PNG IHDR x sBIT|d pHYs + tEXtSoftware www.inkscape.org< ,tEXtComment
<?php
session_start();
require('includes/connect.php');
require('includes/functions.php');
if (!isset($_SESSION["username"])) {
header("location: ../../home/index.html");
exit;
}
$user = GetAllMemberArray($_SESSION["username"]);
$Cards = GetCard($_SESSION["username"]);
$acc = Getaccount($_SESSION["username"]);
$debit = "Debit";
// Generate CSRF token if not set
if (empty($_SESSION['csrf_token'])) {
$_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
// CSRF protection
if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token']) {
die("Invalid CSRF token.");
}
// Validate card type
$allowed_card_types = ["Master Card", "Visa Card", "American Express Card", "Maestro Card", "EMV Card"];
if (!in_array($_POST["d"], $allowed_card_types)) {
die("Invalid card type selected.");
}
// Prepare and execute SQL statement to prevent SQL injection
$stmt = $conn->prepare("INSERT INTO card (uname, ctype, cnum, exdate, cvv, holder, dc) VALUES (?, ?, ?, ?, ?, ?, ?)");
$stmt->bind_param("sssssss", $_SESSION["username"], $_POST["d"], $_POST["a"], $_POST["b"], $_POST["c"], $user["fname"], $debit);
if ($stmt->execute()) {
header("location: Card.php?suc");
exit;
} else {
die("Database error: " . $conn->error);
}
$stmt->close();
}
?>
<!DOCTYPE html>
<html lang="en">
<!-- Mirrored from www.multipurposethemes.com/admin/richardmooresmith-template/main/index4.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 23 Nov 2020 07:24:15 GMT -->
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description" content="">
<meta name="author" content="">
<link rel="icon" href="https://www.multipurposethemes.com/admin/richardmooresmith-template/images/favicon.ico">
<title>richardmooresmith - Dashboard</title>
<!-- Vendors Style-->
<link rel="stylesheet" href="css/vendors_css.css">
<!-- Style-->
<link rel="stylesheet" href="css/style.css">
<link rel="stylesheet" href="css/skin_color.css">
</head>
<body class="hold-transition light-skin sidebar-mini theme-primary">
<div class="wrapper">
<!-- <div id="loader"></div>---->
<?php
require("includes/header.php");
?>
<aside class="main-sidebar">
<!-- sidebar-->
<section class="sidebar">
<!-- sidebar menu-->
<?php
require("includes/menu.php");
?>
</section>
<div class="sidebar-footer">
<!-- item-->
<a href="javascript:void(0)" class="link" data-toggle="tooltip" title="" data-original-title="Settings" aria-describedby="tooltip92529"><span class="icon-Settings-2"></span></a>
<!-- item-->
<!-- item-->
<a href="javascript:void(0)" class="link" data-toggle="tooltip" title="" data-original-title="Logout"><span class="icon-Lock-overturning"><span class="path1"></span><span class="path2"></span></span></a>
</div>
</aside>
<!-- Content Wrapper. Contains page content -->
<div class="content-wrapper">
<div class="container-full">
<!-- Main content -->
<section class="content">
<div class="row">
<div class="col-12">
<div class="box bg-img box-inverse" style="background-image: url(../images/gallery/thumb/14.jpg);" data-overlay="5">
<div class="box-header no-border">
<h4><i class="fa fa-android"></i></h4>
<!---<ul class="box-controls pull-right">
<li><a class="box-btn-close" href="#"></a></li>
</ul> --->
</div>
<div class="box-body mt-90">
<span class="badge" data-overlay="5">New</span>
<h2 class="font-weight-200 mb-0">Helping you save</h2>
<p class="text-light">There are many variations of passages</p>
</div>
</div>
</div>
</div>
<div class="row">
<div class="col-xl-12 col-12">
<?php
$login = authCard($_SESSION["username"]);
if ($login == TRUE ){ }else { ?>
<div class="box">
<div class="box-body">
<button type="button" class="btn btn-primary" data-toggle="modal" data-target="#modal-fill">
Request Card
</button>
</div>
</div>
<?php } ?>
<div class="modal modal-fill fade" data-backdrop="false" id="modal-fill" tabindex="-1">
<div class="modal-dialog">
<div class="modal-content">
<div class="modal-header">
<h5 class="modal-title">Request your Debit Card</h5>
<button type="button" class="close" data-dismiss="modal">
<span aria-hidden="true">×</span>
</button>
</div>
<form action="Card.php" method="post">
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token']; ?>">
<div class="modal-body">
<p>Name on Card: <?php echo htmlspecialchars($user["fname"]); ?></p>
<p>Card number:
<input readonly name="a" class="form-control" type="text" value="<?php echo(rand(1000,9999)) . " " . (rand(1000,9999)) . " " . (rand(1000,9999)) . " " . (rand(1000,9999)); ?>">
</p>
<p>Exp date:
<?php $nextY = date("y") + 3; ?>
<input readonly name="b" class="form-control" type="text" value="<?php echo date("m/") . $nextY; ?>">
</p>
<p>CVC:
<input name="c" readonly class="form-control" type="text" value="<?php echo rand(100,999); ?>">
</p>
<select class="form-control" name="d" required>
<option value="Master Card">Master Card</option>
<option value="Visa Card">Visa Card</option>
<option value="American Express Card">American Express Card</option>
<option value="Maestro Card">Maestro Card</option>
<option value="EMV Card">EMV Card</option>
</select>
<br>
</div>
<div class="modal-footer">
<input type="submit" class="btn btn-primary" value="Request">
<button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
</div>
</form>
</div>
</div>
</div>
<?php if($Cards== "") {?>
<?php } else{?>
<div class="invoice-details row no-margin">
<div class="col-md-8 col-lg-3"><b>Card Number: </b><br><?php echo $Cards["cnum"]?></div>
<div class="col-md-4 col-lg-3"><b>Exp Date:</b> <br><?php echo $Cards["exdate"]?></div>
<div class="col-md-6 col-lg-3"><b>CVC:</b> <br><?php echo $Cards["cvv"]?></div>
<div class="col-md-6 col-lg-3"><b>Type:</b> <br><?php echo $Cards["ctype"];
?></div>
</div>
<?php } ?>
</div>
<br><br><br><br><br><br><br><br><br>
<?php
require("includes/footer.php");
?>
</div>
</section>
<!-- /.content -->
</div>
</div>
<!-- /.content-wrapper -->
<!-- Control Sidebar -->
<!-- /.control-sidebar -->
<!-- Add the sidebar's background. This div must be placed immediately after the control sidebar -->
<div class="control-sidebar-bg"></div>
</div>
<!-- ./wrapper -->
<!-- Page Content overlay -->
<!-- Vendor JS -->
<script src="js/vendors.min.js"></script>
<script src="js/pages/chat-popup.js"></script>
<script src="../assets/icons/feather-icons/feather.min.js"></script>
<script src="../assets/vendor_components/apexcharts-bundle/dist/apexcharts.js"></script>
<!-- richardmooresmith App -->
<script src="js/template.js"></script>
<script src="js/pages/dashboard4.js"></script>
</body>
<!-- Mirrored from www.multipurposethemes.com/admin/richardmooresmith-template/main/index4.html by HTTrack Website Copier/3.x [XR&CO'2014], Mon, 23 Nov 2020 07:26:25 GMT -->
</html>
b IDATxytVսϓ22 A@IR:hCiZ[v*E:WũZA ^dQeQ @ !jZ'>gsV仿$|?g)&x-E