Gecko [ edgpens.lpkmn.gov.my ]

Name	Size	Permission
backup	[ DIR ]	drwxrwxrwx
css	[ DIR ]	drwxrwxrwx
dashboard	[ DIR ]	drwxrwxrwx
edg	[ DIR ]	drwxrwxrwx
extension	[ DIR ]	drwxrwxrwx
img	[ DIR ]	drwxrwxrwx
inc	[ DIR ]	drwxrwxrwx
js	[ DIR ]	drwxrwxrwx
kod	[ DIR ]	drwxrwxrwx
patch	[ DIR ]	drwxrwxrwx
pdf	[ DIR ]	drwxrwxrwx
reports	[ DIR ]	drwxrwxrwx
upload	[ DIR ]	drwxrwxrwx
utility	[ DIR ]	drwxrwxrwx
vendor	[ DIR ]	drwxrwxrwx
.htaccess.backup	1.24 KB	-rw-rw-rw-
!test.php	17 B	-rw-rw-rw-
MalaysiaBooks.php	3.67 KB	-rw-rw-rw-
Nota14102020.docx	22.8 KB	-rw-rw-rw-
access.php	268 B	-rw-rw-rw-
access2.php	245 B	-rw-rw-rw-
account_recovery.php	8.4 KB	-rw-rw-rw-
account_recovery_test.php	6.3 KB	-rw-rw-rw-
ajax.php	4.02 KB	-rw-rw-rw-
banner.php	73.61 KB	-rw-rw-rw-
company_search.php	8.38 KB	-rw-rw-rw-
composer.json	1.5 KB	-rw-rw-rw-
composer.lock	173.77 KB	-rw-rw-rw-
ctype.txt	266 B	-rw-rw-rw-
custom.css	3.7 KB	-rw-rw-rw-
custom.js	9.88 KB	-rw-rw-rw-
custom200630.js	6.46 KB	-rw-rw-rw-
custom_200630.css	1.04 KB	-rw-rw-rw-
custom_200705.js	6.82 KB	-rw-rw-rw-
dashboard.php	5.71 KB	-rw-rw-rw-
dashboard_old.php	51 B	-rw-rw-rw-
dbedgpens.sql	3.85 MB	-rw-rw-rw-
dglist.php	3.97 KB	-rw-rw-rw-
dgweb-dg.txt	2.65 MB	-rw-rw-rw-
dgweb.xls	297.5 KB	-rw-rw-rw-
err_404.php	75 B	-rw-rw-rw-
f_declaration.php	515 B	-rw-rw-rw-
frame.php	1.46 KB	-rw-rw-rw-
gip.php	1.51 KB	-rw-rw-rw-
gip1.php	7 B	-rw-rw-rw-
imp_data.php	2.03 KB	-rw-rw-rw-
index_footer.php	138 B	-rw-rw-rw-
index_head.php	663 B	-rw-rw-rw-
index_search.php	667 B	-rw-rw-rw-
ins_composer.php	417 B	-rw-rw-rw-
ktn-pens-companies.txt	330.12 KB	-rw-rw-rw-
ktn-pens-port.txt	602.81 KB	-rw-rw-rw-
ktn-pens-vessel.txt	6.12 MB	-rw-rw-rw-
ktn-pens-vtype.txt	353 B	-rw-rw-rw-
login.php	12.14 KB	-rw-rw-rw-
login_200704.php	9.81 KB	-rw-rw-rw-
main.php	644 B	-rw-rw-rw-
nota.txt	120 B	-rw-rw-rw-
odbc.php	24.03 KB	-rw-rw-rw-
odbc_test.php	15.24 KB	-rw-rw-rw-
readtext.php	7.99 KB	-rw-rw-rw-
recover_msg.php	806 B	-rw-rw-rw-
registration.php	27.31 KB	-rw-rw-rw-
registration_2.php	12.94 KB	-rw-rw-rw-
registration_submit.php	6.85 KB	-rw-rw-rw-
reset_password.php	9.55 KB	-rw-rw-rw-
self_register.php	14.58 KB	-rw-rw-rw-
self_register_230312.php	14.57 KB	-rw-rw-rw-
sessions.php	2.78 KB	-rw-rw-rw-
sessions_200705.php	1.4 KB	-rw-rw-rw-
sessions_200721.php	1.75 KB	-rw-rw-rw-
test.php	11.8 KB	-rw-rw-rw-
test_sess.php	1.35 KB	-rw-rw-rw-
testedg.txt	7 B	-rw-rw-rw-
testing.txt	7 B	-rw-rw-rw-
testinput.php	6.7 KB	-rw-rw-rw-
testx.php	4 B	-rw-rw-rw-
user.php	160.56 KB	-r--r--r--
vessel.txt	498.07 KB	-rw-rw-rw-
vessel2.txt	249.04 KB	-rw-rw-rw-
zzz	11 B	-rw-rw-rw-
zzz.txt	249.04 KB	-rw-rw-rw-
~$ta14102020.docx	162 B	-rw-rw-rw-
~WRL0738.tmp	23.29 KB	-rw-rw-rw-

Code Editor : account_recovery_test.php

<?php if(empty($page)){ include("access2.php"); } ?>
<script type="text/javascript">
	alert(1);
</script>
<div id="page-content">

<div class="row">
		<div class="col-sm-12">
			<div class="widget-image widget-image-xs">
				<img src="img/lpkmn/bg.jpg" alt="image">
				<div class="widget-image-content">
					<div class="pull-right text-light-op">
					<strong>
					<form id="form-login" method="post" action="login.php" class="form-inline" style="vertical-align: top">
						<div class="row" style="vertical-align: top;margin-bottom: 0px;text-align: right">
							<div class="col-md-12">
								<i><a style="cursor: pointer;color: #CCC;" href="index.php?page=company_search">Register</a></i>
								&nbsp;||&nbsp;
								<i><a style="cursor: pointer;color: #CCC;" href="index.php?page=account_recovery">Forgot Password</a></i>
							</div>
						</div>
								<hr style="margin: 3px">
						<div class="form-group" style="vertical-align: top;margin-bottom: 1px">
								<div class="col-md-12 nopadding">
								<input type="text" id="login-user" name="login-user" class="form-control" placeholder="Your email..">
								</div>
						</div>
						<div class="form-group" style="vertical-align: top;margin-bottom: 1px">
								<div class="col-md-12 nopadding">
								<input type="password" id="login-password" name="login-password" class="form-control" placeholder="Your password..">
								</div>
						</div>
						<div class="form-group form-actions" style="text-align:right;vertical-align: top;margin-bottom: 1px">
							<div class="col-md-12 nopadding">
								<button type="submit" class="btn btn-effect-ripple btn-sm btn-primary" style="margin-top: 3px"><i class="fa fa-unlock-alt"></i> Login</button>
							</div>
						</div>

</form>					 
					</strong>
					</div>
					<h2 class="widget-heading text-light"><strong>eDGPENS LPKMn</strong></h2>
					<h3 class="widget-heading text-light-op">Lembaga Pelabuhan Kemaman</h3>
				</div>
			</div>
		</div>
	</div>

<?php

growl_me($_SESSION,$g_success);

use League\OAuth2\Client\Provider\Google;
	use PHPMailer\PHPMailer\PHPMailer;
	use PHPMailer\PHPMailer\Exception;
	use PHPMailer\PHPMailer\SMTP;
	use PHPMailer\PHPMailer\OAuth;

require './vendor/autoload.php';

$email 	= "amat.cbt@gmail.com";
		$mail 	= new PHPMailer(true);

$sql 	= "SELECT a.* FROM user_list a WHERE 1 AND emailUser = '$email'";
		$param_data 	= array(
							"emailUser" 	=> $email
						 	);
		$data 	= mysqli_prepare_all($sql,$param_type = "auto",$param_data);
		$usr 	= $data->fetch_assoc();
		$table 	= "user_list";
		$flag 	= "";

if(empty($usr)){
			$flag 	= "AND flagUser=2";
			$sql 	= "SELECT a.* FROM user_register a WHERE 1 AND emailUser = ? {$flag}";
			$param_data 	= array(
								"emailUser" 	=> $email
							 	);
			$data 	= mysqli_prepare_all($sql,$param_type = "auto",$param_data);
			$usr 	= $data->fetch_assoc();
			$table 	= "user_register";
		}

// if(empty($usr))
		// 	goto skipsend;

// try {

// ob_start();

$token 	= md5($email.date("dmyh:i:s"));
			$stmt 	= $mysqli->stmt_init();
			$stmt->prepare("UPDATE {$table} SET recovery_token = ?, recovery_exp = ADDTIME(NOW(), '00:30:00') WHERE emailUser = ? {$flag}");
			$stmt->bind_param("ss",$token,$email);
			$stmt->execute();
			$stmt->close();

$sql 			= "SELECT `a`.`text`,b.* FROM kod_template a JOIN  utiliti_email b WHERE 1 AND a.kod = 'E01'";
			$param_data 	= array();
			$datax 			= mysqli_prepare_all($sql,$param_type = "auto",$param_data);
			$template_text	= $datax->fetch_assoc();

$http 	= isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on'? "https://" : "http://";
			$url 	= $http . $_SERVER["SERVER_NAME"] .'/edgpens/';

$find 		= array(
							"%url%",
							"%token%",
							"%year%",
							"%templatename%");
			$replace 	= array(
							$url,
							$token,
							date("Y"),
							$template['name'].' '.$template['version']);
			echo str_replace($find,$replace,$template_text['text']);

// include('recover_msg.php');
			$fileValue =123;

// ob_end_clean();

//Server settings
			// $mail->SMTPDebug 	= SMTP::DEBUG_SERVER; // Enable verbose debug output
			$mail->isSMTP(); // Send using SMTP
			$mail->SMTPOptions 	= array('ssl' => array('verify_peer_name' => false));
			$mail->Host 	 	= gethostbyname($template_text['host']);
			$mail->SMTPAuth 	= $template_text['smtpauth'];
			$mail->SMTPSecure 	= $template_text['smtpsecure'];
			$mail->Port 		= $template_text['port'];
			$mail->AuthType 	= 'XOAUTH2';

$oauthUserEmail 	= $template_text['username'];
			$clientId 			= $template_text['cid'];
			$clientSecret 		= $template_text['csecret'];
			$refreshToken 		= $template_text['ctoken'];

$provider = new Google(
				[
					'clientId' => $clientId,
					'clientSecret' => $clientSecret,
				]
			);
			$mail->setOAuth(
				new OAuth(
					[
						'provider' => $provider,
						'clientId' => $clientId,
						'clientSecret' => $clientSecret,
						'refreshToken' => $refreshToken,
						'userName' => $oauthUserEmail,
					]
				)
			);

//Recipients
			$mail->setFrom($template_text['setfrom1'],$template_text['setfrom2']);
			// $mail->addAddress('joe@example.net', 'Joe User');	 // Add a recipient
			$mail->addAddress($email);			   // Name is optional
			// $mail->addReplyTo('info@example.com', 'Information');
			// $mail->addCC('cc@example.com');
			// $mail->addBCC('bcc@example.com');

// Attachments
			// $mail->addAttachment('/var/tmp/file.tar.gz');		 // Add attachments
			// $mail->addAttachment('/tmp/image.jpg', 'new.jpg');	// Optional name

// Content

$mail->isHTML(true);								  // Set email format to HTML
			$mail->Subject 	= 'Account Recovery';
			$mail->Body 	= $fileValue;
			$mail->AltBody 	= 'This is the body in plain text for non-HTML mail clients';

$mail->send();
			echo 'Message has been sent';
		// } catch (Exception $e) {
		// 	echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}";
		// }

// include "recover_msg.php";
		// exit();

skipsend:

$_SESSION['success']		= 1;
		$_SESSION['success_msg']	= "Account recovery email has been sent.";

// echo "<script>window.location.replace('index.php?page=account_recovery&success=1');</script>";
		// exit();

?>
		
</div>

${this.title}

Code Editor : account_recovery_test.php