PNG IHDR x sBIT|d pHYs + tEXtSoftware www.inkscape.org< ,tEXtComment
<?php
session_start();
require_once('includes/connect.php');
require_once('includes/functions.php');
use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\Exception;
// Load Composer's autoloader
require 'vendor/autoload.php';
// Generate CSRF token if not set
if (empty($_SESSION['csrf_token'])) {
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
// Redirect if not logged in
if (!isset($_SESSION["user"])) {
header("Location: login.php");
exit();
}
if ($_SERVER["REQUEST_METHOD"] === "POST" && isset($_POST['fname'])) {
// CSRF Protection
if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token']) {
die("CSRF token validation failed.");
}
// Honeypot Protection (Bot Trap)
if (!empty($_POST['honeypot'])) {
die("Bot detected.");
}
$fname = trim($_POST['fname']);
$Uname = trim($_POST['uname']);
$pass = $_POST['pass'];
$email = filter_var($_POST['email'], FILTER_SANITIZE_EMAIL);
$com = trim($_POST['com']);
$number = trim($_POST['number']);
$addr = trim($_POST['addr']);
$country = trim($_POST['country']);
$dob = $_POST['dob'];
$q = trim($_POST['q']);
$a = trim($_POST['a']);
$routing = trim($_POST['rou']);
$login = "max"; // $_SESSION["user"];
$m = "None";
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
die("Invalid email address.");
}
if (UserExist($Uname)) {
die("Username already exists.");
}
// Secure password hashing
$hashedPassword = password_hash($pass, PASSWORD_BCRYPT);
// File upload security
if (!empty($_FILES['img']['name'])) {
$allowedTypes = ['jpg', 'jpeg', 'png', 'gif'];
$fileType = strtolower(pathinfo($_FILES['img']['name'], PATHINFO_EXTENSION));
if (!in_array($fileType, $allowedTypes)) {
die("Invalid file type. Only JPG, JPEG, PNG, and GIF are allowed.");
}
if ($_FILES['img']['size'] > 2 * 1024 * 1024) {
die("File size should not exceed 2MB.");
}
$img = "pics/" . basename($_FILES['img']['name']);
if (!move_uploaded_file($_FILES['img']['tmp_name'], $img)) {
die("Image upload failed.");
}
} else {
$img = "pics/default.jpg"; // Default image if no upload
}
// Insert user securely
$stmt = $conn->prepare('INSERT INTO members (fname, Uname, dob, pass, email, com, number, addr, country, bank_email, img, login, q, a, routing) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)');
$stmt->bind_param("sssssssssssssss", $fname, $Uname, $dob, $hashedPassword, $email, $com, $number, $addr, $country, $m, $img, $login, $q, $a, $routing);
if (!$stmt->execute()) {
die("Database error: " . $stmt->error);
}
$stmt->close();
header("Location: list_account.php");
exit();
}
// Handle form submission for user actions
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['fa'])) {
$email = filter_var($_POST["names"], FILTER_SANITIZE_EMAIL);
$others = htmlspecialchars($_POST["others"], ENT_QUOTES, 'UTF-8');
$action = htmlspecialchars($_POST["action"], ENT_QUOTES, 'UTF-8');
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
die("Invalid email address.");
}
$stmt = $conn->prepare("UPDATE members SET reason = ?, action = ? WHERE email = ?");
$stmt->bind_param("sss", $others, $action, $email);
if (!$stmt->execute()) {
die("Database error: " . $stmt->error);
}
$stmt->close();
$msg = match ($action) {
"max" => "Maximum level reached, account upgrade required. Contact admin for more info.",
"suspend" => "Your account has been suspended. Kindly contact us via support@example.com or live chat.",
"block" => "Your account has been blocked. Kindly contact us via support@example.com or live chat.",
"open" => "Your account has been reopened. You can now access your account.",
default => die("Invalid action specified.")
};
$mail = new PHPMailer(true);
try {
$mail->isSMTP();
$mail->Host = 'smtp.example.com'; // Replace with actual SMTP server
$mail->SMTPAuth = true;
$mail->Username = 'support@example.com';
$mail->Password = 'password'; // Use a secure method to store credentials
$mail->SMTPSecure = PHPMailer::ENCRYPTION_SMTPS;
$mail->Port = 465;
$mail->setFrom('support@example.com', 'Support Team');
$mail->addAddress($email);
$mail->addReplyTo('support@example.com', 'Support Team');
$mail->isHTML(true);
$mail->Subject = 'Notification';
$mail->Body = nl2br($msg);
$mail->AltBody = $msg;
$mail->send();
echo "<p style='color: green;'>Action performed successfully. Email sent to $email.</p>";
} catch (Exception $e) {
echo "<p style='color: red;'>Error sending email: {$mail->ErrorInfo}</p>";
}
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<!-- Mirrored from admin.pixelstrap.com/cuba/theme/index.php by HTTrack Website Copier/3.x [XR&CO'2014], Thu, 09 Jul 2020 20:13:21 GMT -->
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="description" content="Cuba admin is super flexible, powerful, clean & modern responsive bootstrap 4 admin template with unlimited possibilities.">
<meta name="keywords" content="admin template, Cuba admin template, dashboard template, flat admin template, responsive admin template, web app">
<meta name="author" content="pixelstrap">
<link rel="icon" href="../assets/images/favicon.png" type="image/x-icon">
<link rel="shortcut icon" href="../assets/images/favicon.png" type="image/x-icon">
<title>Dashboard</title>
<!-- Google font-->
<link href="https://fonts.googleapis.com/css?family=Rubik:400,400i,500,500i,700,700i&display=swap" rel="stylesheet">
<link href="https://fonts.googleapis.com/css?family=Roboto:300,300i,400,400i,500,500i,700,700i,900&display=swap" rel="stylesheet">
<!-- Font Awesome-->
<link rel="stylesheet" type="text/css" href="../assets/css/fontawesome.css">
<!-- ico-font-->
<link rel="stylesheet" type="text/css" href="../assets/css/icofont.css">
<!-- Themify icon-->
<link rel="stylesheet" type="text/css" href="../assets/css/themify.css">
<!-- Flag icon-->
<link rel="stylesheet" type="text/css" href="../assets/css/flag-icon.css">
<!-- Feather icon-->
<link rel="stylesheet" type="text/css" href="../assets/css/feather-icon.css">
<!-- Plugins css start-->
<link rel="stylesheet" type="text/css" href="../assets/css/animate.css">
<link rel="stylesheet" type="text/css" href="../assets/css/chartist.css">
<link rel="stylesheet" type="text/css" href="../assets/css/date-picker.css">
<!-- Plugins css Ends-->
<!-- Bootstrap css-->
<link rel="stylesheet" type="text/css" href="../assets/css/bootstrap.css">
<!-- App css-->
<link rel="stylesheet" type="text/css" href="../assets/css/style.css">
<link id="color" rel="stylesheet" href="../assets/css/color-1.css" media="screen">
<!-- Responsive css-->
<link rel="stylesheet" type="text/css" href="../assets/css/responsive.css">
</head>
<body onload="startTime()">
<!-- Loader starts-->
<div class="loader-wrapper">
<div class="loader-index"><span></span></div>
<svg>
<defs></defs>
<filter id="goo">
<fegaussianblur in="SourceGraphic" stddeviation="11" result="blur"></fegaussianblur>
<fecolormatrix in="blur" values="1 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 0 0 19 -9" result="goo"> </fecolormatrix>
</filter>
</svg>
</div>
<!-- Loader ends-->
<!-- page-wrapper Start-->
<div class="page-wrapper compact-wrapper" id="pageWrapper">
<!-- Page Header Start-->
<div class="page-main-header">
<div class="main-header-right row m-0">
<div class="main-header-left">
<div class="logo-wrapper"><a href="index.php"><img class="img-fluid" src="../assets/images/logo/logo.png" alt=""></a></div>
</div>
<div class="toggle-sidebar"><i class="status_toggle middle" data-feather="grid" id="sidebar-toggle"></i></div>
<div class="left-menu-header col">
</div>
<div class="nav-right col pull-right right-menu">
<ul class="nav-menus">
<li class="onhover-dropdown">
<a href="list_account.php"> <div class="notification-box"> <i data-feather="bell"></i><span class="badge badge-pill badge-secondary">2</span></div></a>
</li>
<li>
<a class="text-dark" href="#!" onclick="javascript:toggleFullScreen()">
<i data-feather="maximize"></i></a>
</li>
</ul>
</div>
<div class="d-lg-none mobile-toggle pull-right"><i data-feather="more-horizontal"></i></div>
</div>
</div>
<!-- Page Header Ends -->
<!-- Page Body Start-->
<div class="page-body-wrapper sidebar-icon">
<!-- Page Sidebar Start-->
<?php include("side.php") ?>
<!-- Page Sidebar Ends-->
<div class="page-body">
<div class="container-fluid">
<div class="page-header">
<div class="row">
<div class="col-lg-6">
<h3>WELCOME</h3>
</div>
<div class="col-lg-6">
<!-- Bookmark Start-->
<!-- Bookmark Ends-->
</div>
</div>
</div>
</div>
<!-- Container-fluid starts-->
<div class="container">
<div class="col-12">
<div class="row">
<form action="" method="post" enctype="multipart/form-data">
<!-- CSRF Token -->
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token']; ?>">
<!-- Honeypot Field (Should be left empty) -->
<input type="text" name="honeypot" value="" style="display:none;">
<div class="form-group">
<label for="email">Email</label>
<input
type="email"
name="names"
placeholder="Enter Email"
class="form-control"
required
maxlength="100">
</div>
<div class="form-group">
<label for="action">Account Action</label>
<select
class="form-control form-control-lg"
name="action"
required>
<option value="suspend">Suspend Account</option>
<option value="block">Block Account</option>
<option value="max">Maximum Limit</option>
<option value="open">Open Account</option>
</select>
</div>
<div class="form-group">
<label for="reason">Reason</label>
<textarea
name="others"
placeholder="Enter the reason here"
rows="3"
class="form-control"
maxlength="500"></textarea>
</div>
<div class="form-group">
<input
name="fa"
type="submit"
class="btn btn-sm btn-block btn-success"
value="Submit">
</div>
</form>
</div>
<!-- Circles which indicates the steps of the form:-->
<div class="text-center"><span class="step"></span><span class="step"></span><span class="step"></span><span class="step"></span></div>
<!-- Circles which indicates the steps of the form:-->
</form>
</div>
</div>
</div>
</div>
</div>
<!-- Container-fluid Ends-->
</div>
<!-- footer start-->
<footer class="footer">
<div class="container-fluid">
</div>
</footer>
</div>
</div>
<!-- latest jquery-->
<script src="../assets/js/jquery-3.5.1.min.js"></script>
<!-- Bootstrap js-->
<script src="../assets/js/bootstrap/popper.min.js"></script>
<script src="../assets/js/bootstrap/bootstrap.js"></script>
<!-- feather icon js-->
<script src="../assets/js/icons/feather-icon/feather.min.js"></script>
<script src="../assets/js/icons/feather-icon/feather-icon.js"></script>
<!-- Sidebar jquery-->
<script src="../assets/js/sidebar-menu.js"></script>
<script src="../assets/js/config.js"></script>
<!-- Plugins JS start-->
<script src="../assets/js/form-wizard/form-wizard.js"></script>
<script src="../assets/js/tooltip-init.js"></script>
<!-- Plugins JS Ends-->
<!-- Theme js-->
<script src="../assets/js/script.js"></script>
<script src="../assets/js/theme-customizer/customizer.js"></script>
<!-- login js-->
<!-- Plugin used-->
</body>
<!-- Mirrored from admin.pixelstrap.com/cuba/theme/form-wizard.html by HTTrack Website Copier/3.x [XR&CO'2014], Thu, 09 Jul 2020 20:43:21 GMT -->
</html>
b IDATxytVսϓ22 A@IR:hCiZ[v*E:WũZA ^dQeQ @ !jZ'>gsV仿$|?g)&x-E