One Hat Cyber Team

Edit File: Generic.php

<?php

/**
* Controller class, main functions and modifers
*/
use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\SMTP;
use PHPMailer\PHPMailer\Exception;

class Generic{
	public static $db,$site_url, $config,$theme,$mysqli,$user,$loggedin,$langs;

public function __construct($data = array()){
		self::$db = $data['db'];
		self::$site_url = $data['site_url'];
		self::$config   = $data['config'];
		self::$theme    = self::$config['theme'];
		self::$mysqli   = $data['mysqli'];
		self::$user   = self::getLoggedInUser_();
		self::$loggedin   = self::isLogged_();
		self::$langs   = self::getLangs();
	}

// PX_LoadPage
	public static function PX_LoadPage($page_url = '', $data = array(), $set_lang = true) {
		//global $pt, $lang_array, $config, $fl_currpage, $countries_name;
		global $context,$me,$pixelphoto,$post_data,$comment,$msg_data,$udata,$purchase_code,$site_url;
		$lang_array = $context['lang'];
		$config = self::$config;
		$config["withdrawal_payment_method"] = json_decode($config['withdrawal_payment_method'],true);
	    $page = dirname(dirname(__dir__)).DIRECTORY_SEPARATOR.'apps'.DIRECTORY_SEPARATOR . self::$theme . DIRECTORY_SEPARATOR . $page_url . '.html';
	    
	    if (!file_exists($page)) {
	        die("File not Exists : $page");
	    }

$page_content = '';
	    ob_start();
	    require($page);
	    $page_content = ob_get_contents();
	    ob_end_clean();

if ($set_lang == true) {
	        $page_content = preg_replace_callback("/{{LANG (.*?)}}/", function($m) use ($lang_array) {
				$lang = '';
				if( isset( $lang_array[$m[1]] ) ){
					$lang = $lang_array[$m[1]];
				}else{
					// $keyd = trim(strtolower(preg_replace('/[^a-zA-Z0-9-_\.]/','_', $m[1])));

// $exist = self::$db->where('lang_key', $keyd )->getValue(T_LANGS,'count(*)');
					// if( $exist === 0 ){
					// 	self::$db->insert(T_LANGS,array(
					// 		'lang_key' => $keyd,
					// 		'english' => $m[1]
					// 	));
					// }

// $lang = $m[1];
					$lang = '';
				}
	            return $lang;
	        }, $page_content);
	    }
	    if (!empty($data) && is_array($data)) {
	        foreach ($data as $key => $replace) {
	            if ($key == 'USER_DATA') {
	                $replace = ToArray($replace);
	                $page_content = preg_replace_callback("/{{USER (.*?)}}/", function($m) use ($replace) {
	                    return (isset($replace[$m[1]])) ? $replace[$m[1]] : '';
	                }, $page_content);
	            } else {
	            	if (!is_array($key) && !is_object($key) && !is_array($replace) && !is_object($replace)) {
	            		$object_to_replace = "{{" . $key . "}}";
		                $page_content      = str_replace($object_to_replace, $replace, $page_content);
	            	}
	            }
	        }
	    }

if (self::$loggedin == true) {
	        $replace = o2array(self::$user);
	        $page_content = preg_replace_callback("/{{ME (.*?)}}/", function($m) use ($replace) {
	            return (isset($replace[$m[1]])) ? $replace[$m[1]] : '';
	        }, $page_content);
	    }

$page_content = preg_replace("/{{LINK (.*?)}}/", self::PX_Link("$1"), $page_content);
	    $page_content = preg_replace_callback("/{{CONFIG (.*?)}}/", function($m) use ($config) {
	        return (isset(self::$config[$m[1]])) ? self::$config[$m[1]] : '';
	    }, $page_content);

return $page_content;
	}
	
	public static function PX_Link($string) {
	    global $site_url;
	    return $site_url . '/' . $string;
	}

// Convert object to array
	public static function toObject($array) {
	    $object = new \stdClass();
	    foreach ($array as $key => $value) {
	        if (is_array($value)) {
	            $value = self::toObject($value);
	        }
	        if (isset($value)) {
	            $object->$key = $value;
	        }
	    }
	    return $object;
	}

// Convert object to array
	public static function toArray($obj) {
	    if (is_object($obj))
	        $obj = (array) $obj;
	    if (is_array($obj)) {
	        $new = array();
	        foreach ($obj as $key => $val) {
	            $new[$key] = self::toArray($val);
	        }
	    } else {
	        $new = $obj;
	    }
	    return $new;
	}

// Secure strings 
	public static function secure($string) {
	    $string = trim($string);
	    $string = mysqli_real_escape_string(self::$mysqli,$string);
	    $string = htmlspecialchars($string, ENT_QUOTES);
	    $string = str_replace('\r\n', " <br>", $string);
	    $string = str_replace('\n\r', " <br>", $string);
	    $string = str_replace('\r', " <br>", $string);
	    $string = str_replace('\n', " <br>", $string);
	    $string = str_replace('&#', '&#', $string);
	    $string = stripslashes($string);
	    return $string;
	}

// Add media string to site link
    public static function getMedia($media) {
	    return sprintf('%s/%s',self::$site_url,$media);
    }

// Geenrate random string
	public function generateKey($minlength = 20, $maxlength = 20, $uselower = true, $useupper = true, $usenumbers = true, $usespecial = false) {
	    $charset = '';
	    if ($uselower) {
	        $charset .= "abcdefghijklmnopqrstuvwxyz";
	    }
	    if ($useupper) {
	        $charset .= "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
	    }
	    if ($usenumbers) {
	        $charset .= "123456789";
	    }
	    if ($usespecial) {
	        $charset .= "~@#$%^*()_+-={}|][";
	    }
	    if ($minlength > $maxlength) {
	        $length = mt_rand($maxlength, $minlength);
	    } else {
	        $length = mt_rand($minlength, $maxlength);
	    }
	    $key = '';
	    for ($i = 0; $i < $length; $i++) {
	        $key .= $charset[(mt_rand(0, strlen($charset) - 1))];
	    }
	    return $key;
	}

// Raise Exceptions
	public function throwError($message) {
		throw new \Exception($message);
		return;
	}

// Crop strings
	public static function cropText($text = "", $len = 100) {
	    if (empty($text) || !is_string($text) || !is_numeric($len) || $len < 1) {
	        return "****";
	    }
	    if (strlen($text) > $len) {
	        $text = mb_substr($text, 0, $len, "UTF-8") . "..";
	    }
	    return $text;
	}

// Check if url is valid
	public static function isUrl($url = "") {
	    if (empty($url)) {
	        return false;
	    }
	    if (filter_var($url, FILTER_VALIDATE_URL)) {
	        return true;
	    }
	    return false;
	}

// Decode links
	public function decodeMarkup($text, $link = true) {
	    if ($link == true) {
	        $link_search = '/\[a\](.*?)\[\/a\]/i';
	        if (preg_match_all($link_search, $text, $matches)) {
	            foreach ($matches[1] as $match) {
	                $match_decode     = urldecode($match);
	                $match_decode_url = $match_decode;
	                $count_url        = mb_strlen($match_decode);
	                $match_url        = $match_decode;
	                if (!preg_match("/http(|s)\:\/\//", $match_decode)) {
	                    $match_url = 'http://' . $match_url;
	                }
	                $text = str_replace('[a]' . $match . '[/a]', $match_decode_url, $text);
	            }
	        }
	    }
	    return $text;
	}

// Encode markup, and create links inside strings
	public function encodeMarkup($text, $link = true) {
	    if ($link == true) {
	        $link_search = '/\[a\](.*?)\[\/a\]/i';
	        if (preg_match_all($link_search, $text, $matches)) {
	            foreach ($matches[1] as $match) {
	                $match_decode     = urldecode($match);
	                $match_decode_url = $match_decode;
	                $count_url        = mb_strlen($match_decode);
	                if ($count_url > 50) {
	                    $match_decode_url = mb_substr($match_decode_url, 0, 30) . '....' . mb_substr($match_decode_url, 30, 20);
	                }
	                $match_url = $match_decode;
	                if (!preg_match("/http(|s)\:\/\//", $match_decode)) {
	                    $match_url = 'http://' . $match_url;
	                }
	                $text = str_replace('[a]' . $match . '[/a]', '<a href="' . strip_tags($match_url) . '" target="_blank" class="hash" rel="nofollow">' . $match_decode_url . '</a>', $text);
	            }
	        }
	    }
	    return $text;
	}

// check if string is json
	public function isJson($string) {
	 	json_decode($string);
	 	return (json_last_error() == JSON_ERROR_NONE);
	}

// CURL connection, GET data
	public function curlConnect($url = '', $config = []) {
	    if (empty($url)) {
	        return false;
	    }
	    $curl = curl_init($url);
	    curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true );
	    curl_setopt($curl, CURLOPT_HEADER, false );
	    curl_setopt($curl, CURLOPT_RETURNTRANSFER, true );
	    curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
	    curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0);
	    curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7");
	    if (!empty($config['POST'])) {
	    	curl_setopt($curl, CURLOPT_POST, 1);
            curl_setopt($curl, CURLOPT_POSTFIELDS, $config['POST']);
	    }
	    if (!empty($config['bearer'])) {
	    	curl_setopt($curl, CURLOPT_HTTPHEADER, array(
		    	'Authorization: Bearer ' . $config['bearer']
		    ));
	    }

$curl_response = curl_exec($curl);

curl_close($curl);
	    if ($this->isJson($curl_response)) {
	    	return json_decode($curl_response, true);
	    }
	    return $curl_response;
	}

public function lastQuery(){
		return self::$db->getLastQuery();
	}

public static function createHtmlEl($tag_name = "html",$attrs = array(),$cont = ""){
		$tag_attrs = "";

if (!empty($attrs) && is_array($attrs)) {
			foreach ($attrs as $attr => $value) {
				$tag_attrs .= " $attr=\"$value\"";
			}
		}
		
		return "<$tag_name$tag_attrs>$cont</$tag_name>";
	}

public function getLangs(){
		$t_langs = T_LANGS;
		$query   = self::$db->rawQuery("SHOW COLUMNS FROM `$t_langs`");
		$langs   = array();

if (!empty($query)) {
			foreach ($query as $lang) {
				$langs[$lang->Field] = ucfirst($lang->Field);
			}

try {
				unset($langs['id']);
                unset($langs['ref']);
				unset($langs['lang_key']);
			} catch (Exception $e) {
				
			}
		}

return $langs;
	}

public function fetchLanguage($lang_name = 'english'){
		try {
			$data = array();
			$lang = self::$db->get(T_LANGS,null,array('id','lang_key',$lang_name));
			if (!empty($lang) && is_array($lang)) {
				foreach ($lang as $val) {
					$data[$val->lang_key] = $val->{"$lang_name"};
				}
			}

return $data;
		}

catch (Exception $e) {
			return array();
		}
	}

static function decode($html = ''){
		return decode($html);
	}

static function encode($html = ''){
		return encode($html);	
	}

static function sendMail($data = array()) {
		if (empty($data)) {
			return false;
		}
		require_once('sys/libs/PHPMailer/vendor/autoload.php');
		try {
			$mail            = new PHPMailer();
		    $email_from      = $data['from_email'] = self::secure($data['from_email']);
		    $to_email        = $data['to_email']   = self::secure($data['to_email']);
		    $subject         = $data['subject'];
		    if (!empty($data["return"]) && $data["return"] == 'debug') {
	            $mail->SMTPDebug = 2;
	        }

$data['charSet'] = self::secure($data['charSet']);
		    if (self::$config['smtp_or_mail'] == 'mail') {
		        $mail->IsMail();
		    }

else if (self::$config['smtp_or_mail'] == 'smtp') {
		        $mail->isSMTP();
		        $mail->Host        = self::$config['smtp_host'];
		        $mail->SMTPAuth    = true;
		        $mail->Username    = self::$config['smtp_username'];
		        $mail->Password    = openssl_decrypt(self::$config['smtp_password'], "AES-128-ECB", 'mysecretkey1234');
		        $mail->SMTPSecure  = self::$config['smtp_encryption'];
		        $mail->Port        = self::$config['smtp_port'];
		        $mail->SMTPOptions = array(
		            'ssl' => array(
		                'verify_peer' => false,
		                'verify_peer_name' => false,
		                'allow_self_signed' => true
		            )
		        );
		    }

else {
		        return false;
		    }

$mail->IsHTML($data['is_html']);
		    $mail->setFrom($data['from_email'], $data['from_name']);
		    $mail->addAddress($data['to_email'], $data['to_name']);
		    $mail->Subject = $data['subject'];
		    $mail->CharSet = $data['charSet'];
		    $mail->MsgHTML($data['message_body']);

if ($mail->send()) {
		        $mail->ClearAddresses();
		        return true;
		    }
		    else{
	            if (!empty($data["return"])) {
	                return $mail->ErrorInfo;
	            }
	        }
		} catch (phpmailerException $e) {
	        if (!empty($data["return"])) {
	            if (!empty($e->errorMessage())) {
	                return $e->errorMessage();
	            }
	            return $mail->ErrorInfo;
	        }
	        return false;
	    } catch (Exception $e) {
	        if (!empty($data["return"])) {
	            if (!empty($e->getMessage())) {
	                return $e->getMessage();
	            }
	            return $mail->ErrorInfo;
	        }
	        return false;
	    }

}

static function getThemes() {
	    $themes = glob('apps/*', GLOB_ONLYDIR);
	    $data   = array();

if (!empty($themes) && is_array($themes)) {
	    	foreach ($themes as $key => $theme) {

$i = array(
	    			'folder' => str_replace('apps/', '', $theme),
	    			'author' => '',
	    			'name' => '',
	    			'version' => '',
	    			'email' => '',
	    			'cover' => ''
	    		);

if (file_exists("$theme/info.php")) {
	    			require_once "$theme/info.php";
	    			$theme_folder = $i['folder'];
	    			$i['author']  = (isset($themeAuthor)) ? $themeAuthor : '';
	    			$i['name']    = (isset($themeName)) ? $themeName : '';
	    			$i['version'] = (isset($themeVersion)) ? $themeVersion : '';
	    			$i['cover']   = (isset($themeCover)) ? sprintf('%s/apps/%s/%s',self::$site_url,$theme_folder,$themeCover) : '';
	    			$i['email']   = (isset($themeEmail)) ? $themeEmail : '';
	    		}

$data[] = $i;
	    	}
	    }

return $data;
	}

public function createBackup() {
		$time    = time();
		$date    = date('d-m-Y');
		$mysqld  = new MySQLDump(self::$mysqli);

if (!file_exists("script_backups/$date")) {
	        @mkdir("script_backups/$date", 0777, true);
	    }

if (!file_exists("script_backups/$date/$time")) {
	        mkdir("script_backups/$date/$time", 0777, true);
	    }

if (!file_exists("script_backups/$date/$time/index.html")) {
	        $f = @fopen("script_backups/$date/$time/index.html", "a+");
	        @fclose($f);
	    }

if (!file_exists('script_backups/.htaccess')) {
	        $f = @fopen("script_backups/.htaccess", "a+");
	        @fwrite($f, "deny from all\nOptions -Indexes");
	        @fclose($f);
	    }

if (!file_exists("script_backups/$date/index.html")) {
	        $f = @fopen("script_backups/$date/index.html", "a+");
	        @fclose($f);
	    }

if (!file_exists('script_backups/index.html')) {
	        $f = @fopen("script_backups/index.html", "a+");
	        @fwrite($f, "");
	        @fclose($f);
	    }

$folder_name = "script_backups/$date/$time";
	    $put         = $mysqld->save("$folder_name/SQL-Backup-$time-$date.sql");

try {
	    	$rootPath = ROOT;
	        $zip      = new ZipArchive();
	        $act      = (ZipArchive::CREATE | ZipArchive::OVERWRITE);
	        $open     = $zip->open("$folder_name/Files-Backup-$time-$date.zip",$act);

if ($open !== true) {
	            return false;
	        }

$riiter = RecursiveIteratorIterator::LEAVES_ONLY;
	        $rditer = new RecursiveDirectoryIterator($rootPath);
	        $files  = new RecursiveIteratorIterator($rditer,$riiter);

foreach ($files as $name => $file) {
	            if (!preg_match('/\bscript_backups\b/', $file)) {
	                if (!$file->isDir()) {
	                    $filePath     = $file->getRealPath();
	                    $relativePath = substr($filePath, strlen($rootPath) + 1);
	                    $zip->addFile($filePath, $relativePath);
	                }
	            }
	        }

$zip->close();

self::$db->where('name','last_backup')->update(T_CONFIG,array('value' => date('Y-m-d h:i:s')));
	        return true;	
	    } 
	    catch (Exception $e) {
	    	return false;
	    }
	}

public function getPage($page_name = '') {
		$page_cont = "";
		if (!empty($page_name) && is_string($page_name)) {
			$page = self::$db->where('page_name',$page_name)->getValue(T_STAT_PAGES,'content');
			if (!empty($page)) {
				$page_cont = decode($page);
			}
		}
		
		return $page_cont;
	}

public function savePage($page_name = '',$page_cont = '') {
		$page_save = false;
		if (!empty($page_name) && !empty($page_cont)) {
			$save  = self::$db->where('page_name',$page_name)->update(T_STAT_PAGES,array(
				'content' => $page_cont
			));

if (!empty($save)) {
				$page_save = true;
			}
		}

return $page_save;
	}

public function upsertHtags($text = ""){
		if (!empty($text)) {
		    $reg = '/#([^`~!@$%^&*\#* ]+)/i';
		    $reg_ = '/#([^`~!@$%^&*\#()\-+=\\|\/\.,<>?\'\":;{}\[\]* ]+)/i';
			preg_match_all($reg, $text, $htags);
			if (!empty($htags[1]) && is_array($htags[1])) {
				$htags = $htags[1];
				foreach ($htags as $key => $htag) {
				    if($htag == 'http' || $htag == 'https'){
				        $htag = $text;
                    }
					$htag_id   = 0;
					$htag_data = self::$db->where('tag',self::secure($htag))->getOne(T_HTAGS,array('id'));
					if (!empty($htag_data)) {
						$htag_id = $htag_data->id;
						self::$db->where('id',$htag_id)->update(T_HTAGS,array(
							'last_trend_time' => time(),
						));
					}
					else{
						$htag_id = self::$db->insert(T_HTAGS,array(
							'hash' => md5($htag),
							'tag' => $htag,
							'last_trend_time' => time(),
						));
					}

$text = str_replace("#$htag", "#[$htag_id]", $text);
				}
			}
		}

return $text;
	}

public function linkifyHTags($text = ""){
		$surl = self::$site_url;
		if (!empty($text)) {
			$text = str_replace(''', "'", $text);
			//$text = html_entity_decode($text, ENT_QUOTES);
	        $reg = '/#([^`~!@$%^&*\#* ]+)/i';
	        $reg_ = '/#([^`~!@$%^&*\#()\-+=\\|\/\.,<>?\'\":;{}\[\]* ]+)/i';
		    $text = preg_replace_callback($reg, function($m) use($surl) {
		        $tag = $m[1];
		        return self::createHtmlEl('a',array(
		            'href' => sprintf("%s/explore/tags/%s",$surl,$tag),
		            'class' => 'hashtag',
		        ),"#$tag");
		    }, $text);
		}

return $text;
	}

// convert array to json for API
	public static function json($response_data) {
	    if (!empty($response_data)) {
	    	if (empty($response_data['code'])) {
	    		$response_data['code'] = 200;
	    	}
	    	header("HTTP/1.1 ".$response_data['code']." ".$response_data['status']);
	        header("Content-Type:application/json");
	        if(!empty($response_data)){
	           echo json_encode($response_data, JSON_UNESCAPED_UNICODE);
	        }
	    }
	    exit();
	}

public static function is_valid_access_token() {
		$access_token = self::secure($_POST['access_token']);
	    $id = self::$db->where('session_id', $access_token)->getValue(T_SESSIONS, 'user_id');
	    return (is_numeric($id) && !empty($id)) ? true : false;
	}

public function isEndPointRequest(){
	   if ( strstr( $_SERVER['SCRIPT_NAME'], '/endpoints.php' ) !== '/endpoints.php' ) {
	       return false;
	   }else{
	       return true;
	   }
	}

public function change_site_mode($up_data)
	{
		if (empty($up_data)) {
			return false;
		}

foreach ($up_data as $name => $value) {
			try {
				self::$db->where('name', $name)->update(T_CONFIG,array('value' => $value));
			} 
			catch (Exception $e) {
				return false;
			}
		}

return true;
	}
	public function getLoggedInUser_() {
		// ************ pixelphoto_API ******************
		if (!empty($_SESSION['user_id'])) {
			$session_id = $_SESSION['user_id'];
		}
		elseif (isset($_POST['access_token']) && !empty($_POST['access_token'])) {
			$session_id = Generic::secure($_POST['access_token']);
		}
		else{
			$session_id = !empty($_COOKIE['user_id']) ? $_COOKIE['user_id'] : '';
		}
		//$session_id = (!empty($_SESSION['user_id'])) ? $_SESSION['user_id'] : $_COOKIE['user_id'];
        $user_id  = self::$db->where('session_id', $session_id)->getValue(T_SESSIONS, 'user_id');
		return $this->fetchLoggedUser($user_id);
	}
	public function isLogged_() {
		$id = 0;
		// ************ pixelphoto_API ******************
		if (self::isEndPointRequest()) {
			if (isset($_POST['access_token']) && !empty($_POST['access_token'])) {
				$id = self::$db->where('session_id', Generic::secure($_POST['access_token']))->getValue(T_SESSIONS, 'user_id');

}
		}
		else{
			if (isset($_SESSION['user_id']) && !empty($_SESSION['user_id'])) {
		        $id = self::$db->where('session_id', $_SESSION['user_id'])->getValue(T_SESSIONS, 'user_id');
		    } else if (!empty($_COOKIE['user_id']) && !empty($_COOKIE['user_id'])) {
		        $id = self::$db->where('session_id', $_COOKIE['user_id'])->getValue(T_SESSIONS, 'user_id');
			}
		}
	    return (is_numeric($id) && !empty($id)) ? true : false;
	}
	public function fetchLoggedUser($id) {
		$user_id = self::secure($id);
		
	    $user_data = self::$db->where('user_id', $user_id)->getOne(T_USERS);

if (empty($user_data)) {
	    	return false;
	    }
	    
		$user_data->name  = $user_data->username;

if (!empty($user_data->fname) && !empty($user_data->lname)) {
	    	$user_data->name = sprintf('%s %s',$user_data->fname,$user_data->lname);
	    }

$user_data->avatar = media($user_data->avatar);
	    $user_data->cover = media($user_data->cover);
	    $user_data->uname = sprintf('%s',$user_data->username);
	    $user_data->url = sprintf('%s/%s',self::$site_url,$user_data->username);
	    return $user_data;
	}
}