Zploit 0-Day Shell

:: Editing File: my-photos.php

<?php 
include('header.php');
include('php/fetch_photo_gallery.php');
?>

<div class="page-content">
    <?php 
    if ($verified_status == 1) {               
    ?>
    <style type="text/css">
        .banner-user .media .item-title:before {
            content: "\eed6";
            font-family: IcoFont;
            text-align: center;
            display: inline-block;
            height: 26px;
            width: 26px;
            line-height: 26px;
            background-color: #17dd17;
            border-radius: 50%;
            font-size: 20px;
            color: #ffffff;
            position: absolute;
            top: 1px;
            right: -38px;
        }
    </style>
    <?php 
    }
    ?>
    
    <div class="container">
        
        <div class="user-top-header">
            <ul class="menu-list">
                <li><a href="my-soulmeet">
                    <i class="icofont-user"></i>
                    <span>My Profile</span>
                </a></li>
                <li class="active"><a href="my-photos">
                    <i class="icofont-picture"></i>
                    <span>My Photos</span>
                </a></li>
                <li><a href="partner-preferences">
                    <i class="icofont-heart"></i>
                    <span>Partner Preferences</span>
                </a></li>
                <li><a href="settings">
                    <i class="icofont-settings"></i>
                    <span>Setting</span>
                </a></li>
            </ul>
        </div>
        
        
        <div class="current-profile-section">
            <div class="widget-heading">
                <div>
                    <h3 style="font-size: 20px!important; color: #fff!important;">
                        <i class="icofont-image" style="margin-right: 10px;"></i>Current Profile Image
                    </h3>
                </div>
            </div>
            <div class="row">
                <div class="col-lg-3 col-md-4 col-6">
                    <div class="photo-card profile-active">
                        <?php 
                        $img_path = '../admin/images/members/';
                        $current_profile_img = '';
                        $user_id_escaped_profile = mysqli_real_escape_string($conn, $user_id);
                        $sql_current_profile = "SELECT profile_img FROM profile_images WHERE user_id = '$user_id_escaped_profile'";
                        $result_current_profile = mysqli_query($conn, $sql_current_profile);
                        if ($result_current_profile && mysqli_num_rows($result_current_profile) > 0) {
                            $row_profile = mysqli_fetch_assoc($result_current_profile);
                            $current_profile_img = $row_profile['profile_img'];
                        }
                        if (!empty($current_profile_img)) {
                            ?>
                            <div class="photo-wrapper">
                                <a href="<?=$img_path?><?=$current_profile_img?>" class="popup-zoom">
                                    <img src="<?=$img_path?><?=$current_profile_img?>" alt="Current Profile Image">
                                </a>
                            </div>
                            <div class="photo-actions">
                                <span class="btn-current-profile">
                                    <i class="icofont-check-circled"></i> Current Profile
                                </span>
                            </div>
                            <?php
                        } else {
                            ?>
                            <div class="no-profile-placeholder">
                                <i class="icofont-user"></i>
                                <span>No Profile Image</span>
                            </div>
                            <?php
                        }
                        ?>
                    </div>
                </div>
            </div>
        </div>
        
        
        <div class="block-box user-about" style="margin-top: 20px;">
            <div class="widget-heading">
                <div>
                    <h3 class="section-heading" style="font-size: 24px!important; margin-bottom: 25px;">
                        <i class="icofont-picture" style="margin-right: 10px; color: #cd4252;"></i>Photo Gallery
                    </h3>
                </div>
            </div>
            <div class="row gutters-20 zoom-gallery" id="fetchPhotos">
                <?php 
                $total = 0;
                $img_path = '../admin/images/members/';
                
                // Check if photo_gallery table exists, create if not
                $table_check = mysqli_query($conn, "SHOW TABLES LIKE 'photo_gallery'");
                if (!$table_check || mysqli_num_rows($table_check) == 0) {
                    // Create the table
                    $sql_create_table = "CREATE TABLE IF NOT EXISTS `photo_gallery` (
                      `photo_id` int(11) NOT NULL AUTO_INCREMENT,
                      `user_id` int(11) NOT NULL,
                      `img_name` varchar(255) NOT NULL,
                      `status` int(11) DEFAULT '1',
                      `created_at` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
                      PRIMARY KEY (`photo_id`),
                      KEY `user_id` (`user_id`)
                    ) ENGINE=InnoDB DEFAULT CHARSET=utf8";
                    mysqli_query($conn, $sql_create_table);
                }
                
                $user_id_escaped = mysqli_real_escape_string($conn, $user_id);
                $sql_fetch_gallery = "SELECT * FROM photo_gallery WHERE user_id = '$user_id_escaped' AND status = '1'";
                $result_fetch_gallery = mysqli_query($conn, $sql_fetch_gallery);
                if (mysqli_num_rows($result_fetch_gallery) > 0) {
                    foreach ($result_fetch_gallery as $row) {
                        $total++;
                        $is_current_profile = ($row['img_name'] == $current_profile_img);
                        ?>
                        <div class="col-lg-3 col-md-4 col-6">
                            <div class="photo-card <?=$is_current_profile ? 'profile-active' : ''?>">
                                <div class="photo-wrapper">
                                    <a href="<?=$img_path?><?=$row['img_name']?>" class="popup-zoom">
                                        <img src="<?=$img_path?><?=$row['img_name']?>" alt="Soulmeet Vivah">
                                    </a>
                                </div>
                                <div class="photo-actions">
                                    <div class="btn-group">
                                        <?php if ($is_current_profile) { ?>
                                            <span class="btn-current-profile">
                                                <i class="icofont-check-circled"></i> Current Profile
                                            </span>
                                        <?php } else { ?>
                                            <button class="btn-modern btn-set-profile set_profile_photo" data-photo-id="<?=$row['photo_id']?>" data-img-name="<?=$row['img_name']?>">
                                                <i class="icofont-image"></i> Set as Profile
                                            </button>
                                        <?php } ?>
                                        <button class="btn-modern btn-delete delete_photo" id="<?=$row['photo_id']?>">
                                            <i class="icofont-trash"></i> Delete
                                        </button>
                                    </div>
                                </div>
                            </div>
                        </div> 
                        <?php
                    }
                }
            ?>                        
            
            <?php 
            if ($total < 4) {
                ?>
                <div class="col-lg-3 col-md-4 col-6">
                    <div class="upload-card" id="upload_photo">
                        <div class="upload-icon">
                            <i class="icofont-plus"></i>
                        </div>
                        <div class="upload-text">Upload Image</div>
                    </div>
                </div> 
                <?php
            }
            ?>
        </div>
    </div>
    <br><br>
</div>

<button style="display:none;" type="button" class="btn btn-primary uploadphotomodalbtn" data-toggle="modal" data-target="#uploadphotomodal">
  Launch demo modal
</button>

<form id="imageUploadForm" enctype="multipart/form-data">
    <div class="modal fade" id="uploadphotomodal" tabindex="-1" role="dialog" aria-labelledby="exampleModalLabel" aria-hidden="true">
        <div class="modal-dialog" role="document">
            <div class="modal-content">
                <div class="modal-header">
                    <h5 class="modal-title" id="exampleModalLabel">Upload Image</h5>
                    <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                        <span aria-hidden="true">&times;</span>
                    </button>
                </div>
                <div class="modal-body">
                    <p style="color: #666; margin-bottom: 20px; font-size: 14px;">
                        <i class="icofont-info-circle" style="margin-right: 5px;"></i>
                        Select an image from your device. Maximum file size: 5MB. Supported formats: JPG, PNG, GIF
                    </p>
                    <div style="text-align: center;">
                        <button type="button" class="btn-choose-image" onclick="$('#choose_img').click();">
                            <i class="icofont-upload" style="margin-right: 8px;"></i> Choose Image
                        </button>
                    </div>
                    <div class="preview-image-container">
                        <img class="profile_img" id="profile_img" src="" style="display: none;">              
                    </div>
                    <input style="display: none;" type="file" name="profileImage" id="choose_img" accept="image/jpeg,image/jpg,image/png,image/gif">
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn btn-secondary modal_close_btn" data-dismiss="modal" style="border-radius: 8px; padding: 10px 20px;">
                        <i class="icofont-close" style="margin-right: 5px;"></i> Close
                    </button>
                    <button type="submit" id="uploadBtn" class="btn-choose-image" style="border-radius: 8px; padding: 10px 25px;">
                        <i class="icofont-upload" style="margin-right: 8px;"></i> Upload
                    </button>
                </div>
            </div>
        </div>
    </div>
</form>

$('#upload_photo').click(function() {
    $('#uploadphotomodal').modal('show');
});

// Reset form when modal is closed
$('#uploadphotomodal').on('hidden.bs.modal', function () {
    $('#imageUploadForm')[0].reset();
    $('#profile_img').hide().attr('src', '');
    $('#uploadBtn').prop('disabled', false).text('Upload');
});

$('#choose_img').change(function() {
    if (this.files && this.files[0]) {
        var file = this.files[0];
        // Validate file size (5MB max)
        if (file.size > 5 * 1024 * 1024) {
            alert('File size exceeds 5MB limit. Please choose a smaller file.');
            $(this).val('');
            return;
        }
        // Validate file type
        var allowedTypes = ['image/jpeg', 'image/jpg', 'image/png', 'image/gif'];
        if (!allowedTypes.includes(file.type)) {
            alert('Invalid file type. Only JPEG, PNG, and GIF are allowed.');
            $(this).val('');
            return;
        }
        var reader = new FileReader();
        reader.onload = function(e) {
            $('#profile_img').attr('src', e.target.result).show();
        };
        reader.readAsDataURL(file);
    }
});

$(document).ready(function(){
    $("#imageUploadForm").submit(function(e){
        e.preventDefault();
        
        // Check if file is selected
        var fileInput = document.getElementById('choose_img');
        if (!fileInput.files || !fileInput.files[0]) {
            alert('Please select an image to upload.');
            return;
        }
        
        var formData = new FormData(this);
        formData.append('user_id', '<?=$user_id?>');
        
        $('#uploadBtn').prop('disabled', true).text('Uploading...');
        
        $.ajax({
            url: 'php/update_photos.php',
            type: 'POST',
            data: formData,
            processData: false,
            contentType: false,
            success: function(response){
                $('#uploadBtn').prop('disabled', false).text('Upload');
                $('#uploadphotomodal').modal('hide');
                alert(response);
                location.reload();
            },
            error: function(xhr, status, error){
                $('#uploadBtn').prop('disabled', false).text('Upload');
                console.error('Upload Error:', error);
                console.error('Status:', status);
                console.error('Response:', xhr.responseText);
                var errorMsg = 'Error uploading image. ';
                if (xhr.responseText) {
                    errorMsg += xhr.responseText;
                } else {
                    errorMsg += 'Please try again.';
                }
                alert(errorMsg);
            }
        });
    });
});

$('.delete_photo').click(function(){
    if (!confirm('Are you sure you want to delete this photo?')) {
        return;
    }
    
    var id = $(this).attr("id");
    var button = $(this);
    button.prop('disabled', true).text('Deleting...');
    
    $.ajax({
        url:'php/delete_photo.php',
        method:'POST',
        data:{id:id, user_id: '<?=$user_id?>'},
        success:function(res){
            if (res == '1' || res.trim() == '1') {
                alert('Photo deleted successfully!');
                location.reload();
            } else {
                alert('Failed to delete photo. ' + res);
                button.prop('disabled', false).text('Delete');
            }
        },
        error: function() {
            alert('Error deleting photo. Please try again.');
            button.prop('disabled', false).text('Delete');
        }
    });
});

// Set photo as profile image
$(document).on('click', '.set_profile_photo', function(){
    var photo_id = $(this).data('photo-id');
    var img_name = $(this).data('img-name');
    var button = $(this);
    
    if(confirm("Set this photo as your profile image?")) {
        button.prop('disabled', true).text('Setting...');
        
        $.ajax({
            url:'php/set_profile_from_gallery.php',
            method:'POST',
            data:{
                photo_id: photo_id,
                img_name: img_name,
                user_id: '<?=$user_id?>'
            },
            success:function(res){
                if(res.trim() == '1') {
                    alert("Profile image updated successfully!");
                    location.reload();
                } else {
                    alert("Error: " + res);
                    button.prop('disabled', false).text('Set as Profile');
                }
            },
            error:function(xhr, status, error){
                alert("An error occurred. Please try again.");
                console.error("Error:", error);
                button.prop('disabled', false).text('Set as Profile');
            }
        });
    }
});
</script>

<?php include('footer.php'); ?>