One Hat Cyber Team

Your IP : 3.144.230.138

Server IP : 50.28.103.30

Server : Linux host.jcukjv-lwsites.com 4.18.0-553.22.1.el8_10.x86_64 #1 SMP Tue Sep 24 05:16:59 EDT 2024 x86_64

Server Software : nginx/1.24.0

PHP Version : 8.3.12

Buat File | Buat Folder

Dir : ~/www/wwwroot/pass.electronharmony.com/fns/update/

Edit File: payment_methods.php

<?php

$result = array();
$result['success'] = false;
$result['error_message'] = Registry::load('strings')->went_wrong;
$result['error_key'] = 'something_went_wrong';

if (role(['permissions' => ['super_privileges' => 'manage_payment_gateways']])) {

include_once 'fns/filters/load.php';
    include_once 'fns/files/load.php';

$noerror = true;
    $disabled = 0;
    $payment_gateway_id = null;
    $result['success'] = false;
    $result['error_message'] = Registry::load('strings')->invalid_value;
    $result['error_key'] = 'invalid_value';
    $result['error_variables'] = [];

if (!isset($data['payment_method']) || empty($data['payment_method'])) {
        $result['error_variables'][] = ['payment_method'];
        $noerror = false;
    }

if (isset($data['payment_gateway_id'])) {
        $payment_gateway_id = filter_var($data["payment_gateway_id"], FILTER_SANITIZE_NUMBER_INT);
    }

if ($noerror && !empty($payment_gateway_id)) {

$payment_methods = array_filter(array_map(function($file) {
            return pathinfo($file, PATHINFO_FILENAME);
        }, glob('fns/payments' . '/*.php')), function($filename) {
            return $filename !== 'load';
        });

if (!in_array($data['payment_method'], $payment_methods)) {
            $data['payment_method'] = 'paypal';
        }

if (isset($data['disabled']) && $data['disabled'] === 'yes') {
            $disabled = 1;
        }

$remove_fields = ['payment_method', 'disabled', 'add', 'update'];
        $credentials = sanitize_array($data);
        $credentials = array_diff_key($credentials, array_flip($remove_fields));

if (isset($data['bank_account_details']) && !empty($data['bank_account_details'])) {

include('fns/HTMLPurifier/load.php');
            $allowed_tags = 'b,i,u,strong,br';

$config = HTMLPurifier_Config::createDefault();
            $config->set('HTML.Allowed', $allowed_tags);
            $config->set('Attr.AllowedClasses', array());
            $config->set('AutoFormat.RemoveEmpty', true);

$purifier = new HTMLPurifier($config);

$data['bank_account_details'] = $purifier->purify(trim($data['bank_account_details']));
            $credentials['bank_account_details'] = $data['bank_account_details'];
        }

$credentials = json_encode($credentials);

DB::connect()->update("payment_gateways", [
            "identifier" => $data['payment_method'],
            "credentials" => $credentials,
            "disabled" => $disabled,
            "updated_on" => Registry::load('current_user')->time_stamp,
        ], ['payment_gateway_id' => $payment_gateway_id]);

if (!DB::connect()->error) {

$result = array();
            $result['success'] = true;
            $result['todo'] = 'reload';
            $result['reload'] = 'payment_methods';
        } else {
            $result['error_message'] = Registry::load('strings')->went_wrong;
            $result['error_key'] = 'something_went_wrong';
        }

}
}

?>