+ 
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/app/layout/page-title/_default.php b/app/layout/page-title/_default.php
new file mode 100644
index 00000000..c80c5499
--- /dev/null
+++ b/app/layout/page-title/_default.php
@@ -0,0 +1,13 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/app/layout/profile.php b/app/layout/profile.php
deleted file mode 100644
index c03531da..00000000
--- a/app/layout/profile.php
+++ /dev/null
@@ -1,92 +0,0 @@
-num_rows > 0) {
- while ($row_ = mysqli_fetch_array($query->result)) {
- $acclogs = $row_['acclogs'];
- $expiry = $row_["expires"];
- $emailVerify = $row_["emailVerify"];
- }
-}
-
-if ($_SERVER['REQUEST_METHOD'] === 'POST') {
- if (isset($_POST['logout'])) {
- session_destroy();
- header('Location: /login');
- exit;
- }
-}
-
-?>
-
-+ + +
+ +
-
-
-
-
-
-
-
- 
" alt="profile image" />
-
-
-
-
-
-
- " . strtoupper($role) . " PLAN";
- ?>
-
- '',
- 'developer' => '',
- 'seller' => '',
- 'Reseller' => '',
- 'Manager' => '',
- 'default' => ''
- };
- echo $display;
-
- if ($role === 'developer' || $role === 'seller') {
- echo '';
- }
- ?>
-
-diff --git a/app/layout/toolbars/_toolbar-1.php b/app/layout/toolbars/_toolbar-1.php new file mode 100644 index 00000000..651d46ba --- /dev/null +++ b/app/layout/toolbars/_toolbar-1.php @@ -0,0 +1,11 @@ + + \ No newline at end of file diff --git a/app/layout/topbar.php b/app/layout/topbar.php deleted file mode 100644 index 978bce8d..00000000 --- a/app/layout/topbar.php +++ /dev/null @@ -1,133 +0,0 @@ - - - diff --git a/app/layout/topbar/_base.php b/app/layout/topbar/_base.php new file mode 100644 index 00000000..a3ff6596 --- /dev/null +++ b/app/layout/topbar/_base.php @@ -0,0 +1,49 @@ + + + \ No newline at end of file diff --git a/app/layout/topbar/partials/_user-menu.php b/app/layout/topbar/partials/_user-menu.php new file mode 100644 index 00000000..4d8b78a2 --- /dev/null +++ b/app/layout/topbar/partials/_user-menu.php @@ -0,0 +1,43 @@ + +
+
+
+
\ No newline at end of file
diff --git a/app/license-download.php b/app/license-download.php
new file mode 100644
index 00000000..7b23efce
--- /dev/null
+++ b/app/license-download.php
@@ -0,0 +1,49 @@
+getMessage());
-});
-
if (session_status() === PHP_SESSION_NONE) {
- session_start();
+ session_start();
}
if ($_SESSION['role'] == "Reseller") {
- die("Resellers can't access this.");
+ die("Resellers can't access this.");
}
if (!isset($_SESSION['app'])) {
- dashboard\primary\error("Application not selected");
- die("Application not selected.");
+ die("Application not selected.");
}
if (isset($_POST['draw'])) {
- // credits to https://makitweb.com/datatables-ajax-pagination-with-search-and-sort-php/
-
- $draw = intval($_POST['draw']);
- $row = intval($_POST['start']);
- $rowperpage = intval($_POST['length']); // Rows display per page
- $columnIndex = misc\etc\sanitize($_POST['order'][0]['column']); // Column index
- $columnName = misc\etc\sanitize($_POST['columns'][$columnIndex]['data']); // Column name
- $columnSortOrder = misc\etc\sanitize($_POST['order'][0]['dir']); // asc or desc
- $searchValue = misc\etc\sanitize($_POST['search']['value']); // Search value
-
- // whitelist certain column names and sort orders to prevent SQL injection
- if (!in_array($columnName, array("key", "gendate", "genby", "expires", "note", "usedon", "usedby", "status"))) {
- die("Column name is not whitelisted.");
- }
-
- if (!in_array($columnSortOrder, array("desc", "asc"))) {
- die("Column sort order is not whitelisted.");
- }
-
- if (!is_null($searchValue)) {
- $query = misc\mysql\query("select * from `keys` WHERE (`key` like ? or `note` like ? or `genby` like ? or `usedby` like ? ) and app = ? order by `" . $columnName . "` " . $columnSortOrder . " limit " . $row . "," . $rowperpage, ["%" . $searchValue . "%", "%" . $searchValue . "%", "%" . $searchValue . "%", "%" . $searchValue . "%", $_SESSION['app']]);
- }
- else {
- $query = misc\mysql\query("select * from `keys` WHERE app = ? order by `" . $columnName . "` " . $columnSortOrder . " limit " . $row . "," . $rowperpage, [$_SESSION['app']]);
- }
-
- $data = array();
-
- while ($row = mysqli_fetch_assoc($query->result)) {
-
- ## If only one or two keys exists then we will use custom margin to fix the bugging menu
- $banBtns = "";
- if ($row['status'] == "Banned") {
- $banBtns = '';
- } else {
- $banBtns = '';
- }
-
- $MarginManager = "";
- if ($query->num_rows < 2) {
- $MarginManager = "margin-bottom: 20px;";
- } else {
- $MarginManager = "margin-bottom: 0px;";
- }
-
- $data[] = array(
- "key" => $row['key'],
- "gendate" => '',
- "genby" => $row['genby'],
- "expires" => timeconversion($row["expires"]),
- "note" => $row['note'] ?? 'N/A',
- "usedon" => (!is_null($row["usedon"])) ? '' : 'N/A',
- "usedby" => ($row["usedby"] == $row['key']) ? 'Same as key' : $row["usedby"] ?? 'N/A',
- "status" => '' . $row['status'] . '',
-
- "actions" => '
-
- ',
- );
- }
-
- ## Response
- $response = array(
- "draw" => intval($draw),
- "aaData" => $data
- );
-
- die(json_encode($response));
+ // credits to https://makitweb.com/datatables-ajax-pagination-with-search-and-sort-php/
+
+ $draw = misc\etc\sanitize($_POST['draw']);
+ $row = misc\etc\sanitize($_POST['start']);
+ $rowperpage = misc\etc\sanitize($_POST['length']); // Rows display per page
+ $columnIndex = misc\etc\sanitize($_POST['order'][0]['column']); // Column index
+ $columnName = misc\etc\sanitize($_POST['columns'][$columnIndex]['data']); // Column name
+ $columnSortOrder = misc\etc\sanitize($_POST['order'][0]['dir']); // asc or desc
+ $searchValue = misc\etc\sanitize($_POST['search']['value']); // Search value
+
+ ## Search
+ $searchQuery = " ";
+ if ($searchValue != '') {
+ $searchQuery = " and (`key` like '%" . $searchValue . "%' or
+ `note` like '%" . $searchValue . "%' or
+ `genby` like'%" . $searchValue . "%' or
+ `usedby` like'%" . $searchValue . "%' ) ";
+ }
+
+ ## Total number of records without filtering
+ $sel = mysqli_query($link, "select count(1) as allcount from `keys` where app = '" . $_SESSION['app'] . "'");
+ $records = mysqli_fetch_assoc($sel);
+ $totalRecords = $records['allcount'];
+
+ ## Total number of record with filtering
+ $sel = mysqli_query($link, "select count(1) as allcount from `keys` WHERE 1 " . $searchQuery . " and app = '" . $_SESSION['app'] . "'");
+ $records = mysqli_fetch_assoc($sel);
+ $totalRecordwithFilter = $records['allcount'];
+
+ ## Fetch records
+ $empQuery = "select * from `keys` WHERE 1 " . $searchQuery . " and app = '" . $_SESSION['app'] . "' order by `" . $columnName . "` " . $columnSortOrder . " limit " . $row . "," . $rowperpage;
+ // echo $empQuery;
+ $empRecords = mysqli_query($link, $empQuery);
+
+ $data = array();
+
+ while ($row = mysqli_fetch_assoc($empRecords)) {
+
+ ## If only one or two keys exists then we will use custom margin to fix the bugging menu
+ $banBtns = "";
+ if ($row['status'] == "Banned") { $banBtns = ''; } else { $banBtns = 'Ban'; }
+
+ $MarginManager = "";
+ if ($totalRecordwithFilter < 2) { $MarginManager = "margin-bottom: 20px;"; } else { $MarginManager = "margin-bottom: 0px;"; }
+
+ $data[] = array(
+ "key" => $row['key'],
+ "gendate" => '',
+ "genby" => $row['genby'],
+ "expires" => ($row["expires"] / 86400) . ' Day(s)',
+ "note" => $row['note'] ?? 'N/A',
+ "usedon" => (!is_null($row["usedon"])) ? '' : 'N/A',
+ "usedby" => ($row["usedby"] == $row['key']) ? 'Same as key' : $row["usedby"] ?? 'N/A',
+ "status" => '',
+ "actions" => '',
+ );
+ }
+
+ ## Response
+ $response = array(
+ "draw" => intval($draw),
+ "iTotalRecords" => $totalRecords,
+ "iTotalDisplayRecords" => $totalRecordwithFilter,
+ "aaData" => $data
+ );
+
+ die(json_encode($response));
}
die("Request not from datatables, aborted.");
diff --git a/app/log-fetch.php b/app/log-fetch.php
index f89fc052..fde22b47 100644
--- a/app/log-fetch.php
+++ b/app/log-fetch.php
@@ -1,75 +1,74 @@
getMessage());
-});
-
if (session_status() === PHP_SESSION_NONE) {
- session_start();
+ session_start();
}
-if ($_SESSION['role'] == "Reseller") {
- die("Resellers can't access this.");
+if($_SESSION['role'] == "Reseller") {
+ die("Resellers can't access this.");
}
-if (!isset($_SESSION['app'])) {
- dashboard\primary\error("Application not selected");
- die("Application not selected.");
+if(!isset($_SESSION['app'])) {
+ die("Application not selected.");
}
-if (isset($_POST['draw'])) {
-
- // credits to https://makitweb.com/datatables-ajax-pagination-with-search-and-sort-php/
-
- $draw = intval($_POST['draw']);
- $row = intval($_POST['start']);
- $rowperpage = intval($_POST['length']); // Rows display per page
- $columnIndex = misc\etc\sanitize($_POST['order'][0]['column']); // Column index
- $columnName = misc\etc\sanitize($_POST['columns'][$columnIndex]['data']); // Column name
- $columnSortOrder = misc\etc\sanitize($_POST['order'][0]['dir']); // asc or desc
- $searchValue = misc\etc\sanitize($_POST['search']['value']); // Search value
-
- // whitelist certain column names and sort orders to prevent SQL injection
- if (!in_array($columnName, array("logdate", "logdata", "credential", "pcuser"))) {
- die("Column name is not whitelisted.");
- }
-
- if (!in_array($columnSortOrder, array("desc", "asc"))) {
- die("Column sort order is not whitelisted.");
- }
-
- if (!is_null($searchValue)) {
- $query = misc\mysql\query("select * from `logs` WHERE (`logdata` like ? or `credential` like ? or `pcuser` like ? ) and logapp = ? order by `" . $columnName . "` " . $columnSortOrder . " limit " . $row . "," . $rowperpage, ["%" . $searchValue . "%", "%" . $searchValue . "%", "%" . $searchValue . "%", $_SESSION['app']]);
- }
- else {
- $query = misc\mysql\query("select * from `logs` WHERE logapp = ? order by `" . $columnName . "` " . $columnSortOrder . " limit " . $row . "," . $rowperpage, [$_SESSION['app']]);
- }
-
- $data = array();
-
- while ($row = mysqli_fetch_assoc($query->result)) {
- $data[] = array(
- "logdate" => '',
- "logdata" => $row['logdata'],
- "credential" => $row['credential'] ?? 'N/A',
- "pcuser" => $row['pcuser'] ?? 'N/A',
- );
- }
-
- ## Response
- $response = array(
- "draw" => intval($draw),
- "aaData" => $data
- );
+if(isset($_POST['draw']) ) {
+
+ // credits to https://makitweb.com/datatables-ajax-pagination-with-search-and-sort-php/
+
+ $draw = misc\etc\sanitize($_POST['draw']);
+ $row = misc\etc\sanitize($_POST['start']);
+ $rowperpage = misc\etc\sanitize($_POST['length']); // Rows display per page
+ $columnIndex = misc\etc\sanitize($_POST['order'][0]['column']); // Column index
+ $columnName = misc\etc\sanitize($_POST['columns'][$columnIndex]['data']); // Column name
+ $columnSortOrder = misc\etc\sanitize($_POST['order'][0]['dir']); // asc or desc
+ $searchValue = misc\etc\sanitize($_POST['search']['value']); // Search value
+
+ ## Search
+ $searchQuery = " ";
+ if($searchValue != ''){
+ $searchQuery = " and (`logdata` like '%".$searchValue."%' or
+ `credential` like '%".$searchValue."%' or
+ `pcuser` like'%".$searchValue."%' ) ";
+ }
+
+ ## Total number of records without filtering
+ $sel = mysqli_query($link,"select count(1) as allcount from `logs` where logapp = '".$_SESSION['app']."'");
+ $records = mysqli_fetch_assoc($sel);
+ $totalRecords = $records['allcount'];
+
+ ## Total number of record with filtering
+ $sel = mysqli_query($link,"select count(1) as allcount from `logs` WHERE 1 ".$searchQuery." and logapp = '".$_SESSION['app']."'");
+ $records = mysqli_fetch_assoc($sel);
+ $totalRecordwithFilter = $records['allcount'];
+
+ ## Fetch records
+ $empQuery = "select * from `logs` WHERE 1 ".$searchQuery." and logapp = '".$_SESSION['app']."' order by `".$columnName."` ".$columnSortOrder." limit ".$row.",".$rowperpage;
+ // echo $empQuery;
+ $empRecords = mysqli_query($link, $empQuery);
+ $data = array();
+
+ while ($row = mysqli_fetch_assoc($empRecords)) {
+ $data[] = array(
+ "logdate"=>'',
+ "logdata"=>$row['logdata'],
+ "credential"=>$row['credential'] ?? 'N/A',
+ "pcuser"=>$row['pcuser'] ?? 'N/A',
+ );
+ }
+
+ ## Response
+ $response = array(
+ "draw" => intval($draw),
+ "iTotalRecords" => $totalRecords,
+ "iTotalDisplayRecords" => $totalRecordwithFilter,
+ "aaData" => $data
+ );
+
+ die(json_encode($response));
- die(json_encode($response));
}
-die("Request not from datatables, aborted.");
+die("Request not from datatables, aborted.");
\ No newline at end of file
diff --git a/app/pages/account-logs.php b/app/pages/account-logs.php
index 2f9dde55..ca03282b 100644
--- a/app/pages/account-logs.php
+++ b/app/pages/account-logs.php
@@ -1,53 +1,60 @@
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 
+
+
+
+
+
+
+
+
+
+
-
-
-
-
Account Logs
-View the event history of your account.
-
-
-
-
-
-
-
+
+
| Date | -IP | -User-Agent | -
|---|---|---|
| - - | - -- | - |
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/app/pages/account-settings.php b/app/pages/account-settings.php
index 3c0f7ec0..dadb1c0c 100644
--- a/app/pages/account-settings.php
+++ b/app/pages/account-settings.php
@@ -1,494 +1,458 @@
that's the only thing you need on this page.");
}
-
$twofactor = $row['twofactor'];
-
require_once '../auth/GoogleAuthenticator.php';
$gauth = new GoogleAuthenticator();
-if ($row["googleAuthCode"] == NULL)
-{
+if ($row["googleAuthCode"] == NULL) {
$code_2factor = $gauth->createSecret();
- misc\mysql\query("UPDATE `accounts` SET `googleAuthCode` = ? WHERE `username` = ?", [$code_2factor, $_SESSION['username']]);
-}
-else
-{
+ $integrate_code = mysqli_query($link, "UPDATE `accounts` SET `googleAuthCode` = '$code_2factor' WHERE `username` = '" . $_SESSION['username'] . "'") or die(mysqli_error($link));
+} else {
$code_2factor = $row["googleAuthCode"];
}
-
$google_QR_Code = $gauth->getQRCodeGoogleUrl($_SESSION['username'], $code_2factor, 'KeyAuth');
+?>
+
-$query = misc\mysql\query("SELECT * FROM `accounts` WHERE `username` = ?", [$_SESSION['username']]);
-if ($query->num_rows > 0)
-{
- while ($row = mysqli_fetch_array($query->result))
- {
- $acclogs = $row['acclogs'];
- $expiry = $row["expires"];
- $emailVerify = $row["emailVerify"];
+
+| Date | +IP Address | +User Agent | +
|---|---|---|
| + + | + ++ + | + + |
+
+
+
+ 0) {
+ while ($row = mysqli_fetch_array($result)) {
+ $acclogs = $row['acclogs'];
+ $expiry = $row["expires"];
+ $emailVerify = $row["emailVerify"];
+ }
}
-}
-if (isset($_POST['updatesettings']))
- {
+ if (isset($_POST['updatesettings'])) {
$pfp = misc\etc\sanitize($_POST['pfp']);
$acclogs = misc\etc\sanitize($_POST['acclogs']);
$emailVerify = misc\etc\sanitize($_POST['emailVerify']);
- misc\mysql\query("UPDATE `accounts` SET `acclogs` = ? WHERE `username` = ?", [$acclogs, $_SESSION['username']]);
-
- if ($acclogs == 0)
- {
- misc\mysql\query("DELETE FROM `acclogs` WHERE `username` = ?", [$_SESSION['username']]); // delete all account logs
+ mysqli_query($link, "UPDATE `accounts` SET `acclogs` = '$acclogs' WHERE `username` = '" . $_SESSION['username'] . "'");
+ if ($acclogs == 0) {
+ mysqli_query($link, "DELETE FROM `acclogs` WHERE `username` = '" . $_SESSION['username'] . "'"); // delete all account logs
}
-
- misc\mysql\query("UPDATE `accounts` SET `emailVerify` = ? WHERE `username` = ?", [$emailVerify, $_SESSION['username']]);
- if (isset($_POST['pfp']) && trim($_POST['pfp']) != '')
- {
+ mysqli_query($link, "UPDATE `accounts` SET `emailVerify` = '$emailVerify' WHERE `username` = '" . $_SESSION['username'] . "'");
+ if (isset($_POST['pfp']) && trim($_POST['pfp']) != '') {
if (!filter_var($pfp, FILTER_VALIDATE_URL)) {
dashboard\primary\error("Invalid Url For Profile Image!");
- echo "";
- return;
- }
- if (strpos($pfp, "file:///") !== false) {
- dashboard\primary\error("Url must start with https://");
- echo "";
return;
}
$_SESSION['img'] = $pfp;
- misc\mysql\query("UPDATE `accounts` SET `img` = ? WHERE `username` = ?", [$pfp, $_SESSION['username']]);
+ mysqli_query($link, "UPDATE `accounts` SET `img` = '$pfp' WHERE `username` = '" . $_SESSION['username'] . "'");
}
dashboard\primary\success("Updated Account Settings!");
}
- if (isset($_POST['submit_code']))
- {
- $code = misc\etc\sanitize($_POST['scan_code1'] . ($_POST['scan_code2']) . ($_POST['scan_code3']) . ($_POST['scan_code4']) . ($_POST['scan_code5']) . ($_POST['scan_code6']));
+ if (isset($_POST['submit_code'])) {
- $query = misc\mysql\query("SELECT `googleAuthCode` from `accounts` WHERE `username` = ?", [$_SESSION['username']]);
+ if (empty($_POST['scan_code'])) {
+ dashboard\primary\error("You must fill in all the fields!");
+ }
+
+ $code = misc\etc\sanitize($_POST['scan_code']);
+
+ $user_result = mysqli_query($link, "SELECT * from `accounts` WHERE `username` = '" . $_SESSION['username'] . "'") or die(mysqli_error($link));
+
+ while ($row = mysqli_fetch_array($user_result)) {
- while ($row = mysqli_fetch_array($query->result))
- {
$secret_code = $row['googleAuthCode'];
}
$checkResult = $gauth->verifyCode($secret_code, $code, 2);
- if ($checkResult)
- {
- $query = misc\mysql\query("UPDATE `accounts` SET `twofactor` = '1' WHERE `username` = ?", [$_SESSION['username']]);
- if ($query->affected_rows > 0)
- {
- echo "";
+ if ($checkResult) {
+ $enable_2factor = mysqli_query($link, "UPDATE `accounts` SET `twofactor` = '1' WHERE `username` = '" . $_SESSION['username'] . "'") or die(mysqli_error($link));
+ if ($enable_2factor) {
dashboard\primary\success("Two-factor security has been successfully activated on your account!");
- dashboard\primary\wh_log($logwebhook, "{$username} has enabled 2FA", $webhookun);
- }
- else
- {
- echo "";
- dashboard\primary\wh_log($logwebhook, "{$username} has disabled 2FA", $webhookun);
- dashboard\primary\success("Two-factor security has been successfully disabled on your account!");
+ } else {
+ dashboard\primary\error("There was a problem trying to activate security on your account!");
}
- }
- else
- {
- dashboard\primary\error("Invalid 2FA code! Make sure your device time settings are synced.");
+ } else {
+ dashboard\primary\error("The code entered is incorrect");
}
}
- if (isset($_POST['submit_code_disable']))
- {
- $code = misc\etc\sanitize($_POST['scan_code1'] . ($_POST['scan_code2']) . ($_POST['scan_code2']) . ($_POST['scan_code3']) . ($_POST['scan_code4']) . ($_POST['scan_code5']));
+ if (isset($_POST['submit_code_disable'])) {
- $query = misc\mysql\query("SELECT `googleAuthCode` from `accounts` WHERE `username` = ?", [$_SESSION['username']]);
+ if (empty($_POST['scan_code'])) {
+ dashboard\primary\error("You must fill in all the fields!");
+ }
+
+ $code = misc\etc\sanitize($_POST['scan_code']);
+
+ $user_result = mysqli_query($link, "SELECT * from `accounts` WHERE `username` = '" . $_SESSION['username'] . "'") or die(mysqli_error($link));
- while ($row = mysqli_fetch_array($query->result))
- {
+ while ($row = mysqli_fetch_array($user_result)) {
$secret_code = $row['googleAuthCode'];
}
$checkResult = $gauth->verifyCode($secret_code, $code, 2);
- if ($checkResult)
- {
- $query = misc\mysql\query("UPDATE `accounts` SET `twofactor` = '0', `googleAuthCode` = NULL WHERE `username` = ?", [$_SESSION['username']]);
-
- if ($query->affected_rows > 0)
- {
- dashboard\primary\success("Successfully disabled 2FA!");
- }
- else
- {
- dashboard\primary\error("Failed to disable 2FA!");
+ if ($checkResult) {
+ $enable_2factor = mysqli_query($link, "UPDATE `accounts` SET `twofactor` = '0' WHERE `username` = '" . $_SESSION['username'] . "'") or die(mysqli_error($link));
+
+ if ($enable_2factor) {
+ dashboard\primary\success("Two-factor security has been successfully disabled on your account!");
+ } else {
+ dashboard\primary\error("There was a problem trying to activate security on your account!");
}
- }
- else
- {
- dashboard\primary\error("Invalid 2FA code! Make sure your device time settings are synced.");
+ } else {
+ dashboard\primary\error("The code entered is incorrect");
}
}
- if (isset($_POST['deleteWebauthn']))
- {
- $name = misc\etc\sanitize($_POST['deleteWebauthn']);
+ ?>
- $query = misc\mysql\query("DELETE FROM `securityKeys` WHERE `name` = ? AND `username` = ?", [$name, $_SESSION['username']]);
+
- if ($query->affected_rows > 0)
- {
- $query = misc\mysql\query("SELECT 1 FROM `securityKeys` WHERE `username` = ?", [$_SESSION['username']]);
- if ($query->num_rows == 0)
- {
- misc\mysql\query("UPDATE `accounts` SET `securityKey` = 0 WHERE `username` = ?", [$_SESSION['username']]);
- }
- dashboard\primary\success("Successfully deleted security key");
- }
- else
- {
- dashboard\primary\error("Failed to delete security key!");
- }
- }
+
-?>
+
+
+
+