+        echo $this->getLoginHTML($errorMessage);
+        exit;
+    }
+    
+    private function getLoginHTML(string $errorMessage = ''): string 
+    {
+        $errorDiv = '';
+        if (!empty($errorMessage)) {
+            $errorDiv = '<div class="error-message" style="background: #fee; color: #c33; padding: 0.75rem; border-radius: 6px; margin-bottom: 1rem; border: 1px solid #fcc; font-size: 0.9rem;">' . htmlspecialchars($errorMessage) . '</div>';
+        }
+        
+        return '<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>AleShell - Login</title>
+    <style>
+        * { margin: 0; padding: 0; box-sizing: border-box; }
+        body { 
+            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            height: 100vh;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+        }
+        .login-container {
+            background: white;
+            padding: 2rem;
+            border-radius: 12px;
+            box-shadow: 0 20px 40px rgba(0,0,0,0.1);
+            min-width: 320px;
+        }
+        .login-header {
+            text-align: center;
+            margin-bottom: 2rem;
+        }
+        .login-header h1 {
+            color: #333;
+            font-size: 2rem;
+            margin-bottom: 0.5rem;
+        }
+        .login-header p {
+            color: #666;
+            font-size: 0.9rem;
+        }
+        .form-group {
+            margin-bottom: 1rem;
+        }
+        .form-group label {
+            display: block;
+            margin-bottom: 0.5rem;
+            color: #333;
+            font-weight: 500;
+        }
+        .form-group input {
+            width: 100%;
+            padding: 0.75rem;
+            border: 2px solid #e1e5e9;
+            border-radius: 8px;
+            font-size: 1rem;
+            transition: border-color 0.3s;
+        }
+        .form-group input:focus {
+            outline: none;
+            border-color: #667eea;
+        }
+        .login-btn {
+            width: 100%;
+            padding: 0.75rem;
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            color: white;
+            border: none;
+            border-radius: 8px;
+            font-size: 1rem;
+            cursor: pointer;
+            transition: transform 0.2s;
+        }
+        .login-btn:hover {
+            transform: translateY(-2px);
+        }
+        .version {
+            text-align: center;
+            margin-top: 1rem;
+            color: #999;
+            font-size: 0.8rem;
+        }
+    </style>
+</head>
+<body>
+    <div class="login-container">
+        <div class="login-header">
+            <h1>🚀 AleShell</h1>
+            <p>Modern Web Shell Interface</p>
+        </div>
+        ' . $errorDiv . '
+        <form method="post">
+            <input type="hidden" name="action" value="login">
+            <div class="form-group">
+                <label for="password">Password</label>
+                <input type="password" id="password" name="password" required autocomplete="current-password">
+            </div>
+            <button type="submit" class="login-btn">Access Shell</button>
+        </form>
+        <div class="version">v' . ALESHELL_VERSION . '</div>
+    </div>
+</body>
+</html>';
+    }
+    
+    private function setupRoutes(): void 
+    {
+        // API routes
+        $this->router->addRoute('GET', '/api/system/info', 'SystemController@getInfo');
+        $this->router->addRoute('GET', '/api/config', 'SystemController@getConfig');
+        $this->router->addRoute('POST', '/api/files/list', 'FileController@listFiles');
+        $this->router->addRoute('POST', '/api/files/read', 'FileController@readFile');
+        $this->router->addRoute('POST', '/api/files/write', 'FileController@writeFile');
+        $this->router->addRoute('POST', '/api/files/delete', 'FileController@deleteFile');
+        $this->router->addRoute('POST', '/api/files/create-directory', 'FileController@createDirectory');
+        $this->router->addRoute('POST', '/api/files/rename', 'FileController@renameFile');
+        $this->router->addRoute('POST', '/api/files/upload', 'FileController@uploadFile');
+        $this->router->addRoute('POST', '/api/terminal/execute', 'TerminalController@execute');
+        $this->router->addRoute('GET', '/api/terminal/history', 'TerminalController@getHistory');
+        $this->router->addRoute('POST', '/api/terminal/clear-history', 'TerminalController@clearHistory');
+        $this->router->addRoute('GET', '/api/processes/list', 'ProcessController@listProcesses');
+        $this->router->addRoute('POST', '/api/processes/kill', 'ProcessController@killProcess');
+        $this->router->addRoute('GET', '/api/processes/info', 'ProcessController@getProcessInfo');
+        $this->router->addRoute('GET', '/api/network/connections', 'NetworkController@getConnections');
+        $this->router->addRoute('POST', '/api/network/ping', 'NetworkController@ping');
+        $this->router->addRoute('POST', '/api/network/traceroute', 'NetworkController@traceroute');
+        $this->router->addRoute('POST', '/api/network/portscan', 'NetworkController@portScan');
+        $this->router->addRoute('GET', '/api/network/interfaces', 'NetworkController@getInterfaces');
+        $this->router->addRoute('POST', '/api/database/connect', 'DatabaseController@connect');
+        $this->router->addRoute('POST', '/api/database/disconnect', 'DatabaseController@disconnect');
+        $this->router->addRoute('GET', '/api/database/databases', 'DatabaseController@getDatabases');
+        $this->router->addRoute('GET', '/api/database/tables', 'DatabaseController@getTables');
+        $this->router->addRoute('POST', '/api/database/query', 'DatabaseController@executeQuery');
+        $this->router->addRoute('GET', '/api/database/connections', 'DatabaseController@getConnections');
+        
+        // Module routes
+        $this->router->addRoute('GET', '/modules/*', 'ModuleController@load');
+        
+        // Dashboard API route (not main route)
+        $this->router->addRoute('GET', '/api/dashboard', 'MainController@dashboard');
+        
+        // Authentication routes
+        $this->router->addRoute('POST', '/auth/login', 'AuthController@login');
+        $this->router->addRoute('POST', '/auth/logout', 'AuthController@logout');
+        $this->router->addRoute('GET', '/auth/status', 'AuthController@status');
+        
+        // Note: '/' route is handled by Router's default showMainInterface() method
+    }
+}
\ No newline at end of file
diff --git a/src/core/ConfigManager.php b/src/core/ConfigManager.php
new file mode 100644
index 0000000..d30d277
--- /dev/null
+++ b/src/core/ConfigManager.php
@@ -0,0 +1,129 @@
+<?php
+/**
+ * Configuration Manager
+ * 
+ * Manages application configuration and settings
+ */
+
+namespace AleShell\Core;
+
+class ConfigManager 
+{
+    private array $config = [];
+    private string $configFile;
+    
+    public function __construct() 
+    {
+        $this->configFile = ALESHELL_SRC . '/config/config.php';
+        $this->setDefaults();
+    }
+    
+    public function load(): void 
+    {
+        if (file_exists($this->configFile)) {
+            $userConfig = require $this->configFile;
+            if (is_array($userConfig)) {
+                $this->config = array_merge($this->config, $userConfig);
+            }
+        }
+    }
+    
+    public function get(string $key, $default = null) 
+    {
+        $keys = explode('.', $key);
+        $value = $this->config;
+        
+        foreach ($keys as $k) {
+            if (!isset($value[$k])) {
+                return $default;
+            }
+            $value = $value[$k];
+        }
+        
+        return $value;
+    }
+    
+    public function set(string $key, $value): void 
+    {
+        $keys = explode('.', $key);
+        $config = &$this->config;
+        
+        foreach ($keys as $k) {
+            if (!isset($config[$k]) || !is_array($config[$k])) {
+                $config[$k] = [];
+            }
+            $config = &$config[$k];
+        }
+        
+        $config = $value;
+    }
+    
+    public function save(): bool 
+    {
+        $configContent = "<?php\n/**\n * AleShell Configuration\n * Generated on " . date('Y-m-d H:i:s') . "\n */\n\nreturn " . var_export($this->config, true) . ";\n";
+        
+        $dir = dirname($this->configFile);
+        if (!is_dir($dir)) {
+            mkdir($dir, 0755, true);
+        }
+        
+        return file_put_contents($this->configFile, $configContent) !== false;
+    }
+    
+    private function setDefaults(): void 
+    {
+        $this->config = [
+            'app' => [
+                'name' => 'AleShell',
+                'version' => ALESHELL_VERSION,
+                'debug' => false,
+                'timezone' => 'UTC',
+                'max_execution_time' => 300,
+                'memory_limit' => '512M'
+            ],
+            'security' => [
+                'password' => password_hash('aleshell', PASSWORD_DEFAULT), // Default password
+                'session_timeout' => 3600, // 1 hour
+                'csrf_protection' => true,
+                'rate_limiting' => true,
+                'max_attempts' => 5,
+                'lockout_time' => 300, // 5 minutes
+                'allowed_ips' => [], // Empty = allow all
+                'blocked_ips' => []
+            ],
+            'features' => [
+                'file_manager' => true,
+                'terminal' => true,
+                'code_editor' => true,
+                'process_manager' => true,
+                'network_tools' => true,
+                'database_tools' => true,
+                'system_info' => true,
+                'log_viewer' => true
+            ],
+            'ui' => [
+                'theme' => 'dark',
+                'language' => 'en',
+                'items_per_page' => 50,
+                'auto_refresh' => false,
+                'show_hidden_files' => false
+            ],
+            'limits' => [
+                'max_file_size' => 50 * 1024 * 1024, // 50MB
+                'max_upload_size' => 100 * 1024 * 1024, // 100MB
+                'max_output_lines' => 1000,
+                'command_timeout' => 30
+            ],
+            'paths' => [
+                'temp_dir' => sys_get_temp_dir(),
+                'upload_dir' => ALESHELL_ROOT . '/uploads',
+                'log_dir' => ALESHELL_ROOT . '/logs'
+            ]
+        ];
+    }
+    
+    public function getAll(): array 
+    {
+        return $this->config;
+    }
+}
\ No newline at end of file
diff --git a/src/core/ModuleManager.php b/src/core/ModuleManager.php
new file mode 100644
index 0000000..eca4b83
--- /dev/null
+++ b/src/core/ModuleManager.php
@@ -0,0 +1,162 @@
+<?php
+/**
+ * Module Manager
+ * 
+ * Manages module loading, dependencies, and lifecycle
+ */
+
+namespace AleShell\Core;
+
+class ModuleManager 
+{
+    private ConfigManager $config;
+    private array $modules = [];
+    private array $loadedModules = [];
+    private string $modulesPath;
+    
+    public function __construct(ConfigManager $config) 
+    {
+        $this->config = $config;
+        $this->modulesPath = ALESHELL_SRC . '/modules';
+    }
+    
+    public function initialize(): void 
+    {
+        $this->discoverModules();
+        $this->loadEnabledModules();
+    }
+    
+    public function loadModule(string $name): bool 
+    {
+        if (isset($this->loadedModules[$name])) {
+            return true;
+        }
+        
+        if (!isset($this->modules[$name])) {
+            return false;
+        }
+        
+        $moduleInfo = $this->modules[$name];
+        
+        // Check dependencies
+        if (!empty($moduleInfo['dependencies'])) {
+            foreach ($moduleInfo['dependencies'] as $dependency) {
+                if (!$this->loadModule($dependency)) {
+                    return false;
+                }
+            }
+        }
+        
+        // Load module file
+        $moduleFile = $this->modulesPath . '/' . $name . '/' . $name . '.php';
+        if (file_exists($moduleFile)) {
+            require_once $moduleFile;
+            
+            $moduleClass = "AleShell\\Modules\\" . ucfirst($name) . "\\Module";
+            if (class_exists($moduleClass)) {
+                $this->loadedModules[$name] = new $moduleClass($this->config);
+                $this->loadedModules[$name]->initialize();
+                return true;
+            }
+        }
+        
+        return false;
+    }
+    
+    public function getModule(string $name) 
+    {
+        return $this->loadedModules[$name] ?? null;
+    }
+    
+    public function getLoadedModules(): array 
+    {
+        return array_keys($this->loadedModules);
+    }
+    
+    public function getAvailableModules(): array 
+    {
+        return array_keys($this->modules);
+    }
+    
+    public function isModuleLoaded(string $name): bool 
+    {
+        return isset($this->loadedModules[$name]);
+    }
+    
+    public function unloadModule(string $name): bool 
+    {
+        if (!isset($this->loadedModules[$name])) {
+            return false;
+        }
+        
+        // Check if other modules depend on this one
+        foreach ($this->loadedModules as $loadedName => $module) {
+            if ($loadedName !== $name) {
+                $info = $this->modules[$loadedName];
+                if (in_array($name, $info['dependencies'] ?? [])) {
+                    return false; // Cannot unload, other modules depend on it
+                }
+            }
+        }
+        
+        // Call cleanup if method exists
+        if (method_exists($this->loadedModules[$name], 'cleanup')) {
+            $this->loadedModules[$name]->cleanup();
+        }
+        
+        unset($this->loadedModules[$name]);
+        return true;
+    }
+    
+    private function discoverModules(): void 
+    {
+        if (!is_dir($this->modulesPath)) {
+            return;
+        }
+        
+        $directories = glob($this->modulesPath . '/*', GLOB_ONLYDIR);
+        
+        foreach ($directories as $dir) {
+            $moduleName = basename($dir);
+            $configFile = $dir . '/module.json';
+            
+            if (file_exists($configFile)) {
+                $config = json_decode(file_get_contents($configFile), true);
+                if ($config) {
+                    $this->modules[$moduleName] = array_merge([
+                        'name' => $moduleName,
+                        'version' => '1.0.0',
+                        'description' => '',
+                        'author' => '',
+                        'dependencies' => [],
+                        'enabled' => true
+                    ], $config);
+                }
+            } else {
+                // Default module info if no config file
+                $this->modules[$moduleName] = [
+                    'name' => $moduleName,
+                    'version' => '1.0.0',
+                    'description' => "Module $moduleName",
+                    'author' => 'AleShell',
+                    'dependencies' => [],
+                    'enabled' => true
+                ];
+            }
+        }
+    }
+    
+    private function loadEnabledModules(): void 
+    {
+        $enabledFeatures = $this->config->get('features', []);
+        
+        foreach ($this->modules as $name => $info) {
+            $featureName = strtolower($name);
+            $featureName = str_replace(['_', '-'], '_', $featureName);
+            
+            if ($info['enabled'] && ($enabledFeatures[$featureName] ?? true)) {
+                $this->loadModule($name);
+            }
+        }
+    }
+}
\ No newline at end of file
diff --git a/src/core/Router.php b/src/core/Router.php
new file mode 100644
index 0000000..d89bc5d
--- /dev/null
+++ b/src/core/Router.php
@@ -0,0 +1,3693 @@
+<?php
+/**
+ * Router
+ * 
+ * Simple but powerful routing system for AleShell
+ */
+
+namespace AleShell\Core;
+
+class Router 
+{
+    private ConfigManager $config;
+    private array $routes = [];
+    private string $basePath;
+    
+    public function __construct(ConfigManager $config) 
+    {
+        $this->config = $config;
+        $this->basePath = rtrim(dirname($_SERVER['SCRIPT_NAME']), '/');
+    }
+    
+    public function addRoute(string $method, string $path, string $handler): void 
+    {
+        $this->routes[] = [
+            'method' => strtoupper($method),
+            'path' => $path,
+            'handler' => $handler,
+            'pattern' => $this->convertToPattern($path)
+        ];
+    }
+    
+    public function dispatch(): void 
+    {
+        $method = $_SERVER['REQUEST_METHOD'];
+        $uri = $_SERVER['REQUEST_URI'];
+        
+        // Remove query string and base path
+        $path = parse_url($uri, PHP_URL_PATH);
+        if ($this->basePath) {
+            $path = substr($path, strlen($this->basePath));
+        }
+        $path = '/' . trim($path, '/');
+        
+        // Remove index.php from path if present
+        $path = preg_replace('#^(/?)index\.php#', '$1', $path);
+        $path = '/' . trim($path, '/');
+        
+        // Handle static assets
+        if (strpos($path, '/assets/') === 0) {
+            $this->serveStaticAsset($path);
+            return;
+        }
+        
+        // Find matching route
+        foreach ($this->routes as $route) {
+            if ($route['method'] === $method && preg_match($route['pattern'], $path, $matches)) {
+                $this->executeHandler($route['handler'], $matches);
+                return;
+            }
+        }
+        
+        // Default route - show main interface
+        if ($path === '/' || $path === '') {
+            $this->showMainInterface();
+            return;
+        }
+        
+        // 404 Not found
+        http_response_code(404);
+        echo json_encode(['error' => 'Route not found']);
+    }
+    
+    private function convertToPattern(string $path): string 
+    {
+        // Convert wildcards to regex
+        $pattern = preg_replace('/\*/', '.*', $path);
+        $pattern = preg_replace('/\{([^}]+)\}/', '(?P<$1>[^/]+)', $pattern);
+        return '#^' . $pattern . '$#';
+    }
+    
+    private function executeHandler(string $handler, array $matches): void 
+    {
+        if (strpos($handler, '@') !== false) {
+            [$controller, $method] = explode('@', $handler);
+            $controllerClass = "AleShell\\Controllers\\{$controller}";
+            
+            if (class_exists($controllerClass)) {
+                $instance = new $controllerClass($this->config);
+                if (method_exists($instance, $method)) {
+                    $instance->$method($matches);
+                    return;
+                }
+            }
+        }
+        
+        http_response_code(500);
+        echo json_encode(['error' => 'Handler not found']);
+    }
+    
+    
+    private function showMainInterface(): void 
+    {
+        echo $this->getMainHTML();
+    }
+    
+    
+    private function serveStaticAsset(string $path): void
+    {
+        // Remove leading slash and get file path
+        $filePath = ltrim($path, '/');
+        
+        // Security check - only allow assets directory
+        if (strpos($filePath, 'assets/') !== 0) {
+            http_response_code(403);
+            echo 'Access denied';
+            return;
+        }
+        
+        $fullPath = ALESHELL_ROOT . '/' . $filePath;
+        
+        // Check if file exists
+        if (!file_exists($fullPath) || !is_file($fullPath)) {
+            http_response_code(404);
+            echo 'File not found';
+            return;
+        }
+        
+        // Set appropriate content type
+        $extension = strtolower(pathinfo($fullPath, PATHINFO_EXTENSION));
+        $contentTypes = [
+            'js' => 'application/javascript',
+            'css' => 'text/css',
+            'png' => 'image/png',
+            'jpg' => 'image/jpeg',
+            'jpeg' => 'image/jpeg',
+            'gif' => 'image/gif',
+            'svg' => 'image/svg+xml',
+            'ico' => 'image/x-icon'
+        ];
+        
+        if (isset($contentTypes[$extension])) {
+            header('Content-Type: ' . $contentTypes[$extension]);
+        } else {
+            header('Content-Type: application/octet-stream');
+        }
+        
+        // Cache headers for static assets
+        header('Cache-Control: public, max-age=3600');
+        
+        // Output file content
+        readfile($fullPath);
+    }
+    
+    private function getMainHTML(): string 
+    {
+        return '<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>AleShell v' . ALESHELL_VERSION . '</title>
+    <link rel="stylesheet" href="data:text/css;base64,' . base64_encode($this->getMainCSS()) . '">
+</head>
+<body>
+    <div id="app">
+        <div id="loading" class="loading-screen">
+            <div class="loading-spinner"></div>
+            <div class="loading-text">Loading AleShell...</div>
+        </div>
+        
+        <header class="main-header">
+            <div class="header-left">
+                <h1 class="logo">AleShell</h1>
+                <span class="version">v' . ALESHELL_VERSION . '</span>
+            </div>
+            <div class="header-center">
+                <nav class="main-nav">
+                    <button class="nav-item active" data-module="dashboard">
+                        <i class="icon">📊</i>
+                        <span>Dashboard</span>
+                    </button>
+                    <button class="nav-item" data-module="files">
+                        <i class="icon">📁</i>
+                        <span>Files</span>
+                    </button>
+                    <button class="nav-item" data-module="terminal">
+                        <i class="icon">💻</i>
+                        <span>Terminal</span>
+                    </button>
+                    <button class="nav-item" data-module="editor">
+                        <i class="icon">📝</i>
+                        <span>Editor</span>
+                    </button>
+                    <button class="nav-item" data-module="processes">
+                        <i class="icon">⚙️</i>
+                        <span>Processes</span>
+                    </button>
+                    <button class="nav-item" data-module="network">
+                        <i class="icon">🌐</i>
+                        <span>Network</span>
+                    </button>
+                    <button class="nav-item" data-module="database">
+                        <i class="icon">🗄️</i>
+                        <span>Database</span>
+                    </button>
+                </nav>
+            </div>
+            <div class="header-right">
+                <button class="theme-toggle" title="Toggle Theme">🌙</button>
+                <button class="settings-btn" title="Settings">⚙️</button>
+                <button class="logout-btn" title="Logout">🚪</button>
+            </div>
+        </header>
+        
+        <main class="main-content">
+            <div id="module-container" class="module-container">
+                ' . $this->getInitialDashboardHTML() . '
+            </div>
+        </main>
+        
+        <footer class="main-footer">
+            <div class="footer-left">
+                <span>System: <span id="system-info">Loading...</span></span>
+            </div>
+            <div class="footer-center">
+                <span>Path: <span id="current-path">/</span></span>
+            </div>
+            <div class="footer-right">
+                <span>User: <span id="current-user">root</span></span>
+                <span>•</span>
+                <span id="server-time">Loading...</span>
+            </div>
+        </footer>
+    </div>
+    
+    <script>
+' . $this->getMainJS() . '
+    </script>
+</body>
+</html>';
+    }
+    
+    private function getInitialDashboardHTML(): string 
+    {
+        return '
+            <div class="dashboard-module">
+                <div class="dashboard-header">
+                    <h2>System Dashboard</h2>
+                    <button class="refresh-btn" onclick="aleShell.refreshDashboard()">Refresh</button>
+                </div>
+                <div class="dashboard-grid">
+                    <div class="dashboard-card">
+                        <h3>System Information</h3>
+                        <div id="system-stats">Loading...</div>
+                    </div>
+                    <div class="dashboard-card">
+                        <h3>Disk Usage</h3>
+                        <div id="disk-stats">Loading...</div>
+                    </div>
+                    <div class="dashboard-card">
+                        <h3>Memory Usage</h3>
+                        <div id="memory-stats">Loading...</div>
+                    </div>
+                    <div class="dashboard-card">
+                        <h3>Network</h3>
+                        <div id="network-stats">Loading...</div>
+                    </div>
+                </div>
+            </div>
+        ';
+    }
+    
+    private function getMainCSS(): string 
+    {
+        return ':root {
+    --primary-color: #667eea;
+    --secondary-color: #764ba2;
+    --success-color: #48bb78;
+    --warning-color: #ed8936;
+    --error-color: #f56565;
+    --info-color: #4299e1;
+    
+    --bg-primary: #1a202c;
+    --bg-secondary: #2d3748;
+    --bg-tertiary: #4a5568;
+    --text-primary: #f7fafc;
+    --text-secondary: #e2e8f0;
+    --text-muted: #a0aec0;
+    
+    --border-color: #4a5568;
+    --hover-color: #2d3748;
+    --active-color: var(--primary-color);
+    
+    --header-height: 60px;
+    --footer-height: 40px;
+    --nav-width: 240px;
+    
+    --shadow-sm: 0 1px 3px rgba(0, 0, 0, 0.1);
+    --shadow-md: 0 4px 6px rgba(0, 0, 0, 0.1);
+    --shadow-lg: 0 10px 15px rgba(0, 0, 0, 0.1);
+    
+    --radius-sm: 4px;
+    --radius-md: 8px;
+    --radius-lg: 12px;
+    
+    --transition: all 0.2s ease-in-out;
+}
+
+[data-theme="light"] {
+    --bg-primary: #f7fafc;
+    --bg-secondary: #edf2f7;
+    --bg-tertiary: #e2e8f0;
+    --text-primary: #1a202c;
+    --text-secondary: #2d3748;
+    --text-muted: #718096;
+    --border-color: #e2e8f0;
+    --hover-color: #edf2f7;
+}
+
+* {
+    margin: 0;
+    padding: 0;
+    box-sizing: border-box;
+}
+
+body {
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
+    background: var(--bg-primary);
+    color: var(--text-primary);
+    line-height: 1.5;
+    overflow: hidden;
+}
+
+#app {
+    height: 100vh;
+    display: grid;
+    grid-template-rows: var(--header-height) 1fr var(--footer-height);
+}
+
+/* Loading Screen */
+.loading-screen {
+    position: fixed;
+    top: 0;
+    left: 0;
+    width: 100%;
+    height: 100%;
+    background: var(--bg-primary);
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    justify-content: center;
+    z-index: 9999;
+    transition: opacity 0.3s ease;
+}
+
+.loading-spinner {
+    width: 40px;
+    height: 40px;
+    border: 4px solid var(--border-color);
+    border-top: 4px solid var(--primary-color);
+    border-radius: 50%;
+    animation: spin 1s linear infinite;
+    margin-bottom: 20px;
+}
+
+.loading-text {
+    color: var(--text-secondary);
+    font-size: 16px;
+}
+
+@keyframes spin {
+    0% { transform: rotate(0deg); }
+    100% { transform: rotate(360deg); }
+}
+
+/* Header */
+.main-header {
+    background: var(--bg-secondary);
+    border-bottom: 1px solid var(--border-color);
+    display: flex;
+    align-items: center;
+    padding: 0 20px;
+    position: relative;
+    z-index: 100;
+}
+
+.header-left {
+    display: flex;
+    align-items: center;
+    gap: 12px;
+}
+
+.logo {
+    font-size: 20px;
+    font-weight: 600;
+    color: var(--text-primary);
+}
+
+.version {
+    font-size: 12px;
+    color: var(--text-muted);
+    background: var(--bg-tertiary);
+    padding: 2px 8px;
+    border-radius: var(--radius-sm);
+}
+
+.header-center {
+    flex: 1;
+    display: flex;
+    justify-content: center;
+}
+
+.main-nav {
+    display: flex;
+    gap: 4px;
+}
+
+.nav-item {
+    display: flex;
+    align-items: center;
+    gap: 8px;
+    padding: 8px 16px;
+    background: none;
+    border: none;
+    border-radius: var(--radius-md);
+    color: var(--text-secondary);
+    cursor: pointer;
+    transition: var(--transition);
+    font-size: 14px;
+}
+
+.nav-item:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+.nav-item.active {
+    background: var(--primary-color);
+    color: white;
+}
+
+.nav-item .icon {
+    font-size: 16px;
+}
+
+.header-right {
+    display: flex;
+    align-items: center;
+    gap: 8px;
+}
+
+.theme-toggle,
+.settings-btn,
+.logout-btn {
+    width: 40px;
+    height: 40px;
+    border: none;
+    border-radius: var(--radius-md);
+    background: var(--bg-tertiary);
+    color: var(--text-secondary);
+    cursor: pointer;
+    transition: var(--transition);
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    font-size: 16px;
+}
+
+.theme-toggle:hover,
+.settings-btn:hover,
+.logout-btn:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+/* Main Content */
+.main-content {
+    overflow: hidden;
+    position: relative;
+}
+
+.module-container {
+    width: 100%;
+    height: 100%;
+    overflow: auto;
+    background: var(--bg-primary);
+}
+
+/* Footer */
+.main-footer {
+    background: var(--bg-secondary);
+    border-top: 1px solid var(--border-color);
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    padding: 0 20px;
+    font-size: 12px;
+    color: var(--text-muted);
+}
+
+.footer-left,
+.footer-center,
+.footer-right {
+    display: flex;
+    align-items: center;
+    gap: 12px;
+}
+
+/* Responsive */
+@media (max-width: 768px) {
+    .main-header {
+        padding: 0 12px;
+    }
+    
+    .header-center {
+        display: none;
+    }
+    
+    .main-nav {
+        position: fixed;
+        bottom: 0;
+        left: 0;
+        right: 0;
+        background: var(--bg-secondary);
+        border-top: 1px solid var(--border-color);
+        padding: 8px;
+        z-index: 101;
+    }
+    
+    .nav-item span {
+        display: none;
+    }
+    
+    .main-content {
+        margin-bottom: 60px;
+    }
+}
+
+/* Animations */
+.fade-in {
+    animation: fadeIn 0.3s ease-in-out;
+}
+
+@keyframes fadeIn {
+    from {
+        opacity: 0;
+        transform: translateY(20px);
+    }
+    to {
+        opacity: 1;
+        transform: translateY(0);
+    }
+}
+
+.slide-in {
+    animation: slideIn 0.3s ease-in-out;
+}
+
+@keyframes slideIn {
+    from {
+        opacity: 0;
+        transform: translateX(-20px);
+    }
+    to {
+        opacity: 1;
+        transform: translateX(0);
+    }
+}
+
+/* Dashboard Styles */
+.dashboard-module {
+    padding: 20px;
+}
+
+.dashboard-header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin-bottom: 20px;
+}
+
+.dashboard-header h2 {
+    color: var(--text-primary);
+    margin: 0;
+}
+
+.refresh-btn {
+    background: var(--primary-color);
+    color: white;
+    border: none;
+    padding: 8px 16px;
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+}
+
+.refresh-btn:hover {
+    background: var(--primary-color);
+    opacity: 0.8;
+}
+
+.dashboard-grid {
+    display: grid;
+    grid-template-columns: repeat(auto-fit, minmax(300px, 1fr));
+    gap: 20px;
+}
+
+.dashboard-card {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    padding: 20px;
+    box-shadow: var(--shadow-sm);
+}
+
+.dashboard-card h3 {
+    color: var(--text-primary);
+    margin: 0 0 15px 0;
+    font-size: 18px;
+}
+
+.stat-item {
+    margin-bottom: 8px;
+    color: var(--text-secondary);
+    font-size: 14px;
+}
+
+.stat-item strong {
+    color: var(--text-primary);
+}
+
+.usage-bar {
+    width: 100%;
+    height: 8px;
+    background: var(--bg-tertiary);
+    border-radius: var(--radius-sm);
+    margin: 8px 0;
+    overflow: hidden;
+}
+
+.usage-fill {
+    height: 100%;
+    background: var(--success-color);
+    transition: width 0.3s ease;
+}
+
+.usage-fill.warning {
+    background: var(--warning-color);
+}
+
+.usage-fill.error {
+    background: var(--error-color);
+}
+
+/* Files Module Styles */
+.files-module {
+    padding: 20px;
+    height: 100%;
+    display: flex;
+    flex-direction: column;
+}
+
+.files-toolbar {
+    display: flex;
+    gap: 10px;
+    margin-bottom: 20px;
+    flex-wrap: wrap;
+}
+
+.path-bar {
+    display: flex;
+    align-items: center;
+    gap: 8px;
+    flex: 1;
+    min-width: 300px;
+}
+
+.path-up,
+.path-go {
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-secondary);
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+}
+
+.path-up:hover,
+.path-go:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+#current-path-input {
+    flex: 1;
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-primary);
+    border-radius: var(--radius-md);
+    font-family: monospace;
+}
+
+.file-actions {
+    display: flex;
+    gap: 8px;
+}
+
+.new-file,
+.new-folder,
+.upload-file,
+.refresh-files {
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-secondary);
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+}
+
+.new-file:hover,
+.new-folder:hover,
+.upload-file:hover,
+.refresh-files:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+.files-content {
+    flex: 1;
+    overflow: auto;
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    background: var(--bg-secondary);
+}
+
+.file-list {
+    padding: 10px;
+}
+
+.file-item {
+    display: flex;
+    align-items: center;
+    padding: 8px 12px;
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+    margin-bottom: 2px;
+}
+
+.file-item:hover {
+    background: var(--hover-color);
+}
+
+.file-icon {
+    font-size: 20px;
+    margin-right: 12px;
+    width: 24px;
+    text-align: center;
+}
+
+.file-info {
+    flex: 1;
+}
+
+.file-name {
+    font-weight: 500;
+    color: var(--text-primary);
+    margin-bottom: 2px;
+}
+
+.file-details {
+    font-size: 12px;
+    color: var(--text-muted);
+}
+
+.file-actions {
+    display: flex;
+    gap: 4px;
+}
+
+.file-action-btn {
+    width: 32px;
+    height: 32px;
+    border: none;
+    background: none;
+    color: var(--text-muted);
+    cursor: pointer;
+    border-radius: var(--radius-sm);
+    transition: var(--transition);
+    display: flex;
+    align-items: center;
+    justify-content: center;
+}
+
+.file-action-btn:hover {
+    background: var(--bg-tertiary);
+    color: var(--text-primary);
+}
+
+/* Terminal Module Styles */
+.terminal-module {
+    padding: 20px;
+    height: 100%;
+    display: flex;
+    flex-direction: column;
+}
+
+.terminal-toolbar {
+    display: flex;
+    gap: 10px;
+    margin-bottom: 20px;
+}
+
+.clear-terminal,
+.new-terminal {
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-secondary);
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+}
+
+.clear-terminal:hover,
+.new-terminal:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+.terminal-container {
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    background: #000;
+    overflow: hidden;
+}
+
+.terminal-output {
+    flex: 1;
+    padding: 20px;
+    overflow: auto;
+    font-family: "Courier New", monospace;
+    font-size: 14px;
+    line-height: 1.4;
+    color: #00ff00;
+}
+
+.terminal-welcome {
+    color: #ffff00;
+    margin-bottom: 10px;
+}
+
+.terminal-line {
+    margin-bottom: 5px;
+}
+
+.terminal-prompt {
+    color: #00ff00;
+    font-weight: bold;
+}
+
+.terminal-error {
+    color: #ff4444;
+}
+
+.terminal-input-line {
+    display: flex;
+    align-items: center;
+    padding: 10px 20px;
+    background: #111;
+    border-top: 1px solid #333;
+}
+
+[id^="terminal-input-"] {
+    flex: 1;
+    background: none;
+    border: none;
+    color: #00ff00;
+    font-family: "Courier New", monospace;
+    font-size: 14px;
+    outline: none;
+}
+
+.terminal-tabs {
+    display: flex;
+    gap: 4px;
+    margin-bottom: 10px;
+    border-bottom: 1px solid #333;
+    padding-bottom: 10px;
+}
+
+.terminal-tab {
+    padding: 6px 12px;
+    border: 1px solid #333;
+    background: #111;
+    color: #00ff00;
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+    font-size: 12px;
+    position: relative;
+}
+
+.terminal-tab.active {
+    background: #00ff00;
+    color: #000;
+    border-color: #00ff00;
+}
+
+.terminal-tab:hover:not(.active) {
+    background: #222;
+}
+
+.terminal-session {
+    display: none;
+    height: 100%;
+    flex-direction: column;
+}
+
+.terminal-session.active {
+    display: flex;
+}
+
+/* Editor Module Styles */
+.editor-module {
+    padding: 20px;
+    height: 100%;
+    display: flex;
+    flex-direction: column;
+}
+
+.editor-toolbar {
+    display: flex;
+    gap: 10px;
+    margin-bottom: 20px;
+    flex-wrap: wrap;
+}
+
+.open-file,
+.save-file,
+.save-as {
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-secondary);
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+}
+
+.open-file:hover,
+.save-file:hover,
+.save-as:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+.editor-theme,
+.editor-language {
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-primary);
+    border-radius: var(--radius-md);
+}
+
+.editor-container {
+    flex: 1;
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    overflow: hidden;
+}
+
+#code-editor {
+    width: 100%;
+    height: 100%;
+    background: var(--bg-secondary);
+    color: var(--text-primary);
+    border: none;
+    padding: 20px;
+    font-family: "Courier New", monospace;
+    font-size: 14px;
+    line-height: 1.4;
+    resize: none;
+    outline: none;
+}
+
+/* Processes Module Styles */
+.processes-module {
+    padding: 20px;
+    height: 100%;
+    display: flex;
+    flex-direction: column;
+}
+
+.processes-toolbar {
+    display: flex;
+    gap: 10px;
+    margin-bottom: 20px;
+    align-items: center;
+}
+
+.refresh-processes,
+.kill-process {
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-secondary);
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+}
+
+.refresh-processes:hover,
+.kill-process:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+.kill-process:disabled {
+    opacity: 0.5;
+    cursor: not-allowed;
+}
+
+.processes-table input[type="checkbox"] {
+    margin: 0;
+    cursor: pointer;
+}
+
+.processes-table th input[type="checkbox"] {
+    margin-right: 8px;
+}
+
+#process-search {
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-primary);
+    border-radius: var(--radius-md);
+    flex: 1;
+    max-width: 300px;
+}
+
+.processes-content {
+    flex: 1;
+    overflow: auto;
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    background: var(--bg-secondary);
+}
+
+.processes-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.processes-table th,
+.processes-table td {
+    padding: 12px;
+    text-align: left;
+    border-bottom: 1px solid var(--border-color);
+}
+
+.processes-table th {
+    background: var(--bg-tertiary);
+    font-weight: 600;
+    color: var(--text-primary);
+}
+
+.processes-table td {
+    color: var(--text-secondary);
+}
+
+.kill-btn {
+    padding: 4px 8px;
+    border: 1px solid var(--error-color);
+    background: none;
+    color: var(--error-color);
+    border-radius: var(--radius-sm);
+    cursor: pointer;
+    transition: var(--transition);
+    font-size: 12px;
+}
+
+.kill-btn:hover {
+    background: var(--error-color);
+    color: white;
+}
+
+/* Network Module Styles */
+.network-module {
+    padding: 20px;
+    height: 100%;
+    display: flex;
+    flex-direction: column;
+}
+
+.network-tabs {
+    display: flex;
+    gap: 4px;
+    margin-bottom: 20px;
+}
+
+.tab-btn {
+    padding: 8px 16px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-secondary);
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+}
+
+.tab-btn.active {
+    background: var(--primary-color);
+    color: white;
+    border-color: var(--primary-color);
+}
+
+.tab-btn:hover:not(.active) {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+.network-content {
+    flex: 1;
+    overflow: auto;
+}
+
+.tab-content {
+    display: none;
+    height: 100%;
+}
+
+.tab-content.active {
+    display: block;
+}
+
+.network-toolbar {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin-bottom: 20px;
+}
+
+.refresh-connections {
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-secondary);
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+}
+
+.refresh-connections:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+.connections-list {
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    background: var(--bg-secondary);
+    padding: 20px;
+    height: calc(100% - 80px);
+    overflow: auto;
+}
+
+.network-form {
+    display: flex;
+    flex-direction: column;
+    gap: 15px;
+    margin-bottom: 20px;
+    max-width: 400px;
+}
+
+.form-group {
+    display: flex;
+    flex-direction: column;
+    gap: 5px;
+}
+
+.form-group label {
+    font-weight: 500;
+    color: var(--text-primary);
+}
+
+.form-group input {
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-primary);
+    border-radius: var(--radius-md);
+    font-family: monospace;
+}
+
+.network-btn {
+    padding: 8px 16px;
+    border: none;
+    background: var(--primary-color);
+    color: white;
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+    align-self: flex-start;
+}
+
+.network-btn:hover {
+    background: var(--primary-color);
+    opacity: 0.8;
+}
+
+.network-output {
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    background: #000;
+    color: #00ff00;
+    padding: 20px;
+    font-family: "Courier New", monospace;
+    font-size: 14px;
+    line-height: 1.4;
+    height: calc(100% - 200px);
+    overflow: auto;
+}
+
+.network-output pre {
+    margin: 0;
+    white-space: pre-wrap;
+}
+
+/* Database Module Styles */
+.database-module {
+    padding: 20px;
+    height: 100%;
+    display: flex;
+    gap: 20px;
+}
+
+.database-sidebar {
+    width: 300px;
+    display: flex;
+    flex-direction: column;
+    gap: 20px;
+}
+
+.connection-form {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    padding: 20px;
+}
+
+.connection-form h3 {
+    color: var(--text-primary);
+    margin: 0 0 15px 0;
+}
+
+.connection-form select,
+.connection-form input {
+    width: 100%;
+    padding: 8px 12px;
+    margin-bottom: 10px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-tertiary);
+    color: var(--text-primary);
+    border-radius: var(--radius-md);
+}
+
+.connection-form button {
+    width: 100%;
+    padding: 8px 12px;
+    border: none;
+    background: var(--primary-color);
+    color: white;
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+}
+
+.connection-form button:hover {
+    background: var(--primary-color);
+    opacity: 0.8;
+}
+
+#database-tree {
+    flex: 1;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    padding: 20px;
+    overflow: auto;
+}
+
+.database-main {
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    gap: 20px;
+}
+
+.query-editor {
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    padding: 20px;
+}
+
+#sql-editor {
+    width: 100%;
+    height: 200px;
+    background: var(--bg-tertiary);
+    color: var(--text-primary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-md);
+    padding: 12px;
+    font-family: "Courier New", monospace;
+    font-size: 14px;
+    line-height: 1.4;
+    resize: vertical;
+    outline: none;
+}
+
+.query-editor button {
+    margin-top: 10px;
+    padding: 8px 16px;
+    border: none;
+    background: var(--primary-color);
+    color: white;
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+}
+
+.query-editor button:hover {
+    background: var(--primary-color);
+    opacity: 0.8;
+}
+
+#query-results {
+    flex: 1;
+    background: var(--bg-secondary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    padding: 20px;
+    overflow: auto;
+}
+
+.query-results-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.query-results-table th,
+.query-results-table td {
+    padding: 8px 12px;
+    text-align: left;
+    border-bottom: 1px solid var(--border-color);
+}
+
+.query-results-table th {
+    background: var(--bg-tertiary);
+    font-weight: 600;
+    color: var(--text-primary);
+}
+
+.query-results-table td {
+    color: var(--text-secondary);
+}
+
+.results-placeholder {
+    text-align: center;
+    color: var(--text-muted);
+    padding: 40px;
+}
+
+/* Loading and Error States */
+.loading {
+    text-align: center;
+    padding: 40px;
+    color: var(--text-muted);
+}
+
+.loading-module,
+.error-message {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    height: 200px;
+    color: var(--text-secondary);
+    font-size: 16px;
+}
+
+.error-message {
+    color: var(--error-color);
+}
+
+/* Button Styles */
+.btn {
+    padding: 8px 16px;
+    border: none;
+    border-radius: var(--radius-md);
+    cursor: pointer;
+    transition: var(--transition);
+    font-size: 14px;
+}
+
+.btn-primary {
+    background: var(--primary-color);
+    color: white;
+}
+
+.btn-primary:hover {
+    background: var(--primary-color);
+    opacity: 0.8;
+}
+
+.btn-secondary {
+    background: var(--bg-secondary);
+    color: var(--text-secondary);
+    border: 1px solid var(--border-color);
+}
+
+.btn-secondary:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+.btn-danger {
+    background: var(--error-color);
+    color: white;
+}
+
+.btn-danger:hover {
+    background: var(--error-color);
+    opacity: 0.8;
+}
+
+/* Form Styles */
+.form-group {
+    margin-bottom: 15px;
+}
+
+.form-group label {
+    display: block;
+    margin-bottom: 5px;
+    font-weight: 500;
+    color: var(--text-primary);
+}
+
+.form-group input,
+.form-group select,
+.form-group textarea {
+    width: 100%;
+    padding: 8px 12px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-primary);
+    border-radius: var(--radius-md);
+    font-size: 14px;
+}
+
+.form-group input:focus,
+.form-group select:focus,
+.form-group textarea:focus {
+    outline: none;
+    border-color: var(--primary-color);
+}
+
+/* Notification Styles */
+.notification {
+    position: fixed;
+    top: 20px;
+    right: 20px;
+    padding: 12px 20px;
+    border-radius: var(--radius-md);
+    box-shadow: 0 4px 12px rgba(0, 0, 0, 0.3);
+    z-index: 1001;
+    font-weight: 500;
+    max-width: 300px;
+    word-wrap: break-word;
+}
+
+.notification-success {
+    background: var(--success-color, #48bb78);
+    color: white;
+}
+
+.notification-error {
+    background: var(--error-color, #e53e3e);
+    color: white;
+}
+
+.notification-info {
+    background: var(--primary-color, #4299e1);
+    color: white;
+}
+
+@keyframes slideInRight {
+    from {
+        transform: translateX(100%);
+        opacity: 0;
+    }
+    to {
+        transform: translateX(0);
+        opacity: 1;
+    }
+}
+
+@keyframes slideOutRight {
+    from {
+        transform: translateX(0);
+        opacity: 1;
+    }
+    to {
+        transform: translateX(100%);
+        opacity: 0;
+    }
+}
+
+.modal {
+    display: none;
+    position: fixed;
+    top: 0;
+    left: 0;
+    width: 100%;
+    height: 100%;
+    background: rgba(0, 0, 0, 0.5);
+    z-index: 1000;
+    backdrop-filter: blur(2px);
+}
+
+.modal.show {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+}
+
+.modal-content {
+    background: var(--bg-primary);
+    border: 1px solid var(--border-color);
+    border-radius: var(--radius-lg);
+    box-shadow: 0 10px 30px rgba(0, 0, 0, 0.5);
+    max-width: 500px;
+    width: 90%;
+    max-height: 80vh;
+    overflow: hidden;
+    animation: slideIn 0.3s ease-out;
+}
+
+@keyframes fadeIn {
+    from { opacity: 0; }
+    to { opacity: 1; }
+}
+
+@keyframes slideIn {
+    from { transform: translateY(-20px); opacity: 0; }
+    to { transform: translateY(0); opacity: 1; }
+}
+
+.modal-header {
+    padding: 20px;
+    border-bottom: 1px solid var(--border-color);
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+}
+
+.modal-title {
+    margin: 0;
+    color: var(--text-primary);
+    font-size: 18px;
+    font-weight: 600;
+}
+
+.modal-close {
+    background: none;
+    border: none;
+    color: var(--text-muted);
+    font-size: 24px;
+    cursor: pointer;
+    padding: 0;
+    width: 30px;
+    height: 30px;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    border-radius: var(--radius-sm);
+    transition: var(--transition);
+}
+
+.modal-close:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}
+
+.modal-body {
+    padding: 20px;
+    max-height: calc(80vh - 140px);
+    overflow-y: auto;
+}
+
+.settings-group {
+    margin-bottom: 25px;
+}
+
+.settings-group h4 {
+    margin: 0 0 15px 0;
+    color: var(--text-primary);
+    font-size: 14px;
+    font-weight: 600;
+    text-transform: uppercase;
+    letter-spacing: 0.5px;
+}
+
+.setting-item {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    padding: 12px 0;
+    border-bottom: 1px solid var(--border-color);
+}
+
+.setting-item:last-child {
+    border-bottom: none;
+}
+
+.setting-label {
+    color: var(--text-primary);
+    font-weight: 500;
+}
+
+.setting-control {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+}
+
+.setting-select {
+    padding: 6px 10px;
+    border: 1px solid var(--border-color);
+    background: var(--bg-secondary);
+    color: var(--text-primary);
+    border-radius: var(--radius-md);
+    font-size: 14px;
+    min-width: 120px;
+}
+
+.setting-toggle {
+    position: relative;
+    display: inline-block;
+    width: 50px;
+    height: 24px;
+}
+
+.setting-toggle input {
+    opacity: 0;
+    width: 0;
+    height: 0;
+}
+
+.toggle-slider {
+    position: absolute;
+    cursor: pointer;
+    top: 0;
+    left: 0;
+    right: 0;
+    bottom: 0;
+    background: var(--bg-tertiary);
+    border: 1px solid var(--border-color);
+    border-radius: 24px;
+    transition: var(--transition);
+}
+
+.toggle-slider:before {
+    position: absolute;
+    content: "";
+    height: 18px;
+    width: 18px;
+    left: 2px;
+    bottom: 2px;
+    background: var(--text-muted);
+    border-radius: 50%;
+    transition: var(--transition);
+}
+
+input:checked + .toggle-slider {
+    background: var(--primary-color);
+    border-color: var(--primary-color);
+}
+
+input:checked + .toggle-slider:before {
+    transform: translateX(26px);
+    background: white;
+}
+
+.modal-footer {
+    padding: 20px;
+    border-top: 1px solid var(--border-color);
+    display: flex;
+    justify-content: flex-end;
+    gap: 10px;
+}
+
+.btn-secondary {
+    background: var(--bg-secondary);
+    color: var(--text-secondary);
+    border: 1px solid var(--border-color);
+}
+
+.btn-secondary:hover {
+    background: var(--hover-color);
+    color: var(--text-primary);
+}';
+    }
+    
+    private function getMainJS(): string
+    {
+        return <<<JAVASCRIPT
+class AleShell {
+    constructor() {
+        this.currentModule = "dashboard";
+        this.modules = new Map();
+        this.config = {};
+        this.csrfToken = null;
+        this.commandHistory = [];
+        this.init();
+    }
+
+    async init() {
+        await this.loadCSRFToken();
+        await this.loadConfig();
+        this.loadSettings(); // Load user settings
+        this.setupEventListeners();
+        this.startPeriodicUpdates();
+        // Update system info immediately on load
+        await this.updateSystemInfo().catch(error => {
+        });
+        // Dashboard is already loaded in HTML, just initialize it
+        await this.initDashboard().catch(error => {
+        });
+        this.hideLoading();
+    }
+
+    async loadCSRFToken() {
+        try {
+            const response = await fetch("auth/status");
+            const result = await response.json();
+            if (result.success && result.data && result.data.csrf_token) {
+                this.csrfToken = result.data.csrf_token;
+            } else {
+            }
+        } catch (error) {
+        }
+    }
+
+    async makeAuthenticatedRequest(url, options = {}) {
+        const headers = { ...options.headers };
+        
+        if (this.csrfToken) {
+            headers['X-CSRF-Token'] = this.csrfToken;
+        }
+        
+        return fetch(url, {
+            ...options,
+            headers: headers
+        });
+    }
+
+    async loadConfig() {
+        try {
+            const response = await fetch("api/config");
+            this.config = await response.json();
+        } catch (error) {
+            this.config = {};
+        }
+    }
+
+    setupEventListeners() {
+        // Navigation
+        document.querySelectorAll(".nav-item").forEach(item => {
+            item.addEventListener("click", (e) => {
+                const module = e.currentTarget.dataset.module;
+                this.loadModule(module);
+            });
+        });
+
+        // Theme toggle
+        document.querySelector(".theme-toggle").addEventListener("click", () => {
+            this.toggleTheme();
+        });
+
+        // Settings
+        document.querySelector(".settings-btn").addEventListener("click", () => {
+            this.showSettings();
+        });
+
+        // Logout
+        document.querySelector(".logout-btn").addEventListener("click", () => {
+            this.logout();
+        });
+
+        // Keyboard shortcuts
+        document.addEventListener("keydown", (e) => {
+            if (e.ctrlKey || e.metaKey) {
+                switch (e.key) {
+                    case "1":
+                        e.preventDefault();
+                        this.loadModule("dashboard");
+                        break;
+                    case "2":
+                        e.preventDefault();
+                        this.loadModule("files");
+                        break;
+                    case "3":
+                        e.preventDefault();
+                        this.loadModule("terminal");
+                        break;
+                    case "4":
+                        e.preventDefault();
+                        this.loadModule("editor");
+                        break;
+                }
+            }
+        });
+    }
+
+    async loadModule(moduleName) {
+        if (this.currentModule === moduleName) return;
+
+        // Update navigation
+        document.querySelectorAll(".nav-item").forEach(item => {
+            item.classList.remove("active");
+        });
+        document.querySelector('[data-module="' + moduleName + '"]').classList.add("active");
+
+        this.currentModule = moduleName;
+
+        try {
+            const container = document.getElementById("module-container");
+            container.innerHTML = '<div class="loading-module">Loading ' + moduleName + '...</div>';
+
+            // Load module content
+            const content = await this.getModuleContent(moduleName);
+            container.innerHTML = content;
+            container.className = "module-container fade-in";
+
+            // Initialize module if it has an init function
+            if (window['init' + moduleName.charAt(0).toUpperCase() + moduleName.slice(1)]) {
+                window['init' + moduleName.charAt(0).toUpperCase() + moduleName.slice(1)]();
+            } else if (this['init' + moduleName.charAt(0).toUpperCase() + moduleName.slice(1)]) {
+                this['init' + moduleName.charAt(0).toUpperCase() + moduleName.slice(1)]().catch(error => {
+                });
+            } else {
+                // For modules without specific initialization, just show the content
+            }
+
+        } catch (error) {
+            document.getElementById("module-container").innerHTML =
+                '<div class="error-message">Failed to load ' + moduleName + ' module: ' + error.message + '</div>';
+        }
+    }
+
+    async getModuleContent(moduleName) {
+        switch (moduleName) {
+            case "dashboard":
+                return this.getDashboardHTML();
+            case "files":
+                return this.getFilesHTML();
+            case "terminal":
+                return this.getTerminalHTML();
+            case "editor":
+                return this.getEditorHTML();
+            case "processes":
+                return this.getProcessesHTML();
+            case "network":
+                return this.getNetworkHTML();
+            case "database":
+                return this.getDatabaseHTML();
+            default:
+                return '<div class="module-placeholder">Module ' + moduleName + ' not implemented yet</div>';
+        }
+    }
+
+    getDashboardHTML() {
+        return '<div class="dashboard-module"><div class="dashboard-header"><h2>System Dashboard</h2><button class="refresh-btn" onclick="aleShell.refreshDashboard()">🔄 Refresh</button></div><div class="dashboard-grid"><div class="dashboard-card"><h3>System Information</h3><div id="system-stats">Loading...</div></div><div class="dashboard-card"><h3>Disk Usage</h3><div id="disk-stats">Loading...</div></div><div class="dashboard-card"><h3>Memory Usage</h3><div id="memory-stats">Loading...</div></div><div class="dashboard-card"><h3>Network</h3><div id="network-stats">Loading...</div></div></div></div>';
+    }
+
+    getFilesHTML() {
+        return '<div class="files-module"><div class="files-toolbar"><div class="path-bar"><button class="path-up">⬆️</button><input type="text" id="current-path-input" value="/" placeholder="Enter path..."><button class="path-go">Go</button></div><div class="file-actions"><button class="new-file">📄 New File</button><button class="new-folder">📁 New Folder</button><button class="upload-file">⬆️ Upload</button><button class="refresh-files">🔄 Refresh</button></div></div><div class="files-content"><div id="file-list" class="file-list"><div class="file-item loading">Loading files...</div></div></div></div>';
+    }
+
+    getTerminalHTML(terminalNumber = 1) {
+        const sessionId = 'session-' + terminalNumber;
+        return '<div class="terminal-module"><div class="terminal-toolbar"><button class="clear-terminal">🧹 Clear</button><button class="new-terminal">➕ New Tab</button></div><div class="terminal-tabs">' + this.generateTerminalTabHTML(sessionId, terminalNumber, true, false) + '</div><div class="terminal-container">' + this.generateTerminalSessionHTML(sessionId, terminalNumber, true) + '</div></div>';
+    }
+
+    generateTerminalSessionHTML(sessionId, sessionNumber, isActive = false) {
+        const activeClass = isActive ? ' active' : '';
+        return '<div id="terminal-' + sessionId + '" class="terminal-session' + activeClass + '"><div id="terminal-output-' + sessionNumber + '" class="terminal-output"><div class="terminal-welcome">AleShell Terminal v2.0.0</div><div class="terminal-welcome">Type \'help\' for available commands</div><div class="terminal-line"><span class="terminal-prompt">$</span>&nbsp;</div></div><div class="terminal-input-line"><span class="terminal-prompt">$</span>&nbsp;<input type="text" id="terminal-input-' + sessionNumber + '" placeholder="Enter command..." autocomplete="off"></div></div>';
+    }
+
+    generateTerminalTabHTML(sessionId, sessionNumber, isActive = false, canClose = true) {
+        const activeClass = isActive ? ' active' : '';
+        const closeButton = canClose ? '<span class="tab-close">❌</span>' : '';
+        return '<button class="terminal-tab' + activeClass + '" data-session="' + sessionId + '">Terminal ' + sessionNumber + closeButton + '</button>';
+    }
+
+    getEditorHTML() {
+        return '<div class="editor-module"><div class="editor-toolbar"><button class="open-file">📂 Open</button><button class="save-file">💾 Save</button><button class="save-as">💾 Save As</button><select class="editor-theme"><option value="dark">Dark</option><option value="light">Light</option></select><select class="editor-language"><option value="text">Plain Text</option><option value="php">PHP</option><option value="javascript">JavaScript</option><option value="html">HTML</option><option value="css">CSS</option><option value="python">Python</option><option value="json">JSON</option><option value="xml">XML</option><option value="sql">SQL</option></select></div><div class="editor-container"><textarea id="code-editor" placeholder="Select a file from the Files module to start editing, or use Save As to create a new file." disabled></textarea></div></div>';
+    }
+
+    getProcessesHTML() {
+        return '<div class="processes-module"><div class="processes-toolbar"><button class="refresh-processes">🔄 Refresh</button><button class="kill-process" id="kill-selected-btn" disabled>❌ Kill Selected</button><input type="text" placeholder="Search processes..." class="process-search" id="process-search"><span class="total-count" style="margin-left: 10px; font-size: 12px; color: var(--text-muted);">Loading...</span></div><div class="processes-content"><table id="processes-table" class="processes-table"><thead><tr><th><input type="checkbox" id="select-all-processes"></th><th>PID</th><th>Name</th><th>CPU %</th><th>Memory %</th><th>User</th><th>Actions</th></tr></thead><tbody><tr><td colspan="7" class="loading">Loading processes...</td></tr></tbody></table></div></div>';
+    }
+
+    getNetworkHTML() {
+        return '<div class="network-module"><div class="network-tabs"><button class="tab-btn active" data-tab="connections">🌐 Connections</button><button class="tab-btn" data-tab="ping">📡 Ping</button><button class="tab-btn" data-tab="traceroute">🗺️ Traceroute</button><button class="tab-btn" data-tab="portscan">🔍 Port Scan</button></div><div class="network-content"><div id="network-connections" class="tab-content active"><div class="network-toolbar"><button class="refresh-connections">🔄 Refresh</button></div><div id="connections-list" class="connections-list"><div class="loading">Loading network connections...</div></div></div><div id="network-ping" class="tab-content"><div class="network-form"><div class="form-group"><label for="ping-target">Target Host/IP:</label><input type="text" id="ping-target" placeholder="google.com or 8.8.8.8"></div><button onclick="startPing()" class="network-btn">🚀 Start Ping</button></div><div id="ping-output" class="network-output"></div></div><div id="network-traceroute" class="tab-content"><div class="network-form"><div class="form-group"><label for="traceroute-target">Target Host/IP:</label><input type="text" id="traceroute-target" placeholder="google.com or 8.8.8.8"></div><button onclick="startTraceroute()" class="network-btn">🗺️ Start Traceroute</button></div><div id="traceroute-output" class="network-output"></div></div><div id="network-portscan" class="tab-content"><div class="network-form"><div class="form-group"><label for="portscan-target">Target IP:</label><input type="text" id="portscan-target" placeholder="192.168.1.1"></div><div class="form-group"><label for="portscan-ports">Port Range:</label><input type="text" id="portscan-ports" placeholder="1-1000" value="1-1000"></div><button onclick="startPortScan()" class="network-btn">🔍 Start Scan</button></div><div id="portscan-output" class="network-output"></div></div></div></div>';
+    }
+
+    getDatabaseHTML() {
+        return '<div class="database-module"><div class="database-sidebar"><div class="connection-form"><h3>Database Connection</h3><select id="db-type"><option value="mysql">MySQL</option><option value="mariadb">MariaDB</option><option value="postgresql">PostgreSQL</option><option value="sqlite">SQLite</option></select><input type="text" id="db-host" placeholder="Host" value="localhost"><input type="text" id="db-port" placeholder="Port" value="3306"><input type="text" id="db-name" placeholder="Database"><input type="text" id="db-user" placeholder="Username"><input type="password" id="db-pass" placeholder="Password"><button onclick="connectDatabase()">Connect</button></div><div id="database-tree"><div style="padding: 20px; text-align: center; color: var(--text-secondary);">🗄️ Connect to a database to see its structure here</div></div></div><div class="database-main"><div class="query-editor"><div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 10px;"><h3 style="margin: 0;">SQL Query</h3><button onclick="clearQuery()" style="padding: 4px 8px; font-size: 12px;">Clear</button></div><textarea id="sql-editor" placeholder="Connect to a database first..." disabled></textarea><button onclick="executeQuery()" style="margin-top: 10px;">Execute Query</button></div><div id="query-results"><div class="results-placeholder">Query results will appear here</div></div></div></div>';
+    }
+
+    toggleTheme() {
+        const currentTheme = document.documentElement.getAttribute("data-theme");
+        const newTheme = currentTheme === "light" ? "dark" : "light";
+        document.documentElement.setAttribute("data-theme", newTheme);
+        localStorage.setItem("aleshell-theme", newTheme);
+    }
+
+    showSettings() {
+        // Create modal HTML if it doesn't exist
+        if (!document.getElementById('settings-modal')) {
+            this.createSettingsModal();
+        }
+
+        // Load current settings
+        this.loadSettings();
+
+        // Show modal
+        const modal = document.getElementById('settings-modal');
+        modal.classList.add('show');
+        document.body.style.overflow = 'hidden';
+    }
+
+    createSettingsModal() {
+        const modalHTML = `
+            <div id="settings-modal" class="modal">
+                <div class="modal-content">
+                    <div class="modal-header">
+                        <h2 class="modal-title">Settings</h2>
+                        <button class="modal-close" onclick="aleShell.closeSettings()">&times;</button>
+                    </div>
+                    <div class="modal-body">
+                        <div class="settings-group">
+                            <h4>Appearance</h4>
+                            <div class="setting-item">
+                                <span class="setting-label">Theme</span>
+                                <div class="setting-control">
+                                    <select id="theme-select" class="setting-select">
+                                        <option value="dark">Dark</option>
+                                        <option value="light">Light</option>
+                                        <option value="bluebook">Blue Book</option>
+                                        <option value="bright">Bright</option>
+                                        <option value="bterm">BTerm</option>
+                                        <option value="darkblue">Dark Blue</option>
+                                        <option value="garuda">Garuda</option>
+                                    </select>
+                                </div>
+                            </div>
+                            <div class="setting-item">
+                                <span class="setting-label">Auto-refresh Dashboard</span>
+                                <div class="setting-control">
+                                    <label class="setting-toggle">
+                                        <input type="checkbox" id="auto-refresh-toggle">
+                                        <span class="toggle-slider"></span>
+                                    </label>
+                                </div>
+                            </div>
+                        </div>
+
+                        <div class="settings-group">
+                            <h4>Terminal</h4>
+                            <div class="setting-item">
+                                <span class="setting-label">Command History Size</span>
+                                <div class="setting-control">
+                                    <select id="history-size-select" class="setting-select">
+                                        <option value="50">50 commands</option>
+                                        <option value="100">100 commands</option>
+                                        <option value="200">200 commands</option>
+                                        <option value="500">500 commands</option>
+                                    </select>
+                                </div>
+                            </div>
+                        </div>
+
+                        <div class="settings-group">
+                            <h4>System</h4>
+                            <div class="setting-item">
+                                <span class="setting-label">Language</span>
+                                <div class="setting-control">
+                                    <select id="language-select" class="setting-select">
+                                        <option value="en">English</option>
+                                        <option value="es">Español</option>
+                                        <option value="fr">Français</option>
+                                        <option value="de">Deutsch</option>
+                                        <option value="it">Italiano</option>
+                                        <option value="pt">Português</option>
+                                        <option value="ru">Русский</option>
+                                        <option value="ja">日本語</option>
+                                        <option value="ko">한국어</option>
+                                        <option value="zh">中文</option>
+                                    </select>
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+                    <div class="modal-footer">
+                        <button class="btn btn-secondary" onclick="aleShell.closeSettings()">Cancel</button>
+                        <button class="btn btn-primary" onclick="aleShell.saveSettings()">Save Settings</button>
+                    </div>
+                </div>
+            </div>
+        `;
+
+        document.body.insertAdjacentHTML('beforeend', modalHTML);
+
+        // Add event listeners
+        this.setupSettingsEventListeners();
+    }
+
+    setupSettingsEventListeners() {
+        // Close modal when clicking outside
+        document.getElementById('settings-modal').addEventListener('click', (e) => {
+            if (e.target.id === 'settings-modal') {
+                this.closeSettings();
+            }
+        });
+
+        // Close modal on Escape key
+        document.addEventListener('keydown', (e) => {
+            if (e.key === 'Escape' && document.getElementById('settings-modal').classList.contains('show')) {
+                this.closeSettings();
+            }
+        });
+    }
+
+    loadSettings() {
+        // Load and apply theme
+        const savedTheme = localStorage.getItem('aleshell-theme') || 'dark';
+        document.documentElement.setAttribute('data-theme', savedTheme);
+
+        // Load command history size and trim if needed
+        const historySize = parseInt(localStorage.getItem('aleshell-history-size') || '100');
+        if (this.commandHistory && this.commandHistory.length > historySize) {
+            this.commandHistory = this.commandHistory.slice(-historySize);
+            localStorage.setItem('aleshell-command-history', JSON.stringify(this.commandHistory));
+        }
+
+        // Load language (for future use)
+        const language = localStorage.getItem('aleshell-language') || 'en';
+        // Apply language settings if needed
+    }
+
+    saveSettings() {
+        // Save theme
+        const themeSelect = document.getElementById('theme-select');
+        if (themeSelect) {
+            const newTheme = themeSelect.value;
+            document.documentElement.setAttribute('data-theme', newTheme);
+            localStorage.setItem('aleshell-theme', newTheme);
+        }
+
+        // Save auto-refresh setting
+        const autoRefreshToggle = document.getElementById('auto-refresh-toggle');
+        if (autoRefreshToggle) {
+            const autoRefreshEnabled = autoRefreshToggle.checked;
+            localStorage.setItem('aleshell-auto-refresh', autoRefreshEnabled.toString());
+
+            // Apply auto-refresh setting
+            if (autoRefreshEnabled) {
+                this.startPeriodicUpdates();
+            } else {
+                // Stop periodic updates (we'll restart them when needed)
+                if (this.updateInterval) {
+                    clearInterval(this.updateInterval);
+                    this.updateInterval = null;
+                }
+            }
+        }
+
+        // Save command history size
+        const historySizeSelect = document.getElementById('history-size-select');
+        if (historySizeSelect) {
+            const historySize = historySizeSelect.value;
+            localStorage.setItem('aleshell-history-size', historySize);
+
+            // Trim existing history if needed
+            if (this.commandHistory && this.commandHistory.length > parseInt(historySize)) {
+                this.commandHistory = this.commandHistory.slice(-parseInt(historySize));
+                localStorage.setItem('aleshell-command-history', JSON.stringify(this.commandHistory));
+            }
+        }
+
+        // Save language
+        const languageSelect = document.getElementById('language-select');
+        if (languageSelect) {
+            const language = languageSelect.value;
+            localStorage.setItem('aleshell-language', language);
+            // Note: Language changes would require page reload to take effect
+        }
+
+        // Close modal
+        this.closeSettings();
+
+        // Show success message
+        this.showNotification('Settings saved successfully!', 'success');
+    }
+
+    closeSettings() {
+        const modal = document.getElementById('settings-modal');
+        if (modal) {
+            modal.classList.remove('show');
+            document.body.style.overflow = '';
+        }
+    }
+
+    showNotification(message, type = 'info') {
+        // Create notification element
+        const notification = document.createElement('div');
+        notification.className = 'notification notification-' + type;
+        notification.textContent = message;
+        notification.style.cssText = `
+            position: fixed;
+            top: 20px;
+            right: 20px;
+            background: ' + (type === 'success' ? '#48bb78' : '#e53e3e') + ';
+            color: white;
+            padding: 12px 20px;
+            border-radius: var(--radius-md);
+            box-shadow: 0 4px 12px rgba(0, 0, 0, 0.3);
+            z-index: 1001;
+            animation: slideInRight 0.3s ease-out;
+            font-weight: 500;
+        `;
+
+        document.body.appendChild(notification);
+
+        // Remove notification after 3 seconds
+        setTimeout(() => {
+            notification.style.animation = 'slideOutRight 0.3s ease-in';
+            setTimeout(() => {
+                if (notification.parentNode) {
+                    notification.parentNode.removeChild(notification);
+                }
+            }, 300);
+        }, 3000);
+    }
+
+    async logout() {
+        if (confirm("Are you sure you want to logout?")) {
+            try {
+                await fetch("auth/logout", { method: "POST" });
+                window.location.reload();
+            } catch (error) {
+                window.location.reload();
+            }
+        }
+    }
+
+    startPeriodicUpdates() {
+        // Check if auto-refresh is enabled
+        const autoRefreshEnabled = localStorage.getItem('aleshell-auto-refresh') !== 'false';
+
+        if (!autoRefreshEnabled) {
+            return;
+        }
+
+        // Clear any existing interval
+        if (this.updateInterval) {
+            clearInterval(this.updateInterval);
+        }
+
+        // Update current time every second
+        this.updateInterval = setInterval(() => {
+            this.updateTime();
+        }, 1000);
+    }
+
+    async updateSystemInfo() {
+        try {
+            const response = await fetch("api/system/info");
+            const result = await response.json();
+            if (result.success && result.data) {
+                const data = result.data;
+                document.getElementById("system-info").textContent =
+                    data.os + " - Load: " + data.load_average["1min"];
+                // Update current user in footer
+                if (data.current_user) {
+                    document.getElementById("current-user").textContent = data.current_user;
+                }
+            }
+        } catch (error) {
+        }
+    }
+
+    updateTime() {
+        const now = new Date();
+        document.getElementById("server-time").textContent =
+            now.toLocaleTimeString();
+    }
+
+    hideLoading() {
+        const loading = document.getElementById("loading");
+        loading.style.opacity = "0";
+        setTimeout(() => {
+            loading.style.display = "none";
+        }, 300);
+    }
+
+    async refreshDashboard() {
+        await this.updateSystemInfo();
+        await this.updateDashboardData();
+    }
+
+    async initDashboard() {
+        await this.updateSystemInfo();
+        await this.updateDashboardData();
+    }
+
+    async updateDashboardData() {
+        try {
+            const response = await fetch("api/system/info");
+
+            if (!response.ok) {
+                throw new Error('HTTP ' + response.status + ': ' + response.statusText);
+            }
+
+            const result = await response.json();
+
+            if (result.success && result.data) {
+                const data = result.data;
+
+                // Update system stats
+                const systemStats = document.getElementById("system-stats");
+                if (systemStats) {
+                    systemStats.innerHTML = '<div class="stat-item"><strong>OS:</strong> ' + (data.os || "Unknown") + '</div><div class="stat-item"><strong>Hostname:</strong> ' + (data.hostname || "Unknown") + '</div><div class="stat-item"><strong>PHP:</strong> ' + (data.php_version || "Unknown") + '</div><div class="stat-item"><strong>Load:</strong> ' + (data.load_average ? data.load_average["1min"] + " / " + data.load_average["5min"] + " / " + data.load_average["15min"] : "N/A") + '</div><div class="stat-item"><strong>Uptime:</strong> ' + (data.uptime ? data.uptime.formatted : "N/A") + '</div><div class="stat-item"><strong>Processes:</strong> ' + (data.processes || "N/A") + '</div>';
+                }
+
+                // Update disk stats
+                const diskStats = document.getElementById("disk-stats");
+                if (diskStats && data.disk) {
+                    const disk = data.disk;
+                    const diskClass = disk.usage_percent > 90 ? "error" : disk.usage_percent > 80 ? "warning" : "";
+                    diskStats.innerHTML = '<div class="stat-item"><strong>Total:</strong> ' + (disk.total / (1024**3)).toFixed(1) + ' GB</div><div class="stat-item"><strong>Free:</strong> ' + (disk.free / (1024**3)).toFixed(1) + ' GB</div><div class="stat-item"><strong>Used:</strong> ' + (disk.used / (1024**3)).toFixed(1) + ' GB</div><div class="usage-bar"><div class="usage-fill ' + diskClass + '" style="width: ' + disk.usage_percent + '%"></div></div><div class="stat-item"><strong>Usage:</strong> ' + disk.usage_percent + '%</div>';
+                } else if (diskStats) {
+                    diskStats.innerHTML = "Disk information not available";
+                }
+
+                // Update memory stats
+                const memoryStats = document.getElementById("memory-stats");
+                if (memoryStats && data.memory) {
+                    const memory = data.memory;
+                    const memoryClass = memory.usage_percent > 90 ? "error" : memory.usage_percent > 80 ? "warning" : "";
+                    memoryStats.innerHTML = '<div class="stat-item"><strong>Total:</strong> ' + (memory.total / (1024**3)).toFixed(1) + ' GB</div><div class="stat-item"><strong>Free:</strong> ' + (memory.free / (1024**3)).toFixed(1) + ' GB</div><div class="stat-item"><strong>Used:</strong> ' + (memory.used / (1024**3)).toFixed(1) + ' GB</div><div class="stat-item"><strong>Cached:</strong> ' + (memory.cached / (1024**3)).toFixed(1) + ' GB</div><div class="usage-bar"><div class="usage-fill ' + memoryClass + '" style="width: ' + memory.usage_percent + '%"></div></div><div class="stat-item"><strong>Usage:</strong> ' + memory.usage_percent + '%</div>';
+                } else if (memoryStats) {
+                    memoryStats.innerHTML = "Memory information not available";
+                }
+
+                // Update network stats
+                const networkStats = document.getElementById("network-stats");
+                if (networkStats && data.network) {
+                    networkStats.innerHTML = '<div class="stat-item"><strong>Interfaces:</strong> ' + (data.network.interfaces ? data.network.interfaces.join(", ") : "N/A") + '</div><div class="stat-item"><strong>Status:</strong> Active</div>';
+                } else if (networkStats) {
+                    networkStats.innerHTML = "Network information not available";
+                }
+
+            } else {
+                throw new Error("API returned success=false or no data");
+            }
+        } catch (error) {
+
+            // Show error in all stats sections
+            const sections = ["system-stats", "disk-stats", "memory-stats", "network-stats"];
+            sections.forEach(id => {
+                const element = document.getElementById(id);
+                if (element) {
+                    element.innerHTML = '<div style="color: #e53e3e;">Error loading data: ' + error.message + '</div>';
+                }
+            });
+        }
+    }
+
+    // Files Module Implementation
+    async initFiles() {
+        await this.loadFiles("/");
+        this.setupFileEventListeners();
+    }
+
+    async initEditor() {
+        this.setupEditorEventListeners();
+    }
+
+    setupEditorEventListeners() {
+        document.querySelector(".save-file").addEventListener("click", () => {
+            this.saveFile();
+        });
+
+        document.querySelector(".save-as").addEventListener("click", () => {
+            this.saveAsFile();
+        });
+
+        document.querySelector(".open-file").addEventListener("click", () => {
+            this.openFile();
+        });
+
+        // Keyboard shortcuts
+        document.addEventListener("keydown", (e) => {
+            if ((e.ctrlKey || e.metaKey) && e.key === "s") {
+                e.preventDefault();
+                this.saveFile();
+            }
+        });
+    }
+
+    async saveAsFile() {
+        const editor = document.getElementById("code-editor");
+        if (!editor) {
+            alert("No editor available");
+            return;
+        }
+
+        const content = editor.value;
+        const suggestedName = editor.dataset.filePath ? 
+            editor.dataset.filePath.split("/").pop() : 
+            "untitled.txt";
+        
+        const fileName = prompt("Save file as:", suggestedName);
+        if (!fileName) return;
+
+        // For now, save in current directory (could be improved to ask for path)
+        const currentPath = "/"; // Could get this from somewhere
+        const filePath = currentPath + fileName;
+
+        try {
+            const response = await this.makeAuthenticatedRequest("api/files/write", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ path: filePath, content: content })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                alert("File saved as: " + fileName);
+                editor.dataset.filePath = filePath;
+            } else {
+                alert("Error saving file: " + result.message);
+            }
+        } catch (error) {
+            alert("Error saving file: " + error.message);
+        }
+    }
+
+    openFile() {
+        // Switch back to files module to select a file
+        this.loadModule("files");
+        alert("Please double-click on a file in the files list to open it for editing.");
+    }
+
+    async loadFiles(path) {
+        try {
+            const response = await this.makeAuthenticatedRequest("api/files/list", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ path: path })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                this.renderFileList(result.data.files);
+                document.getElementById("current-path-input").value = result.data.path;
+            } else {
+                document.getElementById("file-list").innerHTML = '<div style="color: #e53e3e; padding: 20px;">Error: ' + result.message + '</div>';
+            }
+        } catch (error) {
+            document.getElementById("file-list").innerHTML = '<div style="color: #e53e3e; padding: 20px;">Error loading files: ' + error.message + '</div>';
+        }
+    }
+
+    renderFileList(files) {
+        const fileList = document.getElementById("file-list");
+        let html = "";
+        files.forEach(file => {
+            const icon = file.type === "directory" ? "📁" : "📄";
+            const size = file.type === "file" ? (file.size / 1024).toFixed(1) + " KB" : "";
+            const safePath = file.path.replace(/'/g, "\\'");
+            html += '<div class="file-item" data-path="' + file.path + '" data-type="' + file.type + '"><div class="file-icon">' + icon + '</div><div class="file-info"><div class="file-name">' + file.name + '</div><div class="file-details">' + size + ' ' + file.permissions + ' ' + file.owner + ':' + file.group + '</div></div><div class="file-actions"><button class="file-action-btn" onclick="aleShell.editFile(\'' + safePath + '\')" title="Edit">✏️</button><button class="file-action-btn" onclick="aleShell.renameFile(\'' + safePath + '\')" title="Rename">📝</button><button class="file-action-btn" onclick="aleShell.downloadFile(\'' + safePath + '\')" title="Download">⬇️</button><button class="file-action-btn" onclick="aleShell.deleteFile(\'' + safePath + '\')" title="Delete">🗑️</button></div></div>';
+        });
+        fileList.innerHTML = html;
+    }
+
+    setupFileEventListeners() {
+        // Path navigation
+        document.querySelector(".path-go").addEventListener("click", () => {
+            const path = document.getElementById("current-path-input").value;
+            this.loadFiles(path);
+        });
+
+        document.getElementById("current-path-input").addEventListener("keypress", (e) => {
+            if (e.key === "Enter") {
+                const path = document.getElementById("current-path-input").value;
+                this.loadFiles(path);
+            }
+        });
+
+        document.querySelector(".path-up").addEventListener("click", () => {
+            const currentPath = document.getElementById("current-path-input").value;
+            const parentPath = currentPath.split("/").slice(0, -1).join("/") || "/";
+            this.loadFiles(parentPath);
+        });
+
+        // File actions
+        document.querySelector(".refresh-files").addEventListener("click", () => {
+            const path = document.getElementById("current-path-input").value;
+            this.loadFiles(path);
+        });
+
+        document.querySelector(".new-file").addEventListener("click", () => {
+            this.createNewFile();
+        });
+
+        document.querySelector(".new-folder").addEventListener("click", () => {
+            this.createNewFolder();
+        });
+
+        document.querySelector(".upload-file").addEventListener("click", () => {
+            this.uploadFile();
+        });
+
+        // File item clicks
+        document.getElementById("file-list").addEventListener("click", (e) => {
+            const fileItem = e.target.closest(".file-item");
+            if (fileItem && fileItem.dataset.type === "directory") {
+                this.loadFiles(fileItem.dataset.path);
+            }
+        });
+
+        // Double click to edit files
+        document.getElementById("file-list").addEventListener("dblclick", (e) => {
+            const fileItem = e.target.closest(".file-item");
+            if (fileItem && fileItem.dataset.type === "file") {
+                this.editFile(fileItem.dataset.path);
+            }
+        });
+    }
+
+    async downloadFile(path) {
+        try {
+            const response = await this.makeAuthenticatedRequest("api/files/read", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ path: path })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                const blob = new Blob([result.data.content], { type: "text/plain" });
+                const url = URL.createObjectURL(blob);
+                const a = document.createElement("a");
+                a.href = url;
+                a.download = path.split("/").pop();
+                a.click();
+                URL.revokeObjectURL(url);
+            } else {
+                alert("Error downloading file: " + result.message);
+            }
+        } catch (error) {
+            alert("Error downloading file: " + error.message);
+        }
+    }
+
+    async deleteFile(path) {
+        if (!confirm('Are you sure you want to delete ' + path + '?')) return;
+        
+        try {
+            const response = await this.makeAuthenticatedRequest("api/files/delete", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ path: path })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                const currentPath = document.getElementById("current-path-input").value;
+                this.loadFiles(currentPath);
+            } else {
+                alert("Error deleting file: " + result.message);
+            }
+        } catch (error) {
+            alert("Error deleting file: " + error.message);
+        }
+    }
+
+    async createNewFile() {
+        const currentPath = document.getElementById("current-path-input").value;
+        const fileName = prompt("Enter file name:");
+        if (!fileName) return;
+
+        const filePath = currentPath + "/" + fileName;
+
+        try {
+            const response = await this.makeAuthenticatedRequest("api/files/write", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ path: filePath, content: "" })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                this.loadFiles(currentPath);
+                // Open the file for editing
+                this.editFile(filePath);
+            } else {
+                alert("Error creating file: " + result.message);
+            }
+        } catch (error) {
+            alert("Error creating file: " + error.message);
+        }
+    }
+
+    async createNewFolder() {
+        const currentPath = document.getElementById("current-path-input").value;
+        const folderName = prompt("Enter folder name:");
+        if (!folderName) return;
+
+        const folderPath = currentPath + "/" + folderName;
+
+        try {
+            const response = await this.makeAuthenticatedRequest("api/files/create-directory", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ path: folderPath })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                this.loadFiles(currentPath);
+            } else {
+                alert("Error creating folder: " + result.message);
+            }
+        } catch (error) {
+            alert("Error creating folder: " + error.message);
+        }
+    }
+
+    uploadFile() {
+        // Create a hidden file input
+        const input = document.createElement("input");
+        input.type = "file";
+        input.multiple = true;
+        input.style.display = "none";
+        
+        input.addEventListener("change", async (e) => {
+            const files = e.target.files;
+            if (!files.length) return;
+
+            const currentPath = document.getElementById("current-path-input").value;
+            
+            for (let file of files) {
+                await this.uploadSingleFile(file, currentPath);
+            }
+            
+            this.loadFiles(currentPath);
+            document.body.removeChild(input);
+        });
+        
+        document.body.appendChild(input);
+        input.click();
+    }
+
+    async uploadSingleFile(file, targetPath) {
+        const formData = new FormData();
+        formData.append("file", file);
+        formData.append("path", targetPath);
+
+        try {
+            const response = await this.makeAuthenticatedRequest("api/files/upload", {
+                method: "POST",
+                body: formData
+            });
+            const result = await response.json();
+            
+            if (!result.success) {
+                alert("Error uploading " + file.name + ": " + result.message);
+            }
+        } catch (error) {
+            alert("Error uploading " + file.name + ": " + error.message);
+        }
+    }
+
+    async editFile(path) {
+        try {
+            const response = await this.makeAuthenticatedRequest("api/files/read", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ path: path })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                // Switch to editor module and load the file
+                this.loadModule("editor");
+                // Set a timeout to ensure the editor is loaded
+                setTimeout(() => {
+                    const editor = document.getElementById("code-editor");
+                    if (editor) {
+                        editor.value = result.data.content;
+                        editor.disabled = false;
+                        // Store the file path for saving
+                        editor.dataset.filePath = path;
+                        // Update language based on file extension
+                        const extension = path.split(".").pop().toLowerCase();
+                        const languageSelect = document.getElementById("editor-language");
+                        if (languageSelect) {
+                            const options = languageSelect.querySelectorAll("option");
+                            for (let option of options) {
+                                if (option.value === extension) {
+                                    option.selected = true;
+                                    break;
+                                }
+                            }
+                        }
+                    }
+                }, 100);
+            } else {
+                alert("Error reading file: " + result.message);
+            }
+        } catch (error) {
+            alert("Error reading file: " + error.message);
+        }
+    }
+
+    async renameFile(path) {
+        const currentName = path.split("/").pop();
+        const newName = prompt("Enter new name for " + currentName + ":", currentName);
+        if (!newName || newName === currentName) return;
+
+        const newPath = path.replace(/\/[^\/]+$/, "/" + newName);
+
+        try {
+            const response = await this.makeAuthenticatedRequest("api/files/rename", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ old_path: path, new_path: newPath })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                const currentPath = document.getElementById("current-path-input").value;
+                this.loadFiles(currentPath);
+            } else {
+                alert("Error renaming file: " + result.message);
+            }
+        } catch (error) {
+            alert("Error renaming file: " + error.message);
+        }
+    }
+
+    async saveFile() {
+        const editor = document.getElementById("code-editor");
+        if (!editor || !editor.dataset.filePath) {
+            alert("No file is currently open");
+            return;
+        }
+
+        const path = editor.dataset.filePath;
+        const content = editor.value;
+
+        try {
+            const response = await this.makeAuthenticatedRequest("api/files/write", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ path: path, content: content })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                alert("File saved successfully!");
+            } else {
+                alert("Error saving file: " + result.message);
+            }
+        } catch (error) {
+            alert("Error saving file: " + error.message);
+        }
+    }
+
+    // Terminal Module Implementation
+    async initTerminal() {
+        this.terminalSessions = new Map();
+        this.activeSessionId = 'session-1';
+        this.sessionCounter = 1;
+        
+        // Load command history first
+        this.loadCommandHistory();
+        
+        // Initialize first session
+        this.createTerminalSession('session-1');
+        this.setupTerminalEventListeners();
+        
+        // Setup input event listener for the first session
+        const input = document.getElementById("terminal-input-1");
+        if (input) {
+            this.setupTerminalInputListeners('session-1');
+        }
+        
+        // Ensure the first terminal is active
+        this.switchTerminalSession('session-1');
+    }
+
+    loadCommandHistory() {
+        // Load command history from localStorage
+        const history = localStorage.getItem('aleshell-command-history');
+        if (history) {
+            try {
+                this.commandHistory = JSON.parse(history);
+            } catch (e) {
+                this.commandHistory = [];
+            }
+        } else {
+            this.commandHistory = [];
+        }
+    }
+
+    generateTerminalSessionHTML(sessionId, sessionNumber, isActive = false) {
+        const activeClass = isActive ? ' active' : '';
+        return '<div id="terminal-' + sessionId + '" class="terminal-session' + activeClass + '"><div id="terminal-output-' + sessionNumber + '" class="terminal-output"><div class="terminal-welcome">AleShell Terminal v2.0.0</div><div class="terminal-welcome">Type \'help\' for available commands</div><div class="terminal-line"><span class="terminal-prompt">$</span>&nbsp;</div></div><div class="terminal-input-line"><span class="terminal-prompt">$</span>&nbsp;<input type="text" id="terminal-input-' + sessionNumber + '" placeholder="Enter command..." autocomplete="off"></div></div>';
+    }
+
+    generateTerminalTabHTML(sessionId, sessionNumber, isActive = false, canClose = true) {
+        const activeClass = isActive ? ' active' : '';
+        const closeButton = canClose ? '<span class="tab-close">❌</span>' : '';
+        return '<button class="terminal-tab' + activeClass + '" data-session="' + sessionId + '">Terminal ' + sessionNumber + closeButton + '</button>';
+    }
+
+    setupTerminalEventListeners() {
+        // New tab button
+        document.querySelector(".new-terminal").addEventListener("click", () => {
+            this.createNewTerminalTab();
+        });
+
+        // Clear button
+        document.querySelector(".clear-terminal").addEventListener("click", () => {
+            this.clearActiveTerminal();
+        });
+
+        // Tab switching and closing
+        document.addEventListener("click", (e) => {
+            if (e.target.classList.contains("terminal-tab") || e.target.closest(".terminal-tab")) {
+                // Check if the click was not on the close button
+                if (!e.target.classList.contains("tab-close") && !e.target.closest(".tab-close")) {
+                    const tab = e.target.closest(".terminal-tab");
+                    if (tab) {
+                        const sessionId = tab.dataset.session;
+                        this.switchTerminalSession(sessionId);
+                    }
+                }
+            }
+        });
+
+        // Close tab on X click
+        document.addEventListener("click", (e) => {
+            if (e.target.classList.contains("tab-close") || (e.target.parentElement && e.target.parentElement.classList.contains("tab-close"))) {
+                const tab = e.target.closest(".terminal-tab");
+                if (tab) {
+                    e.stopPropagation();
+                    const sessionId = tab.dataset.session;
+                    this.closeTerminalSession(sessionId);
+                }
+            }
+        });
+    }
+
+    createTerminalSession(sessionId) {
+        const session = {
+            id: sessionId,
+            output: '',
+            commandHistory: [],
+            currentDirectory: '/',
+            tabElement: null,
+            sessionElement: null,
+            inputElement: null,
+            historyIndex: -1, // Start at -1, not at end of history
+            currentInput: '' // Store current input when navigating history
+        };
+        
+        this.terminalSessions.set(sessionId, session);
+        return session;
+    }
+
+    setupTerminalInputListeners(sessionId) {
+        const session = this.terminalSessions.get(sessionId);
+        if (!session) return;
+        
+        const sessionNumber = sessionId.replace('session-', '');
+        const input = document.getElementById('terminal-input-' + sessionNumber);
+        if (!input) return;
+        
+        // Remove existing listeners to avoid duplicates
+        input.removeEventListener('keydown', this.handleTerminalKeydown);
+        input.removeEventListener('keypress', this.handleTerminalKeypress);
+        
+        // Add new listeners
+        input.addEventListener('keydown', (e) => this.handleTerminalKeydown(e, sessionId));
+        input.addEventListener('keypress', (e) => this.handleTerminalKeypress(e, sessionId));
+    }
+
+    handleTerminalKeydown(e, sessionId) {
+        const session = this.terminalSessions.get(sessionId);
+        if (!session) return;
+        
+        const sessionNumber = sessionId.replace('session-', '');
+        const input = document.getElementById('terminal-input-' + sessionNumber);
+        if (!input) return;
+        
+        if (e.key === 'ArrowUp') {
+            e.preventDefault();
+            this.navigateHistory(sessionId, 'up');
+        } else if (e.key === 'ArrowDown') {
+            e.preventDefault();
+            this.navigateHistory(sessionId, 'down');
+        }
+    }
+
+    handleTerminalKeypress(e, sessionId) {
+        const session = this.terminalSessions.get(sessionId);
+        if (!session) return;
+        
+        const sessionNumber = sessionId.replace('session-', '');
+        const input = document.getElementById('terminal-input-' + sessionNumber);
+        if (!input) return;
+        
+        if (e.key === 'Enter') {
+            const command = input.value.trim();
+            if (command) {
+                this.addToHistory(sessionId, command);
+                this.executeCommand(command, sessionId);
+                input.value = '';
+                // Reset history navigation
+                session.historyIndex = -1;
+                session.currentInput = '';
+            }
+        }
+    }
+
+    navigateHistory(sessionId, direction) {
+        const session = this.terminalSessions.get(sessionId);
+        if (!session) return;
+        
+        const sessionNumber = sessionId.replace('session-', '');
+        const input = document.getElementById('terminal-input-' + sessionNumber);
+        if (!input) return;
+        
+        // Use global command history
+        const history = this.commandHistory;
+        if (history.length === 0) return;
+        
+        if (direction === 'up') {
+            if (session.historyIndex === -1) {
+                // First up arrow after command execution - go to last command
+                session.currentInput = input.value;
+                session.historyIndex = history.length - 1;
+            } else if (session.historyIndex > 0) {
+                session.historyIndex--;
+            }
+        } else if (direction === 'down') {
+            if (session.historyIndex === -1) return; // Can't go down from initial state
+            
+            if (session.historyIndex < history.length - 1) {
+                session.historyIndex++;
+            } else {
+                // Back to current input (after last command)
+                input.value = session.currentInput;
+                session.historyIndex = -1;
+                return;
+            }
+        }
+        
+        // Set the input value to the history item
+        if (session.historyIndex >= 0 && session.historyIndex < history.length) {
+            input.value = history[session.historyIndex];
+        }
+        
+        // Move cursor to end
+        input.setSelectionRange(input.value.length, input.value.length);
+    }
+
+    addToHistory(sessionId, command) {
+        // Add to global history
+        const lastCommand = this.commandHistory[this.commandHistory.length - 1];
+        if (lastCommand === command) {
+            // Same as last command, don't add duplicate
+            return;
+        }
+        
+        const existingIndex = this.commandHistory.indexOf(command);
+        if (existingIndex !== -1) {
+            // Remove from current position
+            this.commandHistory.splice(existingIndex, 1);
+        }
+        // Add to end
+        this.commandHistory.push(command);
+        // Keep only last 100 commands
+        if (this.commandHistory.length > 100) {
+            this.commandHistory.splice(0, this.commandHistory.length - 100);
+        }
+        // Save to localStorage
+        localStorage.setItem('aleshell-command-history', JSON.stringify(this.commandHistory));
+    }
+
+    createNewTerminalTab() {
+        this.sessionCounter++;
+        const sessionId = 'session-' + this.sessionCounter;
+        const sessionNumber = this.sessionCounter;
+        
+        // Create session data
+        const session = this.createTerminalSession(sessionId);
+        
+        // Add tab button
+        const tabsContainer = document.querySelector(".terminal-tabs");
+        const tabButton = document.createElement("div");
+        tabButton.innerHTML = this.generateTerminalTabHTML(sessionId, sessionNumber, false, true);
+        tabsContainer.appendChild(tabButton.firstElementChild);
+        
+        // Create session container
+        const container = document.querySelector(".terminal-container");
+        const sessionDiv = document.createElement("div");
+        sessionDiv.innerHTML = this.generateTerminalSessionHTML(sessionId, sessionNumber);
+        container.appendChild(sessionDiv.firstElementChild);
+        
+        // Setup input event listener for this session
+        this.setupTerminalInputListeners(sessionId);
+        
+        // Switch to new tab
+        this.switchTerminalSession(sessionId);
+    }
+
+    switchTerminalSession(sessionId) {
+        // Update active session
+        this.activeSessionId = sessionId;
+        
+        // Update tab buttons
+        document.querySelectorAll(".terminal-tab").forEach(tab => {
+            tab.classList.remove("active");
+        });
+        document.querySelector('[data-session="' + sessionId + '"]').classList.add("active");
+        
+        // Update session containers
+        document.querySelectorAll(".terminal-session").forEach(session => {
+            session.classList.remove("active");
+        });
+        document.getElementById('terminal-' + sessionId).classList.add("active");
+        
+        // Reset history navigation for the new active session
+        const session = this.terminalSessions.get(sessionId);
+        if (session) {
+            session.historyIndex = -1;
+            session.currentInput = '';
+        }
+        
+        // Focus input
+        const sessionNumber = sessionId.replace('session-', '');
+        const input = document.getElementById('terminal-input-' + sessionNumber);
+        if (input) {
+            input.focus();
+            // Ensure listeners are set up
+            this.setupTerminalInputListeners(sessionId);
+        }
+    }
+
+    closeTerminalSession(sessionId) {
+        // Don't close if it's the last session
+        if (this.terminalSessions.size <= 1) {
+            return;
+        }
+        
+        // Remove from sessions map
+        this.terminalSessions.delete(sessionId);
+        
+        // Remove tab button
+        const tabButton = document.querySelector('[data-session="' + sessionId + '"]');
+        if (tabButton) {
+            tabButton.remove();
+        }
+        
+        // Remove session container
+        const sessionContainer = document.getElementById('terminal-' + sessionId);
+        if (sessionContainer) {
+            sessionContainer.remove();
+        }
+        
+        // Switch to another session if this was active
+        if (this.activeSessionId === sessionId) {
+            const remainingSessions = Array.from(this.terminalSessions.keys());
+            if (remainingSessions.length > 0) {
+                this.switchTerminalSession(remainingSessions[0]);
+            }
+        }
+    }
+
+    async executeCommand(command, sessionId = null) {
+        const targetSessionId = sessionId || this.activeSessionId;
+        const session = this.terminalSessions.get(targetSessionId);
+        
+        if (!session) return;
+        
+        const sessionNumber = targetSessionId.replace('session-', '');
+        const outputId = 'terminal-output-' + sessionNumber;
+        const output = document.getElementById(outputId);
+        
+        if (!output) return;
+        
+        // Add command to output
+        output.innerHTML += '<div class="terminal-line"><span class="terminal-prompt">$</span> ' + command + '</div>';
+        
+        try {
+            const response = await fetch("api/terminal/execute", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ command: command, session_id: targetSessionId })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                output.innerHTML += '<pre class="terminal-output">' + result.data.output + '</pre>';
+            } else {
+                output.innerHTML += '<div class="terminal-error">Error: ' + result.message + '</div>';
+            }
+        } catch (error) {
+            output.innerHTML += '<div class="terminal-error">Error executing command: ' + error.message + '</div>';
+        }
+        
+        // Scroll to bottom
+        output.scrollTop = output.scrollHeight;
+    }
+
+    clearActiveTerminal() {
+        const sessionNumber = this.activeSessionId.replace('session-', '');
+        const output = document.getElementById('terminal-output-' + sessionNumber);
+        
+        if (output) {
+            output.innerHTML = '<div class="terminal-welcome">Terminal cleared</div><div class="terminal-line"><span class="terminal-prompt">$</span> </div>';
+            output.scrollTop = 0;
+        }
+    }
+
+    // Processes Module Implementation
+    async initProcesses() {
+        await this.loadProcesses();
+        this.setupProcessEventListeners();
+    }
+
+    async loadProcesses() {
+        try {
+            const response = await fetch("api/processes/list");
+            const result = await response.json();
+            
+            if (result.success) {
+                this.renderProcessTable(result.data.processes);
+            } else {
+                document.getElementById("processes-table").querySelector("tbody").innerHTML = 
+                    '<tr><td colspan="6" style="color: #e53e3e;">Error: ' + result.message + '</td></tr>';
+            }
+        } catch (error) {
+            document.getElementById("processes-table").querySelector("tbody").innerHTML = 
+                '<tr><td colspan="6" style="color: #e53e3e;">Error loading processes: ' + error.message + '</td></tr>';
+        }
+    }
+
+    renderProcessTable(processes) {
+        const tbody = document.getElementById("processes-table").querySelector("tbody");
+        tbody.innerHTML = processes.map(process => '<tr><td><input type="checkbox" class="process-checkbox" data-pid="' + process.pid + '"></td><td>' + process.pid + '</td><td>' + process.name + '</td><td>' + process.cpu + '%</td><td>' + process.memory + '%</td><td>' + process.user + '</td><td><button class="kill-btn" onclick="aleShell.killProcess(' + process.pid + ')">Kill</button></td></tr>').join("");
+        
+        // Update total count display
+        const totalElement = document.querySelector(".processes-toolbar .total-count");
+        if (totalElement) {
+            totalElement.textContent = processes.length + " processes";
+        }
+        
+        // Reset select all checkbox
+        const selectAllCheckbox = document.getElementById("select-all-processes");
+        if (selectAllCheckbox) {
+            selectAllCheckbox.checked = false;
+        }
+        
+        // Update kill selected button state
+        this.updateKillSelectedButton();
+    }
+
+    setupProcessEventListeners() {
+        document.querySelector(".refresh-processes").addEventListener("click", () => {
+            this.loadProcesses();
+        });
+        
+        // Select all checkbox
+        const selectAllCheckbox = document.getElementById("select-all-processes");
+        if (selectAllCheckbox) {
+            selectAllCheckbox.addEventListener("change", (e) => {
+                this.toggleSelectAll(e.target.checked);
+            });
+        }
+        
+        // Kill selected button
+        const killSelectedBtn = document.getElementById("kill-selected-btn");
+        if (killSelectedBtn) {
+            killSelectedBtn.addEventListener("click", () => {
+                this.killSelectedProcesses();
+            });
+        }
+        
+        // Individual checkbox changes
+        document.addEventListener("change", (e) => {
+            if (e.target.classList.contains("process-checkbox")) {
+                this.updateKillSelectedButton();
+                this.updateSelectAllCheckbox();
+            }
+        });
+        
+        // Search functionality
+        const searchInput = document.getElementById("process-search");
+        if (searchInput) {
+            searchInput.addEventListener("input", (e) => {
+                this.filterProcesses(e.target.value);
+            });
+        }
+    }
+
+    async killProcess(pid) {
+        if (!confirm('Are you sure you want to kill process ' + pid + '?')) return;
+        
+        try {
+            const response = await this.makeAuthenticatedRequest("api/processes/kill", {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ pid: pid, signal: "TERM" })
+            });
+            const result = await response.json();
+            
+            if (result.success) {
+                await this.loadProcesses();
+            } else {
+                alert("Error killing process: " + result.message);
+            }
+        } catch (error) {
+            alert("Error killing process: " + error.message);
+        }
+    }
+
+    toggleSelectAll(checked) {
+        const checkboxes = document.querySelectorAll(".process-checkbox");
+        checkboxes.forEach(checkbox => {
+            checkbox.checked = checked;
+        });
+        this.updateKillSelectedButton();
+    }
+
+    updateKillSelectedButton() {
+        const selectedCheckboxes = document.querySelectorAll(".process-checkbox:checked");
+        const killSelectedBtn = document.getElementById("kill-selected-btn");
+        
+        if (killSelectedBtn) {
+            killSelectedBtn.disabled = selectedCheckboxes.length === 0;
+            killSelectedBtn.textContent = selectedCheckboxes.length === 0 ? 
+                "❌ Kill Selected" : 
+                "❌ Kill Selected (" + selectedCheckboxes.length + ")";
+        }
+    }
+
+    updateSelectAllCheckbox() {
+        const allCheckboxes = document.querySelectorAll(".process-checkbox");
+        const checkedCheckboxes = document.querySelectorAll(".process-checkbox:checked");
+        const selectAllCheckbox = document.getElementById("select-all-processes");
+        
+        if (selectAllCheckbox) {
+            selectAllCheckbox.checked = allCheckboxes.length > 0 && checkedCheckboxes.length === allCheckboxes.length;
+            selectAllCheckbox.indeterminate = checkedCheckboxes.length > 0 && checkedCheckboxes.length < allCheckboxes.length;
+        }
+    }
+
+    async killSelectedProcesses() {
+        const selectedCheckboxes = document.querySelectorAll(".process-checkbox:checked");
+        if (selectedCheckboxes.length === 0) return;
+        
+        const selectedPids = Array.from(selectedCheckboxes).map(cb => parseInt(cb.dataset.pid));
+        
+        if (!confirm('Are you sure you want to kill ' + selectedPids.length + ' selected process(es)?')) return;
+        
+        let successCount = 0;
+        let errorMessages = [];
+        
+        for (const pid of selectedPids) {
+            try {
+                const response = await this.makeAuthenticatedRequest("api/processes/kill", {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json" },
+                    body: JSON.stringify({ pid: pid, signal: "TERM" })
+                });
+                const result = await response.json();
+                
+                if (result.success) {
+                    successCount++;
+                } else {
+                    errorMessages.push("PID " + pid + ": " + result.message);
+                }
+            } catch (error) {
+                errorMessages.push("PID " + pid + ": " + error.message);
+            }
+        }
+        
+        // Show results
+        if (successCount > 0) {
+            let message = "Successfully killed " + successCount + " process(es)";
+            if (errorMessages.length > 0) {
+                message += "\\n\\nErrors:\\n" + errorMessages.join("\\n");
+            }
+            alert(message);
+        } else {
+            alert("Failed to kill any processes:\\n" + errorMessages.join("\\n"));
+        }
+        
+        // Reload processes list
+        await this.loadProcesses();
+    }
+
+    filterProcesses(searchTerm) {
+        const rows = document.querySelectorAll("#processes-table tbody tr");
+        const term = searchTerm.toLowerCase();
+        
+        rows.forEach(row => {
+            const cells = row.querySelectorAll("td");
+            let match = false;
+            
+            // Skip checkbox cell (index 0) and search in other cells
+            for (let i = 1; i < cells.length - 1; i++) { // -1 to skip Actions column
+                if (cells[i].textContent.toLowerCase().includes(term)) {
+                    match = true;
+                    break;
+                }
+            }
+            
+            row.style.display = match ? "" : "none";
+        });
+    }
+
+    // Network Module Implementation
+    async initNetwork() {
+        this.setupNetworkEventListeners();
+        await this.loadNetworkConnections();
+    }
+
+    async loadNetworkConnections() {
+        const connectionsList = document.getElementById("connections-list");
+        if (!connectionsList) return;
+
+        connectionsList.innerHTML = '<div class="loading">Loading network connections...</div>';
+
+        try {
+            const response = await fetch("api/network/connections");
+            const result = await response.json();
+
+            if (result.success && result.data && result.data.connections) {
+                this.renderNetworkConnections(result.data.connections);
+            } else {
+                connectionsList.innerHTML = '<div style="color: #e53e3e; padding: 20px;">Error: ' + (result.message || 'Failed to load connections') + '</div>';
+            }
+        } catch (error) {
+            connectionsList.innerHTML = '<div style="color: #e53e3e; padding: 20px;">Error loading connections: ' + error.message + '</div>';
+        }
+    }
+
+    renderNetworkConnections(connections) {
+        const connectionsList = document.getElementById("connections-list");
+        if (!connectionsList) return;
+
+        if (!connections || connections.length === 0) {
+            connectionsList.innerHTML = '<div style="padding: 20px; text-align: center; color: var(--text-secondary);">No network connections found</div>';
+            return;
+        }
+
+        let html = '<div style="padding: 10px; font-weight: bold; border-bottom: 1px solid var(--border-color);">Active Network Connections (' + connections.length + ')</div>';
+
+        connections.forEach(connection => {
+            const protocol = connection.protocol || 'TCP';
+            const localAddress = connection.local_address || 'Unknown';
+            const remoteAddress = connection.remote_address || 'Unknown';
+            const state = connection.state || 'Unknown';
+            const pid = connection.pid || 'N/A';
+
+            html += '<div style="padding: 10px; border-bottom: 1px solid var(--border-color); display: flex; justify-content: space-between; align-items: center;">';
+            html += '<div>';
+            html += '<div style="font-weight: bold;">' + protocol + ' Connection</div>';
+            html += '<div style="font-size: 12px; color: var(--text-secondary);">Local: ' + localAddress + '</div>';
+            html += '<div style="font-size: 12px; color: var(--text-secondary);">Remote: ' + remoteAddress + '</div>';
+            html += '</div>';
+            html += '<div style="text-align: right;">';
+            html += '<div style="font-size: 12px; color: var(--text-secondary);">State: ' + state + '</div>';
+            html += '<div style="font-size: 12px; color: var(--text-secondary);">PID: ' + pid + '</div>';
+            html += '</div>';
+            html += '</div>';
+        });
+
+        connectionsList.innerHTML = html;
+    }
+
+    setupNetworkEventListeners() {
+        // Tab switching
+        document.querySelectorAll(".tab-btn").forEach(btn => {
+            btn.addEventListener("click", (e) => {
+                const tab = e.target.dataset.tab;
+                this.switchNetworkTab(tab);
+            });
+        });
+
+        // Refresh connections button
+        const refreshBtn = document.querySelector(".refresh-connections");
+        if (refreshBtn) {
+            refreshBtn.addEventListener("click", () => {
+                this.loadNetworkConnections();
+            });
+        }
+
+        // Ping functionality
+        window.startPing = async () => {
+            const target = document.getElementById("ping-target").value;
+            if (!target) return;
+            
+            const output = document.getElementById("ping-output");
+            output.innerHTML = "Pinging...";
+            
+            try {
+                const response = await aleShell.makeAuthenticatedRequest("api/network/ping", {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json" },
+                    body: JSON.stringify({ host: target })
+                });
+                const result = await response.json();
+                
+                if (result.success) {
+                    output.innerHTML = '<pre>' + result.data.output + '</pre>';
+                } else {
+                    output.innerHTML = '<div style="color: #e53e3e;">Error: ' + result.message + '</div>';
+                }
+            } catch (error) {
+                output.innerHTML = '<div style="color: #e53e3e;">Error: ' + error.message + '</div>';
+            }
+        };
+
+        // Traceroute functionality
+        window.startTraceroute = async () => {
+            const target = document.getElementById("traceroute-target").value;
+            if (!target) return;
+            
+            const output = document.getElementById("traceroute-output");
+            output.innerHTML = "Tracing route...";
+            
+            try {
+                const response = await aleShell.makeAuthenticatedRequest("api/network/traceroute", {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json" },
+                    body: JSON.stringify({ host: target })
+                });
+                const result = await response.json();
+                
+                if (result.success) {
+                    output.innerHTML = '<pre>' + result.data.output + '</pre>';
+                } else {
+                    output.innerHTML = '<div style="color: #e53e3e;">Error: ' + result.message + '</div>';
+                }
+            } catch (error) {
+                output.innerHTML = '<div style="color: #e53e3e;">Error: ' + error.message + '</div>';
+            }
+        };
+
+        // Port scan functionality
+        window.startPortScan = async () => {
+            const target = document.getElementById("portscan-target").value;
+            const ports = document.getElementById("portscan-ports").value;
+            if (!target || !ports) return;
+            
+            const output = document.getElementById("portscan-output");
+            output.innerHTML = "Scanning ports...";
+            
+            try {
+                const response = await aleShell.makeAuthenticatedRequest("api/network/portscan", {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json" },
+                    body: JSON.stringify({ host: target, ports: ports })
+                });
+                const result = await response.json();
+                
+                if (result.success) {
+                    const data = result.data;
+                    let outputText = 'Port Scan Results for ' + data.host + '\\n';
+                    outputText += 'Ports scanned: ' + data.ports_scanned + '\\n';
+                    outputText += 'Open ports: ' + data.total_open + '\\n';
+                    outputText += 'Closed ports: ' + data.total_closed + '\\n\\n';
+
+                    if (data.open_ports.length > 0) {
+                        outputText += 'Open ports found:\\n';
+                        data.open_ports.forEach(port => {
+                            outputText += '  Port ' + port + ': OPEN\\n';
+                        });
+                    } else {
+                        outputText += 'No open ports found in the specified range.\\n';
+                    }
+                    
+                    output.innerHTML = '<pre>' + outputText + '</pre>';
+                } else {
+                    output.innerHTML = '<div style="color: #e53e3e;">Error: ' + result.message + '</div>';
+                }
+            } catch (error) {
+                output.innerHTML = '<div style="color: #e53e3e;">Error: ' + error.message + '</div>';
+            }
+        };
+    }
+
+    switchNetworkTab(tab) {
+        // Update tab buttons
+        document.querySelectorAll(".tab-btn").forEach(btn => {
+            btn.classList.remove("active");
+        });
+        document.querySelector("[data-tab=\"" + tab + "\"]").classList.add("active");
+
+        // Update tab content
+        document.querySelectorAll(".tab-content").forEach(content => {
+            content.classList.remove("active");
+        });
+        document.getElementById("network-" + tab).classList.add("active");
+    }
+
+    // Database Module Implementation
+    async initDatabase() {
+        this.currentDbConnection = null;
+        this.setupDatabaseEventListeners();
+    }
+
+    setupDatabaseEventListeners() {
+        window.connectDatabase = async () => {
+            const type = document.getElementById("db-type").value;
+            const host = document.getElementById("db-host").value;
+            const port = document.getElementById("db-port").value;
+            const name = document.getElementById("db-name").value;
+            const user = document.getElementById("db-user").value;
+            const pass = document.getElementById("db-pass").value;
+            
+            try {
+                const response = await aleShell.makeAuthenticatedRequest("api/database/connect", {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json" },
+                    body: JSON.stringify({
+                        type: type,
+                        host: host,
+                        port: port,
+                        database: name,
+                        username: user,
+                        password: pass
+                    })
+                });
+                const result = await response.json();
+                
+                if (result.success) {
+                    alert("Connected to database successfully!");
+                    // Store connection ID
+                    aleShell.currentDbConnection = result.data.connection_id;
+                    // Enable SQL editor
+                    document.getElementById("sql-editor").disabled = false;
+                    document.getElementById("sql-editor").placeholder = "Enter SQL query...";
+                    // Load database tree
+                    await loadDatabaseTree(result.data.connection_id);
+                } else {
+                    alert("Error connecting to database: " + result.message);
+                }
+            } catch (error) {
+                alert("Error connecting to database: " + error.message);
+            }
+        };
+
+        window.executeQuery = async () => {
+            const query = document.getElementById("sql-editor").value;
+            if (!query.trim()) return;
+            
+            if (!aleShell.currentDbConnection) {
+                alert("No database connection. Please connect to a database first.");
+                return;
+            }
+            
+            const results = document.getElementById("query-results");
+            results.innerHTML = "Executing query...";
+            
+            try {
+                const response = await aleShell.makeAuthenticatedRequest("api/database/query", {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json" },
+                    body: JSON.stringify({ 
+                        query: query,
+                        connection_id: aleShell.currentDbConnection
+                    })
+                });
+                const result = await response.json();
+                
+                if (result.success) {
+                    results.innerHTML = aleShell.renderQueryResults(result.data);
+                } else {
+                    results.innerHTML = '<div style="color: #e53e3e;">Error: ' + result.message + '</div>';
+                }
+            } catch (error) {
+                results.innerHTML = '<div style="color: #e53e3e;">Error: ' + error.message + '</div>';
+            }
+        };
+
+        window.clearQuery = () => {
+            document.getElementById("sql-editor").value = "";
+            document.getElementById("query-results").innerHTML = '<div class="results-placeholder">Query results will appear here</div>';
+        };
+
+        window.loadDatabaseTree = async (connectionId) => {
+            if (!connectionId && !aleShell.currentDbConnection) return;
+            connectionId = connectionId || aleShell.currentDbConnection;
+            
+            try {
+                const response = await aleShell.makeAuthenticatedRequest("api/database/databases?connection_id=" + connectionId);
+                const result = await response.json();
+                
+                if (result.success) {
+                    aleShell.renderDatabaseTree(result.data.databases, connectionId);
+                } else {
+                    document.getElementById("database-tree").innerHTML = '<div style="color: #e53e3e; padding: 20px;">Error loading databases: ' + result.message + '</div>';
+                }
+            } catch (error) {
+                document.getElementById("database-tree").innerHTML = '<div style="color: #e53e3e; padding: 20px;">Error loading databases: ' + error.message + '</div>';
+            }
+        };
+
+        window.loadTables = async (connectionId, database) => {
+            if (!connectionId && !aleShell.currentDbConnection) return;
+            connectionId = connectionId || aleShell.currentDbConnection;
+            
+            try {
+                const response = await aleShell.makeAuthenticatedRequest("api/database/tables?connection_id=" + connectionId + "&database=" + encodeURIComponent(database));
+                const result = await response.json();
+                
+                if (result.success) {
+                    aleShell.renderTables(database, result.data.tables);
+                } else {
+                }
+            } catch (error) {
+            }
+        };
+
+        window.disconnectDatabase = async () => {
+            if (!aleShell.currentDbConnection) {
+                alert("No active database connection to disconnect.");
+                return;
+            }
+            
+            try {
+                const response = await aleShell.makeAuthenticatedRequest("api/database/disconnect", {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json" },
+                    body: JSON.stringify({ connection_id: aleShell.currentDbConnection })
+                });
+                const result = await response.json();
+                
+                if (result.success) {
+                    // Reset UI
+                    aleShell.currentDbConnection = null;
+                    document.getElementById("sql-editor").disabled = true;
+                    document.getElementById("sql-editor").placeholder = "Connect to a database first...";
+                    document.getElementById("sql-editor").value = "";
+                    document.getElementById("query-results").innerHTML = '<div class="results-placeholder">Query results will appear here</div>';
+                    document.getElementById("database-tree").innerHTML = '<div style="padding: 20px; text-align: center; color: var(--text-secondary);">🗄️ Connect to a database to see its structure here</div>';
+                    alert("Disconnected from database successfully!");
+                } else {
+                    alert("Error disconnecting: " + result.message);
+                }
+            } catch (error) {
+                alert("Error disconnecting: " + error.message);
+            }
+        };
+    }
+
+    renderQueryResults(data) {
+        if (!data) return '<div class="results-placeholder">No results</div>';
+        
+        // Handle different response formats
+        if (data.rows && Array.isArray(data.rows)) {
+            // SELECT query results
+            if (data.rows.length === 0) {
+                return '<div class="results-placeholder">Query executed successfully (0 rows returned)</div>';
+            }
+            
+            const columns = data.columns || Object.keys(data.rows[0]);
+            let html = '<div style="margin-bottom: 10px; color: var(--text-muted);">';
+            html += 'Query executed in ' + (data.execution_time || 'N/A') + 'ms • ' + data.rows.length + ' rows returned';
+            html += '</div>';
+            html += '<table class="query-results-table">';
+            html += '<thead><tr>' + columns.map(col => '<th>' + col + '</th>').join('') + '</tr></thead>';
+            html += '<tbody>' + data.rows.map(row => '<tr>' + columns.map(col => '<td>' + (row[col] !== null ? row[col] : 'NULL') + '</td>').join('') + '</tr>').join('') + '</tbody>';
+            html += '</table>';
+            return html;
+        } else if (data.affected_rows !== undefined) {
+            // INSERT/UPDATE/DELETE results
+            let html = '<div style="padding: 20px; text-align: center; color: var(--success-color);">';
+            html += '✅ Query executed successfully<br>';
+            html += 'Affected rows: ' + data.affected_rows + '<br>';
+            html += 'Execution time: ' + (data.execution_time || 'N/A') + 'ms';
+            html += '</div>';
+            return html;
+        } else {
+            return '<div class="results-placeholder">Query executed successfully</div>';
+        }
+    }
+
+    renderDatabaseTree(databases, connectionId) {
+        let html = '<div style="padding: 10px; border-bottom: 1px solid var(--border-color); margin-bottom: 10px;">';
+        html += '<strong>Connected Databases</strong>';
+        html += '<button onclick="disconnectDatabase()" style="float: right; padding: 4px 8px; font-size: 12px;">Disconnect</button>';
+        html += '</div>';
+        
+        databases.forEach(db => {
+            const safeDb = db.replace(/'/g, "\\'");
+            html += '<div class="db-item" style="padding: 8px; cursor: pointer; border-bottom: 1px solid var(--border-color);" onclick="loadTables(\'' + connectionId + '\', \'' + safeDb + '\')">';
+            html += '📁 ' + db;
+            html += '</div>';
+        });
+        
+        document.getElementById("database-tree").innerHTML = html;
+    }
+
+    renderTables(database, tables) {
+        // Update the clicked database item to show it's expanded
+        const dbItems = document.querySelectorAll('.db-item');
+        dbItems.forEach(item => {
+            if (item.textContent.includes(database)) {
+                item.innerHTML = '📂 ' + database + ' <small>(' + tables.length + ' tables)</small>';
+                item.style.background = 'var(--bg-tertiary)';
+                
+                // Add tables list
+                let tablesHtml = '<div style="margin-left: 20px; margin-top: 5px;">';
+                tables.forEach(table => {
+                    const safeTable = table.replace(/'/g, "\\'");
+                    tablesHtml += '<div class="table-item" style="padding: 4px 8px; cursor: pointer; font-size: 14px;" onclick="aleShell.selectTable(\'' + database + '\', \'' + safeTable + '\')">';
+                    tablesHtml += '📄 ' + table;
+                    tablesHtml += '</div>';
+                });
+                tablesHtml += '</div>';
+                item.innerHTML += tablesHtml;
+            }
+        });
+    }
+
+    selectTable(database, table) {
+        // Auto-generate a SELECT query
+        const query = 'SELECT * FROM `' + table + '` LIMIT 100;';
+        document.getElementById("sql-editor").value = query;
+        
+        // Focus on the query editor
+        document.getElementById("sql-editor").focus();
+        
+        // Optionally execute the query
+        // executeQuery();
+    }
+}
+
+// Initialize AleShell when DOM is loaded
+document.addEventListener("DOMContentLoaded", () => {
+    window.aleShell = new AleShell();
+});
+
+// Load saved theme
+const savedTheme = localStorage.getItem("aleshell-theme");
+if (savedTheme) {
+    document.documentElement.setAttribute("data-theme", savedTheme);
+}
+JAVASCRIPT;
+    }
+}
\ No newline at end of file
diff --git a/src/core/SessionManager.php b/src/core/SessionManager.php
new file mode 100644
index 0000000..93a8c9c
--- /dev/null
+++ b/src/core/SessionManager.php
@@ -0,0 +1,108 @@
+<?php
+/**
+ * Session Manager
+ * 
+ * Handles session management and security
+ */
+
+namespace AleShell\Core;
+
+class SessionManager 
+{
+    private ConfigManager $config;
+    
+    public function __construct(ConfigManager $config) 
+    {
+        $this->config = $config;
+    }
+    
+    public function start(): void 
+    {
+        if (session_status() === PHP_SESSION_NONE) {
+            // Configure session settings
+            ini_set('session.cookie_httponly', '1');
+            ini_set('session.use_only_cookies', '1');
+            ini_set('session.cookie_secure', $this->isHTTPS() ? '1' : '0');
+            ini_set('session.cookie_samesite', 'Strict');
+            
+            // Set session timeout
+            $timeout = $this->config->get('security.session_timeout', 3600);
+            ini_set('session.gc_maxlifetime', $timeout);
+            
+            // Generate unique session name
+            session_name('ALESHELL_' . substr(md5(__FILE__), 0, 8));
+            
+            // Start session
+            session_start();
+            
+            // Regenerate session ID periodically for security
+            if (!isset($_SESSION['created'])) {
+                $_SESSION['created'] = time();
+            } elseif (time() - $_SESSION['created'] > 1800) { // 30 minutes
+                session_regenerate_id(true);
+                $_SESSION['created'] = time();
+            }
+        }
+    }
+    
+    public function destroy(): void 
+    {
+        if (session_status() === PHP_SESSION_ACTIVE) {
+            $_SESSION = [];
+            
+            if (isset($_COOKIE[session_name()])) {
+                setcookie(session_name(), '', time() - 3600, '/');
+            }
+            
+            session_destroy();
+        }
+    }
+    
+    public function regenerateId(): void 
+    {
+        if (session_status() === PHP_SESSION_ACTIVE) {
+            session_regenerate_id(true);
+            $_SESSION['created'] = time();
+        }
+    }
+    
+    public function get(string $key, $default = null) 
+    {
+        return $_SESSION[$key] ?? $default;
+    }
+    
+    public function set(string $key, $value): void 
+    {
+        $_SESSION[$key] = $value;
+    }
+    
+    public function has(string $key): bool 
+    {
+        return isset($_SESSION[$key]);
+    }
+    
+    public function remove(string $key): void 
+    {
+        unset($_SESSION[$key]);
+    }
+    
+    public function flash(string $key, $value = null) 
+    {
+        if ($value === null) {
+            // Get and remove flash message
+            $message = $_SESSION['flash'][$key] ?? null;
+            unset($_SESSION['flash'][$key]);
+            return $message;
+        } else {
+            // Set flash message
+            $_SESSION['flash'][$key] = $value;
+        }
+    }
+    
+    private function isHTTPS(): bool 
+    {
+        return (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ||
+               $_SERVER['SERVER_PORT'] == 443 ||
+               (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https');
+    }
+}
\ No newline at end of file
diff --git a/src/security/SecurityManager.php b/src/security/SecurityManager.php
new file mode 100644
index 0000000..1b315ea
--- /dev/null
+++ b/src/security/SecurityManager.php
@@ -0,0 +1,248 @@
+<?php
+/**
+ * Security Manager
+ * 
+ * Handles authentication, authorization, and security features
+ */
+
+namespace AleShell\Security;
+
+use AleShell\Core\ConfigManager;
+
+class SecurityManager 
+{
+    private ConfigManager $config;
+    private array $failedAttempts = [];
+    
+    public function __construct(ConfigManager $config) 
+    {
+        $this->config = $config;
+    }
+    
+    public function initialize(): void 
+    {
+        // Set security headers
+        $this->setSecurityHeaders();
+        
+        // Check IP restrictions
+        $this->checkIPRestrictions();
+        
+        // Clean old failed attempts
+        $this->cleanFailedAttempts();
+    }
+    
+    public function isAuthenticated(): bool 
+    {
+        if (!isset($_SESSION['authenticated'])) {
+            return false;
+        }
+        
+        // Check session timeout
+        if (isset($_SESSION['last_activity'])) {
+            $timeout = $this->config->get('security.session_timeout', 3600);
+            if (time() - $_SESSION['last_activity'] > $timeout) {
+                $this->logout();
+                return false;
+            }
+        }
+        
+        $_SESSION['last_activity'] = time();
+        return $_SESSION['authenticated'] === true;
+    }
+    
+    public function authenticate(string $password): bool 
+    {
+        $clientIP = $this->getClientIP();
+        
+        // Check rate limiting
+        if ($this->isRateLimited($clientIP)) {
+            throw new \Exception('Too many failed attempts. Please try again later.');
+        }
+        
+        $hashedPassword = $this->config->get('security.password');
+        
+        if (password_verify($password, $hashedPassword)) {
+            // Successful authentication
+            $_SESSION['authenticated'] = true;
+            $_SESSION['login_time'] = time();
+            $_SESSION['last_activity'] = time();
+            $_SESSION['user_ip'] = $clientIP;
+            $_SESSION['csrf_token'] = $this->generateCSRFToken();
+            
+            // Clear failed attempts for this IP
+            unset($this->failedAttempts[$clientIP]);
+            
+            return true;
+        } else {
+            // Failed authentication
+            $this->recordFailedAttempt($clientIP);
+            return false;
+        }
+    }
+    
+    public function logout(): void 
+    {
+        $_SESSION = [];
+        
+        if (isset($_COOKIE[session_name()])) {
+            setcookie(session_name(), '', time() - 3600, '/');
+        }
+        
+        session_destroy();
+    }
+    
+    public function generateCSRFToken(): string 
+    {
+        if (!isset($_SESSION['csrf_token'])) {
+            $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
+        }
+        return $_SESSION['csrf_token'];
+    }
+    
+    public function validateCSRFToken(string $token): bool 
+    {
+        if (!$this->config->get('security.csrf_protection', true)) {
+            return true;
+        }
+        
+        return isset($_SESSION['csrf_token']) && hash_equals($_SESSION['csrf_token'], $token);
+    }
+    
+    public function sanitizeInput($input) 
+    {
+        if (is_array($input)) {
+            return array_map([$this, 'sanitizeInput'], $input);
+        }
+        
+        if (is_string($input)) {
+            // Remove null bytes
+            $input = str_replace(chr(0), '', $input);
+            
+            // Basic sanitization
+            $input = trim($input);
+            
+            return $input;
+        }
+        
+        return $input;
+    }
+    
+    public function sanitizeOutput(string $output): string 
+    {
+        return htmlspecialchars($output, ENT_QUOTES | ENT_HTML5, 'UTF-8');
+    }
+    
+    public function isPathAllowed(string $path): bool 
+    {
+        $realPath = realpath($path);
+        
+        if ($realPath === false) {
+            // Allow even non-existent paths for creation
+            return true;
+        }
+        
+        // Allow access to entire filesystem - no path restrictions
+        // This permits access to system directories like /etc, /bin, /usr, etc.
+        return true;
+    }
+    
+    private function setSecurityHeaders(): void 
+    {
+        header('X-Content-Type-Options: nosniff');
+        header('X-Frame-Options: DENY');
+        header('X-XSS-Protection: 1; mode=block');
+        header('Referrer-Policy: strict-origin-when-cross-origin');
+        header('Content-Security-Policy: default-src \'self\'; script-src \'self\' \'unsafe-inline\'; style-src \'self\' \'unsafe-inline\' data:;');
+    }
+    
+    private function checkIPRestrictions(): void 
+    {
+        $clientIP = $this->getClientIP();
+        
+        // Check blocked IPs
+        $blockedIPs = $this->config->get('security.blocked_ips', []);
+        if (in_array($clientIP, $blockedIPs)) {
+            http_response_code(403);
+            die('Access denied from this IP address.');
+        }
+        
+        // Check allowed IPs (if configured)
+        $allowedIPs = $this->config->get('security.allowed_ips', []);
+        if (!empty($allowedIPs) && !in_array($clientIP, $allowedIPs)) {
+            http_response_code(403);
+            die('Access denied from this IP address.');
+        }
+    }
+    
+    private function getClientIP(): string 
+    {
+        $headers = [
+            'HTTP_X_FORWARDED_FOR',
+            'HTTP_X_REAL_IP',
+            'HTTP_CLIENT_IP',
+            'REMOTE_ADDR'
+        ];
+        
+        foreach ($headers as $header) {
+            if (!empty($_SERVER[$header])) {
+                $ips = explode(',', $_SERVER[$header]);
+                $ip = trim($ips[0]);
+                if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
+                    return $ip;
+                }
+            }
+        }
+        
+        return $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';
+    }
+    
+    private function isRateLimited(string $ip): bool 
+    {
+        if (!$this->config->get('security.rate_limiting', true)) {
+            return false;
+        }
+        
+        $maxAttempts = $this->config->get('security.max_attempts', 5);
+        $lockoutTime = $this->config->get('security.lockout_time', 300);
+        
+        if (!isset($this->failedAttempts[$ip])) {
+            return false;
+        }
+        
+        $attempts = $this->failedAttempts[$ip];
+        
+        if (count($attempts) >= $maxAttempts) {
+            $lastAttempt = end($attempts);
+            if (time() - $lastAttempt < $lockoutTime) {
+                return true;
+            }
+        }
+        
+        return false;
+    }
+    
+    private function recordFailedAttempt(string $ip): void 
+    {
+        if (!isset($this->failedAttempts[$ip])) {
+            $this->failedAttempts[$ip] = [];
+        }
+        
+        $this->failedAttempts[$ip][] = time();
+    }
+    
+    private function cleanFailedAttempts(): void 
+    {
+        $lockoutTime = $this->config->get('security.lockout_time', 300);
+        $currentTime = time();
+        
+        foreach ($this->failedAttempts as $ip => $attempts) {
+            $this->failedAttempts[$ip] = array_filter($attempts, function($timestamp) use ($currentTime, $lockoutTime) {
+                return ($currentTime - $timestamp) < $lockoutTime;
+            });
+            
+            if (empty($this->failedAttempts[$ip])) {
+                unset($this->failedAttempts[$ip]);
+            }
+        }
+    }
+}
\ No newline at end of file