false, 'error' => 'POST only']); exit; } $file = basename($_POST['file'] ?? ''); if (!$file || !preg_match('/^[a-zA-Z0-9_\-]+\.lock$/', $file)) { echo json_encode(['ok' => false, 'error' => 'Invalid filename']); exit; } $path = '/tmp/unraid_locks/' . $file; if (file_exists($path)) @unlink($path); echo json_encode(['ok' => true]);