echo '<select name="' . $row['schl'] . '">' . $grl . '</select>'; } elseif ($row['typ'] == 'grecht2') { $grl = dblistee($allgAr[$row['schl']], "SELECT id,name FROM prefix_grundrechte WHERE id >= -2 ORDER BY id ASC"); echo '<select name="' . $row['schl'] . '">' . $grl . '</select>'; } elseif ($row['typ'] == 'password') { echo '<input size="50" type="password" name="' . $row['schl'] . '" value="***" />'; } echo '</td></tr>' . "\n\n"; $ch = $row['kat']; } echo '<tr class="Cdark"><td></td><td><input type="submit" value="Absenden" name="submit"></td></tr>'; echo '</table>'; echo get_antispam('admin_allg', 0, true); echo '</form>'; } elseif ($csrfCheck) { $abf = 'SELECT * FROM `prefix_config` ORDER BY kat'; $erg = db_query($abf); while ($row = db_fetch_assoc($erg)) { if ($row['typ'] == 'password' and $_POST[$row['schl']] == '***') { continue; } elseif ($row['typ'] == 'password') { require_once 'include/includes/class/AzDGCrypt.class.inc.php'; $cr64 = new AzDGCrypt(DBDATE . DBUSER . DBPREF); $_POST[$row['schl']] = $cr64->crypt($_POST[$row['schl']]); } db_query('UPDATE `prefix_config` SET wert = "' . escape($_POST[$row['schl']], 'textarea') . '" WHERE schl = "' . $row['schl'] . '"'); } wd('admin.php?allg', 'Erfolgreich geändert', 2); } //-----------------------------------------------------------| $design->footer();
<?php include "includes/configuration.php"; include DIR_INCLUDES . 'functions/encryption.php'; @($encrypt_obj = new AzDGCrypt(1074)); if (isset($_POST['forgot_password_x'])) { $user_email = $_POST['email']; $sql_user = "******"; $rs_emailExists = mysql_query($sql_user); $user_email_row = mysql_fetch_array($rs_emailExists); $userExists = mysql_num_rows($rs_emailExists); if ($userExists != '0') { $from = $_CONFIG['site_name'] . "< " . $_CONFIG['email_outgoing'] . " >"; $header = "From: " . $from . "\n"; $header .= "MIME-Verson: 1.1\n"; $header .= "Content-type:text/html; charset=iso-8859-1\n"; $to = $user_email_row['user_email']; $subject = 'Your Caricature Toons Password'; $message = "Hi " . $user_email_row['user_fname'] . ",<br><br>\n\nBelow is your Caricature Toons Password.<br><br>\n\npassword : "******"<br>\nemail id : " . $user_email . "<br><br>\n\nTo login, go to " . $_CONFIG['site_url'] . "alogin.php<br><br>\n\nIf at anytime you have questions or require assistance, please email us at<br>\n" . $_CONFIG['email_contact_us'] . "<br><br>\n\nLife should always be fun!!!<br><br>\n\nThe Captoon,<br>\nwww.caricaturetoons.com"; mail($to, $subject, $message, $header); $msg = "Your Password has been sent to your mail"; } else { $msg_error = "This email is not registered"; } } include DIR_INCLUDES . 'header.php'; ?> <script language="javascript" type="text/javascript"> function validate() {
} $authMethods = array('no' => 'keine', 'auth' => 'einfache Authentifizierung', 'tls' => 'TLS', 'ssl' => 'SSL'); $keys = array('smtp_host', 'smtp_port', 'smtp_auth', 'smtp_pop3beforesmtp', 'smtp_pop3host', 'smtp_pop3port', 'smtp_login', 'smtp_email', 'smtp_login', 'smtp_pass', 'smtp_changesubject'); //Daten aus Datenbank lesen $qry = db_query('SELECT `t1` FROM `prefix_allg` WHERE `k` = "smtpconf"'); if (db_num_rows($qry) == 0 or ($smtpser = db_result($qry)) == '') { $smtp = array_fill_keys($keys, ''); $smtp['smtp_changesubject'] = 1; } else { $smtp = unserialize($smtpser); } //Formular verabeiten if (isset($_POST['subform']) and chk_antispam('smtpconf', true)) { if (!empty($_POST['smtp_pass'])) { require_once 'include/includes/class/AzDGCrypt.class.inc.php'; $cr64 = new AzDGCrypt(DBDATE . DBUSER . DBPREF); $smtp['smtp_pass'] = $cr64->crypt($_POST['smtp_pass']); } unset($_POST['smtp_pass']); foreach ($keys as $key) { if (isset($_POST[$key])) { $smtp[$key] = $_POST[$key]; } } if (!isset($_POST['smtp_pop3beforesmtp'])) { $smtp['smtp_pop3beforesmtp'] = 0; } $smtpsql = escape(serialize($smtp), 'textarea'); db_query('UPDATE `prefix_allg` SET `t1` = "' . $smtpsql . '" WHERE `k` = "smtpconf"'); if (mysql_affected_rows() == 0) { echo '<h2>Es wurden keine Änderungen vorgenommen!</h2>';
<?php include "includes/configuration.php"; include DIR_INCLUDES . 'functions/encryption.php'; @($encrypt_obj = new AzDGCrypt(1074)); if (!isloggedIn()) { header('Location:alogin.php?back_to=ezbuilder.php?opro_id=' . $_REQUEST['opro_id']); exit; } $opro_id = $_REQUEST['opro_id']; if (!$opro_id) { header('Location:my-caricature-toons.php'); exit; } $u_id = $_SESSION['sess_tt_uid']; $enc_u_id = $encrypt_obj->crypt($u_id); include DIR_INCLUDES . 'header.php'; $ezproductdetails = mysql_query("SELECT * FROM `toon_ez_products` WHERE `ezproduct_id`='{$opro_id}'"); $ezproductdetails_row = mysql_fetch_array($ezproductdetails); $sku = $ezproductdetails_row['ezproduct_sku']; $ecat_id = $ezproductdetails_row['ecat_id']; $catname_details = mysql_fetch_array(mysql_query("SELECT * FROM `toon_ez_categories` WHERE `ecat_id`='{$ecat_id}'")); $cartarray_rs = mysql_query("SELECT * FROM `toon_cart` WHERE `user_id`={$u_id} AND `cart_status`='active'"); $cartarray_row = mysql_fetch_assoc($cartarray_rs); $number_row = mysql_num_rows($cartarray_rs); if ($number_row) { $cart_pdt_num = count(unserialize(base64_decode($cartarray_row['cart_array']))); } else { $cart_pdt_num = 0; } ?>
<?php if (isset($_POST['submit_x'])) { @($encrypt_obj = new AzDGCrypt(1074)); $firstname = $_POST['firstname']; $lastname = $_POST['lastname']; $email = $_POST['email']; $pass = $_POST['password']; $password = $encrypt_obj->crypt($_POST['password']); $include = $_POST['include_mail']; if ($newsletter = $_POST['newsletter']) { $nltr_query = "INSERT INTO `toon_newsletter` (`nltr_email`,`nltr_fname`,`nltr_lname`) VALUES('{$email}','{$fname_news}','{$lname_news}')"; $nltr_result = mysql_query($nltr_query); } $query = mysql_query("SELECT * FROM `toon_users` where user_email='{$email}' and `user_delete`='0'"); $number = mysql_num_rows($query); if ($number <= 0) { $query = "INSERT INTO `toon_users` (`user_password`,`user_email`,`user_fname`,`user_lname`,`user_joined`) VALUES('{$password}','{$email}','{$firstname}','{$lastname}',NOW())"; $result = mysql_query($query) or die('Query failed: ' . mysql_error()); $login_query = mysql_query("SELECT * FROM `toon_users` where user_email='{$email}' and user_password='******' "); $row = mysql_fetch_array($login_query); $header .= "From: " . $_CONFIG['site_name'] . " <" . $_CONFIG['email_outgoing'] . ">\n"; $header .= "MIME-Verson: 1.1\n"; $header .= "Content-type:text/html;charset=iso-8859-1\n"; $subject = "Welcome To CARICATURE TOONS"; $text = "Hi " . $firstname . ",<br /><br />\n\t\t\tThanks for taking the time to join Caricature Toons. We love Tooning people up and we aim to please.<br /><br />\n\t\t\tWe’re so confident you’ll like your Toon that we provide a 100% money back guarantee if your not completely satisfied. We also have some great products you can display your Toon on or present as a gift.<br/><br/>\n\t\t\tYour email ID: " . $email . "<br />Password : "******"<br /><br />\n\t\t\t<a href='http://www.caricaturetoons.com/order-caricature.php'>Click Here to Order Your Toon</a> <br/>\n\t\t\t<a href='http://www.caricaturetoons.com/buy-caricature-gift.php'>Click Here to Buy Products</a><br/><br/>\n\t\t\tIf at anytime you have questions or require assistance, please email us at<br/> " . $_CONFIG['email_contact_us'] . "<br/><br/>\n\t\t\tLife should always be fun!!!<br/><br/>\n\t\t\tThe Captoon<br/>\n\t\t\twww.caricaturetoons.com<br/>"; mail($email, $subject, $text, $header); $u_id = $row['user_id']; $_SESSION['sess_tt_uid'] = $u_id; $backto = $_REQUEST['back_to']; //Caricature MailChimp Key
function icmail($mail, $bet, $txt, $from = '', $html = false) { global $allgAr; include_once 'include/includes/libs/phpmailer/class.phpmailer.php'; $mailer = new PHPMailer(); if (empty($from)) { $mailer->From = $allgAr['adminMail']; $mailer->FromName = $allgAr['allg_default_subject']; } elseif (preg_match('%(.*) <([\\w\\.-]*@[\\w\\.-]*)>%i', $from, $tmp)) { $mailer->From = trim($tmp[2]); $mailer->FromName = trim($tmp[1]); } elseif (preg_match('%([\\w\\.-]*@[\\w\\.-]*)%i', $from, $tmp)) { $mailer->From = trim($tmp[1]); $mailer->FromName = ''; } if ($allgAr['mail_smtp']) { // SMTP Versand $smtpser = @db_result(db_query('SELECT `t1` FROM `prefix_allg` WHERE `k` = "smtpconf"')); if (empty($smtpser)) { echo '<span style="font-size: 2em; color: red;">Mailversand muss konfiguriert werden!</span><br />'; } else { $smtp = unserialize($smtpser); $mailer->IsSMTP(); $mailer->Host = $smtp['smtp_host']; $mailer->SMTPAuth = $smtp['smtp_auth'] == 'no' ? false : true; if ($smtp['smtp_auth'] == 'ssl' or $smtp['smtp_auth'] == 'tls') { $mailer->SMTPSecure = $smtp['smtp_auth']; } if (!empty($smtp['smtp_port'])) { $mailer->Port = $smtp['smtp_port']; } $mailer->AddReplyTo($mailer->From, $mailer->FromName); if ($smtp['smtp_changesubject'] and $mailer->From != $smtp['smtp_email']) { $bet = '(For ' . $mailer->FromName . ' - ' . $mailer->From . ') ' . $bet; $mailer->From = $smtp['smtp_email']; } $mailer->Username = $smtp['smtp_login']; require_once 'include/includes/libs/AzDGCrypt.class.inc.php'; $cr64 = new AzDGCrypt(DBDATE . DBUSER . DBPREF); $mailer->Password = $cr64->decrypt($smtp['smtp_pass']); if ($smtp['smtp_pop3beforesmtp'] == 1) { include_once 'include/includes/libs/phpmailer/class.pop3.php'; $pop = new POP3(); $pop3port = !empty($smpt['smtp_pop3port']) ? $smpt['smtp_pop3port'] : 110; $pop->Authorise($smpt['smtp_pop3host'], $pop3port, 5, $mailer->Username, $mailer->Password, 1); } } // $mailer->SMTPDebug = true; } if (is_array($mail)) { if ($mail[0] == 'bcc') { array_shift($mail); foreach ($mail as $m) { $mailer->AddBCC(escape_for_email($m)); } $mailer->AddAddress($mailer->From); } else { foreach ($mail as $m) { $mailer->AddAddress(escape_for_email($mail)); } } } else { $mailer->AddAddress(escape_for_email($mail)); } $mailer->Subject = escape_for_email($bet, true); $txt = str_replace("\r", "\n", str_replace("\r\n", "\n", $txt)); if ($html) { $mailer->IsHTML(true); $mailer->AltBody = strip_tags($txt); } $mailer->Body = $txt; if ($mailer->Send()) { return true; } else { if (is_coadmin()) { echo "<h2 style=\"color:red;\">Mailer Error: " . $mailer->ErrorInfo . '</h2>'; } return false; } }
function smtpmail($mail_to, $subject, $message, $headers = '') { global $allgAr; $smtp_host = $allgAr['mail_smtp_host']; $smtp_username = $allgAr['mail_smtp_login']; require_once 'include/includes/class/AzDGCrypt.class.inc.php'; $cr64 = new AzDGCrypt(DBDATE . DBUSER . DBPREF); $smtp_password = $cr64->decrypt($allgAr['mail_smtp_password']); $absender = $allgAr['mail_smtp_email']; $message = preg_replace("#(?<!\r)\n#si", "\r\n", $message); if ($headers != '') { if (is_array($headers)) { if (sizeof($headers) > 1) { $headers = join("\n", $headers); } else { $headers = $headers[0]; } } $headers = chop($headers); $headers = preg_replace('#(?<!\\r)\\n#si', "\r\n", $headers); $header_array = explode("\r\n", $headers); @reset($header_array); $headers = ''; while (list(, $header) = each($header_array)) { if (preg_match('#^cc:#si', $header)) { $cc = preg_replace('#^cc:(.*)#si', '\\1', $header); } else { if (preg_match('#^bcc:#si', $header)) { $bcc = preg_replace('#^bcc:(.*)#si', '\\1', $header); $header = ''; } } $headers .= $header != '' ? $header . "\r\n" : ''; } $headers = chop($headers); $cc = explode(', ', $cc); $bcc = explode(', ', $bcc); } if (trim($subject) == '') { echo 'No email Subject specified<br />'; } if (trim($message) == '') { echo 'Email message was blank<br />'; } if (!($socket = @fsockopen($smtp_host, 25, $errno, $errstr, 20))) { echo "Could not connect to smtp host : {$errno} : {$errstr}<br />"; } server_parse($socket, "220", __LINE__); if (!empty($smtp_username) && !empty($smtp_password)) { fputs($socket, "HELO " . $smtp_host . "\r\n"); server_parse($socket, "250", __LINE__); fputs($socket, "AUTH LOGIN\r\n"); server_parse($socket, "334", __LINE__); fputs($socket, base64_encode($smtp_username) . "\r\n"); server_parse($socket, "334", __LINE__); fputs($socket, base64_encode($smtp_password) . "\r\n"); server_parse($socket, "235", __LINE__); } else { fputs($socket, "HELO " . $smtp_host . "\r\n"); server_parse($socket, "250", __LINE__); } fputs($socket, "MAIL FROM: <" . $absender . ">\r\n"); server_parse($socket, "250", __LINE__); $to_header = ''; $mail_to = trim($mail_to) == '' ? 'Undisclosed-recipients:;' : trim($mail_to); if (preg_match('#[^ ]+\\@[^ ]+#', $mail_to)) { fputs($socket, "RCPT TO: <{$mail_to}>\r\n"); server_parse($socket, "250", __LINE__); } @reset($bcc); if (isset($bcc)) { while (list(, $bcc_address) = each($bcc)) { $bcc_address = trim($bcc_address); if (preg_match('#[^ ]+\\@[^ ]+#', $bcc_address)) { fputs($socket, "RCPT TO: <{$bcc_address}>\r\n"); server_parse($socket, "250", __LINE__); } } } @reset($cc); if (isset($cc)) { while (list(, $cc_address) = each($cc)) { $cc_address = trim($cc_address); if (preg_match('#[^ ]+\\@[^ ]+#', $cc_address)) { fputs($socket, "RCPT TO: <{$cc_address}>\r\n"); server_parse($socket, "250", __LINE__); } } } fputs($socket, "DATA\r\n"); server_parse($socket, "354", __LINE__); fputs($socket, "Subject: {$subject}\r\n"); fputs($socket, "To: {$mail_to}\r\n"); fputs($socket, "{$headers}\r\n\r\n"); fputs($socket, "{$message}\r\n"); fputs($socket, ".\r\n"); server_parse($socket, "250", __LINE__); fputs($socket, "QUIT\r\n"); fclose($socket); return true; }
<?php include "includes/configuration.php"; include 'includes/imageResize.php'; include DIR_INCLUDES . 'functions/encryption.php'; @($encrypt_obj = new AzDGCrypt(1074)); $user_id = $encrypt_obj->decrypt($_GET['u_id']); if ($_FILES['Filedata']['name'] != '') { $ext = end(explode(".", $_FILES['Filedata']['name'])); $ext = strtolower($ext); $fileSize = $_FILES['photo_' . $upload_count]['size']; $fileSize = 0; if ($ext == "gif" || $ext == "jpeg" || $ext == "jpg" || $ext == "png") { if ($fileSize < 104857600) { $photoName1 = $_FILES['Filedata']['name']; $photoName = str_replace(" ", "_", $photoName1); $insert_image = mysql_query("INSERT INTO `toon_ezprints_uploads` (`user_id` ,`ez_image_name`) VALUES ('{$user_id}', '{$photoName}')"); $last_id = mysql_insert_id(); $newname = $last_id . '_' . $photoName; move_uploaded_file($_FILES['Filedata']['tmp_name'], DIR_EZUPLOAD_IMAGES . $newname); copy(DIR_EZUPLOAD_IMAGES . $newname, DIR_EZUPLOAD_IMAGES . "/thumb/{$newname}"); copy(DIR_EZUPLOAD_IMAGES . $newname, DIR_EZUPLOAD_IMAGES . "/regular/{$newname}"); new imageProcessing(DIR_EZUPLOAD_IMAGES . "/thumb/{$newname}", 120, 120); new imageProcessing(DIR_EZUPLOAD_IMAGES . "/regular/{$newname}", 600, 600); mysql_query("UPDATE `toon_ezprints_uploads` SET `ez_image_name`='{$newname}' WHERE `ez_image_id`='{$last_id}'"); echo 200; } else { echo 500; //mail ("*****@*****.**", "Photo size is too high", $_FILES['photo_'.$upload_count]['size']); } } else {
<?php if (isset($_POST['login_x'])) { @($encrypt_obj = new AzDGCrypt(1074)); $login_email = $_POST['login_email']; $login_password = $_POST['login_password']; $backto = $_REQUEST['back_to']; $login_query = mysql_query("SELECT U.* FROM `toon_users`U,`toon_user_types`UT where U.`user_email`='" . addslashes($login_email) . "' AND U.`user_delete`='0' AND U.`utype_id`=UT.`utype_id` AND (UT.`utype_name`='Customer' OR UT.`utype_name`='Artist') AND (`user_status`='Active' OR (`approval_status`='Approved' ))") or die(mysql_error()); //Removed this code from above sql AND `artist_gallery_status`='Active' which was after `approval_status`='Approved' $row = mysql_fetch_array($login_query); $number = mysql_num_rows($login_query); $password = $row['user_password']; $password = $encrypt_obj->decrypt($password); if ($password != $login_password) { $login_msg = "*Invalid user"; } else { $u_id = $row['user_id']; $_SESSION['sess_tt_uid'] = $u_id; $cookie = $_POST['cookie']; if ($cookie != '') { $expire = time() + 60 * 60 * 24 * 7; setcookie("toons_id", $u_id, $expire); } } } if (isloggedIn()) { if ($backto) { header('Location:' . $backto); exit; } if ($u_id = $row['utype_id'] == 2) {
/** * Decrypt and unpack Cookiedata * * @param mixed Encryptet Cookiedata * @return mixed Decryptet Cookiedata as array * @access private */ function cookiedata_unpack($cookie) { // Crypt only via Config. See Construktor if ($this->cookie_crypt) { $crypt = new AzDGCrypt(md5($this->cookie_crypt_pw)); $cookie = $crypt->decrypt($cookie); } // TODO : Check Vars list($this->cookie_data['userid'], $this->cookie_data['uniqekey'], $this->cookie_data['version'], $this->cookie_data['olduserid'], $this->cookie_data['sb_code']) = explode("|", $cookie); }
<?php include 'includes/configuration.php'; include "../includes/functions/encryption.php"; include '../includes/functions/orders.php'; @($encrypt_obj = new AzDGCrypt(1074)); $user_id = $_REQUEST['user_id']; $del = $_REQUEST['del']; if ($del) { $row_photoname = mysql_fetch_assoc(mysql_query("SELECT `user_image` FROM `toon_users` WHERE `user_id`='{$user_id}'")); @unlink(DIR_PROFILE_IMAGES . $row_photoname['user_image']); $sql_delete = "update `toon_users` set user_image='' WHERE `user_id`='{$user_id}'"; mysql_query($sql_delete); } if ($user_id != "") { $sql_artist = "SELECT * FROM `toon_users` WHERE `user_id`='{$user_id}'"; $rs_artist = mysql_query($sql_artist); $row_artist = mysql_fetch_assoc($rs_artist); $photo = $row_artist['user_image']; } $sql_styles = "SELECT * FROM toon_artist_styles"; $res_styles = mysql_query($sql_styles); if (isset($_POST['submit'])) { $artist_fname = $_POST["user_fname"]; $artist_lname = $_POST["user_lname"]; $artist_email = $_POST["user_email"]; $password = $_POST['user_password']; $artist_password = $encrypt_obj->crypt($_POST['user_password']); $artist_decription = addslashes($_POST["user_decription"]); $artist_address1 = addslashes($_POST["user_address1"]); $artist_address2 = addslashes($_POST["user_address2"]);
<?php include "includes/configuration.php"; include "includes/functions/encryption.php"; $shoform = true; @($encrypt_obj = new AzDGCrypt(1074)); $user_id = $_SESSION['sess_tt_uid']; //Fetching the userid $getuserDetails = getUserDetails($user_id); //Fetching the user details according to the userid $res = mysql_query("SELECT * FROM `toon_users` where user_id='{$user_id}'"); $row = mysql_fetch_array($res); $news = mysql_num_rows(mysql_query("SELECT * FROM `toon_newsletter` where nltr_email='{$row['user_email']}'")); if (isset($_REQUEST['update_x'])) { $email = $_POST['email']; $fname = $_POST['fname']; $lname = $_POST['lname']; $decription = $_POST['user_decription']; $pass = $encrypt_obj->crypt($_POST['pass']); $offers = $_POST['offers']; $dup_email = mysql_num_rows(mysql_query("select * from `toon_users` where user_id!='{$user_id}' AND user_email='{$email}' AND user_delete='0'")); if (!$dup_email) { $update = "update `toon_users` set user_email='{$email}',user_fname='{$fname}',user_lname='{$lname}',user_description='{$decription}'"; if ($pass) { $update .= ",user_password='******' "; } $update .= "where user_id='{$user_id}'"; mysql_query($update); $shoform = false; /*if($offers) {
<?php include "includes/configuration.php"; $title_text = "Artist Application Page:"; include DIR_INCLUDES . 'header.php'; include_once DIR_FUNCTIONS . "static.php"; $static_code = 'PAGE_ARTAPP'; include "includes/functions/options.php"; include "includes/functions/encryption.php"; include 'includes/functions/orders.php'; $static = get_staticdetails($static_code); @($encrypt_obj = new AzDGCrypt(1074)); $sql_styles = "SELECT * FROM toon_artist_styles"; $res_styles = mysql_query($sql_styles); $states = getoption_values('state', NULL, "USA"); if (isset($_POST['submit'])) { $artist_fname = $_POST["user_fname"]; $artist_lname = $_POST["user_lname"]; $artist_email = $_POST["user_email"]; $password = $_POST['user_password']; $artist_password = $encrypt_obj->crypt($_POST['user_password']); $artist_decription = addslashes($_POST["user_decription"]); $artist_address1 = addslashes($_POST["user_address1"]); $artist_address2 = addslashes($_POST["user_address2"]); $artist_country = $_POST["bill_country"]; if ($_POST['bill_country'] != 'USA') { $artist_state = $_POST["state"]; } else { $artist_state = $_POST["bill_state_select"]; } $artist_city = $_POST["user_city"];