Файловый менеджер - Редактировать - /home/u243887183/domains/terit.xyz/public_html/static/img/logo/admin.zip
Ðазад
PK ��nZh�^� � update-script.phpnu �[��� <?php $page = "Update Script" ?> <?php include "includes/config.php"; ?> <?php require "../app/includes/function_general.php"; ?> <?php include("includes/header.php"); if (isset($_GET) && !empty($_GET)) { if (isset($_GET['delete']) && $_GET['delete'] == 'true') { $sql = "TRUNCATE TABLE zon_games"; if (mysqli_query($con, $sql)) { echo "<script>window.location.href = 'index.php';</script>"; } } } $message = ''; if (isset($_FILES) && !empty($_FILES)) { if (isset($_FILES) && isset($_FILES['update'])) { $file = $_FILES['update']; $file_name = $file['name']; $file_tmp = $file['tmp_name']; if (move_uploaded_file($file_tmp, "../" . $file_name)) { $zipFile = '../' . $file_name; // Replace with the path to your ZIP file $extractTo = '../'; // Replace with the path where you want to extract the files $zip = new ZipArchive(); if ($zip->open($zipFile) === true) { $zip->extractTo($extractTo); $zip->close(); $message = 'Your script updated successfully.'; // // Now, let's replace existing files with the new files. // $newFilesDirectory = 'path_to_new_files_directory/'; // Replace with the path to the directory containing the new files // // Loop through the extracted files and replace existing files. // $dirIterator = new DirectoryIterator($extractTo); // foreach ($dirIterator as $fileInfo) { // if (!$fileInfo->isDot() && $fileInfo->isFile()) { // $newFilePath = $newFilesDirectory . $fileInfo->getFilename(); // $existingFilePath = $extractTo . $fileInfo->getFilename(); // // Check if the new file exists and replace the existing file. // if (file_exists($newFilePath)) { // // Overwrite the existing file with the new file. // if (copy($newFilePath, $existingFilePath)) { // echo "File '{$fileInfo->getFilename()}' replaced successfully.<br>"; // } else { // echo "Failed to replace '{$fileInfo->getFilename()}'<br>"; // } // } // } // } unlink($zipFile); } else { echo 'Failed to open the ZIP file.'; } } // echo "<pre>"; // print_r($_FILES['update']); } } ?> <body class="dark:bg-[#121317]"> <main class="d-flex "> <?php include "includes/sidebar.php"; ?> <div class="main w-full px-12 py-6"> <form class="games-list" action="" method="post" enctype="multipart/form-data"> <h1 class="text-3xl font-bold">Update Your Script</h1> <?php if(!empty($message)) { ?> <p class="mt-4 text-white mb-4 bg-green-500 py-2 px-4" ><?php echo $message ?></p> <?php } ?> <input type="file" accept=".zip" class="border mb-6 mt-6 w-full block py-3 px-2 " name="update" /> <p class="mb-6 mt-2 text-sm text-gray-500">upload your script update zip file, Only Supports .zip files.</p> <p><b class="text-red-700 ">Note:</b> Please provide the correct zip file otherwise your entire script may get corrupted. </p> <button class="px-4 py-1 mt-4 bg-blue-500 rounded-md text-white ">Update</button> </form> </div> </main> </body> <?php $message = ''; ?>PK ��nZ�3�U U add-users.phpnu �[��� <?php require "../app/includes/function_general.php"; ?> <?php include "includes/header.php"; ?> <?php // include "includes/config.php"; ?> <?php // session_start(); if (!empty($_GET['token_id']) && isset($_GET['action'])) { $token_id = $_GET['token_id']; $action_type = $_GET['action']; } if (isset($token_id) && isset($action_type) && !empty($token_id)) { $sql = "select * from zon_users where id=$token_id"; $run = mysqli_query($con, $sql); $data = mysqli_fetch_assoc($run); } ?> <body class="dark:bg-[#121317]"> <main class="d-flex"> <?php include "includes/sidebar.php"; ?> <div class="main w-full px-12 py-6"> <div class="games-list mt-6"> <form action="functions/add-user.php" method="POST" enctype="multipart/form-data" id="add-page" class="tab"> <?php if (!empty($token_id)) { ?> <input hidden type="text" name="user_id" value="<?php echo $data['id']; ?>"> <?php } ?> <div class="flex gap-6"> <div class="input-form w-full"> <div class="input-group flex flex-column"> <label class="text-gray-500 uppercase text-[10px] mb-2">full Name</label> <input value="<?php if (!empty($token_id)) { echo $data['name']; } ?><?php if(isset($_SESSION['name'])){ echo $_SESSION['name']; } ?>" required name="name" class="py-[15px] text-gray-500 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" placeholder="full name"> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">email</label> <input required value="<?php if (!empty($token_id)) { echo $data['email']; } ?><?php if(isset($_SESSION['email'])){ echo $_SESSION['email']; } ?>" name="email" class="py-[15px] text-gray-500 outline-none <?php if (isset($_GET['emailError'])) { echo "border-2 border-red-800 focus:outline-red-800"; }?> focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="email" placeholder="Email"> <?php if (isset($_GET['emailError'])) { ?> <label class="select-none text-red-800 capitalize text-xs mb-1 mt-1"> <?php echo Secure_DATA($_GET['emailError']); ?> </label> <?php } ?> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">username</label> <input required value="<?php if (!empty($token_id)) { echo $data['username']; } ?><?php if(isset($_SESSION['username'])){ echo $_SESSION['username']; } ?>" name="username" class="py-[15px] text-gray-500 outline-none <?php if (isset($_GET['usernameError'])) { echo "border-2 border-red-800 focus:outline-red-800"; }?> focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" placeholder="Username"> <?php if (isset($_GET['usernameError'])) { ?> <label class="select-none text-red-800 capitalize text-xs mb-1 mt-1"> <?php echo Secure_DATA($_GET['usernameError']); ?> </label> <?php } ?> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">user pic</label> <input name="user_pic" class="py-0 border-2 dark:border-zinc-900 border-gray-100 text-gray-500 outline-none rounded-sm focus:outline bg-[white] h-12 focus:outline-blue-500 transition-sm px-0 text-xs" type="file" placeholder="Game Image"> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">password</label> <input name="password" value="<?php if (!empty($token_id)) { echo $data['password']; } ?><?php if(isset($_SESSION['password'])){ echo $_SESSION['password']; } ?>" class="py-0 border-2 dark:border-zinc-900 border-gray-100 text-gray-500 outline-none rounded-sm focus:outline bg-[white] h-12 focus:outline-blue-500 transition-sm px-3 text-xs" type="text" placeholder="Password"> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">user is </label> <select name="user_status" class="py-[15px] text-gray-500 outline-none focus:outline focus:outline-blue-500 transition-sm w-full px-3 text-xs" id=""> <option <?php if (!empty($token_id)) { if ($data['status'] == '0') { echo "selected"; } } ?> value="0">Add User</option> <option <?php if (!empty($token_id)) { if ($data['status'] == '1') { echo "selected"; } } ?> value="1">User Banned</option> </select> </div> </div> <div class="other-inputs w-80"></div> </div> <button name="<?php if (!empty($token_id)) { echo 'update_user'; } else { echo 'add_user'; } ?>" class="bg-blue-600 text-white uppercase mt-4 text-sm rounded-sm py-2 px-3 "><?php if (!empty($token_id)) { echo 'update'; } else { echo 'Add User'; } ?></button> </form> </div> </main> <?php include "includes/footer.php"; ?> </body> </html>PK ��nZ�m�l�1 �1 settings.phpnu �[��� <?php $page = "Settings"; ?> <?php require "../app/includes/function_general.php"; ?> <?php include("includes/header.php") ?> <style> #general-tab ul, #general-tab ol { list-style-type: disc; margin: 10px; padding: 10px; } #general-tab p { margin: 10px 0; } #general-tab h1, #general-tab h2, #general-tab h3, #general-tab h4, #general-tab h5, #general-tab h6 { margin: 10px 0; font-weight: bolder; } </style> <body> <main class="d-flex"> <?php include("includes/sidebar.php"); ?> <form action="functions/configuration.php" method="post" enctype="multipart/form-data" class="main w-full px-12 py-6"> <div class="games-list mt-6"> <div class="tabs flex justify-center gap-3"> <button type="button" data-target="#general-tab" class="bg-blue-500 shadow-lg py-2 px-3 rounded-md text-xs text-gray-100 tab-button">General</button> <button type="button" data-target="#seo-tab" class="py-2 px-3 rounded-lg text-xs text-gray-500 tab-button">SEO</button> </div> <div id="general-tab" class="tab"> <div class="flex gap-6 mt-6"> <div class="input-group flex flex-column"> <label class="text-gray-500 uppercase text-[10px] mb-2">Site name</label> <input class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" value="<?php echo Zon_Config('site_name')?>" name="site_name" placeholder="Site name"> </div> <div class="input-group flex flex-column"> <label class="text-gray-500 uppercase text-[10px] mb-2">Profile tagline</label> <input class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" value="<?php echo Zon_Config('profile_tagline')?>" name="profile_tagline" placeholder="Site name"> </div> </div> <div class="flex gap-6 mt-6"> <div class="input-group flex flex-column"> <label class="text-gray-500 uppercase text-[10px] mb-2">Logo</label> <input class="text-gray-500 border-2 dark:border-zinc-800 dark:bg-zinc-900 text-gray-400 bg-[white] border-gray-200 outline-none focus:outline focus:outline-blue-500 transition-sm h-10 text-xs" type="file" name="logo" placeholder="site logo"> </div> <div class="input-group flex flex-column"> <label class="text-gray-500 uppercase text-[10px] mb-2">Logo small</label> <input class="text-gray-500 border-2 dark:border-zinc-800 dark:bg-zinc-900 text-gray-400 bg-[white] border-gray-200 outline-none focus:outline focus:outline-blue-500 transition-sm h-10 text-xs" type="file" name="dark_logo" placeholder="dark logo"> </div> <div class="input-group flex flex-column"> <label class="text-gray-500 uppercase text-[10px] mb-2">favicon</label> <input class="text-gray-500 border-2 dark:border-zinc-800 dark:bg-zinc-900 dark:bg-zinc-900 text-gray-400 bg-[white] border-gray-200 outline-none focus:outline focus:outline-blue-500 transition-sm h-10 text-xs" type="file" name="favicon" placeholder="favicon"> </div> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">head custom code</label> <textarea class="py-2 resize-none text-gray-500 dark:bg-zinc-900 border-2 dark:border-zinc-800 text-gray-400 bg-[white] border-gray-200 outline-none focus:outline focus:outline-blue-500 transition-sm text-xs px-2" name="head_code" cols="50" rows="16"><?php echo Zon_Config('head_code')?></textarea> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">footer content</label> <textarea id="editor" class="py-2 resize-none text-gray-500 dark:bg-zinc-900 border-2 text-gray-400 bg-[white] border-gray-200 outline-none focus:outline focus:outline-blue-500 transition-sm text-xs px-2" name="footer_content" cols="50" rows="16"><?php echo Zon_Config('footer_content')?></textarea> </div> </div> <div id="seo-tab" class="tab hidden"> <div class="input-group flex flex-column"> <label class="text-gray-500 uppercase text-[10px] mb-2">Site title</label> <input class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" value="<?php echo Zon_Config('site_title')?>" name="site_title" placeholder="Site title"> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">Site Description</label> <input class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" value="<?php echo Zon_Config('site_desc')?>" name="site_desc" placeholder="Site Description"> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">Site Keywords</label> <textarea class="py-[15px] dark:bg-zinc-900 text-gray-500 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" placeholder="Site Keywords" name="site_keywords"><?php echo Zon_Config('site_keywords')?></textarea> <label class="text-gray-500 text-[10px] mb-2 mt-2">For Better Ranking in Search Engines</label> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">game title</label> <input class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" value="<?php echo Zon_Config('games_title')?>" name="games_title" placeholder="game title"> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">game description</label> <textarea class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" name="games_desc" placeholder="game description"><?php echo Zon_Config('games_desc')?></textarea> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">play title</label> <input class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" value="<?php echo Zon_Config('play_title')?>" name="play_title" placeholder="play title"> <label class="text-xs text-gray-500 flex mt-2 gap-1"><p class="text-blue-500">[name]</p> is variable</label> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">play description</label> <textarea class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" name="play_desc" placeholder="play description"><?php echo Zon_Config('play_desc')?></textarea> <label class="text-xs text-gray-500 flex mt-2 gap-1"><p class="text-blue-500">[name]</p> is variable</label> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">profile title</label> <input class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" value="<?php echo Zon_Config('profile_title')?>" name="profile_title" placeholder="profile title"> <label class="text-xs text-gray-500 flex mt-2 gap-1"><p class="text-blue-500">[name]</p> is variable</label> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">profile description</label> <textarea class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" name="profile_desc" placeholder="profile description"><?php echo Zon_Config('profile_desc')?></textarea> <label class="text-xs text-gray-500 flex mt-2 gap-1"><p class="text-blue-500">[name]</p> is variable</label> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">category title</label> <input class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" value="<?php echo Zon_Config('category_title')?>" name="category_title" placeholder="category title"> <label class="text-xs text-gray-500 flex mt-2 gap-1"><p class="text-blue-500">[name]</p> is variable</label> </div> <div class="input-group flex flex-column mt-6"> <label class="text-gray-500 uppercase text-[10px] mb-2">category description</label> <textarea class="py-[15px] text-gray-500 dark:bg-zinc-900 outline-none focus:outline focus:outline-blue-500 transition-sm px-3 text-xs" type="text" name="category_desc" placeholder="category description"><?php echo Zon_Config('category_desc')?></textarea> <label class="text-xs text-gray-500 flex mt-2 gap-1"><p class="text-blue-500">[name]</p> is variable</label> </div> </div> </div> <button name="site_info" type="submit" class="bg-blue-600 py-2 px-4 text-white rounded-lg mt-4">Save</button> </form> </main> <script> ClassicEditor .create(document.querySelector('#editor')) .catch(error => { console.error(error); }); </script> <?php include "includes/footer.php"; ?> </body> </html>PK ��nZ��7q q featured_games.phpnu �[��� <?php $page = "Featured Games"; ?> <?php require "../app/includes/function_general.php"; ?> <?php include "includes/header.php"; ?> <?php $search_query = "SELECT * FROM zon_games WHERE is_featured=1 ORDER BY id DESC"; if (isset($_GET) && !empty($_GET)) { if (isset($_GET['content_type']) && isset($_GET['action']) && isset($_GET['token_id'])) { if ($_GET['content_type'] == 'featured_game') { if ($_GET['action'] == 'delete') { $id = $_GET['token_id']; $sql = "UPDATE zon_games SET is_featured=0 WHERE id=$id"; if (mysqli_query($socket, $sql)) { echo "<script>window.location.href = '?';</script>"; } } } } } if (isset($_POST) && !empty($_POST)) { $game_id = $_POST['game_id']; foreach($game_id as $id) { if(mysqli_query($socket, "UPDATE zon_games SET is_featured=1 WHERE id=$id")) { echo "<script>window.location.href = '';</script>"; } } } ?> <body> <main class="d-flex"> <?php include "includes/sidebar.php"; ?> <div class="main w-full px-12 py-6"> <div class="games-list"> <a onclick="document.getElementById('GameAddModal').classList.toggle('close')" class="py-2 px-6 bg-blue-400 cursor-pointer text-white uppercase text-xs rounded-md">ADD</a> <table class="w-full mt-10 "> <thead class="border-b-2 dark:border-zinc-900 px-16 border-gray-100 py-2"> <td class="py-2 text-xs text-gray-600 px-4">ID</td> <td class="py-2 text-xs text-gray-600 px-4 w-full">Name</td> <td class="py-2 text-xs text-right"></td> </thead> <tbody> <?php $mysql = mysqli_query($con, $search_query) or die("died"); while ($row = mysqli_fetch_assoc($mysql)) { ?> <?php if ($row['game_status'] == 0) { ?> <tr class="bg-[white] dark:bg-zinc-900 px-16 "> <td class="text-xs text-gray-500 px-4 "># <?= $row['id'] ?> </td> <td class="text-gray-500 px-4 text-sm flex items-center py-3"><img class="object-cover h-12 w-12 rounded-lg mr-4 overflow-hidden" src="<?= $row['game_image_url'] ?>"> <a href="add-game.php?action=update&token_id=<?= $row['id'] ?>"> <?= $row['game_name'] ?> </a> </td> <td class="text-right relative px-6"> <button data-target="#dc_<?= $row['id'] ?>" class="bi-three-dots-vertical text-gray-500 drop_btn"></button> <div id="dc_<?= $row['id'] ?>" style="z-index: 99;" class="dropdown absolute bg-white text-right right-0 hidden flex-column "> <a href="?action=delete&token_id=<?= $row['id'] ?>&content_type=featured_game" class="text-xs px-4 py-2 text-red-700">Delete</a> <!-- <a href="add-game.php?action=update&token_id=<?= $row['id'] ?>&content_type=game" class="text-xs px-4 py-2">Edit</a> --> </div> </td> </tr> <?php } ?> <?php } ?> </tbody> </table> </div> </div> </main> <div id="GameAddModal" class="game-add-modal close"> <div onclick="this.parentNode.classList.add('close')" class="overlay"></div> <form action="" method="post" class="game-add-dialog"> <div class="dialog-head px-4 flex justify-between mb-3 "> <span></span> <div onclick="this.parentNode.parentNode.parentNode.classList.add('close')" class="close text-2xl select-none cursor-pointer font-bold text-zinc-800 ">×</div> </div> <div class="form border"> <input id="SearchGame" type="text" class="px-2" placeholder="Search your game..." /> <button type="button" class="bi-search"></button> </div> <div id="gameList" class="game-list overflow-y-scroll h-[36vh] p-3"></div> <div class="modal-footer"> <button class="bg-blue-600 px-3 py-1.5 text-white rounded-md">Add Game</button> </div> </form> </div> <style> .game-add-modal.close { display: none; } </style> <script> getGame('a'); var input = document.getElementById('SearchGame'); input.addEventListener("keyup", () => { getGame(input.value); }) function getGame(value) { var xhr = new XMLHttpRequest(); xhr.open('POST', '<?php echo $site_url ?>admin/includes/ajax/gamesbyquery.php', true); // xhr.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded'); xhr.onreadystatechange = function () { if (xhr.readyState === 4 && xhr.status === 200) { // Request was successful, handle the response var response = xhr.responseText; if (response !== '') { document.getElementById('gameList').innerHTML = response; } else { document.getElementById('gameList').innerText = `Game not found from ( ${value} )`; } } }; const formData = new FormData(); formData.append("query", value); xhr.send(formData); } </script> <?php include "includes/footer.php"; ?> </body> </html>PK ��nZl�1( ( functions/functions.phpnu �[��� <?php require_once 'config.php'; require_once '../../app/includes/constant.php'; require_once '../../app/includes/app_start.php'; // require_once '../../app/includes/function_general.php'; function Secure_DATA($e) { return $e; } // Game Adding, Deleting And Updating Action if (isset($_POST['upload_game'])) { $game_name = mysqli_real_escape_string($con, $_POST['game_name']); $game_slug = mysqli_real_escape_string($con, $_POST['game_slug']); $game_desc = mysqli_real_escape_string($con, $_POST['game_description']); $game_frame_url = mysqli_real_escape_string($con, $_POST['game_frame_url']); $game_status = mysqli_real_escape_string($con, $_POST['game_status']); $game_category = mysqli_real_escape_string($con, $_POST['game_category']); $game_banner_url = mysqli_real_escape_string($con, $_POST['game_banner_url']); if (isset($_FILES['game_image'])) { if ($_FILES['game_image']['error'] == 0) { $file_name = rand(111111111, 999999999) . $_FILES['game_image']['name']; if (move_uploaded_file($_FILES['game_image']['tmp_name'], "../../static/uploads/" . $file_name)); { $game_image_url = $site_url . 'static/uploads/' . $file_name; } } else { $game_image_url = mysqli_real_escape_string($con, $_POST['game_image_url']); } } else { $game_image_url = mysqli_real_escape_string($con, $_POST['game_image_url']); } $sql = "INSERT INTO `zon_games`(`game_name`, `game_description`, `game_image_url`, `game_url`, `game_published`, `game_category`, `game_status`, `game_played`, `game_banner_url`, `is_featured`, `game_card_size`) VALUES ('$game_name','$game_desc','$game_image_url','$game_frame_url', '$game_status', '$game_category', 0, 0,'$game_banner_url', 0, '')"; if (mysqli_query($con, $sql)) { @header("location: ../games.php"); } } if (isset($_POST['update_game'])) { $game_id = mysqli_real_escape_string($con, $_POST['game_id']); $game_name = mysqli_real_escape_string($con, $_POST['game_name']); $game_slug = mysqli_real_escape_string($con, $_POST['game_slug']); $game_desc = mysqli_real_escape_string($con, $_POST['game_description']); $game_frame_url = mysqli_real_escape_string($con, $_POST['game_frame_url']); $game_status = mysqli_real_escape_string($con, $_POST['game_status']); $game_category = mysqli_real_escape_string($con, $_POST['game_category']); $game_banner_url = mysqli_real_escape_string($con, $_POST['game_banner_url']); if (isset($_FILES['game_image'])) { if ($_FILES['game_image']['error'] == 0) { $file_name = rand(111111111, 999999999) . $_FILES['game_image']['name']; if (move_uploaded_file($_FILES['game_image']['tmp_name'], "../../static/uploads/" . $file_name)); { $game_image_url = $site_url . 'static/uploads/' . $file_name; } } else { $game_image_url = mysqli_real_escape_string($con, $_POST['game_image_url']); } } else { $game_image_url = mysqli_real_escape_string($con, $_POST['game_image_url']); } $sql = "UPDATE `zon_games` SET `game_name`='$game_name', `game_description`='$game_desc', `game_image_url`='$game_image_url', `game_url`='$game_frame_url', `game_published`='$game_status', `game_category`='$game_category', `game_banner_url`='$game_banner_url' WHERE id=$game_id"; if (mysqli_query($con, $sql)) { @header("location: ../games.php"); } } if (isset($_POST['add_category'])) { $category_name = mysqli_real_escape_string($con, $_POST['game_category']); $category_slug = mysqli_real_escape_string($con, $_POST['game_category_slug']); $category_description = mysqli_real_escape_string($con, $_POST['game_category_description']); if (mysqli_query($con, "insert into zon_category (`name`, `slug`, `description`) values ('$category_name' , '$category_slug', '$category_description') ")) { @header("location: ../categories.php"); } } if (isset($_POST['update_category'])) { $category_name = mysqli_real_escape_string($con, $_POST['game_category']); $category_slug = mysqli_real_escape_string($con, $_POST['game_category_slug']); $category_description = mysqli_real_escape_string($con, $_POST['game_category_description']); $category_id = mysqli_real_escape_string($con, $_POST['category_id']); if (mysqli_query($con, "update zon_category set `name`='$category_name', `slug`='$category_slug', `description`='$category_description' where id=$category_id")) { @header("location: ../categories.php"); } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type'])) { if ($_GET['content_type'] == 'game') { $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "DELETE FROM zon_games where id=$token_id")) { @header("location: ../games.php"); } } } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type'])) { if ($_GET['content_type'] == 'category') { $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "delete from zon_category where id=$token_id")) { @header("location: ../categories.php"); } } else { echo "Failed"; } } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type']) && !empty($_GET['url'])) { if ($_GET['content_type'] == 'game') { $url = $_GET['url']; $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "delete from zon_games where id=$token_id")) { @header("location: $url.php"); } } else { echo "Failed"; } } } if (isset($_POST) && isset($_POST['ads_up_add'])) { $ad_name = mysqli_real_escape_string($con, $_POST['ad_name']); $id = Secure_DATA($_POST['ad_id']); $ad_code = mysqli_real_escape_string($con, $_POST['ad_code']); $ad_off = $_POST['ad_contr']; $sql = "UPDATE zon_ads set `code`='$ad_code', `ad_name`='$ad_name', `status`= 0 where id=$id"; if (!empty($ad_off)) { $sql = "UPDATE zon_ads set `code`='$ad_code', `ad_name`='$ad_name', `status`=1 where id=$id"; } if (mysqli_query($con, $sql)) { @header("location: ../advertisement.php"); } } if (isset($_POST) && isset($_POST['add_page'])) { $page_title = mysqli_escape_string($con, $_POST['page_title']); $page_desc = mysqli_escape_string($con, $_POST['page_desc']); $page_content = mysqli_escape_string($con, $_POST['page_content']); $query = "INSERT INTO `zon_pages` (`title`, `desc`, `content`) VALUES ('$page_title', '$page_desc', '$page_content') "; if (mysqli_query($con, $query)) { @header("location: ../pages.php"); } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type']) && !empty($_GET['url'])) { if ($_GET['content_type'] == 'page') { $url = $_GET['url']; $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "delete from zon_pages where id=$token_id")) { @header("location: $url"); } } else { echo "Failed"; } } } if (isset($_POST) && isset($_POST['update_page'])) { $page_title = mysqli_escape_string($con, $_POST['page_title']); $page_desc = mysqli_escape_string($con, $_POST['page_desc']); $page_content = mysqli_escape_string($con, $_POST['page_content']); $id = mysqli_escape_string($con, $_POST['id']); $query = "UPDATE `zon_pages` SET `title`='$page_title', `desc`='$page_desc', `content`='$page_content' where id=$id"; if (mysqli_query($con, $query)) { @header("location: ../pages.php"); } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type']) && !empty($_GET['url'])) { if ($_GET['content_type'] == 'comment') { $url = $_GET['url']; $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "delete from zon_comments where id=$token_id")) { @header("location: $url.php"); } } else { echo "Failed"; } } } if (isset($_GET) && !empty($_GET['token_id']) && !empty($_GET['action']) && !empty($_GET['content_type']) && !empty($_GET['url'])) { if ($_GET['content_type'] == 'user') { $url = $_GET['url']; $action = $_GET['action']; $token_id = $_GET['token_id']; if ($action == 'delete') { if (mysqli_query($con, "delete from zon_users where id=$token_id")) { @header("location: $url.php"); } } else { echo "Failed"; } } } if (isset($_POST) && isset($_POST['customize_button'])) { // $section_games_limit = Secure_DATA($_POST['section_games_limit']); // $featured_game_slider = Secure_DATA($_POST['featured_game_slider']); // $popular_views = Secure_DATA($_POST['popular_views']); $site_color = Secure_DATA($_POST['site_color']); // $IsBlog = Secure_DATA($_POST['blog']); $gamepix_sid = Secure_DATA($_POST['gamepix_sid']); $animate_class = Secure_DATA($_POST['animate_class']); // $cursor_color = '#fff'; // $custom_cursor = 0; if (mysqli_query($con, "UPDATE zon_config SET site_color='$site_color', animate_class='$animate_class', gamepix_sid=$gamepix_sid ")) { header("location: ../customize.php"); } }PK ��nZ�+��� � functions/configuration.phpnu �[��� <?php // require_once '../../app/includes/function_general.php'; require_once '../../config.php'; require_once '../../app/includes/constant.php'; require_once '../../app/includes/app_start.php'; // $demo = "demo"; // if ($demo === $demo) { // header("Location: ../index.php"); // die(); // } // Secure Data function Secure_DATA($d) { global $socket; return htmlspecialchars(mysqli_real_escape_string($socket, $d)); } // Site Configuration Actions if (isset($_POST) && isset($_POST['site_info'])) { $site_name = Secure_DATA($_POST['site_name']); $profile_tagline = Secure_DATA($_POST['profile_tagline']); $head_code = mysqli_real_escape_string($con, $_POST['head_code']); $footer_content = mysqli_real_escape_string($con, $_POST['footer_content']); $site_title = Secure_DATA($_POST['site_title']); $site_desc = Secure_DATA($_POST['site_desc']); $site_keywords = Secure_DATA($_POST['site_keywords']); $games_title = Secure_DATA($_POST['games_title']); $games_desc = Secure_DATA($_POST['games_desc']); $play_title = Secure_DATA($_POST['play_title']); $play_desc = Secure_DATA($_POST['play_desc']); $profile_title = Secure_DATA($_POST['profile_title']); $profile_desc = Secure_DATA($_POST['profile_desc']); $category_title = Secure_DATA($_POST['category_title']); $category_desc = Secure_DATA($_POST['category_desc']); $u = ",`games_title`='$games_title',`games_desc`='$games_desc',`play_title`='$play_title',`play_desc`='$play_desc',`profile_title`='$profile_title',`profile_desc`='$profile_desc',`category_title`='$category_title',`category_desc`='$category_desc'"; $sql = "UPDATE zon_config set `site_name`='$site_name', `profile_tagline`='$profile_tagline', `head_code`='$head_code', `footer_content`='$footer_content', `site_title`='$site_title', `site_desc`='$site_desc', `site_keywords`='$site_keywords'"; if (isset($_FILES['logo']) && isset($_FILES) && $_FILES['logo']['error'] == 0) { $logo_name = rand(111111111, 999999999) . $_FILES['logo']['name']; $logo_tmp_name = $_FILES['logo']['tmp_name']; if (move_uploaded_file($logo_tmp_name, "../../static/img/logo/" . $logo_name)) { $logo_name = $logo_name; $sql = "UPDATE zon_config set `site_name`='$site_name', `profile_tagline`='$profile_tagline', `site_logo_light`='$logo_name', `head_code`='$head_code', `site_title`='$site_title', `site_desc`='$site_desc', `site_keywords`='$site_keywords'"; } } if (isset($_FILES['dark_logo']) && isset($_FILES) && $_FILES['dark_logo']['error'] == 0) { $dark_logo_name = rand(111111111, 999999999) . $_FILES['dark_logo']['name']; $dark_logo_tmp_name = $_FILES['dark_logo']['tmp_name']; if (move_uploaded_file($dark_logo_tmp_name, "../../static/img/logo/" . $dark_logo_name)) { $dark_logo_name = $dark_logo_name; $sql = "UPDATE zon_config set `site_name`='$site_name', `profile_tagline`='$profile_tagline', `site_logo_sm`='$dark_logo_name', `head_code`='$head_code', `site_title`='$site_title', `site_desc`='$site_desc', `site_keywords`='$site_keywords'"; } } if (isset($_FILES['favicon']) && isset($_FILES) && $_FILES['favicon']['error'] == 0) { $favicon_logo_name = rand(111111111, 999999999) . $_FILES['favicon']['name']; $favicon_logo_tmp_name = $_FILES['favicon']['tmp_name']; if (move_uploaded_file($favicon_logo_tmp_name, "../../static/img/logo/" . $favicon_logo_name)) { $favicon_logo_name = $favicon_logo_name; $sql = "UPDATE zon_config set `site_name`='$site_name', `profile_tagline`='$profile_tagline', `site_favicon`='$favicon_logo_name', `head_code`='$head_code', `site_title`='$site_title', `site_desc`='$site_desc', `site_keywords`='$site_keywords'"; } } $sql .= $u; if (mysqli_query($con, $sql)) { @header("location: ../settings.php"); } } PK ��nZ�~e�, , functions/config.phpnu �[��� <?php require_once('../../config.php'); ?>PK ��nZ��� functions/add-user.phpnu �[��� <?php session_start(); require_once '../../config.php'; require_once '../../app/includes/constant.php'; require_once '../../app/includes/app_start.php'; function ValidateFields($field, $var) { global $socket; $Validate = "select * from zon_users where $field='$var'"; return mysqli_num_rows(mysqli_query($socket, $Validate)); } // User Adding, Updating And Deleteing Action if (isset($_POST['add_user']) && isset($_POST)) { // $id = mysqli_real_escape_string($con, $_POST['id']); $name = mysqli_real_escape_string($con, $_POST['name']); $email = mysqli_real_escape_string($con, $_POST['email']); $username = mysqli_real_escape_string($con, $_POST['username']); $password = mysqli_real_escape_string($con, $_POST['password']); $user_status = mysqli_real_escape_string($con, $_POST['user_status']); $_SESSION['name'] = $name; $_SESSION['email'] = $email; $_SESSION['username'] = $username; $_SESSION['password'] = $password; $user_pic = "user_pic.png"; if ($_FILES['user_pic']['error'] == 0) { $file_name = rand(111111111, 99999999) . $_FILES['user_pic']['name']; $file_tmp = $_FILES['user_pic']['tmp_name']; if (move_uploaded_file($file_tmp, "../../static/img/" . $file_name)) { $user_pic = $file_name; } } if (ValidateFields('email', $email)) { @header("location: ../add-users.php?emailError=Email Already Exist"); // $bool = true; $emil = false; } else { $emil = true; } if (ValidateFields('username', $username)) { @header("location: ../add-users.php?usernameError=Username Already Exist"); $usern = false; } else { $usern = true; } $query = "INSERT INTO zon_users (`name`, `email`, `username`, `password`, `user_pic`, `status`, `is_admin`) VALUES ('$name', '$email', '$username', '$password', '$user_pic', $user_status, 0) "; if ($usern == true && $emil == true) { if (mysqli_query($con, $query)) { unset($_SESSION['name']); unset($_SESSION['email']); unset($_SESSION['username']); unset($_SESSION['password']); @header("location: ../users.php"); } } } if (isset($_POST['update_user']) && isset($_POST)) { $id = mysqli_real_escape_string($con, $_POST['user_id']); $name = mysqli_real_escape_string($con, $_POST['name']); $email = mysqli_real_escape_string($con, $_POST['email']); $username = mysqli_real_escape_string($con, $_POST['username']); $password = mysqli_real_escape_string($con, $_POST['password']); $user_status = mysqli_real_escape_string($con, $_POST['user_status']); // $user_pic = "user_pic.png"; if (ValidateFields('email', $email) == 2 && ValidateFields('username', $username) == 2) { @header("location: ../add-users.php?action=update&token_id=$id&emailError=Email Already Exist&usernameError=Username Already Exist"); $user = false; } else { $user = true; } if (ValidateFields('email', $email) == 2) { @header("location: ../add-users.php?action=update&token_id=$id&emailError=Email Already Exist"); $emil = false; } else { $emil = true; } if (ValidateFields('username', $username) == 2) { @header("location: ../add-users.php?action=update&token_id=$id&usernameError=Username Already Exist"); $usern = false; } else { $usern = true; } $query = "UPDATE zon_users SET `name`='$name', `email`='$email', `username`='$username', `password`='$password', `status`=$user_status where id=$id "; if ($_FILES['user_pic']['error'] == 0) { $file_name = rand(111111111, 99999999) . $_FILES['user_pic']['name']; $file_tmp = $_FILES['user_pic']['tmp_name']; if (move_uploaded_file($file_tmp, "../../static/img/" . $file_name)) { $user_pic = $file_name; $query = "UPDATE zon_users SET `name`='$name', `email`='$email', `username`='$username', `password`='$password', `user_pic`='$user_pic', `status`=$user_status where id=$id "; } } if ($usern == true && $emil == true && $user == true) { if (mysqli_query($con, $query)) { unset($_SESSION['name']); unset($_SESSION['email']); unset($_SESSION['username']); unset($_SESSION['password']); @header("location: ../users.php"); } } }PK ��nZ���"