detail
CC[100]'s 08/22 FINAL_CLOSE flagged that systems/commands/ (an .htaccess allowlist) 403s PEEK.php and JANUS.php even though SOP-JANUS-PEEK.md documents that as their path -- both only actually work from backend/tools/critical/. Found existing deprecated-stub placeholder files already sitting at systems/commands/JANUS.php and PEEK.php (comment-only, no logic), explicitly written to explain the 403 and point to the real backend/tools/critical/ copies -- these stubs themselves said this was Server[40]/WAF territory to fix, confirming the intended fix was to un-block this path, not to leave it permanently redirected. FIX: (1) added PEEK|JANUS to the FilesMatch negative-lookahead allowlist in systems/commands/.htaccess, matching the same pattern every other command in that file already uses; (2) replaced the two deprecated stub files with real, working copies of the current JANUS.php/PEEK.php logic (byte-identical to the backend/tools/critical/ originals at time of copy) so the now-unblocked path actually functions instead of serving dead stub code. Left backend/tools/critical/ copies completely untouched so nothing currently calling that path breaks.