Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 4.18.0-553.54.1.lve.el8.x86_64

PHP Version:

7.3.33

User:

u435171512

Directory:

/home/u435171512/domains/3dotsarchitect.com/public_html/admin/functions

Free Space:

4.09 TB

🔧 Quick Actions

✏️ Editing: processes.php

<?php
error_reporting(0);
session_start();
ob_start();
include 'constants.php';
include 'mail.php';

if(isset($_GET['log_out'])) {
	$Login_Process = new Login_Process;
	$Login_Process->log_out($_SESSION['username'], $_SESSION['password']); }

class Login_Process {

var $cookie_user = CKIEUS;
	var $cookie_pass = CKIEPS;

function connect_db() {
		$conn_str = mysqli_connect(DBHOST, DBUSER, DBPASS, DBNAME);
		$_SESSION['con'] = $conn_str;
		//mysqli_select_db($conn_str) or die ('Could not select Database.');
	}

function query($sql) {

$this->connect_db();
		$sql = mysqli_query($_SESSION['con'],$sql);
		$num_rows = mysqli_num_rows($sql);
		$result = mysqli_fetch_assoc($sql);
			
	return array("num_rows"=>$num_rows,"result"=>$result,"sql"=>$sql);
	
	}
		
	function check_login($page) {

ini_set("session.gc_maxlifetime", Session_Lifetime); 
		session_start();

if(isset($_COOKIE[$this->cookie_user]) && isset($_COOKIE[$this->cookie_pass])){
			$this->log_in($_COOKIE[$this->cookie_user], $_COOKIE[$this->cookie_pass], 'true', $page, 'cookie'); 
		} else if(isset($_SESSION['username'])) { 	
			if(!$page)
			{ 
				// user access
				if($_SESSION['user_level'] >= 5)
				{
					$page = Script_Path."admin.php";
				}
				else
				{
					$page = Script_Path."main.php";
				}			
				// end
			 }
					header("Location: http://".$_SERVER['HTTP_HOST'].$page); 
		} else {
		    return true;
		}
	}

function check_status($page) {

//ini_set("session.gc_maxlifetime", Session_Lifetime); 
		session_start();

if(!isset($_SESSION['username'])){
			header("Location: index.php"); 
		}
	}

function log_in($username, $password, $remember, $submit)
	{
		if(isset($submit))
		{
			if($submit !== "cookie")
			{
				$password = md5($password);
			}

$query = $this->query("SELECT * FROM ".DBTBLE." WHERE username='$username' AND password='$password'");

if($query['num_rows'] == 1)
			{

/*if ($query['result']['status'] == "suspended") {
				return "Account Suspended, <br /> Contact System Administrator.";
			}
			if ($query['result']['status'] == "pending") {
				return "Account Pending, <br /> Administrator has not yet approved your account.";
			}*/
			$this->set_session($username, $password);	
			
			if(isset($remember)) 
			{
				$this->set_cookie($username, $password, '+');
			}
			
				
				// user access
				if($_SESSION['user_level'] >= 5)
				{
					header("Location:admin.php");
				}
				else
				{
					header("Location:main.php");
				}			
				// end
				
				
				
							
		}
		else
		{	
				return "Username or Password Not Recognised.";
		
		}			
		
		$this->query("UPDATE ".DBTBLE." SET last_loggedin = '".date ("d/m/y G:i:s")."' WHERE username = '$username'");
				
		}
	}
	
	function set_session($username, $password) {
	
			$query = $this->query("SELECT * FROM ".DBTBLE." WHERE username='$username' AND password='$password'");
	
			ini_set("session.gc_maxlifetime", Session_Lifetime); 
			session_start();

$_SESSION['first_name']    = $query['result']['first_name'];
			$_SESSION['last_name']     = $query['result']['last_name'];
			$_SESSION['email_address'] = $query['result']['email_address'];
			$_SESSION['username']      = $query['result']['username'];
			$_SESSION['info']          = $query['result']['info'];
			$_SESSION['user_level']    = $query['result']['user_level'];
			$_SESSION['password']      = $query['result']['password'];

}	
	
	function set_cookie($username, $password, $set) {

if($set == "+")
				{ $cookie_expire = time()+60*60*24*30; }
			else 
				{ $cookie_expire = time()-60*60*24*30; }		
	
			setcookie($this->cookie_user, $username, $cookie_expire, '/');
			setcookie($this->cookie_pass, $password, $cookie_expire, '/');
	
	}

function log_out($username, $password, $header='') {

session_start();
	session_unset();
	session_destroy();
    	$this->set_cookie($username, $password, '-');

if(!isset($header)) {
			header('Location: ../index.php');
		} else {
			return true;
		}
	
	}
	
	// edit user
	
	function edit_details($post, $process) {

if(isset($process)) {
		
	 
		$first_name		= $post['first_name'];
		$last_name		= $post['last_name'];
		$email_address	= $post['email_address'];
		$info			= $post['info'];
		$username		= $post['username'];
		$password		= $_SESSION['password'];
		
		if((!$first_name) || (!$last_name) || (!$email_address) || (!$info)) {
			return "Please enter all details.";
		}

$this->query("UPDATE ".DBTBLE." SET first_name = '$first_name', last_name = '$last_name', 
		email_address = '$email_address', info = '$info' WHERE username = '$username'");

$this->set_session($username, $password);		
				if(isset($_COOKIE[$this->cookie_pass])) 
				{ $this->set_cookie($username, $pass, '+'); }

return "Details sucessfully changed.";
		}
	}
	
     // edit password
	 
	 function edit_password($post, $process) {

if(isset($process)) {

$pass1		= $post['pass1'];
		$pass2		= $post['pass2'];
		$password	= $post['pass'];
		$username	= $post['username'];
		
		if ((!$password) || (!$pass1) || (!$pass2)) {
			return "Missing required details.";
		} 
		if (md5($password) !== $_SESSION['password']) {
			return "Current password is incorrect.";
		}
		if ($pass1 !== $pass2) {
			return "New passwords do not match.";
		}

$new = md5($pass1);
		$this->query("UPDATE ".DBTBLE." SET password = '$new' WHERE username = '$username'");

$this->set_session($username, $new);		
				if(isset($_COOKIE[$this->cookie_pass])) 
				{ $this->set_cookie($username, $pass, '+'); }

return "Password update successfull.";
		}
	}

// forgot password
	function Forgot_Password($get, $post) {
		
		$username = $post['username'];
		if(!$username) { 
		$username = $get['username']; } 
		
		$code = $post['code'];
		if(!$code) { 
		$code = $get['code']; } 
	
			if (isset($code)) {
				$query = $this->query("SELECT * FROM ".DBTBLE." WHERE username='$username' AND forgot='$code'");
			
			if($query['num_rows'] == 1) {		
					return "";
			} else {
			if(isset($code) && isset($username)) {
					return "Link Invalid, Please Request a new link.";
			} else {
					return false;
			}
		}
		}
	}

// request password
	function Request_Password($post, $process) {
		
		$username = $post['username'];
		$email = $post['email'];
			
		if(isset($process)) {

$query = $this->query("SELECT * FROM ".DBTBLE." WHERE username='$username' AND email_address = '$email'");

if((!$username) || (!$email)) {
				return "Please enter all details.";
			}

if($query['num_rows'] == 0){
				return "Matching details were not found.";
			}

$chars = "abcdefghijkmnopqrstuvwxyz023456789";
		    srand((double)microtime()*1000000);
		    $i = 0;
		    $pass = '' ;

while ($i <= 7) {
   			    $num = rand() % 33;
        		$tmp = substr($chars, $num, 1);
        		$pass = $pass . $tmp;
        		$i++;
    		}
			$code = md5($pass);
			$this->query("UPDATE ".DBTBLE." SET forgot = '$code' WHERE username='$username' AND email_address='$email'");

Mail_Reset_Password($username, $code, $email);
				return "We have sent an email to your address, this will allow you to reset your password.";
			
		}
	}

// reset password

function Reset_Password($post, $process) {

if(isset($process)) {
		
		$pass1 = $post['pass1'];
		$pass2 = $post['pass2'];
		$username = $post['username'];
		
		if ($pass1 !== $pass2) {
			return "New passwords do not match";
		}
		
			$password = md5($pass1);

$query = $this->query("UPDATE ".DBTBLE." SET password = '$password', forgot = 'NULL' WHERE username = '$username'");
		
		Mail_Reset_Password_Confirmation($username, $email);
			return "Password Reset Sucsessfull, You may now login.";

}
	} 
	
// thumbnail creator
	function make_thumb($img_name,$filename,$new_w,$new_h)
	{
		//get image extension.
		$ext=$this->getExtension($img_name);
		//creates the new image using the appropriate function from gd library
		if(!strcmp("jpg",$ext) || !strcmp("jpeg",$ext))
			$src_img=imagecreatefromjpeg($img_name);
		
		if(!strcmp("JPG",$ext) || !strcmp("JPEG",$ext))
			$src_img=imagecreatefromjpeg($img_name);
					 
		if(!strcmp("png",$ext))
			$src_img=imagecreatefrompng($img_name);
			
		if(!strcmp("PNG",$ext))
			$src_img=imagecreatefrompng($img_name);
					 
		//gets the dimmensions of the image
		$old_x=imageSX($src_img);
		$old_y=imageSY($src_img);
				 
		// next we will calculate the new dimmensions for the thumbnail image
		// the next steps will be taken:
		// 1. calculate the ratio by dividing the old dimmensions with the new ones
		// 2. if the ratio for the width is higher, the width will remain the one define in WIDTH variable
		// and the height will be calculated so the image ratio will not change
		// 3. otherwise we will use the height ratio for the image
		// as a result, only one of the dimmensions will be from the fixed ones
		$ratio1=$old_x/$new_w;
		$ratio2=$old_y/$new_h;
		if($ratio1>$ratio2)
		{
			$thumb_w=$new_w;
			$thumb_h=$old_y/$ratio1;
		}
		else 
		{
			$thumb_h=$new_h;
			$thumb_w=$old_x/$ratio2;
		}
				 
		// we create a new image with the new dimmensions
		$dst_img=ImageCreateTrueColor($thumb_w,$thumb_h);
		 
		// resize the big image to the new created one
		imagecopyresampled($dst_img,$src_img,0,0,0,0,$thumb_w,$thumb_h,$old_x,$old_y);
				 
		// output the created image to the file. Now we will have the thumbnail into the file named by $filename
		if(!strcmp("png",$ext))
			imagepng($dst_img,$filename);
		else
			imagejpeg($dst_img,$filename);
				 
		//destroys source and destination images.
			imagedestroy($dst_img);
			imagedestroy($src_img);
	}
				 
	// This function reads the extension of the file.
	// It is used to determine if the file is an image by checking the extension.
	function getExtension($str)
	{
		$i = strrpos($str,".");
		if (!$i) { return ""; }
			$l = strlen($str) - $i;
			$ext = substr($str,$i+1,$l);
		return $ext;
	}

// class end
}

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: processes.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation