byp4a55 professor6T9

Linux world-400.fr.planethoster.net 4.18.0-425.13.1.lve.el7h.x86_64 #1 SMP Mon Feb 27 14:44:55 UTC 2023 x86_64
Apache
10.195.0.10

File Name : Account.php

<?php
/*
 * @copyright Copyright (c) 2021 AltumCode (https://altumcode.com/)
 *
 * This software is exclusively sold through https://altumcode.com/ by the AltumCode author.
 * Downloading this product from any other sources and running it without a proper license is illegal,
 *  except the official ones linked from https://altumcode.com/.
 */

namespace Altum\Controllers;

use Altum\Alerts;

class Account extends Controller {

public function index() {

\Altum\Authentication::guard();

/* Prepare the TwoFA codes just in case we need them */
        $twofa = new \RobThree\Auth\TwoFactorAuth(settings()->main->title, 6, 30);
        $twofa_secret = $twofa->createSecret();
        $twofa_image = $twofa->getQRCodeImageAsDataUri($this->user->email . ' - ' . $this->user->name, $twofa_secret);

if(!empty($_POST)) {

/* Clean some posted variables */
            $_POST['email']		= mb_substr(filter_var($_POST['email'], FILTER_SANITIZE_EMAIL), 0, 320);
            $_POST['name']		= mb_substr(input_clean($_POST['name']), 0, 64);
            $_POST['timezone']  = in_array($_POST['timezone'], \DateTimeZone::listIdentifiers()) ? query_clean($_POST['timezone']) : settings()->main->default_timezone;
            $_POST['anti_phishing_code'] = mb_substr(input_clean($_POST['anti_phishing_code']), 0, 8);
            $_POST['twofa_is_enabled']  = (bool) $_POST['twofa_is_enabled'];
            $_POST['twofa_token']       = trim(input_clean($_POST['twofa_token']));
            $twofa_secret               = $_POST['twofa_is_enabled'] ? $this->user->twofa_secret : null;

/* Billing */
            if(empty($this->user->payment_subscription_id)) {
                $_POST['billing_type'] = in_array($_POST['billing_type'], ['personal', 'business']) ? query_clean($_POST['billing_type']) : 'personal';
                $_POST['billing_name'] = mb_substr(trim(query_clean($_POST['billing_name'])), 0, 128);
                $_POST['billing_address'] = mb_substr(trim(query_clean($_POST['billing_address'])), 0, 128);
                $_POST['billing_city'] = mb_substr(trim(query_clean($_POST['billing_city'])), 0, 64);
                $_POST['billing_county'] = mb_substr(trim(query_clean($_POST['billing_county'])), 0, 64);
                $_POST['billing_zip'] = mb_substr(trim(query_clean($_POST['billing_zip'])), 0, 32);
                $_POST['billing_country'] = array_key_exists($_POST['billing_country'], get_countries_array()) ? query_clean($_POST['billing_country']) : 'US';
                $_POST['billing_phone'] = mb_substr(trim(query_clean($_POST['billing_phone'])), 0, 32);
                $_POST['billing_tax_id'] = $_POST['billing_type'] == 'business' ? mb_substr(trim(query_clean($_POST['billing_tax_id'])), 0, 64) : '';
                $_POST['billing'] = json_encode([
                    'type' => $_POST['billing_type'],
                    'name' => $_POST['billing_name'],
                    'address' => $_POST['billing_address'],
                    'city' => $_POST['billing_city'],
                    'county' => $_POST['billing_county'],
                    'zip' => $_POST['billing_zip'],
                    'country' => $_POST['billing_country'],
                    'phone' => $_POST['billing_phone'],
                    'tax_id' => $_POST['billing_tax_id'],
                ]);
            }

//ALTUMCODE:DEMO if(DEMO) if($this->user->user_id == 1) Alerts::add_error('Please create an account on the demo to test out this function.');

/* Check for any errors */
            if(!\Altum\Csrf::check()) {
                Alerts::add_error(l('global.error_message.invalid_csrf_token'));
            }
            if(filter_var($_POST['email'], FILTER_VALIDATE_EMAIL) == false) {
                Alerts::add_field_error('email', l('global.error_message.invalid_email'));
            }
            if(db()->where('email', $_POST['email'])->has('users') && $_POST['email'] !== $this->user->email) {
                Alerts::add_field_error('email', l('register.error_message.email_exists'));
            }

if(mb_strlen($_POST['name']) < 1 || mb_strlen($_POST['name']) > 64) {
                Alerts::add_field_error('name', l('register.error_message.name_length'));
            }

if(!empty($_POST['old_password']) && !empty($_POST['new_password'])) {
                if(!password_verify($_POST['old_password'], $this->user->password)) {
                    Alerts::add_field_error('old_password', l('account.error_message.invalid_current_password'));
                }
                if(mb_strlen($_POST['new_password']) < 6 || mb_strlen($_POST['new_password']) > 64) {
                    Alerts::add_field_error('new_password', l('global.error_message.password_length'));
                }
                if($_POST['new_password'] !== $_POST['repeat_password']) {
                    Alerts::add_field_error('repeat_password', l('global.error_message.passwords_not_matching'));
                }
            }

if($_POST['twofa_is_enabled'] && $_POST['twofa_token']) {
                $twofa_check = $twofa->verifyCode($_SESSION['twofa_potential_secret'], $_POST['twofa_token']);

if(!$twofa_check) {
                    Alerts::add_field_error('twofa_token', l('account.error_message.twofa_check'));

/* Regenerate */
                    $twofa_secret = $twofa->createSecret();
                    $twofa_image = $twofa->getQRCodeImageAsDataUri($this->user->email . ' - ' . $this->user->name, $twofa_secret);

} else {
                    $twofa_secret = $_SESSION['twofa_potential_secret'];
                }

}

if(!Alerts::has_field_errors() && !Alerts::has_errors()) {

/* Only update the billing if no active subscriptions are found */
                if(!empty($this->user->payment_subscription_id)) {
                    $_POST['billing'] = json_encode($this->user->billing);
                }

/* Database query */
                db()->where('user_id', $this->user->user_id)->update('users', [
                    'name' => $_POST['name'],
                    'billing' => $_POST['billing'],
                    'timezone' => $_POST['timezone'],
                    'twofa_secret' => $twofa_secret,
                    'anti_phishing_code' => $_POST['anti_phishing_code'],
                ]);

/* Set a nice success message */
                Alerts::add_success(l('account.success_message.account_updated'));

/* Check for an email address change */
                if($_POST['email'] != $this->user->email) {

if(settings()->users->email_confirmation) {
                        $email_activation_code = md5($_POST['email'] . microtime());

/* Prepare the email */
                        $email_template = get_email_template(
                            [],
                            l('global.emails.user_pending_email.subject'),
                            [
                                '{{ACTIVATION_LINK}}' => url('activate-user?email=' . md5($_POST['email']) . '&email_activation_code=' . $email_activation_code . '&type=user_pending_email'),
                                '{{NAME}}' => $this->user->name,
                                '{{CURRENT_EMAIL}}' => $this->user->email,
                                '{{NEW_EMAIL}}' => $_POST['email'],
                            ],
                            l('global.emails.user_pending_email.body')
                        );

send_mail($_POST['email'], $email_template->subject, $email_template->body, ['anti_phishing_code' => $this->user->anti_phishing_code, 'language' => $this->user->language]);

/* Save the potential new email as pending */
                        db()->where('user_id', $this->user->user_id)->update('users', [
                            'pending_email' => $_POST['email'],
                            'email_activation_code' => $email_activation_code,
                        ]);

Alerts::add_info(l('account.info_message.user_pending_email'));

} else {

/* Save the new email without verification */
                        db()->where('user_id', $this->user->user_id)->update('users', ['email' => $_POST['email']]);

}

if(!empty($_POST['old_password']) && !empty($_POST['new_password'])) {
                    $new_password = password_hash($_POST['new_password'], PASSWORD_DEFAULT);

db()->where('user_id', $this->user->user_id)->update('users', ['password' => $new_password]);

/* Logout of the user */
                    \Altum\Authentication::logout(false);

/* Start a new session to set a success message */
                    session_start();

/* Clear the cache */
                    \Altum\Cache::$adapter->deleteItemsByTag('user_id=' . $this->user->user_id);

/* Set a nice success message */
                    Alerts::add_success(l('account.success_message.password_updated'));

redirect('login');
                }

/* Clear the cache */
                \Altum\Cache::$adapter->deleteItemsByTag('user_id=' . $this->user->user_id);

redirect('account');
            }

}

/* Store the potential secret */
        $_SESSION['twofa_potential_secret'] = $twofa_secret;

/* Get the account header menu */
        $menu = new \Altum\View('partials/account_header_menu', (array) $this);
        $this->add_view_content('account_header_menu', $menu->run());

/* Prepare the View */
        $data = [
            'twofa_secret'  => $twofa_secret,
            'twofa_image'   => $twofa_image
        ];

$view = new \Altum\View('account/index', (array) $this);

$this->add_view_content('content', $view->run($data));

}

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	pluszzsu/pluszzsu	0755	2023-01-14 09:43:10
..	dir	-	pluszzsu/pluszzsu	0755	2023-01-14 09:43:10
admin	dir	-	pluszzsu/pluszzsu	0755	2023-01-14 09:43:10
admin-api	dir	-	pluszzsu/pluszzsu	0755	2023-01-14 09:43:10
api	dir	-	pluszzsu/pluszzsu	0755	2023-01-14 09:43:10
.DS_Store	application/octet-stream	14 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Account.php	text/x-php	9.9 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
AccountApi.php	text/x-php	1.84 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
AccountDelete.php	text/x-php	2.74 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
AccountLogs.php	text/x-php	2.42 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
AccountPayments.php	text/x-php	3.05 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
AccountPlan.php	text/x-php	1.65 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
AccountRedeemCode.php	text/x-php	5.49 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
ActivateUser.php	text/x-php	4.68 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Affiliate.php	text/x-php	783 B	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
ApiDocumentation.php	text/x-php	1.12 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Blog.php	text/x-php	8.32 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Contact.php	text/x-php	3.97 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
CookieConsent.php	text/x-php	2.52 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Cron.php	text/x-php	16.58 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Dashboard.php	text/x-php	14.98 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
DashboardAjaxLightweight.php	text/x-php	19.41 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
DashboardAjaxNormal.php	text/x-php	28.81 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
DomainCreate.php	text/x-php	5.37 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
DomainUpdate.php	text/x-php	5.21 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Domains.php	text/x-php	3.6 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
GoalsAjax.php	text/x-php	5.29 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Heatmap.php	text/x-php	4.29 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Heatmaps.php	text/x-php	2.5 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
HeatmapsAjax.php	text/x-php	5.41 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Help.php	text/x-php	1.2 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Index.php	text/x-php	1.25 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Invoice.php	text/x-php	3.36 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Login.php	text/x-php	20.31 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Logout.php	text/x-php	1.35 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
LostPassword.php	text/x-php	3.44 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
NotFound.php	text/x-php	803 B	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Page.php	text/x-php	1.86 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Pages.php	text/x-php	3.41 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Pay.php	text/x-php	72.73 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
PayBilling.php	text/x-php	4.11 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
PayThankYou.php	text/x-php	2.14 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Pixel.php	text/x-php	4.92 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
PixelTrack.php	text/x-php	36.35 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Plan.php	text/x-php	1.26 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Realtime.php	text/x-php	753 B	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Refer.php	text/x-php	1.56 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Referrals.php	text/x-php	7.27 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Register.php	text/x-php	8.76 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Replay.php	text/x-php	3.41 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Replays.php	text/x-php	7.98 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
ResendActivation.php	text/x-php	3.36 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
ResetPassword.php	text/x-php	3.14 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
SessionAjax.php	text/x-php	2 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Sitemap.php	text/x-php	2.26 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Team.php	text/x-php	1.94 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Teams.php	text/x-php	2.21 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
TeamsAjax.php	text/x-php	4.28 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
TeamsAssociationsAjax.php	text/x-php	5.6 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Visitor.php	text/x-php	3.25 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Visitors.php	text/x-php	4.77 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
VisitorsAjax.php	text/x-php	1.11 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
Websites.php	text/x-php	2.82 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10
WebsitesAjax.php	text/x-php	8.25 KB	pluszzsu/pluszzsu	0644	2023-01-14 09:43:10

Team Anon Force

https://t.me/Professor6T9x