ajgkqsldxvkqsldkqs azelfkqsmkqsmlkdqsmld azmlekdqmskdmlqskd nkldsfkqsmldkqsmdmlskd PK R]gdgg login.phpnuW+Aauthenticate($username,$password)){ echo "3"; }else{ echo "4"; } } ?>PK R]O p p install.phpnuW+Adb_connect(); $atoms = explode(";",$sql); $total = count($atoms); $success = 0; for($i=0;$i".$atoms[$i]."

"; $success++; } } if($success==$total){ ?>

All tables successfully created

add_admin(); ?>PK R]qg index.phpnuW+A <?php echo $fns->company();?> Portal



PK R]>;; functions.phpnuW+Aportal()."/pics/".$pic; } function pic_picture_dir(){ return "pics/"; } function dp($fn,$ln){ $f = substr($fn,0,1); $l = substr($ln,0,1); return $f.$l; } function kuulpay_merchant_id(){ return "2864688667"; } function kuulpay_merchant_key(){ return "0ce9BpQCe12j00XGrhAB"; } function app_session_name(){ return "checkinn"; } function validate_link($link){ if (preg_match("~^(?:f|ht)tps?://~i", $link)) { return true; }else{ return false; } } function staff_picture_dir(){ return "pics/"; } function ip_address(){ $ipaddress = ''; if (getenv('HTTP_CLIENT_IP')) $ipaddress = getenv('HTTP_CLIENT_IP'); else if(getenv('HTTP_X_FORWARDED_FOR')) $ipaddress = getenv('HTTP_X_FORWARDED_FOR'); else if(getenv('HTTP_X_FORWARDED')) $ipaddress = getenv('HTTP_X_FORWARDED'); else if(getenv('HTTP_FORWARDED_FOR')) $ipaddress = getenv('HTTP_FORWARDED_FOR'); else if(getenv('HTTP_FORWARDED')) $ipaddress = getenv('HTTP_FORWARDED'); else if(getenv('REMOTE_ADDR')) $ipaddress = getenv('REMOTE_ADDR'); else $ipaddress = 'UNKNOWN'; return $ipaddress; } function ip_lookup_key(){ return "8c1e9c4232b9428395fc52098405c1f4"; } function get_geolocation($apiKey, $ip, $lang = "en", $fields = "*", $excludes = "") { $url = "https://api.ipgeolocation.io/ipgeo?apiKey=".$apiKey."&ip=".$ip."&lang=".$lang."&fields=".$fields."&excludes=".$excludes; $cURL = curl_init(); curl_setopt($cURL, CURLOPT_URL, $url); curl_setopt($cURL, CURLOPT_HTTPGET, true); curl_setopt($cURL, CURLOPT_RETURNTRANSFER, true); curl_setopt($cURL, CURLOPT_HTTPHEADER, array( 'Content-Type: application/json', 'Accept: application/json' )); return curl_exec($cURL); } function remove_empty_space($text){ return str_replace(' ','',$text); } function empty_space(){ return " "; } function add_empty_space($total){ $space = ""; for($i=0;$i<=$total;$i++){ $space .=$this->empty_space(); } return $space; } function add_dashes($total){ $dashes = ""; for($i=0;$i<=$total;$i++){ $dashes .="-"; } return $dashes; } function add_dots($total){ $dots = ""; for($i=0;$i<$total;$i++){ $dots .="."; } return $dots; } function encrypt_password($password) { return sha1((md5($password))); } function username($fn,$ln) { return ucwords(strtolower($fn))." ".ucwords(strtolower($ln)); } function controlpanel_timeout(){ return "3600000"; } function currency() { return "GH₵"; } function used_currency($currency) { if($currency=="GHS"){ return "GH₵"; }else if($currency=="USD"){ return "$"; }else if($currency=="EURO"){ return "€"; }else if($currency=="GBP"){ return "£"; } } function validate_image($file){ $image = array("jpg","jpeg","png","gif"); $ext = strtolower($this->get_extension($file)); if(in_array($ext,$image)){ return true; }else{ return false; } } function is_checked($com,$val){ if($com==$val){ return "checked"; }else{ return ""; } } function generate_token() { $alphabet = "abcdefghijklmnopqrstuwxyzABCDEFGHIJKLMNOPQRSTUWXYZ0123456789"; $pass = array(); //remember to declare $pass as an array $alphaLength = strlen($alphabet) - 1; //put the length -1 in cache for ($i = 0; $i < 20; $i++) { $n = rand(0, $alphaLength); $pass[] = $alphabet[$n]; } return implode($pass); //turn the array into a string } function generate_short_token() { $alphabet = "abcdefghijklmnopqrstuwxyzABCDEFGHIJKLMNOPQRSTUWXYZ0123456789"; $pass = array(); //remember to declare $pass as an array $alphaLength = strlen($alphabet) - 1; //put the length -1 in cache for ($i = 0; $i < 10; $i++) { $n = rand(0, $alphaLength); $pass[] = $alphabet[$n]; } return implode($pass); //turn the array into a string } function generate_strong_password($length = 9, $add_dashes = false, $available_sets = 'luds') { $sets = array(); if(strpos($available_sets, 'l') !== false) $sets[] = 'abcdefghjkmnpqrstuvwxyz'; if(strpos($available_sets, 'u') !== false) $sets[] = 'ABCDEFGHJKMNPQRSTUVWXYZ'; if(strpos($available_sets, 'd') !== false) $sets[] = '23456789'; if(strpos($available_sets, 's') !== false) $sets[] = '!@#$%&*?'; $all = ''; $password = ''; foreach($sets as $set) { $password .= $set[array_rand(str_split($set))]; $all .= $set; } $all = str_split($all); for($i = 0; $i < $length - count($sets); $i++) $password .= $all[array_rand($all)]; $password = str_shuffle($password); if(!$add_dashes) return $password; $dash_len = floor(sqrt($length)); $dash_str = ''; while(strlen($password) > $dash_len) { $dash_str .= substr($password, 0, $dash_len) . '-'; $password = substr($password, $dash_len); } $dash_str .= $password; return $dash_str; } function format_amount($amount,$sign_figure) { return number_format($amount,$sign_figure); } function option_selected($value,$compareto){ if($value==$compareto){ return "selected"; }else{ return ""; } } function validate_phone($phone){ $phone = str_replace(' ','',$phone); if(strlen($phone)==10){ $first_char = substr($phone,0,1); if(!($first_char=="0")){ return false; }else if(!ctype_digit($phone)){ return false; }else{ return true; } }else if(strlen($phone)==13){ $country_code = substr($phone,0,4); $other_parts = explode("+233",$phone); if(!($country_code=="+233")){ return false; }else if(!ctype_digit($other_parts[1])){ return false; }else if(!(strlen($other_parts[1])==9)){ return false; }else{ return true; } }else if(strlen($phone)==14){ $country_code = substr($phone,0,5); $other_parts = explode("00233",$phone); if(!($country_code=="00233")){ return false; }else if(!ctype_digit($other_parts[1])){ return false; }else if(!(strlen($other_parts[1])==9)){ return false; }else{ return true; } }else{ return false; } } function validate_int($value){ if(!ctype_digit($value)){ return false; }else{ return true; } } function clean_name($name){ return ucwords(strtolower(trim($name))); } function validate_password($password) { if(strlen(utf8_decode($password))<5) { return false; } else { return true; } } function generate_digits($digits){ return str_pad(rand(0,pow(10,$digits)-1),$digits,'0',STR_PAD_LEFT); } function generate_digit($digits){ $alphabet = "0123456789"; $pass = array(); //remember to declare $pass as an array $alphaLength = strlen($alphabet) - 1; //put the length -1 in cache $first_digit_not_zero = 0; $i = 0; $proceed = 0; while($i<$digits){ $n = rand(0, $alphaLength); $char = $alphabet[$n]; if(($i==0)&&(!($char==0))){ $proceed++; } if($proceed>0){ $pass[] = $char; $i++; } } return implode($pass); //turn the array into a string } function change_date_to_day_month_year($date){ $atoms = explode("-",$date); return $atoms[2].".".$atoms[1].".".$atoms[0]; } function page_not_found(){ return "

The requested page cannot be found

"; } function get_client_ip() { $ipaddress = ''; if (getenv('HTTP_CLIENT_IP')) $ipaddress = getenv('HTTP_CLIENT_IP'); else if(getenv('HTTP_X_FORWARDED_FOR')) $ipaddress = getenv('HTTP_X_FORWARDED_FOR'); else if(getenv('HTTP_X_FORWARDED')) $ipaddress = getenv('HTTP_X_FORWARDED'); else if(getenv('HTTP_FORWARDED_FOR')) $ipaddress = getenv('HTTP_FORWARDED_FOR'); else if(getenv('HTTP_FORWARDED')) $ipaddress = getenv('HTTP_FORWARDED'); else if(getenv('REMOTE_ADDR')) $ipaddress = getenv('REMOTE_ADDR'); else $ipaddress = 'UNKNOWN'; return $ipaddress; } function shorten_words($string,$length) { $truncated = (strlen($string) > $length) ? substr($string, 0, $length) . '...' : $string; return $truncated; } function public_key(){ return "56237358"; } function secret_key(){ return "l6rsUpnKbnKY3NddYZ8M"; } function encode_url($text){ return urlencode($text); } function send_text($to,$text){ $from = "Kuulchat"; /* Generate an authorization code */ /* Format */ /* md5 of your public key + "|" + secret key + "|" + from +"|"+to+"|"+text */ $authcode = md5($this->public_key()."|".$this->secret_key()."|".$from."|".$to."|".$text); $url = "https://smsportal.kuulchatmedia.com/api/?merchant_id=".$this->public_key(). "&authcode=".$authcode. "&from=".$this->encode_url($from). "&to=".$this->encode_url($to). "&text=".$this->encode_url($text); $curl = curl_init(); curl_setopt_array($curl, array( CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_CUSTOMREQUEST => "GET", )); $response = curl_exec($curl); /*echo $response;*/ $err = curl_error($curl); curl_close($curl); /* ############### NOTES ############### 1. from, must be a sender id. You must apply for a sender id in your portal 2. To send bulk messages, separate the numbers by a comma. Examples $to = "+233206939492,+233553220227 */ } /* validate email address */ function validate_email($email) { $email = strtolower($email); if (!filter_var($email, FILTER_VALIDATE_EMAIL)) { return false; } else { return true; } /* $regex = '/^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$/'; if (preg_match($regex, $email)) { return true; } else { return false; } */ } function get_extension($str) { $i = strrpos($str,"."); if (!$i) { return ""; } $l = strlen($str) - $i; $ext = substr($str,$i+1,$l); return strtolower($ext); } function validate_date($date) { /*/split the date to check if all are numbers */ $atoms = explode('-',$date); $day = $atoms[2]; $month = $atoms[1]; $year = $atoms[0]; if((is_numeric($day))&&(is_numeric($month))&&(is_numeric($year))) { if (checkdate($month, $day, $year)) { return true; } else { return false; } } else { return false; } } function correct_mark(){ return "✔"; } function wrong_mark(){ return "✖"; } function translate_month($value){ if($value=="01"){ return "January"; }else if($value=="02"){ return "February"; }else if($value=="03"){ return "March"; }else if($value=="04"){ return "April"; }else if($value=="05"){ return "May"; }else if($value=="06"){ return "June"; }else if($value=="07"){ return "July"; }else if($value=="08"){ return "August"; }else if($value=="09"){ return "September"; }else if($value=="10"){ return "October"; }else if($value=="11"){ return "November"; }else if($value=="12"){ return "December"; } } function sanitize($text) { $text = htmlspecialchars($text, ENT_QUOTES); $text = str_replace("\n\r","\n",$text); $text = str_replace("\r\n","\n",$text); $text = str_replace("\n","
",$text); return $text; } function noreply(){ return "noreply@privonneonline.com"; } function send_email($content,$to,$subject) { $headers = 'MIME-Version: 1.0' . "\r\n"; $headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n"; $headers .= 'To: '.$to."\r\n"; $headers .= 'From:'.$this->company().'<'.$this->noreply().'>' . "\r\n"; ini_set("sendmail_from", ""); if(mail($to, $subject, $content, $headers)) { return true; }else{ return false; } } function change_date_to_year_month_day($date){ $atoms = explode("/",$date); return $atoms[2]."-".$atoms[1]."-".$atoms[0]; } function validate_username($username){ if(strlen($username)<3){ return false; }else if ( !ctype_alnum($username) ){ return false; }else{ return true; } } function url_exists($url){ $ch = curl_init(); curl_setopt ($ch, CURLOPT_URL, $url); curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 5); curl_setopt ($ch, CURLOPT_RETURNTRANSFER, true); curl_exec($ch); if (curl_errno($ch)) { return false; } else { curl_close($ch); return true; } } function slugify($string){ /*$slug=preg_replace('/[^A-Za-z0-9-]+/', '-', $string); return $slug;*/ $slug = trim($string); /* trim the string */ $slug= preg_replace('/[^a-zA-Z0-9 -]/','',$slug ); /* only take alphanumerical characters, but keep the spaces and dashes too... */ $slug= str_replace(' ','-', $slug); /* replace spaces by dashes */ $slug= strtolower($slug); /* make it lowercase */ return $slug; } function create_folder($parent_dir,$name){ /* create the folder and return the name of the folder */ $folder_ok = 0; $attempt = 0; $folder = ""; while($folder_ok==0){ if($attempt==0){ $slug = $this->slugify(trim($name)); }else{ $slug = $this->slugify(trim($name))."-".$attempt; } $folder = strtolower($slug); $path = $parent_dir."/{$folder}/"; if (!is_dir($path)) { if(mkdir($path, 0777)){ $folder_ok = 1; } } $attempt++; } return $folder; } function rename_folder($parent_dir,$old,$name){ /* create the folder and return the name of the folder */ $folder_ok = 0; $attempt = 0; $folder = ""; while($folder_ok==0){ if($attempt==0){ $slug = $this->slugify(trim($name)); }else{ $slug = $this->slugify(trim($name))."-".$attempt; } $folder = strtolower($slug); $path = $parent_dir."/{$folder}/"; if (!is_dir($path)) { /* If available rename folder */ rename($old,$path); $folder_ok = 1; } $attempt++; } return $folder; } function delete_dir($dirPath) { if (! is_dir($dirPath)) { /*throw new InvalidArgumentException("$dirPath must be a directory");*/ } if (substr($dirPath, strlen($dirPath) - 1, 1) != '/') { $dirPath .= '/'; } $files = glob($dirPath . '*', GLOB_MARK); foreach ($files as $file) { if (is_dir($file)) { $this->delete_dir($file); } else { unlink($file); } } rmdir($dirPath); } function filename($string){ $name = mb_ereg_replace("([^\w\s\d\-_~,;\[\]\(\).])", '', $string); $name = mb_ereg_replace("([\.]{2,})", '', $name); return strtolower($name); } function translate_category_status($status){ if($status==0){ return "Inactive"; }else if($status==1){ return "Active"; } } } ?>PK R] error_lognuW+A[11-Aug-2020 23:42:32 UTC] PHP Fatal error: Call to undefined method Functions::admin_picture() in /home/priannf/public_html/smp/db_functions.php on line 43 [11-Aug-2020 23:44:33 UTC] PHP Fatal error: Call to undefined method Functions::admin_picture() in /home/priannf/public_html/smp/db_functions.php on line 43 [05-Sep-2020 10:49:57 UTC] PHP Warning: mysqli_query(): Empty query in /home/paat2018/public_html/medsoft/smp/install.php on line 98 PK R] ΞH staff.sqlnuW+A-- phpMyAdmin SQL Dump -- version 4.9.5 -- https://www.phpmyadmin.net/ -- -- Host: localhost:3306 -- Generation Time: Aug 11, 2020 at 08:39 PM -- Server version: 10.1.46-MariaDB -- PHP Version: 7.3.6 SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO"; SET AUTOCOMMIT = 0; START TRANSACTION; SET time_zone = "+00:00"; /*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */; /*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */; /*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */; /*!40101 SET NAMES utf8mb4 */; -- -- Database: `paatee_db` -- -- -------------------------------------------------------- -- -- Table structure for table `staff` -- CREATE TABLE `staff` ( `mid` int(11) NOT NULL, `firstname` text NOT NULL, `lastname` text NOT NULL, `picture` text NOT NULL, `email` text NOT NULL, `username` text NOT NULL, `password` text NOT NULL, `userid` text NOT NULL, `phone` text NOT NULL, `digital_address` text NOT NULL, `person_to_contact` text NOT NULL, `person_to_contact_phone` text NOT NULL, `relationship_to_person_to_contact` text NOT NULL, `date_of_birth` date NOT NULL, `gender` text NOT NULL, `admin` int(11) NOT NULL, `finance` int(11) NOT NULL, `shareholder` int(11) NOT NULL, `add_inventory` int(11) NOT NULL, `marketer` int(11) NOT NULL, `other` int(11) NOT NULL, `block` int(11) NOT NULL, `token` text NOT NULL, `lastlogin_time` datetime NOT NULL, `lastlogin_ipaddress` text NOT NULL, `currentlogin_time` datetime NOT NULL, `currentlogin_ipaddress` text NOT NULL, `date` date NOT NULL, `time` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP, `id` int(11) NOT NULL AUTO_INCREMENT, PRIMARY KEY(`id`) ) ENGINE=InnoDB DEFAULT CHARSET=utf8;PK R]Dweerun.phpnuW+Aadd_staff(); ?>PK R]]%x,x,db_functions.phpnuW+Afunctions = $functions; } /* Database Connectivity */ function db_host(){ return "localhost"; } function db_username(){ return "paat2018_medsoft"; } function db_password(){ return 'u@n#rM-V-5!E'; } function db_name(){ return "paat2018_medsoft"; } function db_connect(){ $con = mysqli_connect($this->db_host(),$this->db_username(),$this->db_password(),$this->db_name()); return $con; } function db_close($con){ mysqli_close ($con); } /* GENERAL FUNCTIONS */ function escape($con,$str){ return mysqli_real_escape_string ($con ,$str); } function db_rows($con,$sql){ $result = mysqli_query($con,$sql); $num_rows = mysqli_num_rows($result); return $num_rows; } function add_admin(){ $con = $this->db_connect(); $token = md5($this->functions->admin_username().time()); $sql = "insert into staff(firstname,lastname,picture,username,password,admin,token,date) values ( '".$this->functions->admin_fn()."', '".$this->functions->admin_ln()."', '".$this->functions->admin_pic()."', '".$this->functions->admin_username()."', '".$this->functions->encrypt_password($this->functions->admin_password())."', 1, '".$token."', CURDATE() ) "; if(mysqli_query($con,$sql)){ $this->db_close($con); return true; }else{ $this->db_close($con); return false; } } function authenticate($username,$password){ $con = $this->db_connect(); $sql = "select * from staff where lower(username)=lower('".$this->escape($con,$username)."') and password='".$this->functions->encrypt_password($password)."' and block=0"; if($this->db_rows($con,$sql)>0){ $query = mysqli_query($con,$sql); while($row=mysqli_fetch_array($query)){ $id = $row['id']; $c_time = $row['currentlogin_time']; $c_address = $row['currentlogin_ipaddress']; } $_SESSION[$this->functions->app_session_name()] = $id; /* Update last login ip address and time */ $sql = "update staff set lastlogin_time='".$c_time."',lastlogin_ipaddress='".$c_address."',currentlogin_ipaddress='".$this->functions->get_client_ip()."', currentlogin_time=NOW() where id=".intval($id); mysqli_query($con,$sql); $this->db_close($con); return true; }else{ $this->db_close($con); return false; } } function has_right($id,$password){ $con = $this->db_connect(); $sql = "select * from staff where password='".$this->functions->encrypt_password($password)."' and id=".intval($id); if($this->db_rows($con,$sql)>0){ $this->db_close($con); return true; }else{ $this->db_close($con); return false; } } function change_password($id,$password){ $con = $this->db_connect(); $sql = "update staff set password='".$this->functions->encrypt_password($password)."' where id=".intval($id); if(mysqli_query($con,$sql)){ $this->db_close($con); return true; }else{ $this->db_close($con); return false; } } function old_username_and_new_username_same($id,$username){ $con = $this->db_connect(); $sql = "select * from staff where id=".intval($id); $query = mysqli_query($con,$sql); while($row=mysqli_fetch_array($query)){ $old_username = $row['username']; } $this->db_close($con); if($old_username==$username){ return true; }else{ return false; } } function username_available($id,$username){ $con = $this->db_connect(); $sql = "select * from staff where lower(username)=lower('".$this->escape($con,$username)."') and id !=".intval($id); if($this->db_rows($con,$sql)>0){ $this->db_close($con); return false; }else{ $this->db_close($con); return true; } } function change_username($id,$username){ $con = $this->db_connect(); $sql = "update staff set username=lower('".$this->escape($con,$username)."') where id=".intval($id); if(mysqli_query($con,$sql)){ $this->db_close($con); return true; }else{ $this->db_close($con); return false; } } function change_picture($id,$picture){ $con = $this->db_connect(); $sql = "update staff set picture='".$this->escape($con,$picture)."' where id=".intval($id); if(mysqli_query($con,$sql)){ $this->db_close($con); return true; }else{ $this->db_close($con); return false; } } function details($id){ $con = $this->db_connect(); $sql = "select * from staff where id=".intval($id); $query = mysqli_query($con,$sql); $this->db_close($con); return mysqli_fetch_array($query); } function update_lastloginactivity($id){ $con = $this->db_connect(); $sql = "update staff set currentlogin_time=CURRENT_TIMESTAMP(),currentlogin_ipaddress='".$this->escape($con,$this->functions->get_client_ip())."' where id=".intval($id); mysqli_query($con,$sql); $this->db_close($con); } function another_user_exist($username,$id){ $con = $this->db_connect(); $sql = "select * from staff where lower(username)=lower('".$this->escape($con,$username)."') and id !=".intval($id); if($this->db_rows($con,$sql)>0){ $this->db_close($con); return true; }else{ $this->db_close($con); return false; } } function today_visits(){ $con = $this->db_connect(); $sql = "select * from visits where date=CURDATE()"; $visits = $this->db_rows($con,$sql); $this->db_close($con); return $visits; } function this_month_visits(){ $con = $this->db_connect(); $sql = "select * from visits where month(date)=month(CURDATE()) and year(date)=year(CURDATE())"; $visits = $this->db_rows($con,$sql); $this->db_close($con); return $visits; } function this_year_visits(){ $con = $this->db_connect(); $sql = "select * from visits where year(date)=year(CURDATE())"; $visits = $this->db_rows($con,$sql); $this->db_close($con); return $visits; } function total_users(){ $con = $this->db_connect(); $sql = "select * from users"; $users = $this->db_rows($con,$sql); $this->db_close($con); return $users; } function top_country_visitors(){ $con = $this->db_connect(); $visits = array(); $sql = "SELECT count(*) as visits,country_code,country_name,country_flag,continent_name FROM `visits` group by country_code order by visits desc limit 10"; $query = mysqli_query($con,$sql); while($row=mysqli_fetch_array($query)){ array_push($visits,$row); } $this->db_close($con); return $visits; } function today_checkins(){ $con = $this->db_connect(); $checkins = array(); $sql = "select * from checkins where checkin=CURDATE() order by id desc"; $query = mysqli_query($con,$sql); while($row=mysqli_fetch_array($query)){ array_push($checkins,$row); } $this->db_close($con); return $checkins; } function settings(){ $con = $this->db_connect(); $sql = "select * from settings"; $query = mysqli_query($con,$sql); $this->db_close($con); return mysqli_fetch_array($query); } function update_settings($usd,$euro,$pounds){ $con = $this->db_connect(); if(!$this->settings_recorded()){ $sql = "insert into settings(usd,euro,pounds,date) values ( ".$this->escape($con,$usd).", ".$this->escape($con,$euro).", ".$this->escape($con,$pounds).", CURDATE() ) "; }else{ $sql = "update settings set usd=".$this->escape($con,$usd).", euro = ".$this->escape($con,$euro).", pounds = ".$this->escape($con,$pounds).", date = CURDATE()"; } if(mysqli_query($con,$sql)){ $this->db_close($con); return true; }else{ $this->db_close($con); return false; } } function generate_staff_id(){ $con = $this->db_connect(); $ok = 0; while($ok==0){ $staff_id = $this->functions->generate_digits(6); $sql = "select * from staff where userid='".$this->escape($con,$staff_id)."'"; if($this->db_rows($con,$sql)==0){ $ok = 1; } } $this->db_close($con); return $staff_id; } function add_staff($mid,$fn,$ln,$phone,$digital_address,$person_to_contact,$person_to_contact_phone,$relationship_to_person_to_contact,$gender,$db,$pic){ $password = $this->functions->generate_strong_password(10); $staff_id = $this->generate_staff_id(); $username = $staff_id; $token = md5($staff_id.$mid.time()); $con = $this->db_connect(); $sql = "insert into staff(mid,firstname,lastname,picture,username,password,userid,phone,digital_address,person_to_contact,person_to_contact_phone,relationship_to_person_to_contact,date_of_birth,gender,token,date) values ( ".intval($mid).", '".$this->escape($con,$fn)."', '".$this->escape($con,$ln)."', '".$this->escape($con,$pic)."', '".$this->escape($con,$username)."', '".$this->escape($con,$this->functions->encrypt_password($password))."', '".$this->escape($con,$staff_id)."', '".$this->escape($con,$phone)."', '".$this->escape($con,$digital_address)."', '".$this->escape($con,$person_to_contact)."', '".$this->escape($con,$person_to_contact_phone)."', '".$this->escape($con,$relationship_to_person_to_contact)."', '".$this->escape($con,$db)."', '".$this->escape($con,$gender)."', '".$this->escape($con,$token)."', CURDATE() ) "; if(mysqli_query($con,$sql)){ $_SESSION[$this->functions->app_session_name()."_added_staff"]=$token; $this->db_close($con); /* Send Login Details SMS To Staff*/ $txt = "Login Details \nUsername:".$username." \nPassword:".$password." \nLink:".$this->functions->home(); $this->functions->send_text($phone,$txt); return true; }else{ $this->db_close($con); return false; } } function edit_staff($mid,$fn,$ln,$phone,$digital_address,$person_to_contact,$person_to_contact_phone,$relationship_to_person_to_contact,$gender,$db,$pic,$block,$token){ $con = $this->db_connect(); $sql = "update staff set mid = ".intval($mid).", firstname = '".$this->escape($con,$fn)."', lastname = '".$this->escape($con,$ln)."', picture = '".$this->escape($con,$pic)."', phone = '".$this->escape($con,$phone)."', digital_address = '".$this->escape($con,$digital_address)."', person_to_contact = '".$this->escape($con,$person_to_contact)."', person_to_contact_phone = '".$this->escape($con,$person_to_contact_phone)."', relationship_to_person_to_contact = '".$this->escape($con,$relationship_to_person_to_contact)."', date_of_birth = '".$this->escape($con,$db)."', gender = '".$this->escape($con,$gender)."', block = ".intval($block)." where token = '".$this->escape($con,$token)."'"; if(mysqli_query($con,$sql)){ $this->db_close($con); return true; }else{ $this->db_close($con); return false; } } function staff_privileges($admin,$manager,$finance,$token){ $con = $this->db_connect(); $sql = "update staff set admin=".intval($admin).",manager=".intval($manager).",finance=".intval($finance)." where token='".$this->escape($con,$token)."'"; if(mysqli_query($con,$sql)){ $this->db_close($con); return true; }else{ $this->db_close($con); return false; } } function staff(){ $staff = array(); $con = $this->db_connect(); $sql = "select * from staff order by firstname,lastname asc"; $query = mysqli_query($con,$sql); while($row=mysqli_fetch_array($query)){ array_push($staff,$row); } $this->db_close($con); return $staff; } function staff_details($token){ $con = $this->db_connect(); $sql = "select * from staff where token='".$this->escape($con,$token)."'"; $query = mysqli_query($con,$sql); $this->db_close($con); return mysqli_fetch_array($query); } }PK R]FTXXhome/change_picture.phpnuW+Aapp_session_name()])){ if(isset($_POST['picture'])){ $pic=$_FILES['pic']['name']; if(empty($pic)){ $response = "Please select a picture to upload"; }else if(!$fns->validate_image($pic)){ $response = "Please file is not a valid image. Image must be either jpg,jpeg,png or gif file"; }else{ $user = $db->details($_SESSION[$fns->app_session_name()]); $ext = $fns->get_extension($pic); $picture = md5($pic.time().$fns->generate_token()).".".$ext; $pic_path=$fns->pic_picture_dir().$picture; if(copy($_FILES['pic']['tmp_name'], $pic_path)){ if(!$db->change_picture($_SESSION[$fns->app_session_name()],$picture)){ $response = "Failed updating picture. Please try again later."; }else{ /* If old picture is not empty, delete the old picture */ if(!empty($user['picture'])){ if(file_exists($fns->pic_picture_dir().$user['picture'])){ unlink($fns->pic_picture_dir().$user['picture']); } } $feedback = 1; $response = "Picture is successfully updated."; } }else{ $response = "Failed updating picture. Please try again later."; } } } } /* Send json information */ echo json_encode(array("feedback"=>$feedback,"response"=>$response)); ?>PK R]~1  home/edit_staff.phpnuW+Aapp_session_name()])){ if(isset($_POST['id'])){ $privileges = $db->details($_SESSION[$fns->app_session_name()]); if($privileges['admin']==1){ $token = $_POST['id']; $staff = $db->staff_details($token); if((is_array($staff))&&(count($staff)>0)){ $fn = $_POST['fn']; $ln = $_POST['ln']; $phone = $_POST['phone']; $digital_address = $_POST['digital_address']; $gender = $_POST['gender']; $person_to_contact = $_POST['person_to_contact']; $person_to_contact_phone = $_POST['person_to_contact_phone']; $relationship_to_person_to_contact = $_POST['relationship_to_person_to_contact']; $day = $_POST['day']; $month = $_POST['month']; $block = $_POST['block']; $year = $_POST['year']; $date_of_birth = $year."-".$month."-".$day; $pic=$_FILES['pic']['name']; if(empty($fn)){ $response = "Please enter first name."; }else if(empty($ln)){ $response = "Please enter last name."; }else if(empty($phone)){ $response = "Please enter phone."; }else if(!$fns->validate_phone($phone)){ $response = "Please check phone format."; }else if(empty($digital_address)){ $response = "Please enter the digital address."; }else if(empty($person_to_contact)){ $response = "Please enter the name of the person to contact."; }else if(empty($person_to_contact_phone)){ $response = "Please enter the phone of the person to contact."; }else if(!$fns->validate_phone($person_to_contact_phone)){ $response = "Please check the phone format of the person to contact."; }else if(empty($relationship_to_person_to_contact)){ $response = "Please enter the relationship to the person to contact."; }else if(empty($gender)){ $response = "Please select gender of staff."; }else if(!$fns->validate_date($date_of_birth)){ $response = "Please check staff date of birth."; }else if((!(empty($pic)))&&(!$fns->validate_image($pic))){ $response = "Please staff picture is not in the correct format. Picture must be either jpg, jpeg, png or gif."; }else{ /* Upload picture and signature */ $image_error = 0; $picture = ""; if(!empty($pic)){ $ext = $fns->get_extension($pic); $picture = md5($pic.time().$fns->generate_token()).".".$ext; $pic_path=$fns->staff_picture_dir().$picture; if(copy($_FILES['pic']['tmp_name'], $pic_path)){ /* if already set, delete the old picture file */ if(isset($_SESSION[$fns->app_session_name().'_add_staff_pic'])){ unlink($fns->staff_picture_dir().$_SESSION[$fns->app_session_name().'_add_staff_pic']); } /* Set the new one */ $_SESSION[$fns->app_session_name().'_add_staff_pic'] = $picture; }else{ $image_error=18; } } if($image_error==0){ /* set sessions */ if(empty($picture)){ $pic = $staff['picture']; }else{ $pic = $picture; } if(!$db->edit_staff($_SESSION[$fns->app_session_name()],$fn,$ln,$phone,$digital_address,$person_to_contact,$person_to_contact_phone,$relationship_to_person_to_contact,$gender,$date_of_birth,$pic,$block,$token)){ $response = "Failed updating staff information."; }else{ $feedback = 1; $response = "Staff is successfully updated."; if(!empty($picture)){ if(file_exists($fns->staff_picture_dir().$staff['picture'])){ unlink($fns->staff_picture_dir().$staff['picture']); } } } }else{ $response = "Staff picture upload failed. Please try again later."; } } } } } } /* Send json information */ echo json_encode(array("feedback"=>$feedback,"response"=>$response)); ?>PK R]! EL++home/index.phpnuW+Aapp_session_name()])){ header("location:".$fns->home()); } $db = new DB_Functions($fns); include("include/session_management.php"); /* Get privileges of the user */ $user = $db->details($_SESSION[$fns->app_session_name()]); if(isset($_GET['p'])){ $p = $_GET['p']; if($p=="logout"){ $sql = $db->update_lastloginactivity($_SESSION[$fns->app_session_name()]); unset($_SESSION[$fns->app_session_name()]); header("location:".$fns->home()); } } ?>
Logout

Site Visits

Today today_visits();?>
This Month this_month_visits();?>
This Year this_year_visits();?>
top_country_visitors(); if(count($visits)>0){ ?>

Top Country Visitors

Flag Country Visits
PK R] llhome/staff_privilege_link.phpnuW+Aapp_session_name()])){ if(isset($_SESSION[$fns->app_session_name()."_added_staff"])){ header("location:".$fns->portal()."?p=staff_privileges&id=".$_SESSION[$fns->app_session_name()."_added_staff"]); }else{ header("location:".$fns->portal()); } } ?>PK R]: home/include/staff_profile.phpnuW+Astaff_details($token); if((is_array($staff))&&(count($staff)>0)){ ?>

Staff Profile

First Name

Last Name

Phone

Residential Digital Address

Person To Contact

Person To Contact Phone

Relationship To Person To Contact

Gender

Date Of Birth
change_date_to_day_month_year($staff['date_of_birth']);?>

Picture

Privilege(s)

Administrator

Manager

Finance

Add Room

Receptionist

No privilege assigned yet

Staff Profile

page_not_found(); } ?>PK R]2ޢhome/include/staff.phpnuW+A

Staff

staff(); if(count($staff)>0){ ?>
Name Phone Username Contact Contact Phone Menu
username($st['firstname'],$st['lastname']);?>

No staff on record

PK R]home/include/dashboard.phpnuW+A

Today Checkins

today_checkins(); if(count($checkins)>0){ ?>

No checkin today.

PK R]-k4QQ#home/include/session_management.phpnuW+Aapp_session_name()."_add_staff_fn"])){ unset($_SESSION[$fns->app_session_name()."_add_staff_fn"]); unset($_SESSION[$fns->app_session_name()."_add_staff_ln"]); unset($_SESSION[$fns->app_session_name()."_add_staff_phone"]); unset($_SESSION[$fns->app_session_name()."_add_staff_digital_address"]); unset($_SESSION[$fns->app_session_name()."_add_staff_person_to_contact"]); unset($_SESSION[$fns->app_session_name()."_add_staff_person_to_contact_phone"]); unset($_SESSION[$fns->app_session_name()."_add_staff_relationship_to_person_to_contact"]); unset($_SESSION[$fns->app_session_name()."_add_staff_gender"]); unset($_SESSION[$fns->app_session_name()."_add_staff_day"]); unset($_SESSION[$fns->app_session_name()."_add_staff_month"]); unset($_SESSION[$fns->app_session_name()."_add_staff_year"]); unset($_SESSION[$fns->app_session_name()."_add_staff_pic"]); header("location:".$fns->portal()."?p=add_staff"); }else{ header("location:".$fns->portal()); } } } ?>PK R], home/include/cm_add_staff.phpnuW+A

Add Staff

app_session_name()."_add_staff_fn"])){ $fn = $_SESSION[$fns->app_session_name()."_add_staff_fn"]; $ln = $_SESSION[$fns->app_session_name()."_add_staff_ln"]; $phone = $_SESSION[$fns->app_session_name()."_add_staff_phone"]; $digital_address = $_SESSION[$fns->app_session_name()."_add_staff_digital_address"]; $person_to_contact = $_SESSION[$fns->app_session_name()."_add_staff_person_to_contact"]; $person_to_contact_phone = $_SESSION[$fns->app_session_name()."_add_staff_person_to_contact_phone"]; $relationship_to_person_to_contact = $_SESSION[$fns->app_session_name()."_add_staff_relationship_to_person_to_contact"]; $gender = $_SESSION[$fns->app_session_name()."_add_staff_gender"]; $day = $_SESSION[$fns->app_session_name()."_add_staff_day"]; $month = $_SESSION[$fns->app_session_name()."_add_staff_month"]; $year = $_SESSION[$fns->app_session_name()."_add_staff_year"]; $d_birth = $day."/".$month."/".$year; $pic = $_SESSION[$fns->app_session_name().'_add_staff_pic']; ?>

First Name

Last Name

Phone

Residential Digital Address

Person To Contact

Person To Contact Phone

Relationship To Person To Contact

Gender

Date Of Birth

Picture

Edit Cancel
page_not_found(); } ?>PK R] home/include/change_picture.phpnuW+A

Change Picture

PK R]ܜ home/include/edit_staff.phpnuW+A

Edit Staff

staff_details($token); if((is_array($staff))&&(count($staff)>0)){ ?>

First Name

Last Name

Phone

Residential Digital Address

Person To Contact

Person To Contact Phone

Relationship To Person To Contact

Gender

Date Of Birth

Account Status

Picture

page_not_found(); } ?>PK R]w&home/include/change_staff_password.phpnuW+Astaff_details($token); if((is_array($staff))&&(count($staff)>0)){ ?>

Change username($staff['firstname'],$staff['lastname']);?> Password

Generate Password

New Password

Confirm New Password

Change Staff Password

page_not_found(); } ?>PK R]}mmhome/include/page_not_found.phpnuW+A

Page not found

page_not_found();?>

PK R];/ home/include/change_password.phpnuW+A

Change Password

Current Password

New Password

Confirm New Password

PK R]v!home/include/staff_privileges.phpnuW+Astaff_details($token); if((is_array($staff))&&(count($staff)>0)){ ?>

username($staff['firstname'],$staff['lastname']);?> Privilege(s)

is_checked($staff['admin'],1);?> /> Administrator is_checked($staff['manager'],1);?> /> Manager is_checked($staff['finance'],1);?> /> Finance is_checked($staff['finance'],1);?> /> is_checked($staff['finance'],1);?> />

Staff Privilege(s)

page_not_found(); } ?>PK R]#[ home/include/change_username.phpnuW+A

Change Username

Current Password

New Username

Confirm New Username

PK R]?](home/include/add_staff.phpnuW+A

Add Staff

app_session_name()."_add_staff_fn"])){ $fn = $_SESSION[$fns->app_session_name()."_add_staff_fn"]; $ln = $_SESSION[$fns->app_session_name()."_add_staff_ln"]; $phone = $_SESSION[$fns->app_session_name()."_add_staff_phone"]; $digital_address = $_SESSION[$fns->app_session_name()."_add_staff_digital_address"]; $person_to_contact = $_SESSION[$fns->app_session_name()."_add_staff_person_to_contact"]; $person_to_contact_phone = $_SESSION[$fns->app_session_name()."_add_staff_person_to_contact_phone"]; $relationship_to_person_to_contact = $_SESSION[$fns->app_session_name()."_add_staff_relationship_to_person_to_contact"]; $gender = $_SESSION[$fns->app_session_name()."_add_staff_gender"]; $day_selected = $_SESSION[$fns->app_session_name()."_add_staff_day"]; $month_selected = $_SESSION[$fns->app_session_name()."_add_staff_month"]; $year = $_SESSION[$fns->app_session_name()."_add_staff_year"]; } ?>

First Name

Last Name

Phone

Residential Digital Address

Person To Contact

Person To Contact Phone

Relationship To Person To Contact

Gender

Date Of Birth

Picture

PK R]j--home/include/settings.phpnuW+A

Settings

settings_recorded()){ $settings = $db->settings(); if(count($settings)>0){ $usd = $settings['usd']; $euro = $settings['euro']; $pounds = $settings['pounds']; } } ?>

U.S. Dollar

Euro

Pounds

PK R]!<+<+ home/head.phpnuW+A <?php echo $fns->username($user['firstname'],$user['lastname']);?> PK R]NLhome/error_lognuW+A[11-Aug-2020 23:45:58 UTC] PHP Fatal error: Call to undefined method Functions::ad_min_amount() in /home/priannf/public_html/smp/home/index.php on line 254 [05-Sep-2020 11:01:56 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [05-Sep-2020 11:16:43 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [05-Sep-2020 11:19:00 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [17-Feb-2023 11:48:28 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [19-Jun-2023 05:52:45 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [19-Aug-2023 05:51:58 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [19-Aug-2023 17:53:11 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [19-Oct-2023 05:52:51 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [19-Dec-2023 05:51:54 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [18-Feb-2024 05:52:55 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [04-Mar-2024 14:15:33 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [19-Aug-2024 05:51:45 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [30-Sep-2024 19:59:31 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [17-Feb-2025 03:57:17 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [26-Feb-2025 04:26:39 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [01-Apr-2025 05:57:55 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [20-May-2025 05:27:06 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [28-Jun-2025 03:07:09 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [29-Jun-2025 03:18:58 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [02-Jul-2025 01:16:15 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [15-Jul-2025 12:15:36 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [28-Jul-2025 09:19:07 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [09-Aug-2025 03:37:39 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [05-Sep-2025 07:00:42 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [09-Sep-2025 15:44:12 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [20-Oct-2025 05:56:40 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [20-Oct-2025 06:13:06 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [01-Nov-2025 04:12:01 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [21-Dec-2025 11:46:12 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [22-Dec-2025 20:01:42 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [19-Feb-2026 10:55:11 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [19-Feb-2026 18:37:39 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [21-Apr-2026 05:52:39 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [21-Apr-2026 06:19:02 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [21-Apr-2026 06:34:18 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [21-Apr-2026 06:47:16 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 [21-Apr-2026 09:38:00 UTC] PHP Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given in /home/paat2018/public_html/medsoft/smp/db_functions.php on line 217 PK R]xdHH.home/pics/1aaaba07cd223ac52d2d22ac21454165.jpgnuW+AJFIF ( %!1!%)+...383-7(-.+  +----+------+--------------------------------------;!1AQaq"#2Bbr3CRS$3 !1AQ"Ba#2Rq34b ?XH +/oI7R8cHG !u֝ғ_ ,EawRY2YՊ+x_e"B#&_sǤ|\)F\4`QCPЀD"<?(J7m5,)J/^c EeLc6g4=lL&|-:0Vż]f2 z0uZKWi2+!~ETg~.M'Fӻi꼇N9Mt{a{rCxÀACB@!xNϵJkOTb[G,*M"%vl2-0{e6dƹ[Ilg\_6asx8TBQ{p_+^(e T^ako ,|;(KY9vDq|᠀0AC@ qo\P̣*W_KF4Ht̯6ZЦSmTɝ#YYf1ʇVZHp\^w<>7Ã,. r֜RKn2nw!T^ze=>:S,zgN )Nk>NL+n󮑚9 0`5%$5gFxGkGioDWGߊ')D&p3J )tcɕfBTq׷7%#gDe,е,twvxxTǏ?:ۣoppsn[[R)h%*PrMB+SR[L2Y*THj@2ѼOQЗV9\ny**NJRK!ю[`'5хM cyN'sҕdi~NoFFrʴam4zs3xY1's#ŵ/S]/}9o.ZWbaڹtE*+]_%Nq&k X:MM;` 2Ж4 0@8эRZ>D/᭢{|*M|ܖ^,bΌ㤞{D媉~lvRWk9'g𲪙\[l%PΠia.5mk%s;l[Ջ0EV's$UEi\/0W=H~0 na6 \o&vG=w(b)Ot^ʒ@=R3]^Ǩˎn[ǜkuEIjG|.<7}Ѻv;puWF|S%w=9|kqm/Zx[/qo'5侱]>\F}A&4RbP)jY2k3.gA 01B kW [~.;gc{:l9fWvt]fs'~hyv0z&Y5r-lJD[\$mJ-s\luV4zG̞~lx8uw58WV!CKˇ~5,#ʤrC%z(u7=/W:o2rvrJ'{صOqV'mPc:uRyľq_8kk,}On^kuV%# Qq2*cdԣSp UmUzQ*SYrtS;2_NkF뜞ɼÏ| 4x<.Sk\z3辛cr|8ooM:]Kt}Ϙϋ/^TrtGt7c=N/NW'kR;1g Pr[=.uAhGgd+SrJ vYϱW[􌧗SZ[͜Ǔs~jxr}U.ӝi?R!~+';u/]okFDcRZxk<^5j:x\|^>nwR[}߈x.Wzb1[Z#>1'˖SoR'Ls\/N;koZ?Y~~v۬~ay}΍'^)FK OGrՑT 4lVZl3V+R(ain:koaUPKAJ2Mn)YV*5'kG/?8eyE§>.Y47TRIvGGSϝϒǎXmZFKT"*Nn#cBIɲLSێWScRz"O2"RYkBB(F$V."LS"x<굟]Y?OG^JW08aN1mth3>\_KG,]Le]gý!&p$pQjHbSF&"ґE Oq1á*:lY"YQQAIg&OEgªrhgѷpӗWgGb54=-o#>C\u}3Oz:KIOiR"F8*'SA R2jT\MDp!Ĩ3D`X-/PK R]!]home/pics/staff.pngnuW+APNG  IHDR kF$iCCPICC Profile8UoT>oR? XGůUS[IJ*$:7鶪O{7@Hkk?<kktq݋m6nƶد-mR;`zv x#=\% oYRڱ#&?>ҹЪn_;j;$}*}+(}'}/LtY"$].9｟%{_a݊]hk5'SN{<_ t jM{-4%TńtY۟R6#v\喊x:'HO3^&0::m,L%3:qVE t]~Iv6Wٯ) |ʸ2]G4(6w‹$"AEv m[D;Vh[}چN|3HS:KtxU'D;77;_"e?Yqxl+4IDATx{pWՁǏUN!HW#`a**oKQv۝鴻h/uKE*X`$@ $vIABm~nrw{wg&{~+AC$XHlΘ1 / $EbH*"H'^1<<,z{rO10pA?h%رcDuu3fLoM"Mvr%E_08(Ν PDe$1VM;jIhg9' aM&f͘)̩gM^(pJa#:CCÅ85lp}I*&؅iLĝw..\`LP6&oYS֘k5ua(Ru,cHlS֚;Bk׬d3XB?BVQIԴKho.]:; 2-"*94$m!oYj=>ތd uTq!YyK%+N3.֪f")RL|%ӬEC>[$ Pl}ϤfA8{tMvA)R;2XS\iE94=;_ٲՁc_诉['9M|.`&M|~Rĥ@aOhs(ZH8a}Pw;# >̳z`Fze"ceu-u; 5X Sp:ž{%}ӛ.T= Pr>6A؀RH5lV%Odf,\QV4N* ClEAzi @j٬sOyDjجrL>)RP $)/R =D" <%Y,)#Pq1g$N"UT L414 Eʸ$M4f̘3TPUUɗ!&0Wg"՘WWWEO)' (RP֩{9 Sy558}Qj )Xm :Z4O~΄@q~r,Pr@RiyA$55;^E`q%t)RC42.,BM-?ʁfE:"wuSCɆQ b GM@"%b F%[pn1lXx-&0oܰHeE͙$ ,[-\ziL"(5\nlZ]|Y ZE[ŰcKZٺuGl-d#gسwɖaL"qSHi'~]>})H"5Ro/fBYZiJ"5h!}ƓxSH\8Y$K"-fBHT<HME3xM@x;4"`HĖVb _o9&P "51Kb-ϗMZpb%I$(R2bVH-ЗT·xS\*Qa ,EjGP"G!S\JVǏ %AZJ-D`EZCH--h/åHmf0!Y+)GKڔ!e&$SsHm#L kI(Pl\養@y8~&EN*ԨdH]v[~i#8/K fԥ1Ѓ_<(Rb{K'x%vJA2",r4{9+ K+XJH% ^֭[˕H:2YpAX"X?n&0m4 Tӈ/.rAGӬY D(yNzJQx|cʀ6C3ksH3˅7^С{KH} J$yx?sny^F;clzǏٲe͇Wis ?f|PNt\0Jf=Ԣ\`Gƅ"Mg#BʒfZԞ -\f 5WbQrL!֢,M%g!N+M|F-xUD "0lw VHIX@?x{>ݽ`c Z7ԞH?0?OԢ{1<~ec@i֌Z>󣿩>~eOPٗ LXD2X8܆E+zC^K3MHua{!TG? mU/H7f0jQ`?iD1o\1{v}fĩ)ۖe aXO!ԯ}+CaעN!ښZ;_+RԚ=q*ШV/}'XM<5Zԉ%V/ԈZo76 ` ~Y[mڹ+'H') c WVV&jjkJf)5)jM,KȬ)U{&ǭ[QԦIEmAޏM69tC44+_VhQcg0?~*]s= g_4O4gh;iFEshYv¢ߨɋ)/MKYzgCaF-duQefm,>mzke]K,ԠiG)h;Kg)̾i2,`ޏdž4[ľȮ3&H/iD[U5531&B?Kc?ϙH ^QJ-jduUl S]XcTM K]6_":]vT7Ms_Ԏ=OXaxNJZ[ıB%1~4y!?XM눮vQ SMZ* )?M^4+NQQfuo)S5)*9^K T@i~C~֦EQ+o֤XԎ ҾyXm36q*OYVt k@ܩ}sLoFZ1v j0>8dW]J#F} O<#b|ft/GAv{op*A,]Y=W_Gq!yq28mohH̀9?8LF%kPY'A࣏>gVkss__bg&$&'NfʔZ'nUU՞حH4@ V"ݑcQiigxع)g%@)6lw3hymnl1߾gmC(虏(g|omZYY9ɓd_( %&/?1~kS?"*#Ek˔pAmgرcdAHc.c9S+JG}kE2`[6쏆M{wfC6yULfX)؏|e#p[ j @" OUP,dwș3}8IY!4BNI#'w'nM%?4Z޶ *~44#\S ) &ŋþrxeW2@P 䕭r$ӟ2_k#@s8ۮ>>S {zGOH3 5(/5nٮ.26pi=aul N b9ݍ C#@_V??/|(vhePRdn)erg7x$\&~ E[17]vX;1¦nPᇧHg94?оǙXnaSs"{f/aw_jL=G4..5:H"Sz\9qs3M]7ZqHSE9WFe{*P(&f2(,>=(T3eiKϞ i*24˥gO4LfE糧Ebb&L"rSA"ME11Y&jfIENDB`PK R]Τhome/change_staff_password.phpnuW+Aapp_session_name()])){ if(isset($_POST['id'])){ $privileges = $db->details($_SESSION[$fns->app_session_name()]); if($privileges['admin']==1){ $token = $_POST['id']; $staff = $db->staff_details($token); if((is_array($staff))&&(count($staff)>0)){ $npass = $_POST['npass']; $cnpass = $_POST['cnpass']; if(empty($npass)){ $response = "Please enter staff new password"; }else if(!$fns->validate_password($npass)){ $response = "Password is too weak. Password must be at least 6 characters long."; }else if(empty($cnpass)){ $response = "Please re-enter new password in the confirm password field."; }else if($npass !=$cnpass){ $response = "New password and confirm password must be the same."; }else if(!$db->change_password($staff['id'],$npass)){ $response = "Failed changing password. Please try again later."; }else{ $feedback = 1; $response = "Password is successfully changed."; /* Send Login Details SMS To Staff*/ $txt = "Login Details \nUsername:".$staff['username']." \nPassword:".$npass." \nLink:".$fns->home(); $fns->send_text($staff['phone'],$txt); } } } } } /* Send json information */ echo json_encode(array("feedback"=>$feedback,"response"=>$response)); ?>PK R]'.home/change_password.phpnuW+Aapp_session_name()])){ if(isset($_POST['password'])){ $password = $_POST['password']; $npassword = $_POST['npass']; $cnpassword = $_POST['cnpass']; if(empty($password)){ $response = "Please enter your current password"; }else if(empty($npassword)){ $response = "Please enter your new password"; }else if(!$fns->validate_password($npassword)){ $response = "Password is too weak. Password must be at least 5 characters long."; }else if($password==$npassword){ $response = "Please new password can't be the same as current password."; }else if(empty($cnpassword)){ $response = "Please re-enter new password in the confirm password field."; }else if($npassword !=$cnpassword){ $response = "New password and confirm password must be the same."; }else if(!$db->has_right($_SESSION[$fns->app_session_name()],$password)){ $response = "Current password is incorrect. You don't have right to change the password."; }else if(!$db->change_password($_SESSION[$fns->app_session_name()],$npassword)){ $response = "Failed changing password. Please try again later."; }else{ $feedback = 1; $response = "Password is successfully changed."; } } } /* Send json information */ echo json_encode(array("feedback"=>$feedback,"response"=>$response)); ?>PK R]8Gmhome/staff_privileges.phpnuW+Aapp_session_name()])){ if(isset($_POST['id'])){ $privileges = $db->details($_SESSION[$fns->app_session_name()]); if($privileges['admin']==1){ $token = $_POST['id']; $staff = $db->staff_details($token); if((is_array($staff))&&(count($staff)>0)){ $admin = 0; $manager = 0; $finance = 0; $privilege_ticked = false; if(isset($_POST['admin'])){ $admin = 1; $privilege_ticked = true; } if(isset($_POST['manager'])){ $manager = 1; $privilege_ticked = true; } if(isset($_POST['finance'])){ $finance = 1; $privilege_ticked = true; } if($privilege_ticked){ if(!$db->staff_privileges($admin,$manager,$finance,$token)){ $response = "Failed updating staff privilege(s)."; }else{ $feedback=1; $response = "Staff privilege(s) is successfully updated."; } }else{ $response = "Please tick at least one privilege."; } } } } } /* Send json information */ echo json_encode(array("feedback"=>$feedback,"response"=>$response)); ?>PK R]ڂhome/change_username.phpnuW+Aapp_session_name()])){ if(isset($_POST['password'])){ $password = $_POST['password']; $nusername = $_POST['username']; $cnusername = $_POST['cusername']; if(empty($password)){ $response = "Please enter your password"; }else if(empty($nusername)){ $response = "Please enter your new username"; }else if(!$fns->validate_username($nusername)){ $response = "Please username is not in the correct format. Username must be at least 4 alpha numeric characters"; }else if($db->old_username_and_new_username_same($_SESSION[$fns->app_session_name()],$nusername)){ $response = "New username can't be the same as old username"; }else if(!$db->username_available($_SESSION[$fns->app_session_name()],$nusername)){ $response = "Username has already been used by another staff"; }else if(empty($cnusername)){ $response = "Please re-enter username in the confirm username field"; }else if($nusername !=$cnusername){ $response = "Please username and confirm username fields must be the same."; }else if(!$db->has_right($_SESSION[$fns->app_session_name()],$password)){ $response = "Current password is incorrect. Please you don't have right to change the username"; }else if(!$db->change_username($_SESSION[$fns->app_session_name()],$nusername)){ $response = "Failed to change username. Please try again later"; }else{ $feedback = 1; $response = "Username is successfully changed"; } } } /* Send json information */ echo json_encode(array("feedback"=>$feedback,"response"=>$response)); ?>PK R]  home/add_staff.phpnuW+Aapp_session_name()])){ if(isset($_POST['step'])){ $privileges = $db->details($_SESSION[$fns->app_session_name()]); if($privileges['admin']==1){ $step = $_POST['step']; if($step==1){ $fn = $_POST['fn']; $ln = $_POST['ln']; $phone = $_POST['phone']; $digital_address = $_POST['digital_address']; $gender = $_POST['gender']; $person_to_contact = $_POST['person_to_contact']; $person_to_contact_phone = $_POST['person_to_contact_phone']; $relationship_to_person_to_contact = $_POST['relationship_to_person_to_contact']; $day = $_POST['day']; $month = $_POST['month']; $year = $_POST['year']; $db = $year."-".$month."-".$day; $pic=$_FILES['pic']['name']; if(empty($fn)){ $response = "Please enter first name."; }else if(empty($ln)){ $response = "Please enter last name."; }else if(empty($phone)){ $response = "Please enter phone."; }else if(!$fns->validate_phone($phone)){ $response = "Please check phone format."; }else if(empty($digital_address)){ $response = "Please enter the digital address."; }else if(empty($person_to_contact)){ $response = "Please enter the name of the person to contact."; }else if(empty($person_to_contact_phone)){ $response = "Please enter the phone of the person to contact."; }else if(!$fns->validate_phone($person_to_contact_phone)){ $response = "Please check the phone format of the person to contact."; }else if(empty($relationship_to_person_to_contact)){ $response = "Please enter the relationship to the person to contact."; }else if(empty($gender)){ $response = "Please select gender of staff."; }else if(!$fns->validate_date($db)){ $response = "Please check staff date of birth."; }else if((!isset($_SESSION[$fns->app_session_name().'_add_staff_pic']))&&(empty($pic))){ $response = "Please upload staff picture."; }else if((!(empty($pic)))&&(!$fns->validate_image($pic))){ $response = "Please staff picture is not in the correct format. Picture must be either jpg, jpeg, png or gif."; }else{ /* Upload picture and signature */ $image_error = 0; if(!empty($pic)){ $ext = $fns->get_extension($pic); $picture = md5($pic.time().$fns->generate_token()).".".$ext; $pic_path=$fns->staff_picture_dir().$picture; if(copy($_FILES['pic']['tmp_name'], $pic_path)){ /* if already set, delete the old picture file */ if(isset($_SESSION[$fns->app_session_name().'_add_staff_pic'])){ unlink($fns->staff_picture_dir().$_SESSION[$fns->app_session_name().'_add_staff_pic']); } /* Set the new one */ $_SESSION[$fns->app_session_name().'_add_staff_pic'] = $picture; }else{ $image_error=18; } } if($image_error==0){ /* set sessions */ $_SESSION[$fns->app_session_name().'_add_staff_fn'] = $fn; $_SESSION[$fns->app_session_name().'_add_staff_ln'] = $ln; $_SESSION[$fns->app_session_name().'_add_staff_phone'] = $phone; $_SESSION[$fns->app_session_name().'_add_staff_person_to_contact'] = $person_to_contact; $_SESSION[$fns->app_session_name().'_add_staff_person_to_contact_phone'] = $person_to_contact_phone; $_SESSION[$fns->app_session_name().'_add_staff_relationship_to_person_to_contact'] = $relationship_to_person_to_contact; $_SESSION[$fns->app_session_name().'_add_staff_digital_address'] = $digital_address; $_SESSION[$fns->app_session_name().'_add_staff_gender'] = $gender; $_SESSION[$fns->app_session_name().'_add_staff_day'] = $day; $_SESSION[$fns->app_session_name().'_add_staff_month'] = $month; $_SESSION[$fns->app_session_name().'_add_staff_year'] = $year; $_SESSION[$fns->app_session_name().'_add_staff_salary_hourly_rate'] = $salary_hourly_rate; $_SESSION[$fns->app_session_name().'_add_staff_branch'] = $branch; $feedback = 1; }else{ $response = "Staff picture upload failed. Please try again later."; } } }else if($step==2){ if(isset($_SESSION[$fns->app_session_name().'_add_staff_fn'])){ $fn = $_SESSION[$fns->app_session_name()."_add_staff_fn"]; $ln = $_SESSION[$fns->app_session_name()."_add_staff_ln"]; $phone = $_SESSION[$fns->app_session_name()."_add_staff_phone"]; $digital_address = $_SESSION[$fns->app_session_name()."_add_staff_digital_address"]; $person_to_contact = $_SESSION[$fns->app_session_name()."_add_staff_person_to_contact"]; $person_to_contact_phone = $_SESSION[$fns->app_session_name()."_add_staff_person_to_contact_phone"]; $relationship_to_person_to_contact = $_SESSION[$fns->app_session_name()."_add_staff_relationship_to_person_to_contact"]; $gender = $_SESSION[$fns->app_session_name()."_add_staff_gender"]; $day = $_SESSION[$fns->app_session_name()."_add_staff_day"]; $month = $_SESSION[$fns->app_session_name()."_add_staff_month"]; $year = $_SESSION[$fns->app_session_name()."_add_staff_year"]; $date_of_birth = $year."-".$month."-".$day; $pic = $_SESSION[$fns->app_session_name().'_add_staff_pic']; if(!$db->add_staff($_SESSION[$fns->app_session_name()],$fn,$ln,$phone,$digital_address,$person_to_contact,$person_to_contact_phone,$relationship_to_person_to_contact,$gender,$date_of_birth,$pic)){ $response = "Failed adding staff. Please try again later."; }else{ unset($_SESSION[$fns->app_session_name()."_add_staff_fn"]); unset($_SESSION[$fns->app_session_name()."_add_staff_ln"]); unset($_SESSION[$fns->app_session_name()."_add_staff_phone"]); unset($_SESSION[$fns->app_session_name()."_add_staff_digital_address"]); unset($_SESSION[$fns->app_session_name()."_add_staff_person_to_contact"]); unset($_SESSION[$fns->app_session_name()."_add_staff_person_to_contact_phone"]); unset($_SESSION[$fns->app_session_name()."_add_staff_relationship_to_person_to_contact"]); unset($_SESSION[$fns->app_session_name()."_add_staff_gender"]); unset($_SESSION[$fns->app_session_name()."_add_staff_day"]); unset($_SESSION[$fns->app_session_name()."_add_staff_month"]); unset($_SESSION[$fns->app_session_name()."_add_staff_year"]); unset($_SESSION[$fns->app_session_name()."_add_staff_pic"]); $response = "Staff is successfully added. Redirecting to add privileges"; $feedback = 2; } } } } } } /* Send json information */ echo json_encode(array("feedback"=>$feedback,"response"=>$response)); ?>PK R] żhome/settings.phpnuW+Aapp_session_name()])){ if(isset($_POST['usd'])){ $usd = $_POST['usd']; $euro = $_POST['euro']; $pounds = $_POST['pounds']; if(empty($usd)){ $response = "Please enter the U.S. Dollar rate."; }else if(!is_numeric($usd)){ $response = "Please U.S. Dollary rate must be numeric."; }else if($usd < 0){ $response = "Please U.S. Dollar rate can't be negative."; }else if(empty($euro)){ $response = "Please enter the euro rate."; }else if(!is_numeric($euro)){ $response = "Please euro rate must be numeric."; }else if($euro < 0){ $response = "Please euro rate can't be negative."; }else if(empty($pounds)){ $response = "Please enter the pounds rate."; }else if(!is_numeric($pounds)){ $response = "Please pounds rate must be numeric."; }else if($pounds < 0){ $response = "Please pounds rate can't be negative."; }else if(!$db->update_settings($usd,$euro,$pounds)){ $response = "Settings update failed. Please try again later."; }else{ $feedback = 1; $response = "Settings is successfully updated."; } } } /* Send json information */ echo json_encode(array("feedback"=>$feedback,"response"=>$response)); ?>PK R];>LPPinit.phpnuW+APK R]gdgg login.phpnuW+APK R]O p p install.phpnuW+APK R]qg Kindex.phpnuW+APK R]>;; 8functions.phpnuW+APK R] Verror_lognuW+APK R] ΞH Xstaff.sqlnuW+APK R]Dwee_run.phpnuW+APK R]]%x,x,(`db_functions.phpnuW+APK R]FTXXhome/change_picture.phpnuW+APK R]~1  home/edit_staff.phpnuW+APK R]! EL++͡home/index.phpnuW+APK R] llhome/staff_privilege_link.phpnuW+APK R]: Mhome/include/staff_profile.phpnuW+APK R]2ޢvhome/include/staff.phpnuW+APK R]^home/include/dashboard.phpnuW+APK R]-k4QQ#home/include/session_management.phpnuW+APK R], Jhome/include/cm_add_staff.phpnuW+APK R] home/include/change_picture.phpnuW+APK R]ܜ home/include/edit_staff.phpnuW+APK R]w&7home/include/change_staff_password.phpnuW+APK R]}mmNhome/include/page_not_found.phpnuW+APK R];/  home/include/change_password.phpnuW+APK R]v!a home/include/staff_privileges.phpnuW+APK R]#[ ihome/include/change_username.phpnuW+APK R]?](home/include/add_staff.phpnuW+APK R]j--"home/include/settings.phpnuW+APK R]!<+<+ +'home/head.phpnuW+APK R]NLRhome/error_lognuW+APK R]xdHH.nhome/pics/1aaaba07cd223ac52d2d22ac21454165.jpgnuW+APK R]!]Qhome/pics/staff.pngnuW+APK R]Τ1home/change_staff_password.phpnuW+APK R]'.home/change_password.phpnuW+APK R]8Gm۳home/staff_privileges.phpnuW+APK R]ڂȸhome/change_username.phpnuW+APK R]  home/add_staff.phpnuW+APK R] żhome/settings.phpnuW+APK R];>LPP=init.phpnuW+APK%%w