diff --git a/admin/dashboard/index.php b/admin/dashboard/index.php
index ed3933c..bbf32ca 100644
--- a/admin/dashboard/index.php
+++ b/admin/dashboard/index.php
@@ -11,74 +11,71 @@ error_reporting(E_ALL);
?>
$filename){
- if($filename!=".." && $filename!="." && $filename!="index.php"){
- if(is_dir($dir."/".$filename)){
- $new_foldersize = foldersize($dir."/".$filename);
- $count_size = $count_size+ $new_foldersize;
- }else if(is_file($dir."/".$filename)){
- $count_size = $count_size + filesize($dir."/".$filename);
- $count++;
+function folderSize($dir)
+{
+ $count_size = 0;
+ $count = 0;
+ $dir_array = scandir($dir);
+ foreach ($dir_array as $key=>$filename) {
+ if ($filename != '..' && $filename != '.' && $filename != 'index.php') {
+ if (is_dir($dir.'/'.$filename)) {
+ $new_foldersize = foldersize($dir.'/'.$filename);
+ $count_size = $count_size + $new_foldersize;
+ } elseif (is_file($dir.'/'.$filename)) {
+ $count_size = $count_size + filesize($dir.'/'.$filename);
+ $count++;
+ }
}
- }
- }
-return $count_size;
+ }
+
+ return $count_size;
}
// size converter
-function sizeFormat($bytes){
-$kb = 1024;
-$mb = $kb * 1024;
-$gb = $mb * 1024;
-$tb = $gb * 1024;
-
-if (($bytes >= 0) && ($bytes < $kb)) {
-return $bytes . ' B';
-
-} elseif (($bytes >= $kb) && ($bytes < $mb)) {
-return ceil($bytes / $kb) . ' KB';
-
-} elseif (($bytes >= $mb) && ($bytes < $gb)) {
-return ceil($bytes / $mb) . ' MB';
-
-} elseif (($bytes >= $gb) && ($bytes < $tb)) {
-return ceil($bytes / $gb) . ' GB';
-
-} elseif ($bytes >= $tb) {
-return ceil($bytes / $tb) . ' TB';
-} else {
-return $bytes . ' B';
-}
+function sizeFormat($bytes)
+{
+ $kb = 1024;
+ $mb = $kb * 1024;
+ $gb = $mb * 1024;
+ $tb = $gb * 1024;
+
+ if (($bytes >= 0) && ($bytes < $kb)) {
+ return $bytes.' B';
+ } elseif (($bytes >= $kb) && ($bytes < $mb)) {
+ return ceil($bytes / $kb).' KB';
+ } elseif (($bytes >= $mb) && ($bytes < $gb)) {
+ return ceil($bytes / $mb).' MB';
+ } elseif (($bytes >= $gb) && ($bytes < $tb)) {
+ return ceil($bytes / $gb).' GB';
+ } elseif ($bytes >= $tb) {
+ return ceil($bytes / $tb).' TB';
+ } else {
+ return $bytes.' B';
+ }
}
-// get size of folders in a folder
+// get size of folders in a folder
$plugin_count = count(glob('../../plugins/*', GLOB_ONLYDIR));
// Update checker
$PATCH_URL = 'https://raw.githubusercontent.com/Supernova3339/anonfiles/main/';
-$version_filename = 'latest.txt?token=GHSAT0AAAAAAB4S7HM4SZGF7VWPABQO3KRSY5FDV4Q'; # REMOVE TOKEN
+$version_filename = 'latest.txt?token=GHSAT0AAAAAAB4S7HM4SZGF7VWPABQO3KRSY5FDV4Q'; // REMOVE TOKEN
// Get version
- $ch = curl_init($PATCH_URL . $version_filename);
+ $ch = curl_init($PATCH_URL.$version_filename);
- curl_setopt($ch, CURLOPT_HEADER, 0);
- curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+ curl_setopt($ch, CURLOPT_HEADER, 0);
+ curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
- $str = curl_exec($ch);
- curl_close($ch);
+ $str = curl_exec($ch);
+ curl_close($ch);
- $server_version = str_to_version_info($str);
+ $server_version = str_to_version_info($str);
?>
@@ -116,11 +113,11 @@ $version_filename = 'latest.txt?token=GHSAT0AAAAAAB4S7HM4SZGF7VWPABQO3KRSY5FDV4Q
@@ -130,11 +127,10 @@ $version_filename = 'latest.txt?token=GHSAT0AAAAAAB4S7HM4SZGF7VWPABQO3KRSY5FDV4Q
- version){ - echo '
update available
'; + version) { + echo 'update available
'; } - echo $server_version; + echo $server_version; ?>- - '; -} - + + '; + } template_admin_footer(); diff --git a/admin/dashboard/main.php b/admin/dashboard/main.php index 592f3a8..dad9c88 100644 --- a/admin/dashboard/main.php +++ b/admin/dashboard/main.php @@ -1,4 +1,5 @@ -if(isset($_GET['logout'])) -{ +if (isset($_GET['logout'])) { logout(); } // Logout Function --> -function logout(){ +function logout() +{ session_destroy(); - header("Location: ../"); + header('Location: ../'); exit(); } // Template admin header -function template_admin_header($title, $selected = 'dashboard', $selected_child = '') { +function template_admin_header($title, $selected = 'dashboard', $selected_child = '') +{ // Admin HTML links $admin_links = ' - Dashboard - Files - Settings + Dashboard + Files + Settings '; // Indenting the below code may cause an error -echo <<
-FileTypeVerification($_FILES["fileToUpload"])){
- if($core->FileSizeVerification($_FILES["fileToUpload"])){
- $newfilename = $core->FileNameConvertor($_FILES["fileToUpload"]);
- if($core->UploadFile($_FILES["fileToUpload"], $newfilename)){
- $destination = base64_encode(file_destination.'/'.$newfilename);
- ?>
+FileTypeVerification($_FILES['fileToUpload'])) {
+ if ($core->FileSizeVerification($_FILES['fileToUpload'])) {
+ $newfilename = $core->FileNameConvertor($_FILES['fileToUpload']);
+ if ($core->UploadFile($_FILES['fileToUpload'], $newfilename)) {
+ $destination = base64_encode(file_destination.'/'.$newfilename); ?>
Success ! Your file are available here: download.php?file=
+ } else {
+ ?>
An error occured while trying to upload your file(s).
+ }
+ } else {
+ ?>
Your file is too high/low.
+ }
+ } else {
+ ?>
Incorrect file format.
@@ -101,7 +97,7 @@ $(document).ready(function(){
});
-
+
diff --git a/installer.php b/installer.php
index 9e50a3d..072a40a 100644
--- a/installer.php
+++ b/installer.php
@@ -1,78 +1,81 @@
$v) {
- if ($k == 'code') continue;
- $v = in_array(strtolower($v), ['true', 'false']) || is_numeric($v) ? strtolower($v) : '\'' . $v . '\'';
- $contents .= 'define(\'' . $k . '\',' . $v . ');' . PHP_EOL;
+function install($config_file = 'system/config.php')
+{
+ $contents = ' $v) {
+ if ($k == 'code') {
+ continue;
+ }
+ $v = in_array(strtolower($v), ['true', 'false']) || is_numeric($v) ? strtolower($v) : '\''.$v.'\'';
+ $contents .= 'define(\''.$k.'\','.$v.');'.PHP_EOL;
+ }
+ $contents .= '?>';
+ if (!file_put_contents($config_file, $contents)) {
+ return false;
}
- $contents .= '?>';
- if (!file_put_contents($config_file, $contents)) {
- return FALSE;
- }
- return TRUE;
+
+ return true;
}
/*Verify Purchase Code function*/
function verify($code)
{
-
- /*If the submit form is success*/
- if(!empty($code)){
-
- /*add purchase code to the API link*/
- $purchase_code = $code;
- $url = "https://dl.supers0ft.us/anonuptest/api.php?code=".$purchase_code;
- $curl = curl_init($url);
-
- /*Set your personal token*/
- // $personal_token = "9COT6mduU2sZSMIlC09aYAQveaRdQ2H9";
-
- /*Correct header for the curl extension*/
- $header = array();
- $header[] = 'Authorization: Bearer '.$personal_token;
- $header[] = 'User-Agent: Purchase code verification';
- $header[] = 'timeout: 20';
- curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
- curl_setopt($curl, CURLOPT_HTTPHEADER,$header);
-
- /*Connect to the API, and get values from there*/
- $envatoCheck = curl_exec($curl);
- curl_close($curl);
- $envatoCheck = json_decode($envatoCheck);
-
- /*Variable request from the API*/
- $date = new DateTime(isset($envatoCheck->supported_until) ? $envatoCheck->supported_until : false);
- $support_date = $date->format('Y-m-d H:i:s');
- $sold = new DateTime(isset($envatoCheck->sold_at) ? $envatoCheck->sold_at : false);
- $sold_at = $sold->format('Y-m-d H:i:s');
- $buyer = (isset( $envatoCheck->buyer) ? $envatoCheck->buyer : false);
- $license = (isset( $envatoCheck->license) ? $envatoCheck->license : false);
- $count = (isset( $envatoCheck->purchase_count) ? $envatoCheck->purchase_count : false);
- $support_amount = (isset( $envatoCheck->support_amount) ? $envatoCheck->support_amount : false);
- $item = (isset( $envatoCheck->item->previews->landscape_preview->landscape_url ) ? $envatoCheck->item->previews->landscape_preview->landscape_url : false);
-
-
- /*Check for Special Characters*/
- if (preg_match('/[\'^£$%&*()}{@#~?><>,|=_+¬]/', $code)){
- return 'Not allowed to use special characters!';
- }
-
- /*Check for Empty Spaces*/
- if(!isset($code) || trim($code) == ''){
- return 'You need to fill up the input area!';
- }
-
- /*If Purchase code exists, But Purchase ended*/
- if (isset($envatoCheck->item->name) && (date('Y-m-d H:i:s') >= $support_date)){
- return "
+
+ /*If the submit form is success*/
+ if (!empty($code)) {
+
+ /*add purchase code to the API link*/
+ $purchase_code = $code;
+ $url = 'https://dl.supers0ft.us/anonuptest/api.php?code='.$purchase_code;
+ $curl = curl_init($url);
+
+ /*Set your personal token*/
+ // $personal_token = "9COT6mduU2sZSMIlC09aYAQveaRdQ2H9";
+
+ /*Correct header for the curl extension*/
+ $header = [];
+ $header[] = 'Authorization: Bearer '.$personal_token;
+ $header[] = 'User-Agent: Purchase code verification';
+ $header[] = 'timeout: 20';
+ curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
+ curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
+
+ /*Connect to the API, and get values from there*/
+ $envatoCheck = curl_exec($curl);
+ curl_close($curl);
+ $envatoCheck = json_decode($envatoCheck);
+
+ /*Variable request from the API*/
+ $date = new DateTime(isset($envatoCheck->supported_until) ? $envatoCheck->supported_until : false);
+ $support_date = $date->format('Y-m-d H:i:s');
+ $sold = new DateTime(isset($envatoCheck->sold_at) ? $envatoCheck->sold_at : false);
+ $sold_at = $sold->format('Y-m-d H:i:s');
+ $buyer = (isset($envatoCheck->buyer) ? $envatoCheck->buyer : false);
+ $license = (isset($envatoCheck->license) ? $envatoCheck->license : false);
+ $count = (isset($envatoCheck->purchase_count) ? $envatoCheck->purchase_count : false);
+ $support_amount = (isset($envatoCheck->support_amount) ? $envatoCheck->support_amount : false);
+ $item = (isset($envatoCheck->item->previews->landscape_preview->landscape_url) ? $envatoCheck->item->previews->landscape_preview->landscape_url : false);
+
+ /*Check for Special Characters*/
+ if (preg_match('/[\'^£$%&*()}{@#~?><>,|=_+¬]/', $code)) {
+ return 'Not allowed to use special characters!';
+ }
+
+ /*Check for Empty Spaces*/
+ if (!isset($code) || trim($code) == '') {
+ return 'You need to fill up the input area!';
+ }
+
+ /*If Purchase code exists, But Purchase ended*/
+ if (isset($envatoCheck->item->name) && (date('Y-m-d H:i:s') >= $support_date)) {
+ return "
{$envatoCheck->item->name}
@@ -115,14 +118,15 @@ function verify($code)
Error!
Could not write to file! Please check permissions and try again!'; - } - return " + } + + /*If Purchase code exists, display client information*/ + if (isset($envatoCheck->item->name) && (date('Y-m-d H:i:s') < $support_date)) { + if (!install()) { + return '
Error!
Could not write to file! Please check permissions and try again!'; + } + + return "
{$envatoCheck->item->name}
@@ -165,11 +169,11 @@ function verify($code)
INVALID PURCHASE CODE.
@@ -212,19 +216,18 @@ function verify($code)
Error!
Please enter your Envato code!
'; - } + // Validate code + $response = verify($_POST['code']); + } else { + // No code specified + $response = 'Error!
Please enter your Envato code!
'; + } } ?> @@ -424,9 +427,9 @@ if ($_POST) { } }; }); - + setStep(5); - + diff --git a/protect.php b/protect.php index e4388a5..32e62b2 100644 --- a/protect.php +++ b/protect.php @@ -1,24 +1,25 @@ 'userpass', -'admin' => 'adminpass' -); +$LOGIN_INFORMATION = [ + 'user' => 'userpass', + 'admin' => 'adminpass', +]; define('USE_USERNAME', true); define('LOGOUT_URL', 'https://dl.supers0ft.us/logout.php/'); define('TIMEOUT_MINUTES', 0); define('TIMEOUT_CHECK_ACTIVITY', true); -if(isset($_GET['help'])) { -die('Include following code into every page you would like to protect, at the very beginning (first line):<?php include("' . str_replace('\\','\\\\',__FILE__) . '"); ?>'); +if (isset($_GET['help'])) { + exit('Include following code into every page you would like to protect, at the very beginning (first line):
<?php include("'.str_replace('\\', '\\\\', __FILE__).'"); ?>'); } $timeout = (TIMEOUT_MINUTES == 0 ? 0 : time() + TIMEOUT_MINUTES * 60); -if(isset($_GET['logout'])) { -setcookie("verify", '', $timeout, '/'); -header('Location: ' . LOGOUT_URL); -exit(); +if (isset($_GET['logout'])) { + setcookie('verify', '', $timeout, '/'); + header('Location: '.LOGOUT_URL); + exit(); } -if(!function_exists('showLoginPasswordProtect')) { -function showLoginPasswordProtect($error_msg) { -?> +if (!function_exists('showLoginPasswordProtect')) { + function showLoginPasswordProtect($error_msg) + { + ?> @@ -61,7 +62,9 @@ input { border: 1px solid black; }
Administration Panel
'; ?> +
'; + } ?> @@ -70,41 +73,39 @@ input { border: 1px solid black; } $val) { -$lp = (USE_USERNAME ? $key : '') .'%'.$val; -if ($_COOKIE['auth'] == md5($lp)) { -$found = true; -if (TIMEOUT_CHECK_ACTIVITY) { -setcookie("auth", md5($lp), $timeout, '/'); -} -break; -} -} -if (!$found) { -showLoginPasswordProtect(""); -} + showLoginPasswordProtect('Incorrect data.'); + } else { + setcookie('auth', md5($login.'%'.$pass), $timeout, '/'); + unset($_POST['access_login']); + unset($_POST['access_password']); + unset($_POST['Submit']); + } +} else { + if (!isset($_COOKIE['auth'])) { + showLoginPasswordProtect(''); + } + $found = false; + foreach ($LOGIN_INFORMATION as $key=>$val) { + $lp = (USE_USERNAME ? $key : '').'%'.$val; + if ($_COOKIE['auth'] == md5($lp)) { + $found = true; + if (TIMEOUT_CHECK_ACTIVITY) { + setcookie('auth', md5($lp), $timeout, '/'); + } + break; + } + } + if (!$found) { + showLoginPasswordProtect(''); + } } ?> \ No newline at end of file diff --git a/system/config.php b/system/config.php index 3fb8514..9816a5a 100644 --- a/system/config.php +++ b/system/config.php @@ -22,7 +22,7 @@ $filelist = getenv('APP_FILELIST') ?? 'jpeg,jpg,gif,png,zip,xls,doc,mp3,mp4,mpeg $sizeverification = getenv('APP_SIZE_VERIFICATION') ?? true; $filedestination = getenv('APP_FILE_DESTINATION') ?? 'files'; $baseurl = getenv('APP_BASE_URL') ?? $_SERVER['HTTP_HOST']; -$maxsize = getenv('APP_MAX_SIZE') ?? (int)(ini_get('upload_max_filesize')); +$maxsize = getenv('APP_MAX_SIZE') ?? (int) (ini_get('upload_max_filesize')); $minsize = getenv('APP_MIN_SIZE') ?? '0'; $waitfor = getenv('APP_DOWNLOAD_TIME'); @@ -52,6 +52,3 @@ define('plausible_embed', $plausibleembed); define('plausibleembedtoken', $plausibleembedtoken); /* version */ define('version', 'v1.0.0'); // DO NOT FORGET TO CHANGE THIS - - -?> diff --git a/system/core.class.php b/system/core.class.php index c5ccc51..4d4eb4e 100644 --- a/system/core.class.php +++ b/system/core.class.php @@ -1,24 +1,27 @@ min_size){ + public function FileSizeVerification($file) + { + if (size_verification == true) { + if ($file['size'] < max_size && $file['size'] > min_size) { return true; - }else{ + } else { return false; } - }else{ + } else { return true; - } + } } /* * @module File Name Convertor * @desc This Module convert file name into a encrypted name. This option can be disabled in config file */ - public function FileNameConvertor($file){ + public function FileNameConvertor($file) + { $TransformFileName = substr(str_shuffle('abcdefghijklmnopqrstuvwxyzABCDEFGHIKLMNOPQRSTUVWXYZ123456789'), 0, 15); - $filename = $TransformFileName.'-'.basename($_FILES["fileToUpload"]["name"]); - return $filename; + $filename = $TransformFileName.'-'.basename($_FILES['fileToUpload']['name']); + + return $filename; } - public function UploadFile($file, $target){ + public function UploadFile($file, $target) + { $newtarget = file_destination.'/'.$target; - if(move_uploaded_file($file["tmp_name"], $newtarget)){ + if (move_uploaded_file($file['tmp_name'], $newtarget)) { return true; - }else{ + } else { return false; } }