'),s=function(){n.removeClass("show")};e(document).on("keydown",(function(o){var n=a.find("a");switch(o.which){case 27:s();break;case 38:if(!e(t).is(":focus")){o.preventDefault();break}0===a.find("li a.active").length?e(n[0]).addClass("active"):e.each(n,(function(t,o){if(e(o).hasClass("active")){var i=e(n[(0===t?n.length:t)-1]);return e(o).removeClass("active"),i.addClass("active"),(i.position().top<4*i.outerHeight()||i.position().top>2*a[0].clientHeight-2*i.outerHeight())&&i[0].scrollIntoView(),!1}}));break;case 40:if(!e(t).is(":focus")){o.preventDefault();break}0===a.find("a.active").length?e(n[0]).addClass("active"):e.each(n,(function(t,o){if(e(o).hasClass("active")){var i=e(n[(t===n.length-1?-1:t)+1]);e(o).removeClass("active"),i.addClass("active");var s=Math.ceil(a[0].clientHeight/i.outerHeight());return(i.position().top>i.outerHeight()*s||i.position().top<0)&&i[0].scrollIntoView(),!1}}));break;default:}})),n.append(a),e(t).on("input",(function(){a.empty(),i.source.length>0&&e.each(i.source,(function(o,i){if(i.toLowerCase().includes(e(t).val().trim().toLowerCase())){if(0==i.length)return;var s=e('').html(i.replace(new RegExp("("+e(t).val().trim()+")","ig"),"$1")).on("click",(function(o){o.preventDefault(),e(t).val(i),n.removeClass("show")}));a.append(e("- ").append(s))}})),a.is(":empty")&&a.append(e("
- ").append(''+i.noResults+"")),function(){n.css({width:e(t).outerWidth()}).addClass("show"),n.offset({top:e(t).offset().top+e(t).outerHeight()});var o=e(window).height()-(e(t).offset().top+e(t).outerHeight()+100);o=o>300?300:o,a.css({maxHeight:o})}()})).on("blur",(function(){setTimeout((function(){s()}),200)})).on("keypress",(function(e){13===e.which&&(e.preventDefault(),a.find("a.active").trigger("click"))})).on("keydown",(function(e){9===e.which&&(e.preventDefault(),a.find("a.active").trigger("click"))})).after(n),e(document).on("wheel",(function(){e(t).blur()}))}};return destroy=function(){e.each(o,(function(t,o){e(o).off("input blur keypress keydown"),e(o).next(".auto-complete").remove()}))},refresh=function(){destroy(),e.each(o,(function(e,t){a(t)}))},this.each((function(e,t){a(t)})),{destroy:destroy,refresh:refresh}}}(jQuery);
--------------------------------------------------------------------------------
/libraries/Cookie/Cookie.php:
--------------------------------------------------------------------------------
1 | privateKey = $privateKey;
28 | }
29 |
30 | /**
31 | * Retrieve a cookie value by key.
32 | *
33 | * @param string $key a key to identify the cookie
34 | *
35 | * @return string
36 | */
37 | public function get($key)
38 | {
39 | return (isset($_COOKIE[$key])) ? $this->decrypt($_COOKIE[$key]) : '';
40 | }
41 |
42 | /**
43 | * Set a cookie value by key and value.
44 | *
45 | * @param string $key a key to identify the cookie
46 | * @param string $value value to store in cookie
47 | * @param int $days cookie expiry in days
48 | *
49 | * @return void
50 | */
51 | public function set($key, $value = null, $days = 30)
52 | {
53 | if ($value == null) {
54 | setcookie($key, '', -1);
55 | } else {
56 | setcookie($key, $this->encrypt($value), time() + (86400 * $days), '/', false, true);
57 | }
58 | }
59 |
60 | /**
61 | * Delete a cookie by key.
62 | *
63 | * @param string $key
64 | *
65 | * @return void
66 | */
67 | public function delete($key)
68 | {
69 | $this->set($key, null);
70 | }
71 |
72 | /**
73 | * Destroy all cookies.
74 | *
75 | * @return void
76 | */
77 | public function destroy()
78 | {
79 | foreach ($_COOKIE as $key) {
80 | setcookie($key, '', -1);
81 | }
82 | }
83 |
84 | /**
85 | * Encrypt a string.
86 | *
87 | * @param string $text string to encrypt
88 | *
89 | * @return string
90 | */
91 | private function encrypt($text)
92 | {
93 | if (!\in_array('aes-256-ctr', openssl_get_cipher_methods())) {
94 | throw new \Exception(__CLASS__ . ': "aes-256-ctr" cipher is not supported.');
95 | }
96 |
97 | $nonce = openssl_random_pseudo_bytes(openssl_cipher_iv_length('aes-256-ctr'));
98 | $cipherText = openssl_encrypt($text, 'aes-256-ctr', $this->privateKey, OPENSSL_RAW_DATA, $nonce);
99 |
100 | return base64_encode($nonce . $cipherText);
101 | }
102 |
103 | /**
104 | * Decrypt a string.
105 | *
106 | * @param string $text string to decrypt
107 | *
108 | * @return string
109 | */
110 | private function decrypt($text)
111 | {
112 | $text = base64_decode($text);
113 |
114 | $nonceSize = openssl_cipher_iv_length('aes-256-ctr');
115 |
116 | return openssl_decrypt(mb_substr($text, $nonceSize, null, '8bit'), 'aes-256-ctr', $this->privateKey, OPENSSL_RAW_DATA, mb_substr($text, 0, $nonceSize, '8bit'));
117 | }
118 | }
119 |
--------------------------------------------------------------------------------
/pages/json.currency.php:
--------------------------------------------------------------------------------
1 | get('user')) {
14 | exit(json_encode([
15 | 'status' => 403,
16 | 'message' => 'Access denied.',
17 | ]));
18 | }
19 |
20 | if ($request->isPost()) {
21 | $results = [
22 | 'errors' => [],
23 | 'csrf' => [
24 | 'name' => $form->getInputName(),
25 | 'value' => $form->getInputValue(),
26 | ],
27 | ];
28 |
29 | // CSRF validation
30 | $csrf = $form->validate();
31 |
32 | // Get the latest CSRF token
33 | $results['csrf'] = [
34 | 'name' => $form->getInputName(),
35 | 'value' => $form->getInputValue(),
36 | ];
37 |
38 | // CSRF token is invalid
39 | if (!$csrf) {
40 | $results['errors']['name'] = 'Security validation failed.';
41 | exit(json_encode($results));
42 | }
43 |
44 | switch ($request->post('action')) {
45 | case 'delete':
46 | $currencyCode = strtoupper($request->post('code'));
47 |
48 | $db->delete('currency_rate', '`currency_code` = :currencyCode', [
49 | ':currencyCode' => $currencyCode,
50 | ]);
51 |
52 | break;
53 |
54 | default:
55 | $newCurrencyCode = strtoupper($request->post('new'));
56 | $currencyCode = strtoupper($request->post('code'));
57 | $rate = $request->post('rate');
58 |
59 | if ($newCurrencyCode == 'USD' || $currencyCode == 'USD') {
60 | $results['errors']['code'] = 'Base currency is read-only.';
61 | }
62 |
63 | if (!empty($currencyCode) && !preg_match('/^[A-Z]{3}$/', $currencyCode)) {
64 | $results['errors']['code'] = 'Currency code is invalid.';
65 | }
66 |
67 | if (!preg_match('/^[A-Z]{3}$/', $newCurrencyCode)) {
68 | $results['errors']['code'] = 'Currency code is invalid.';
69 | }
70 |
71 | if (!preg_match('/^[0-9]+(\.[0-9]+)?$/', $rate)) {
72 | $results['errors']['rate'] = 'Rate is invalid.';
73 | }
74 |
75 | if (!empty($results['errors'])) {
76 | exit(json_encode($results));
77 | }
78 |
79 | if ($newCurrencyCode) {
80 | $db->delete('currency_rate', '`currency_code` = :currencyCode', [
81 | ':currencyCode' => $currencyCode,
82 | ]);
83 |
84 | $db->insert('currency_rate', [
85 | 'currency_code' => $newCurrencyCode,
86 | 'rate' => $rate * 10000,
87 | ]);
88 | } else {
89 | $db->insert('currency_rate', [
90 | 'currency_code' => $newCurrencyCode,
91 | 'rate' => $rate * 10000,
92 | ]);
93 | }
94 | }
95 |
96 | exit(json_encode($results));
97 | } else {
98 | $results = $db->select('currency_rate', '1 = 1 ORDER BY `currency_code`');
99 |
100 | if (!empty($results)) {
101 | foreach ($results as $key => $result) {
102 | $results[$key]['rate'] = number_format($results[$key]['rate'] / 10000, 4, '.');
103 | }
104 | }
105 |
106 | echo json_encode($results);
107 | }
108 |
--------------------------------------------------------------------------------
/libraries/Session/Session.php:
--------------------------------------------------------------------------------
1 | 'Lax',
39 | ]);
40 | }
41 |
42 | $this->sessionId = ($sessionId) ? $sessionId : md5($_SERVER['HTTP_HOST'] . '_session');
43 |
44 | // Secure mode
45 | if ($secure) {
46 | if (!isset($_SESSION[$this->sessionId . '_clientIp'])) {
47 | $_SESSION[$this->sessionId . '_clientIp'] = $_SERVER['REMOTE_ADDR'];
48 | }
49 |
50 | if (!isset($_SESSION[$this->sessionId . '_userAgent'])) {
51 | $_SESSION[$this->sessionId . '_userAgent'] = $_SERVER['HTTP_USER_AGENT'];
52 | }
53 |
54 | // Make sure client IP and user agent is same to prevent session hijacking
55 | if ($_SESSION[$this->sessionId . '_clientIp'] != $_SERVER['REMOTE_ADDR'] || $_SESSION[$this->sessionId . '_userAgent'] != $_SERVER['HTTP_USER_AGENT']) {
56 | session_unset();
57 | session_destroy();
58 |
59 | return;
60 | }
61 | }
62 |
63 | if (isset($_SESSION[$this->sessionId]) && ($this->session = json_decode($_SESSION[$this->sessionId], true)) === null) {
64 | return;
65 | }
66 |
67 | if (!isset($_SESSION[$this->sessionId])) {
68 | $_SESSION[$this->sessionId] = json_encode([]);
69 | }
70 |
71 | $this->session = json_decode($_SESSION[$this->sessionId], true);
72 | }
73 |
74 | /**
75 | * Retrieve a session value by key.
76 | *
77 | * @param string $key
78 | *
79 | * @return string
80 | */
81 | public function get($key)
82 | {
83 | return (isset($this->session[$key])) ? $this->session[$key] : '';
84 | }
85 |
86 | /**
87 | * Set a session variable by key and value.
88 | *
89 | * @param string $key
90 | * @param string $value
91 | *
92 | * @return void
93 | */
94 | public function set($key, $value = null)
95 | {
96 | $this->session[$key] = $value;
97 |
98 | if ($value === null) {
99 | unset($this->session[$key]);
100 | }
101 |
102 | $_SESSION[$this->sessionId] = json_encode($this->session);
103 | }
104 |
105 | /**
106 | * Delete a session variable by key.
107 | *
108 | * @param string $key
109 | *
110 | * @return void
111 | */
112 | public function delete($key)
113 | {
114 | $this->set($key, null);
115 | }
116 |
117 | /**
118 | * Destroy the entire session variables.
119 | *
120 | * @return void
121 | */
122 | public function destroy()
123 | {
124 | unset($_SESSION[$this->sessionId]);
125 | $this->session = null;
126 | }
127 | }
128 |
--------------------------------------------------------------------------------
/includes/functions.php:
--------------------------------------------------------------------------------
1 | 'United Arab Emirates', 'AL' => 'Albania', 'AM' => 'Armenia', 'AO' => 'Angola', 'AR' => 'Argentina', 'AT' => 'Austria', 'AU' => 'Australia', 'AZ' => 'Azerbaijan', 'BB' => 'Barbados', 'BD' => 'Bangladesh', 'BE' => 'Belgium', 'BF' => 'Burkina Faso', 'BG' => 'Bulgaria', 'BH' => 'Bahrain', 'BN' => 'Brunei Darussalam', 'BR' => 'Brazil', 'BT' => 'Bhutan', 'BW' => 'Botswana', 'BY' => 'Belarus', 'CA' => 'Canada', 'CD' => 'Congo, the Democratic Republic of the', 'CH' => 'Switzerland', 'CL' => 'Chile', 'CN' => 'China', 'CO' => 'Colombia', 'CR' => 'Costa Rica', 'CW' => 'Curaçao', 'CY' => 'Cyprus', 'CZ' => 'Czech Republic', 'DE' => 'Germany', 'DJ' => 'Djibouti', 'DK' => 'Denmark', 'DO' => 'Dominican Republic', 'DZ' => 'Algeria', 'EC' => 'Ecuador', 'EE' => 'Estonia', 'EG' => 'Egypt', 'ES' => 'Spain', 'FI' => 'Finland', 'FR' => 'France', 'GB' => 'United Kingdom', 'GD' => 'Grenada', 'GE' => 'Georgia', 'GH' => 'Ghana', 'GR' => 'Greece', 'GT' => 'Guatemala', 'GU' => 'Guam', 'GY' => 'Guyana', 'HN' => 'Honduras', 'HR' => 'Croatia', 'HU' => 'Hungary', 'ID' => 'Indonesia', 'IE' => 'Ireland', 'IL' => 'Israel', 'IN' => 'India', 'IQ' => 'Iraq', 'IS' => 'Iceland', 'IT' => 'Italy', 'JM' => 'Jamaica', 'JO' => 'Jordan', 'JP' => 'Japan', 'KE' => 'Kenya', 'KH' => 'Cambodia', 'KR' => 'Korea, Republic of', 'KW' => 'Kuwait', 'KZ' => 'Kazakhstan', 'LA' => 'Lao People\'s Democratic Republic', 'LB' => 'Lebanon', 'LK' => 'Sri Lanka', 'LT' => 'Lithuania', 'LU' => 'Luxembourg', 'LV' => 'Latvia', 'MA' => 'Morocco', 'MD' => 'Moldova, Republic of', 'MG' => 'Madagascar', 'MM' => 'Myanmar', 'MN' => 'Mongolia', 'MU' => 'Mauritius', 'MV' => 'Maldives', 'MX' => 'Mexico', 'MY' => 'Malaysia', 'MZ' => 'Mozambique', 'NC' => 'New Caledonia', 'NG' => 'Nigeria', 'NL' => 'Netherlands', 'NO' => 'Norway', 'NP' => 'Nepal', 'NZ' => 'New Zealand', 'OM' => 'Oman', 'PA' => 'Panama', 'PE' => 'Peru', 'PF' => 'French Polynesia', 'PH' => 'Philippines', 'PK' => 'Pakistan', 'PL' => 'Poland', 'PT' => 'Portugal', 'PY' => 'Paraguay', 'QA' => 'Qatar', 'RO' => 'Romania', 'RS' => 'Serbia', 'RU' => 'Russian Federation', 'RW' => 'Rwanda', 'SA' => 'Saudi Arabia', 'SE' => 'Sweden', 'SG' => 'Singapore', 'SK' => 'Slovakia', 'SN' => 'Senegal', 'SR' => 'Suriname', 'TH' => 'Thailand', 'TN' => 'Tunisia', 'TR' => 'Turkey', 'TW' => 'Taiwan', 'TZ' => 'Tanzania, United Republic of', 'UA' => 'Ukraine', 'US' => 'United States', 'UZ' => 'Uzbekistan', 'VN' => 'Viet Nam', 'ZA' => 'South Africa', 'ZW' => 'Zimbabwe'];
23 |
24 | return (isset($countries[$code])) ?? '';
25 | }
26 |
27 | /**
28 | * Sanitize input value.
29 | *
30 | * @param string $string
31 | *
32 | * @return string
33 | */
34 | function sanitize($string)
35 | {
36 | return str_replace(';', '', trim($string));
37 | }
38 |
39 | /**
40 | * Convert bytes into human readable format.
41 | *
42 | * @param int $bytes
43 | *
44 | * @return string
45 | */
46 | function formatBytes($bytes)
47 | {
48 | $i = ($bytes === 0) ? 0 : floor(log($bytes) / log(1024));
49 |
50 | return round($bytes / pow(1024, $i), 2) * 1 . ' ' . ['B', 'kB', 'MB', 'GB', 'TB'][$i];
51 | }
52 |
--------------------------------------------------------------------------------
/assets/js/select-search.min.js:
--------------------------------------------------------------------------------
1 | !function(e){e.fn.selectSearch=function(a){e.each(this,(function(a,t){var s=e(t).attr("class").split(" "),i=e(t).find("option:selected").text(),o=e('
- '),l=e(''),n=void 0!==e(t).data("search"),c=e('
18 |