Gecko [ edgpens.lpkmn.gov.my ]

Name	Size	Permission
css	[ DIR ]	drwxrwxrwx
edg	[ DIR ]	drwxrwxrwx
edg_200430	[ DIR ]	drwxrwxrwx
edg_20200630	[ DIR ]	drwxrwxrwx
edg_old	[ DIR ]	drwxrwxrwx
extension	[ DIR ]	drwxrwxrwx
img	[ DIR ]	drwxrwxrwx
inc	[ DIR ]	drwxrwxrwx
js	[ DIR ]	drwxrwxrwx
kod	[ DIR ]	drwxrwxrwx
pdf	[ DIR ]	drwxrwxrwx
reports	[ DIR ]	drwxrwxrwx
upload	[ DIR ]	drwxrwxrwx
utility	[ DIR ]	drwxrwxrwx
vendor	[ DIR ]	drwxrwxrwx
.htaccess	1.16 KB	-rw-rw-rw-
!test.php	17 B	-rw-rw-rw-
Nota14102020.docx	22.8 KB	-rw-rw-rw-
access.php	253 B	-rw-rw-rw-
access2.php	245 B	-rw-rw-rw-
account_recovery.php	7.85 KB	-rw-rw-rw-
ajax.php	3.6 KB	-rw-rw-rw-
company_search.php	8.37 KB	-rw-rw-rw-
composer.json	1.42 KB	-rw-rw-rw-
composer.lock	156.45 KB	-rw-rw-rw-
ctype.txt	266 B	-rw-rw-rw-
custom.css	3.7 KB	-rw-rw-rw-
custom.js	9.66 KB	-rw-rw-rw-
custom200630.js	6.46 KB	-rw-rw-rw-
custom_200630.css	1.04 KB	-rw-rw-rw-
custom_200705.js	6.82 KB	-rw-rw-rw-
dashboard.php	21.52 KB	-rw-rw-rw-
dashboard_old.php	51 B	-rw-rw-rw-
dbedgpens.sql	3.85 MB	-rw-rw-rw-
dglist.php	3.97 KB	-rw-rw-rw-
dgweb-dg.txt	2.65 MB	-rw-rw-rw-
dgweb.xls	297.5 KB	-rw-rw-rw-
err_404.php	75 B	-rw-rw-rw-
imp_data.php	2.03 KB	-rw-rw-rw-
index.php	2.83 KB	-rw-rw-rw-
index_footer.php	138 B	-rw-rw-rw-
index_head.php	663 B	-rw-rw-rw-
index_search.php	667 B	-rw-rw-rw-
ins_composer.php	417 B	-rw-rw-rw-
ktn-pens-companies.txt	330.12 KB	-rw-rw-rw-
ktn-pens-port.txt	602.81 KB	-rw-rw-rw-
ktn-pens-vessel.txt	6.12 MB	-rw-rw-rw-
ktn-pens-vtype.txt	353 B	-rw-rw-rw-
login.php	11.47 KB	-rw-rw-rw-
login_200704.php	9.81 KB	-rw-rw-rw-
main.php	584 B	-rw-rw-rw-
nota.txt	120 B	-rw-rw-rw-
odbc.php	18.73 KB	-rw-rw-rw-
odbc_test.php	15.24 KB	-rw-rw-rw-
readtext.php	7.99 KB	-rw-rw-rw-
recover_msg.php	806 B	-rw-rw-rw-
registration.php	24.54 KB	-rw-rw-rw-
registration_2.php	12.94 KB	-rw-rw-rw-
registration_submit.php	5.18 KB	-rw-rw-rw-
reset_password.php	9.48 KB	-rw-rw-rw-
self_register.php	14.57 KB	-rw-rw-rw-
sessions.php	2.78 KB	-rw-rw-rw-
sessions_200705.php	1.4 KB	-rw-rw-rw-
sessions_200721.php	1.75 KB	-rw-rw-rw-
test.php	11.8 KB	-rw-rw-rw-
test_sess.php	1.35 KB	-rw-rw-rw-
testinput.php	6.7 KB	-rw-rw-rw-
testx.php	4 B	-rw-rw-rw-
vessel.txt	498.07 KB	-rw-rw-rw-
vessel2.txt	249.04 KB	-rw-rw-rw-
zzz	11 B	-rw-rw-rw-
zzz.txt	249.04 KB	-rw-rw-rw-
~$ta14102020.docx	162 B	-rw-rw-rw-
~WRL0738.tmp	23.29 KB	-rw-rw-rw-

Code Editor : account_recovery.php

<?php if(empty($page)){ include("access2.php"); } ?>

var typ = '';

if(x == '1')
			typ = "success";
		else if(x == '2')
			typ = "warning";
		else
			typ = "danger";

$.bootstrapGrowl('<h4><strong>Notification</strong></h4> <p>'+y+'</p>', {
		type: typ,
		delay: 3000,
		allow_dismiss: true,
		offset: {from: 'top', amount: 20}
		});

};
});
</script>
<?php

growl_me($_SESSION,$g_success);

require 'extension/PHPMailer-master/src/Exception.php';
	require 'extension/PHPMailer-master/src/PHPMailer.php';
	require 'extension/PHPMailer-master/src/SMTP.php';

use PHPMailer\PHPMailer\PHPMailer;
	use PHPMailer\PHPMailer\Exception;
	use PHPMailer\PHPMailer\SMTP;

$success 	= 0;
	if($_POST):

$email 	= $_POST['user-email'];
		$mail 	= new PHPMailer(true);

$sql 	= "SELECT a.* FROM user_list a WHERE 1 AND emailUser = ?";
		$param_data 	= array(
							"emailUser" 	=> $email
						 	);
		$data 	= mysqli_prepare_all($sql,$param_type = "auto",$param_data);
		$table 	= "user_list";

if(empty($data->fetch_assoc())){
			$sql 	= "SELECT a.* FROM user_register a WHERE 1 AND emailUser = ? and flagUser=2";
			$param_data 	= array(
								"emailUser" 	=> $email
							 	);
			$data 	= mysqli_prepare_all($sql,$param_type = "auto",$param_data);
			$table 	= "user_register";
		}

if(empty($data->fetch_assoc()))
			goto skipsend;

try {

ob_start();

$token 	= md5($email.date("dmyh:i:s"));
			$stmt 	= $mysqli->stmt_init();
			$stmt->prepare("UPDATE {$table} SET recovery_token = ?, recovery_exp = ADDTIME(NOW(), '00:30:00') WHERE emailUser = ? AND flagUser=2");
			$stmt->bind_param("ss",$token,$email);
			$stmt->execute();
			$stmt->close();

$sql 			= "SELECT `a`.`text`,b.* FROM kod_template a JOIN  utiliti_email b WHERE 1 AND a.kod = 'E01'";
			$param_data 	= array();
			$datax 			= mysqli_prepare_all($sql,$param_type = "auto",$param_data);
			$template_text	= $datax->fetch_assoc();

$http 	= isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on'? "https://" : "http://";
			$url 	= $http . $_SERVER["SERVER_NAME"] .'/edgpens/';

$find 		= array(
							"%url%",
							"%token%",
							"%year%",
							"%templatename%");
			$replace 	= array(
							$url,
							$token,
							date("Y"),
							$template['name'].' '.$template['version']);
			echo str_replace($find,$replace,$template_text['text']);

// include('recover_msg.php');
			$fileValue = ob_get_contents();

ob_end_clean();

//Server settings
			// $mail->SMTPDebug 	= SMTP::DEBUG_SERVER;					  // Enable verbose debug output
			$mail->isSMTP();											// Send using SMTP
			$mail->Host	   		= $template_text['host'];					// Set the SMTP server to send through
			$mail->SMTPAuth 	= $template_text['smtpauth'];								   // Enable SMTP authentication
			$mail->Username 	= $template_text['username'];					 // SMTP username
			$mail->Password 	= $template_text['password'];							   // SMTP password
			$mail->SMTPSecure 	= $template_text['smtpsecure'];		 // Enable TLS encryption; `PHPMailer::ENCRYPTION_SMTPS` encouraged
			$mail->Port 		= $template_text['port'];									// TCP port to connect to, use 465 for `PHPMailer::ENCRYPTION_SMTPS` above

//Recipients
			$mail->setFrom($template_text['setfrom1'],$template_text['setfrom2']);
			// $mail->addAddress('joe@example.net', 'Joe User');	 // Add a recipient
			$mail->addAddress($email);			   // Name is optional
			// $mail->addReplyTo('info@example.com', 'Information');
			// $mail->addCC('cc@example.com');
			// $mail->addBCC('bcc@example.com');

// Attachments
			// $mail->addAttachment('/var/tmp/file.tar.gz');		 // Add attachments
			// $mail->addAttachment('/tmp/image.jpg', 'new.jpg');	// Optional name

// Content

$mail->isHTML(true);								  // Set email format to HTML
			$mail->Subject 	= 'Account Recovery';
			$mail->Body 	= $fileValue;
			$mail->AltBody 	= 'This is the body in plain text for non-HTML mail clients';

$mail->send();
			echo 'Message has been sent';
		} catch (Exception $e) {
			echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}";
		}

// include "recover_msg.php";
		// exit();

skipsend:

$_SESSION['success']		= 1;
		$_SESSION['success_msg']	= "Account recovery email has been sent.";

echo "<script>window.location.replace('index.php?page=account_recovery&success=1');</script>";
		exit();

endif;

// if()
?>

<div class="row">
		<div class="col-sm-12">
			<div class="widget-image widget-image-xs">
				<img src="img/lpkmn/bg.jpg" alt="image">
				<div class="widget-image-content">
					<div class="pull-right text-light-op">
					<strong>
					<form id="form-login" method="post" action="login.php" class="form-inline" style="vertical-align: top">
						<div class="row" style="vertical-align: top;margin-bottom: 0px;text-align: right">
							<div class="col-md-12">
								<i><a style="cursor: pointer;color: #CCC;" href="index.php?page=company_search">Register</a></i>
								&nbsp;||&nbsp;
								<i><a style="cursor: pointer;color: #CCC;" href="index.php?page=account_recovery">Forgot Password</a></i>
							</div>
						</div>
								<hr style="margin: 3px">
						<div class="form-group" style="vertical-align: top;margin-bottom: 1px">
								<div class="col-md-12 nopadding">
								<input type="text" id="login-user" name="login-user" class="form-control" placeholder="Your email..">
								</div>
						</div>
						<div class="form-group" style="vertical-align: top;margin-bottom: 1px">
								<div class="col-md-12 nopadding">
								<input type="password" id="login-password" name="login-password" class="form-control" placeholder="Your password..">
								</div>
						</div>
						<div class="form-group form-actions" style="text-align:right;vertical-align: top;margin-bottom: 1px">
							<div class="col-md-12 nopadding">
								<button type="submit" class="btn btn-effect-ripple btn-sm btn-primary" style="margin-top: 3px"><i class="fa fa-unlock-alt"></i> Login</button>
							</div>
						</div>
						
					</form>					 
					</strong>
					</div>
					<h2 class="widget-heading text-light"><strong>eDGPENS LPKMn</strong></h2>
					<h3 class="widget-heading text-light-op">Lembaga Pelabuhan Kemaman</h3>
				</div>
			</div>
		</div>
	</div>

<div id="login-container" style="position: relative;top:20px">
	
	<div class="row">
		<div class="col-md-12">
	<div class="block animation-fadeInQuickInv">
		
		<div class="block-title">
			<h2>Account Recovery</h2>
		</div>

<form id="form-login" method="post" class="form-bordered">
			<div class="form-group">
						<label for="example-nf-email">Email</label>
						<input type="email" id="user-email" name="user-email" required class="form-control">
						<span class="help-block">Please enter your email</span>
			</div>
			<div class="form-group form-actions">
					<button type="submit" class="btn btn-effect-ripple btn-sm btn-primary btn-block"><i class="fa fa-check"></i> Send Recovery Password</button>
			</div>
		</form>
		
	</div>

<footer class="text-muted text-center animation-pullUp">
		<small><span id="year-copy"></span> &copy; <a href="login.php" target="_self"><?php echo $template['name'] . ' ' . $template['version']; ?></a></small>
	</footer>
	
</div></div>
</div>
</div>

<?php // include 'inc/template_scripts.php'; ?>

<script src="js/pages/readyLogin.js"></script>
<script>$(function(){ ReadyLogin.init(); });</script>

${this.title}

Code Editor : account_recovery.php