OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	03/26/2025 04:20:38 AM	rwxr-xr-x
📄 12-03-25social_navbar.php	24.95 KB	03/26/2025 04:20:38 AM	rw-r--r--
📁 PHPMailer	-	03/26/2025 04:21:23 AM	rwxr-xr-x
📄 backup-navbar.php	27.21 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 backupnavbar.php	21.14 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 blockAccount.php	2.23 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 bnavbar.php	35.74 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 bottom_navbar.php	6.18 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 common.js	46.89 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 config.php	9.43 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 db_config.php	3.42 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 db_connect.php	305 bytes	03/26/2025 05:01:45 AM	rw-r--r--
📄 delete_account.php	3.5 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 edit_post.php	2.23 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 footer.php	1.28 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 function.php	19.88 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 go_backbar.php	4.01 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 handler.php	3.46 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 indexFooter.php	597 bytes	03/26/2025 04:20:38 AM	rw-r--r--
📄 mail.php	2.67 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 navbar.php	24.01 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 process_data.php	3.87 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 readert_validate.logged.php	481 bytes	03/26/2025 04:20:38 AM	rw-r--r--
📄 report_account.php	1.42 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 report_stream.php	2.08 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 savePost.php	2.38 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 sidebar.php	18.88 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 siginupProcess.php	5.24 KB	03/26/2025 04:20:38 AM	rw-r--r--
📁 simplepie	-	03/26/2025 04:22:22 AM	rwxr-xr-x
📄 social_navbar.php	24.83 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 stream_post_handler.php	3.68 KB	03/26/2025 04:20:38 AM	rw-r--r--
📄 validate.logged.php	1.01 KB	03/26/2025 04:20:38 AM	rw-r--r--

Editing: siginupProcess.php

<?php
session_start();

include 'db_connect.php';
include '../../vendor/autoload.php';

// Include PHPMailer for sending emails
use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\Exception;

require '../../vendor/PHP_Mailer/Exception.php';
require '../../vendor/PHP_Mailer/PHPMailer.php';
require '../../vendor/PHP_Mailer/SMTP.php';

function sendEmail($toName, $toEmail, $toEmailCC, $emailSubject, $emailBody)
{
    $mail = new PHPMailer(true);
    try {
        $mail->isSMTP();

// $mail->setFrom('donotreply@knoblycream.com', 'Knobly Cream');
        // $mail->Username   = 'AKIARWSGL3TOGXCYQJVY';
        // $mail->Password   = 'BIj9DvNM3uX+cckSX4So50fqln6DEhie6dMJpe3AjzqK';
        // $mail->Host       = 'email-smtp.ap-south-1.amazonaws.com';

// $mail->setFrom('cream@knobly.com', 'Knobly Cream');
        // $mail->Username   = '16486ca9-f4d0-4d09-9739-b48a16a8586e';
        // $mail->Password   = '16486ca9-f4d0-4d09-9739-b48a16a8586e';
        // $mail->Host       = 'smtp.postmarkapp.com';
        // $mail->addCustomHeader('X-PM-Message-Stream', 'outbound');

$mail->setFrom('donotreply@knobly.com', 'Knobly Cream');
        $mail->Host       = 'smtp.gmail.com';
        $mail->Username   = 'donotreply@knobly.com';
        $mail->Password   = 'ipmhstdrbkwfhcna';

$mail->Port       = 587;
        $mail->SMTPAuth   = true;
        $mail->SMTPSecure = 'tls';
        if ($toEmail != '') {
            $arrEmail = explode(',', $toEmail);
            foreach ($arrEmail as $value) {
                $mail->addAddress(trim($value));
            }
        }
        //$mail->addAddress($toEmail, $toName);
        if ($toEmailCC != '') {
            $arrCC = explode(',', $toEmailCC);
            foreach ($arrCC as $value) {
                $mail->addCC(trim($value));
            }
        }
        //   $mail->addBCC('chiranjeev@gmail.com');
        $mail->isHTML(true);
        $mail->Subject = $emailSubject;
        $mail->Body    = $emailBody;
        $mail->send();
        return true;
    } catch (Exception $e) {
        echo 'Message could not be sent.';
        echo 'Mailer Error: ' . $mail->ErrorInfo;
    }
}

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['sign_up'])) {
    $full_name = $_POST['full_name'];
    $email = $_POST['new_email'];
    $mobile_number = $_POST['mobile_number'];
    $password = $_POST['new_password'];
    $confirm_password = $_POST['confirm_password'];

if ($password !== $confirm_password) {
        echo "Passwords do not match.";
    } else {
        $hashed_password = password_hash($password, PASSWORD_DEFAULT);
        $verification_code = bin2hex(random_bytes(16));

// Check if email already exists
        $stmt = $conn->prepare("SELECT email FROM user WHERE email = ?");
        $stmt->bind_param('s', $email);
        $stmt->execute();
        $result = $stmt->get_result();

if ($result->num_rows > 0) {
            echo "Email already registered.";
        } else {
            $stmt = $conn->prepare("INSERT INTO user (full_name, email, mobile_number, password, verification_code) VALUES (?, ?, ?, ?, ?)");
            $stmt->bind_param('sssss', $full_name, $email, $mobile_number, $hashed_password, $verification_code);

if ($stmt->execute()) {
                $emailSubject = 'Email Verification';

$emailData = json_decode(file_get_contents('../data/email_data.json'), true);
                $emailBody = "Click the link to verify your email: <a href='" . $emailData['verification_link']. "'>Verify Email</a>";

if (sendEmail($full_name, $email, '', $emailSubject, $emailBody)) {
                    echo "User registered successfully. Please check your email for verification.";
                }
            } else {
                echo "Error: " . $stmt->error;
            }
        }
    }
}

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['sign_in'])) {
    $email = $_POST['email'];
    $password = $_POST['password'];

$stmt = $conn->prepare("SELECT id, full_name, email, password, is_verified FROM user WHERE email = ?");
    $stmt->bind_param('s', $email);
    $stmt->execute();
    $result = $stmt->get_result();

if ($result->num_rows > 0) {
        $row = $result->fetch_assoc();
        if (password_verify($password, $row['password'])) {
            if ($row['is_verified']) {
                $_SESSION['user_logged_in'] = true;
                $_SESSION['user_email'] = $row['email'];
                $_SESSION['user_name'] = $row['full_name'];
                $_SESSION['id'] = $row['id'];

// Update last login timestamp
                $stmt = $conn->prepare("UPDATE user SET last_login = NOW() WHERE email = ?");
                $stmt->bind_param('s', $email);
                $stmt->execute();

header("Location: /new_reader/dashboard.php");
                // header("Location: /dashboard.php");
                exit();
            } else {
                echo "Please verify your email address.";
            }
        } else {
            echo "Invalid email or password.";
        }
    } else {
        echo "Invalid email or password.";
    }
}