OXIESEC PANEL

Name	Size	Modified	Perms
📄 --htpasswd	48 bytes	10/11/2024 05:50:59 AM	rw-rw-rw-
📁 ..	-	10/11/2024 05:53:15 AM	rwxr-xr-x
📄 .htaccess	131 bytes	10/11/2024 05:50:59 AM	rw-rw-rw-
📄 admin_filemanager.php	8.17 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📄 admin_footer.php	861 bytes	10/11/2024 05:50:59 AM	rw-rw-rw-
📄 admin_functions.php	2.15 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📄 admin_header.php	10.52 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📄 admin_login.php	3.59 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📄 admin_new.php	39.63 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📄 admin_tools.php	9.4 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📁 assetmanager	-	10/11/2024 05:50:59 AM	rwxr-xr-x
📁 bootstrap	-	10/11/2024 05:50:59 AM	rwxr-xr-x
📄 dblib.php	4.59 KB	10/11/2024 05:51:49 AM	rw-rw-rw-
📁 docs	-	10/11/2024 05:50:59 AM	rwxr-xr-x
📁 fontawesome-free	-	10/11/2024 05:50:59 AM	rwxr-xr-x
📄 func_lib.php	19.88 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📄 genmodfile.php	4.61 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📁 images	-	10/11/2024 05:50:59 AM	rwxr-xr-x
📄 index.php	909 bytes	10/11/2024 05:50:59 AM	rw-rw-rw-
📄 interstitial.php	562 bytes	10/11/2024 05:50:59 AM	rw-rw-rw-
📁 js	-	10/11/2024 05:50:59 AM	rwxr-xr-x
📄 mailtest.php	627 bytes	10/11/2024 05:50:59 AM	rw-rw-rw-
📁 photos	-	10/11/2024 05:50:59 AM	rwxr-xr-x
📄 save_to_excel.php	4.1 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📁 scripts	-	10/11/2024 05:50:59 AM	rwxr-xr-x
📄 setup_wizard.php	16.54 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📁 style	-	10/11/2024 05:50:59 AM	rwxr-xr-x
📁 themes	-	10/11/2024 05:50:59 AM	rwxr-xr-x
📄 upgrade.php	11.67 KB	10/11/2024 05:50:59 AM	rw-rw-rw-
📁 vendor1	-	10/11/2024 05:50:59 AM	rwxr-xr-x

Editing: upgrade.php

<?php

session_start();

include('dblib.php');
include('func_lib.php');
include('admin_functions.php');

$getar = $_GET;
$getkeys = array_keys($getar);
for($i=0; $i<count($getkeys); $i++){
$k = $getkeys[$i];
$v = $getar[$k];
${$k}=cleanQuery($v,"yes");
}

$getar = $_POST;
$getkeys = array_keys($getar);
for($i=0; $i<count($getkeys); $i++){
$k = $getkeys[$i];
$v = $getar[$k];
${$k}=cleanQuery($v,"yes");
}

echo "Creating Admin Tables... \n";

$sql = "CREATE TABLE admin_tables (
  sr_no int(11) unique auto_increment,
  table_name varchar(50) DEFAULT NULL,
  field_name varchar(100) DEFAULT NULL,
  field_label varchar(100) DEFAULT NULL,
  field_type varchar(50) DEFAULT NULL,
  filtername varchar(50) DEFAULT NULL,
  keyfield tinyint(4) NOT NULL,
  listed tinyint(4) DEFAULT NULL,
  editable tinyint(4) NOT NULL,
  searchable tinyint(4) DEFAULT NULL,
  exportable tinyint(4) DEFAULT NULL,
  quick tinyint(4) NOT NULL,
  quick_filtername varchar(50) DEFAULT NULL,
  upload_folder varchar(100) DEFAULT NULL,
  status varchar(10) DEFAULT NULL
)";
$qid = db_query($sql);

$sql = "INSERT INTO admin_tables (sr_no, table_name, field_name, field_label, field_type, filtername, keyfield, listed, editable, searchable, exportable, quick, quick_filtername, upload_folder, status) VALUES
(1, 'admin_style', 'sr_no', 'Sr No', 'text', '', 1, 1, 1, 1, 1, 0, '', '', 'active'),
(2, 'admin_style', 'admin_style', 'Admin Style', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(3, 'admin_style', 'status', 'Status', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(4, 'site_settings', 'sr_no', 'Sr No', 'text', '', 1, 1, 1, 1, 1, 0, '', '', 'active'),
(5, 'site_settings', 'setting', 'Setting', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(6, 'site_settings', 'setting_value', 'Setting Value', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(7, 'admin_favorites', 'sr_no', 'Sr No', 'text', '', 1, 1, 1, 1, 1, 0, '', '', 'active'),
(8, 'admin_favorites', 'username', 'Username', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(9, 'admin_favorites', 'title', 'Title', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(10, 'admin_favorites', 'url', 'Url', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(11, 'admin_favorites', 'post_date', 'Post Date', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(12, 'admin_favorites', 'status', 'Status', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(13, 'admin_themes', 'sr_no', 'Sr No', 'text', '', 1, 1, 1, 1, 1, 0, '', '', 'active'),
(14, 'admin_themes', 'admin_style', 'Admin Style', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(15, 'admin_themes', 'status', 'Status', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(16, 'admin_details', 'sr_no', 'Sr No', 'text', '', 1, 1, 1, 1, 1, 0, '', '', 'active'),
(17, 'admin_details', 'client_name', 'Client Name', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(18, 'admin_details', 'logofile', 'Logofile', 'upload', '', 0, 1, 1, 1, 1, 0, '', 'images/', 'active'),
(19, 'admin_details', 'admin_style', 'Admin Style', 'filter', 'admin_style', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(20, 'admin_details', 'default_url', 'Default Url', 'text', '', 0, 0, 0, 0, 1, 0, '', '', 'active'),
(21, 'admin_details', 'log_status', 'Log Status', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(22, 'admin_details', 'status', 'Status', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(23, 'admin_links', 'sr_no', 'Sr No', 'text', '', 1, 1, 1, 0, 1, 0, '', '', 'active'),
(24, 'admin_links', 'link_id', 'Link Id', 'increment', '', 0, 1, 1, 0, 1, 0, '', '', 'active'),
(25, 'admin_links', 'tab_id', 'Tab Id', 'filter', 'admin_tabs', 0, 1, 1, 0, 1, 1, 'admin_tabs', '', 'active'),
(26, 'admin_links', 'title', 'Title', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(27, 'admin_links', 'url', 'Url', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(28, 'admin_links', 'grouping', 'Grouping', 'text', '', 0, 0, 0, 0, 1, 0, '', '', 'active'),
(29, 'admin_links', 'level_id', 'Level Id', 'text', '', 0, 0, 0, 0, 1, 0, '', '', 'active'),
(30, 'admin_links', 'order_no', 'Order No', 'text', '', 0, 1, 1, 0, 1, 0, '', '', 'active'),
(31, 'admin_links', 'status', 'Status', 'status', '', 0, 1, 1, 0, 1, 0, '', '', 'active'),
(32, 'admin_tabs', 'sr_no', 'Sr No', 'text', '', 1, 1, 1, 1, 1, 0, '', '', 'active'),
(33, 'admin_tabs', 'tab_id', 'Tab Id', 'increment', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(34, 'admin_tabs', 'tab_name', 'Tab Name', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(35, 'admin_tabs', 'order_no', 'Order No', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(36, 'admin_tabs', 'status', 'Status', 'status', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(37, 'admin_users', 'sr_no', 'Sr No', 'text', '', 1, 1, 1, 0, 1, 0, '', '', 'active'),
(38, 'admin_users', 'name', 'Name', 'text', '', 0, 1, 1, 0, 1, 0, '', '', 'active'),
(39, 'admin_users', 'username', 'Username', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(40, 'admin_users', 'password', 'Password', 'text', '', 0, 0, 0, 0, 0, 0, '', '', 'active'),
(41, 'admin_users', 'email', 'Email', 'text', '', 0, 1, 1, 1, 1, 0, '', '', 'active'),
(42, 'admin_users', 'access_distrib', 'Access Distrib', 'textarea', '', 0, 0, 1, 0, 1, 0, '', '', 'active'),
(43, 'admin_users', 'default_url', 'Default Url', 'text', '', 0, 0, 0, 0, 0, 0, '', '', 'active'),
(44, 'admin_users', 'last_login', 'Last Login', 'text', '', 0, 1, 1, 0, 1, 0, '', '', 'active'),
(45, 'admin_users', 'status', 'Status', 'text', '', 0, 1, 1, 0, 1, 0, '', '', 'active')";

$qid = db_query($sql);

echo "Creating Admin Filters... \n";

$sql ="CREATE TABLE admin_filters (
  sr_no int(11) unique auto_increment,
  filtername varchar(50) DEFAULT NULL,
  display_name varchar(50) DEFAULT NULL,
  table_name varchar(100) DEFAULT NULL,
  value_field varchar(50) DEFAULT NULL,
  display_field varchar(50) DEFAULT NULL,
  sortby varchar(50) DEFAULT NULL,
  sortorder varchar(20) DEFAULT NULL,
  classname varchar(50) DEFAULT NULL
)";

$qid = db_query($sql);

$sql = "INSERT INTO admin_filters (sr_no, filtername, display_name, table_name, value_field, display_field, sortby, sortorder, classname) VALUES
(1, 'admin_style', 'Admin Theme', 'admin_themes', 'admin_style', 'admin_style', 'admin_style', 'asc', 'form-control form-control-sm'),
(2, 'admin_tabs', 'Select Tab', 'admin_tabs', 'tab_id', 'tab_name', 'tab_id', 'asc', 'form-control form-control-sm')";

$qid = db_query($sql);

echo "Creating Admin Favorites ... \n";

$sql = "CREATE TABLE admin_favorites (
  sr_no int(11) unique auto_increment,
  username varchar(50) DEFAULT NULL,
  title varchar(200) DEFAULT NULL,
  url varchar(200) DEFAULT NULL,
  post_date date DEFAULT NULL,
  status varchar(10) DEFAULT NULL
)";

$qid = db_query($sql);

echo "Creating Site Settings... \n";

$sql = "CREATE TABLE site_settings (
  sr_no int(11) unique auto_increment,
  setting varchar(100) DEFAULT NULL,
  setting_value varchar(200) DEFAULT NULL
)";

$qid = db_query($sql);

$sql = "INSERT INTO site_settings (sr_no, setting, setting_value) VALUES
(1, 'site_root', 'http://127.0.0.1/clientname/htm/'),
(2, 'meta_title', 'Client title'),
(3, 'meta_keywords', 'client keywords'),
(4, 'meta_description', 'client description'),
(5, 'canonical', 'https://client.com/')";

$qid = db_query($sql);

echo "Creating Admin Themes ... \n";

$sql = "CREATE TABLE admin_themes (
  sr_no int(11) unique auto_increment,
  admin_style varchar(25) DEFAULT NULL,
  status varchar(10) DEFAULT NULL
)";

$qid = db_query($sql);

$sql = "INSERT INTO admin_themes (sr_no, admin_style, status) VALUES
(1, 'default', 'active'),
(2, 'ecofriendly', 'active'),
(3, 'health', 'active'),
(4, 'neon', 'active'),
(5, 'peach', 'active'),
(6, 'teal', 'active'),
(7, 'calm', 'active'),
(8, 'oldradio', 'active'),
(9, 'womenpower', 'active'),
(11, 'pastelsforoffice', 'active'),
(12, 'steel', 'active'),
(13, 'united', 'active'),
(14, 'sies', 'active')";

$qid = db_query($sql);

echo "Creating Admin Tabs... \n";

$sql = "CREATE TABLE admin_tabs (
  sr_no int(11) unique auto_increment,
  tab_id int(11) DEFAULT NULL,
  tab_name varchar(100) DEFAULT NULL,
  order_no int(11) DEFAULT NULL,
  status varchar(10) DEFAULT NULL
)";

$qid = db_query($sql);

$sql = "insert into admin_tabs (tab_id, tab_name, order_no, status) values ('1','Admin','1','active')";
$qid = db_query($sql);

echo "Creating Admin Logs... \n";

$sql = "CREATE TABLE admin_logs (
  sr_no int(11) unique auto_increment,
  post_date datetime DEFAULT NULL,
  username varchar(50) DEFAULT NULL,
  zid varchar(20) DEFAULT NULL,
  action varchar(20) DEFAULT NULL,
  record_id int(11) DEFAULT NULL
)";

$qid = db_query($sql);

echo "Updating misc tables...\n";

$sql = "ALTER TABLE admin_details ADD logofile VARCHAR(150) NULL AFTER client_name";
$qid = db_query($sql);

$sql = "ALTER TABLE admin_details ADD log_status TINYINT NOT NULL AFTER default_url";
$qid = db_query($sql);

$sql = "ALTER TABLE admin_links ADD tab_id SMALLINT NULL AFTER link_id";
$qid = db_query($sql);

$sql = "CREATE TABLE admin_users AS SELECT * FROM admin";
$qid = db_query($sql);

$sql = "ALTER TABLE admin_users ADD last_login DATETIME NULL AFTER access_distrib";
$qid = db_query($sql);

echo "Adding links to Admin Links table... \n";

$link_array = array();

$sr_no = get_max('admin_links','sr_no');
$link_id = get_max('admin_links','link_id');
$sql = "insert into admin_links (sr_no, link_id, tab_id, title, url, order_no, status) values ('".$sr_no."','".$link_id."','1','Site Settings','admin_new.php?zid=site_settings','".$sr_no."','active')";
$qid = db_query($sql);
array_push($link_array,$link_id);

$sr_no = get_max('admin_links','sr_no');
$link_id = get_max('admin_links','link_id');
$sql = "insert into admin_links (sr_no, link_id, tab_id, title, url, order_no, status) values ('".$sr_no."','".$link_id."','1','Admin Access','admin_tools.php','".$sr_no."','active')";
$qid = db_query($sql);
array_push($link_array,$link_id);

$sr_no = get_max('admin_links','sr_no');
$link_id = get_max('admin_links','link_id');
$sql = "insert into admin_links (sr_no, link_id, tab_id, title, url, order_no, status) values ('".$sr_no."','".$link_id."','1','Admin Themes','admin_new.php?zid=admin_themes','".$sr_no."','active')";
$qid = db_query($sql);
array_push($link_array,$link_id);

$sr_no = get_max('admin_links','sr_no');
$link_id = get_max('admin_links','link_id');
$sql = "insert into admin_links (sr_no, link_id, tab_id, title, url, order_no, status) values ('".$sr_no."','".$link_id."','1','Setup Wizard','setup_wizard.php','".$sr_no."','active')";
$qid = db_query($sql);
array_push($link_array,$link_id);

$sr_no = get_max('admin_links','sr_no');
$link_id = get_max('admin_links','link_id');
$sql = "insert into admin_links (sr_no, link_id, tab_id, title, url, order_no, status) values ('".$sr_no."','".$link_id."','1','Admin Tabs','admin_new.php?zid=admin_tabs','".$sr_no."','active')";
$qid = db_query($sql);
array_push($link_array,$link_id);

$sql_temp = "select access_distrib from admin_users where sr_no = '1'";
$qid_temp = db_query($sql_temp);
$result_temp = db_fetch_object($qid_temp);

$access_distrib = $result_temp->access_distrib."|".implode("|",$link_array);

$sql = "update admin_users set access_distrib = '".$access_distrib."'where sr_no = '1'";
$qid = db_query($sql);

$sql = "update admin_links set tab_id = '1' where title = 'Admin Links'";
$qid = db_query($sql);

$sql = "update admin_links set tab_id = '1' where title = 'Admin Details'";
$qid = db_query($sql);

$sql = "update admin_links set tab_id = '1', title = 'Admin Users', url = 'admin_new.php?zid=admin_users' where title = 'Admin'";
$qid = db_query($sql);