FM / controllers

/home/techb158/exp.abdallabala.com/application/controllers/

/home/techb158/exp.abdallabala.com/application/controllers

Name	Size	Mode	Actions
.DS_Store	6148	0644	edit dl rm
accounts.php	7729	0644	edit dl rm
admin.php	6733	0644	edit dl rm
ajax.date-summary.php	3796	0644	edit dl rm
ajax.expense-calendar.php	1031	0644	edit dl rm
ajax.income-calendar.php	997	0644	edit dl rm
api.php	7595	0644	edit dl rm
appearance.php	2029	0644	edit dl rm
autologin.php	1599	0644	edit dl rm
board.php	989	0644	edit dl rm
calendar.php	4949	0644	edit dl rm
client.php	63019	0644	edit dl rm
clx_api.php	43178	0644	edit dl rm
console.php	5700	0644	edit dl rm
contacts.php	61254	0644	edit dl rm
cp.php	1557	0644	edit dl rm
customers.php	97	0644	edit dl rm
dashboard-alt.php	32	0644	edit dl rm
dashboard.php	36581	0644	edit dl rm
default.php	142	0644	edit dl rm
delete.php	9631	0644	edit dl rm
demo.php	689	0644	edit dl rm
documents.php	5493	0644	edit dl rm
editor.php	2149	0644	edit dl rm
export.php	4874	0644	edit dl rm
files.php	1243	0644	edit dl rm
generate.php	1468	0644	edit dl rm
help.php	381	0644	edit dl rm
ibtest.php	211	0644	edit dl rm
index.html	112	0644	edit dl rm
invoices.php	58182	0644	edit dl rm
iview.php	1410	0644	edit dl rm
jsonapi.php	4701	0644	edit dl rm
jsonexport.php	3312	0644	edit dl rm
legacy.php	25	0644	edit dl rm
login.php	6440	0644	edit dl rm
logout.php	80	0644	edit dl rm
orders.php	8846	0644	edit dl rm
plugins.php	426	0644	edit dl rm
ps.php	10016	0644	edit dl rm
quotes.php	39334	0644	edit dl rm
reorder.php	2404	0644	edit dl rm
reports.php	26227	0644	edit dl rm
search.php	2125	0644	edit dl rm
settings.php	110091	0644	edit dl rm
sys_imgcrop.php	3938	0644	edit dl rm
tags.php	1913	0644	edit dl rm
tax.php	5024	0644	edit dl rm
transactions.php	28561	0644	edit dl rm
update.php	1839	0644	edit dl rm
update_473.php	52763	0644	edit dl rm
util.php	18027	0644	edit dl rm

Edit: /home/techb158/exp.abdallabala.com/application/controllers/cp.php (1557B)

<?php
if (isset($routes['1'])) {
    $do = $routes['1'];
} else {
    $do = 'login-display';
}
switch ($do) {
    case 'post':
        $username = _post('username');
        $password = _post('password');
        if ($username != '' and $password != '') {
            $d = ORM::for_table('sys_users')
                ->where('username', $username)
                ->find_one();
            if ($d) {
                $d_pass = $d['password'];
                if (Password::_verify($password, $d_pass) == true) {
                    //Now check if OTP is enabled
                    if ($d['otp'] == 'Yes') {
                        Otp::make($d['id']);
                        $_SESSION['tuid'] = $d['id'];

r2(U . 'otp');
                    } else {
                        $_SESSION['uid'] = $d['id'];
                        $d->last_login = date('Y-m-d H:i:s');
                        $d->save();
                        r2(U . $config['redirect_url']);
                    }
                } else {
                    _msglog('e', 'Invalid Username or Password');

r2(U . 'login');
                }
            } else {
                _msglog('e', 'Invalid Username or Password');

r2(U . 'login');
            }
        } else {
            _msglog('e', 'Invalid Username or Password');

r2(U . 'login');
        }

break;

case 'login-display':
        $ui->display('login.tpl');
        break;

default:
        $ui->display('login.tpl');
        break;
}

where('username', $username) ->find_one(); if ($d) { $d_pass = $d['password']; if (Password::_verify($password, $d_pass) == true) { //Now check if OTP is enabled if ($d['otp'] == 'Yes') { Otp::make($d['id']); $_SESSION['tuid'] = $d['id']; r2(U . 'otp'); } else { $_SESSION['uid'] = $d['id']; $d->last_login = date('Y-m-d H:i:s'); $d->save(); r2(U . $config['redirect_url']); } } else { _msglog('e', 'Invalid Username or Password'); r2(U . 'login'); } } else { _msglog('e', 'Invalid Username or Password'); r2(U . 'login'); } } else { _msglog('e', 'Invalid Username or Password'); r2(U . 'login'); } break; case 'login-display': $ui->display('login.tpl'); break; default: $ui->display('login.tpl'); break; }