FM / controllers

/home/techb158/exp.abdallabala.com/application/controllers/

/home/techb158/exp.abdallabala.com/application/controllers

Name	Size	Mode	Actions
.DS_Store	6148	0644	edit dl rm
accounts.php	7729	0644	edit dl rm
admin.php	6733	0644	edit dl rm
ajax.date-summary.php	3796	0644	edit dl rm
ajax.expense-calendar.php	1031	0644	edit dl rm
ajax.income-calendar.php	997	0644	edit dl rm
api.php	7595	0644	edit dl rm
appearance.php	2029	0644	edit dl rm
autologin.php	1599	0644	edit dl rm
board.php	989	0644	edit dl rm
calendar.php	4949	0644	edit dl rm
client.php	63019	0644	edit dl rm
clx_api.php	43178	0644	edit dl rm
console.php	5700	0644	edit dl rm
contacts.php	61254	0644	edit dl rm
cp.php	1557	0644	edit dl rm
customers.php	97	0644	edit dl rm
dashboard-alt.php	32	0644	edit dl rm
dashboard.php	36581	0644	edit dl rm
default.php	142	0644	edit dl rm
delete.php	9631	0644	edit dl rm
demo.php	689	0644	edit dl rm
documents.php	5493	0644	edit dl rm
editor.php	2149	0644	edit dl rm
export.php	4874	0644	edit dl rm
files.php	1243	0644	edit dl rm
generate.php	1468	0644	edit dl rm
help.php	381	0644	edit dl rm
ibtest.php	211	0644	edit dl rm
index.html	112	0644	edit dl rm
invoices.php	58182	0644	edit dl rm
iview.php	1410	0644	edit dl rm
jsonapi.php	4701	0644	edit dl rm
jsonexport.php	3312	0644	edit dl rm
legacy.php	25	0644	edit dl rm
login.php	6440	0644	edit dl rm
logout.php	80	0644	edit dl rm
orders.php	8846	0644	edit dl rm
plugins.php	426	0644	edit dl rm
ps.php	10016	0644	edit dl rm
quotes.php	39334	0644	edit dl rm
reorder.php	2404	0644	edit dl rm
reports.php	26227	0644	edit dl rm
search.php	2125	0644	edit dl rm
settings.php	110091	0644	edit dl rm
sys_imgcrop.php	3938	0644	edit dl rm
tags.php	1913	0644	edit dl rm
tax.php	5024	0644	edit dl rm
transactions.php	28561	0644	edit dl rm
update.php	1839	0644	edit dl rm
update_473.php	52763	0644	edit dl rm
util.php	18027	0644	edit dl rm

Edit: /home/techb158/exp.abdallabala.com/application/controllers/util.php (18027B)

<?php
// *************************************************************************
// *                                                                       *
// * iBilling -  Accounting, Billing Software                              *
// * Copyright (c) Sadia Sharmin. All Rights Reserved                      *
// *                                                                       *
// *************************************************************************
// *                                                                       *
// * Email: sadiasharmin3139@gmail.com                                                *
// * Website: http://www.sadiasharmin.com                                  *
// *                                                                       *
// *************************************************************************
// *                                                                       *
// * This software is furnished under a license and may be used and copied *
// * only  in  accordance  with  the  terms  of such  license and with the *
// * inclusion of the above copyright notice.                              *
// * If you Purchased from Codecanyon, Please read the full License from   *
// * here- http://codecanyon.net/licenses/standard                         *
// *                                                                       *
// *************************************************************************
_auth();
$ui->assign('_title', $_L['Utilities'] . '- ' . $config['CompanyName']);
$ui->assign('_st', $_L['Utilities']);
$ui->assign('_application_menu', 'util');
$action = $routes['1'];
$user = User::_info();
$ui->assign('user', $user);
switch ($action) {
    case 'activity':
        $ui->assign(
            'xjq',
            '
	 $("#clear_logs").click(function (e) {
        e.preventDefault();
        bootbox.confirm("This will delete all logs older than 30 days. Are you sure?", function(result) {
           if(result){
               var _url = $("#_url").val();
               $.get( _url+"util/clear_logs", function( data ) {
location.reload();
});
           }
        });
    });

'
        );

$paginator = Paginator::bootstrap('sys_logs');
        $d = ORM::for_table('sys_logs')
            ->offset($paginator['startpoint'])
            ->limit($paginator['limit'])
            ->order_by_desc('date')
            ->find_many();
        $ui->assign('d', $d);
        $ui->assign('paginator', $paginator);

$ui->display('util-activity.tpl');
        break;

case 'ajax_logs':
        $table = 'sys_logs';

// Table's primary key
        $primaryKey = 'id';

$columns = [
            ['db' => 'id', 'dt' => 0],
            [
                'db' => 'date',
                'dt' => 1,
                'formatter' => function ($d, $row) {
                    global $df;
                    return date($df, strtotime($d));
                },
            ],
            ['db' => 'type', 'dt' => 2],
            ['db' => 'description', 'dt' => 3],
            ['db' => 'userid', 'dt' => 4],
            ['db' => 'ip', 'dt' => 5],
        ];

// SQL server connection information
        $sql_details = [
            'user' => $db_user,
            'pass' => $db_password,
            'db' => $db_name,
            'host' => $db_host,
        ];

/* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
         * If you just want to use the basic configuration for DataTables with PHP
         * server-side, there is no need to edit below this line.
         */

// require( 'ssp.class.php' );

$dt = Ssp::simple($_GET, $sql_details, $table, $primaryKey, $columns);
        $x = json_encode($dt);

echo $x;

break;

case 'clear_logs':
        $b30 = date('Y-m-d H:i:s', strtotime('-30 days', time()));
        $d = ORM::for_table('sys_logs')
            ->where_lte('date', $b30)
            ->delete_many();
        _msglog('s', $_L['Logs has been deleted']);

break;

case 'sent-emails':
        $paginator = Paginator::bootstrap('sys_email_logs');
        $d = ORM::for_table('sys_email_logs')
            ->offset($paginator['startpoint'])
            ->limit($paginator['limit'])
            ->order_by_desc('date')
            ->find_many();
        $ui->assign('d', $d);
        $ui->assign('paginator', $paginator);

$ui->display('util-sent-emails.tpl');
        break;

case 'cronlogs':
        $paginator = Paginator::bootstrap(
            'sys_schedulelogs',
            '',
            '',
            '',
            '',
            '',
            '',
            '',
            '',
            5
        );
        $d = ORM::for_table('sys_schedulelogs')
            ->offset($paginator['startpoint'])
            ->limit($paginator['limit'])
            ->order_by_desc('date')
            ->find_many();
        $ui->assign('d', $d);
        $ui->assign('paginator', $paginator);

$ui->display('util_cron_logs.tpl');
        break;

case 'ajax_sent-emails':
        $table = 'sys_email_logs';
        $df = $config['df'] . ' H:i:s';
        // Table's primary key
        $primaryKey = 'id';

// Array of database columns which should be read and sent back to DataTables.
        // The `db` parameter represents the column name in the database, while the `dt`
        // parameter represents the DataTables column identifier. In this case simple
        // indexes
        $columns = [
            ['db' => 'id', 'dt' => 0],
            [
                'db' => 'date',
                'dt' => 1,
                'formatter' => function ($d, $row) {
                    global $df;
                    return date($df, strtotime($d));
                },
            ],

['db' => 'email', 'dt' => 2],
            ['db' => 'subject', 'dt' => 3],
            [
                'db' => 'id',
                'dt' => 4,
                'formatter' => function ($d, $row) {
                    //  return date( 'jS M y', strtotime($d));
                    //
                    return '<a href="' .
                        U .
                        'util/view-email/' .
                        $d .
                        '/" class="btn btn-primary btn-outline btn-xs"><i class="fa fa-envelope-o"></i> View</a>';
                },
            ],
        ];

// require( 'ssp.class.php' );

$x = json_encode(
            Ssp::simple($_GET, $sql_details, $table, $primaryKey, $columns)
        );
        //  Dev::_log($x);
        header('Content-Type: application/json');
        echo $x;

break;

case 'dbstatus':
        $dbc = new mysqli($db_host, $db_user, $db_password, $db_name);
        if ($result = $dbc->query('SHOW TABLE STATUS')) {
            $size = 0;
            $decimals = 2;
            $tables = [];
            while ($row = $result->fetch_array()) {
                $size += $row["Data_length"] + $row["Index_length"];
                $total_size =
                    ($row["Data_length"] + $row["Index_length"]) / 1024;
                $tables[$row['Name']]['size'] = number_format($total_size, '0');
                $tables[$row['Name']]['rows'] = $row["Rows"];
                $tables[$row['Name']]['name'] = $row["Name"];
            }

$mbytes = number_format(
                $size / (1024 * 1024),
                $decimals,
                $config['dec_point'],
                $config['thousands_sep']
            );

$ui->assign('tables', $tables);
            $ui->assign('dbsize', $mbytes);
            $ui->display('dbstatus.tpl');
        }
        break;

case 'dbbackup':
        try {
            // open the connection to the database - $host, $user, $password, $database should already be set
            $mysqli = new mysqli($db_host, $db_user, $db_password, $db_name);

// did it work?
            if ($mysqli->connect_errno) {
                throw new Exception(
                    "Failed to connect to MySQL: " . $mysqli->connect_error
                );
            }

header('Pragma: public');
            header('Expires: 0');
            header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
            header('Content-Type: application/force-download');
            header('Content-Type: application/octet-stream');
            header('Content-Type: application/download');
            header(
                'Content-Disposition: attachment;filename="backup_' .
                    date('Y-m-d_h_i_s') .
                    '.sql"'
            );
            header('Content-Transfer-Encoding: binary');

// start buffering output
            // it is not clear to me whether this needs to be done since the headers have already been set.
            // However in the PHP 'header' documentation (http://php.net/manual/en/function.header.php) it says that "Headers will only be accessible and output when a SAPI that supports them is in use."
            // rather than the possibility of falling through a real time window there seems to be no problem buffering the output anyway
            ob_start();
            $f_output = fopen("php://output", 'w');

// put a few comments into the SQL file
            print "-- pjl SQL Dump\n";
            print "-- Server version:" . $mysqli->server_info . "\n";
            print "-- Generated: " . date('Y-m-d h:i:s') . "\n";
            print '-- Current PHP version: ' . phpversion() . "\n";
            print '-- Host: ' . $db_host . "\n";
            print '-- Database:' . $db_name . "\n";

//get a list of all the tables
            $aTables = [];
            $strSQL = 'SHOW TABLES'; // I put the SQL into a variable for debuggin purposes - better that "check syntax near '), "
            if (!($res_tables = $mysqli->query($strSQL))) {
                throw new Exception(
                    "MySQL Error: " . $mysqli->error . 'SQL: ' . $strSQL
                );
            }

while ($row = $res_tables->fetch_array()) {
                $aTables[] = $row[0];
            }

// Don't really need to do this (unless there is loads of data) since PHP will tidy up for us but I think it is better not to be sloppy
            // I don't do this at the end in case there is an Exception
            $res_tables->free();

//now go through all the tables in the database
            foreach ($aTables as $table) {
                print "-- --------------------------------------------------------\n";
                print "-- Structure for '" . $table . "'\n";
                print "--\n\n";

// remove the table if it exists
                //  print('DROP TABLE IF EXISTS '.$table.';');

// ask MySQL how to create the table
                $strSQL = 'SHOW CREATE TABLE ' . $table;
                if (!($res_create = $mysqli->query($strSQL))) {
                    throw new Exception(
                        "MySQL Error: " . $mysqli->error . 'SQL: ' . $strSQL
                    );
                }
                $row_create = $res_create->fetch_assoc();

print "\n" . $row_create['Create Table'] . ";\n";

print "-- --------------------------------------------------------\n";
                print '-- Dump Data for `' . $table . "`\n";
                print "--\n\n";
                $res_create->free();

// get the data from the table
                $strSQL = 'SELECT * FROM ' . $table;
                if (!($res_select = $mysqli->query($strSQL))) {
                    throw new Exception(
                        "MySQL Error: " . $mysqli->error . 'SQL: ' . $strSQL
                    );
                }

// get information about the fields
                $fields_info = $res_select->fetch_fields();

// now we can go through every field/value pair.
                // for each field/value we build a string strFields/strValues
                while ($values = $res_select->fetch_assoc()) {
                    $strFields = '';
                    $strValues = '';
                    foreach ($fields_info as $field) {
                        if ($strFields != '') {
                            $strFields .= ',';
                        }
                        $strFields .= "`" . $field->name . "`";

// put quotes round everything - MYSQL will do type convertion (I hope) - also strip out any nasty characters
                        if ($strValues != '') {
                            $strValues .= ',';
                        }
                        $strValues .=
                            '"' .
                            preg_replace(
                                '/[^(\x20-\x7F)\x0A]*/',
                                '',
                                $values[$field->name] . '"'
                            );
                    }

// now we can put the values/fields into the insert command.
                    print "INSERT INTO " .
                        $table .
                        " (" .
                        $strFields .
                        ") VALUES (" .
                        $strValues .
                        ");\n";
                }
                print "\n\n\n";

$res_select->free();
            }
        } catch (Exception $e) {
            print $e->getMessage();
        }

fclose($f_output);
        print ob_get_clean();
        $mysqli->close();

break;

case 'view-email':
        $id = $routes['2'];

$d = ORM::for_table('sys_email_logs')->find_one($id);
        if ($d) {
            $ui->assign('d', $d);
            $ui->display('view-email.tpl');
        } else {
        }

break;

case 'activity-ajax':
        $d = ORM::for_table('sys_logs')
            ->order_by_desc('id')
            ->limit(5)
            ->find_many();
        $html = '';
        $df = $config['df'] . ' H:i:s';
        foreach ($d as $ds) {
            $html .=
                ' <li>
                                <a href="javascript:void(0)">
                                    <div>
                                        ' .
                $ds['description'] .
                '
                                        <span class="pull-right text-muted small">' .
                date($df, strtotime($ds['date'])) .
                '</span>
                                    </div>
                                </a>
                            </li>
                            <li class="divider"></li>';
        }

$html .=
            '<li>
                                <div class="text-center link-block">
                                    <a href="' .
            U .
            'util/activity/">
                                        <strong>' .
            $_L['See All Activity'] .
            ' </strong>
                                       <i class="fa fa-angle-right"></i>
                                    </a>
                                </div>
                            </li>';
        echo $html;

break;

case 'terminal':
        $ui->assign('xheader', Asset::css(['terminal/terminal']));
        $ui->assign('xfooter', Asset::js(['terminal/terminal', 'terminal/ib']));
        $ui->display('terminal.tpl');

break;

case 'sys_status':
        $ui->assign('pinfo', Ib_System::info());

$xjq = "function displayTime() {
    var time = moment().format('D MMMM YYYY H:mm:ss');
    $('#clock').html(time);
    setTimeout(displayTime, 1000);
}
 displayTime();";

$ui->assign('xjq', $xjq);
        $ui->assign('app_stage', $_app_stage);

$ui->display('util_sys_status.tpl');

break;

case 'sys_status_dl':
        $pdf = new Ib_Pdf();

$pdf->from(Ib_System::info())
            ->setFileName('server_info')
            ->download();

break;

case 'integrationcode':
        $xheader = Asset::css(['prism/prism']);
        $xfooter = Asset::js(['prism/prism']);

$ui->assign('xheader', $xheader);
        $ui->assign('xfooter', $xfooter);

$s_client_login =
            '<form method="post" action="' .
            U .
            'client/auth/">
<input type="email" class="form-control" name="username" placeholder="' .
            $_L['Email Address'] .
            '"/>
<input type="password" class="form-control" name="password" placeholder="' .
            $_L['Password'] .
            '"/>
<button type="submit" class="btn btn-primary">Login</button>
</form>';

$s_client_register =
            '<a href="' . U . 'client/register/">' . $_L['Register'] . '</a>';

$form_client_login = htmlentities($s_client_login);
        $form_client_register = htmlentities($s_client_register);

$ui->assign('form_client_login', $form_client_login);
        $ui->assign('form_client_register', $form_client_register);

$ui->display('util_integrationcode.tpl');

break;

default:
        echo 'action not defined';
}

cmd: