OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	06/17/2025 10:17:24 AM	rwxrwxr-x
📁 PHPMailer	-	05/19/2025 10:07:22 AM	rwxr-xr-x
📄 addPro.php	800 bytes	05/19/2025 10:07:22 AM	rw-r--r--
📄 dash.php	0 bytes	05/19/2025 10:07:22 AM	rw-r--r--
📄 dashboard.php	21.19 KB	05/19/2025 10:07:22 AM	rw-r--r--
📄 db_connect.php	292 bytes	05/19/2025 10:07:22 AM	rw-r--r--
📄 mail.php	2.01 KB	05/19/2025 10:07:22 AM	rw-r--r--
📄 proUsers.php	21.74 KB	05/19/2025 10:07:22 AM	rw-r--r--
📄 send_otp.php	1.38 KB	05/19/2025 10:07:22 AM	rw-r--r--
📄 userActivity.php	13.57 KB	05/19/2025 10:07:22 AM	rw-r--r--
📄 verification.php	4.83 KB	05/19/2025 10:07:22 AM	rw-r--r--
📄 verify_otp.php	644 bytes	05/19/2025 10:07:22 AM	rw-r--r--

Editing: proUsers.php

<?php
include 'db_connect.php';
include '../assets/php/validate.logged.php';

// $expiration_time = 15 * 60;
// if (isset($_SESSION['admin_set_time']) && (time() - $_SESSION['admin_set_time']) > $expiration_time) {
//     unset($_SESSION['admin']); 
//     unset($_SESSION['admin_set_time']);
// }

// Handle delete request
if (isset($_POST['delete_user']) && !empty($_POST['user_id'])) {
    $userId = $_POST['user_id'];
    $deleteSql = "DELETE FROM cream_subscription WHERE userId = ?";
    $deleteStmt = $conn->prepare($deleteSql);
    $deleteStmt->bind_param("i", $userId);
    $deleteStmt->execute();
    $deleteStmt->close();
    
    header("Location: " . $_SERVER['PHP_SELF'] . "?action=deleted");
    exit();
}

// Handle edit request (update end date)
if (isset($_POST['edit_user']) && !empty($_POST['user_id']) && !empty($_POST['new_end_date'])) {
    $userId = $_POST['user_id'];
    $newEndDate = $_POST['new_end_date'];
    
    $updateSql = "UPDATE cream_subscription SET end_date = ? WHERE userId = ?";
    $updateStmt = $conn->prepare($updateSql);
    $updateStmt->bind_param("si", $newEndDate, $userId);
    $updateStmt->execute();
    $updateStmt->close();
    
    header("Location: " . $_SERVER['PHP_SELF'] . "?action=updated");
    exit();
}

if(isset($_SESSION['admin'])&&( $gUserId==23 && $_SESSION['admin']=="verified" )){
// if (true) {
    // AJAX handler for search suggestions
    if (isset($_GET['search']) && !empty($_GET['search'])) {
        $search = '%' . $_GET['search'] . '%';
        
        // Search for users by name
        $searchSql = "SELECT id, full_name FROM user WHERE full_name LIKE ?";
        $searchStmt = $conn->prepare($searchSql);
        $searchStmt->bind_param("s", $search);
        $searchStmt->execute();
        $searchResult = $searchStmt->get_result();
        
        $suggestions = array();
        if ($searchResult->num_rows > 0) {
            while ($row = $searchResult->fetch_assoc()) {
                $suggestions[] = array(
                    'id' => $row['id'],
                    'name' => $row['full_name']
                );
            }
        }
        
        // Return JSON response for AJAX
        header('Content-Type: application/json');
        echo json_encode($suggestions);
        $searchStmt->close();
        exit;
    }

// Main query for pro users table
    $sql = "SELECT c.full_name, q.userId, q.start_date, q.end_date, q.plan_type FROM user c 
            JOIN cream_subscription q where c.id=q.userId";
    $stmt = $conn->prepare($sql);
    $stmt->execute();
    $result = $stmt->get_result();

if ($result->num_rows > 0) {
        while ($row = $result->fetch_assoc()) {
            $users[] = $row;
        }
    } else {
        $users = ["message" => "No records found in the given date range"];
    }

$stmt->close();
?>
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Pro users</title>
    <style>
        body {
            font-family: 'Roboto', sans-serif;
            background-color: #f4f4f4;
            margin: 0;
            padding: 0;
            display: flex;
            justify-content: center;
            align-items: center;
            min-height: 100vh;
            color: #333;
        }

.container {
            background-color: #fff;
            padding: 30px;
            border-radius: 10px;
            box-shadow: 0 4px 8px rgba(0, 0, 0, 0.1);
            width: 90%;
            max-width: 960px;
        }

h1 {
            color: #2c3e50;
            margin-bottom: 25px;
            text-align: center;
        }

.form-group {
            margin-bottom: 20px;
        }

label {
            display: block;
            margin-bottom: 8px;
            color: #7f8c8d;
            font-weight: 500;
        }

input[type="number"],
        input[type="datetime-local"],
        input[type="text"] {
            width: calc(50% - 22px);
            padding: 12px;
            border: 1px solid #bdc3c7;
            border-radius: 6px;
            box-sizing: border-box;
            font-size: 16px;
            transition: border-color 0.3s ease;
        }

input[type="number"]:focus,
        input[type="datetime-local"]:focus,
        input[type="text"]:focus {
            border-color: #3498db;
            outline: none;
            box-shadow: 0 0 5px rgba(52, 152, 219, 0.2);
        }

button {
            background-color: #3498db;
            color: #fff;
            padding: 12px 20px;
            border: none;
            border-radius: 6px;
            cursor: pointer;
            font-size: 16px;
            transition: background-color 0.3s ease;
        }

button:hover {
            background-color: #2980b9;
        }
        
        .action-btn {
            padding: 6px 12px;
            margin: 0 3px;
            font-size: 14px;
        }
        
        .edit-btn {
            background-color: #f39c12;
        }
        
        .edit-btn:hover {
            background-color: #e67e22;
        }
        
        .delete-btn {
            background-color: #e74c3c;
        }
        
        .delete-btn:hover {
            background-color: #c0392b;
        }

.filter-buttons {
            margin-bottom: 25px;
        }

table {
            width: 100%;
            border-collapse: collapse;
            margin-top: 25px;
            box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1);
            border-radius: 8px;
            overflow: hidden;
        }

th,
        td {
            padding: 15px;
            border: none;
            text-align: left;
            background-color: #fff;
        }

th {
            background-color: #ecf0f1;
            font-weight: 600;
            color: #7f8c8d;
            padding: 18px;
        }

tr:nth-child(even) {
            background-color: #f9f9f9;
        }

p {
            color: #7f8c8d;
            margin-top: 10px;
        }

.table-container {
            overflow-x: auto;
        }

.set-date {
            display: none;
            flex-direction: column;
            gap: 15px;
            margin-top: 20px;
        }

.set-date label {
            margin-bottom: 5px;
        }

.set-date input[type="number"],
        .set-date input[type="datetime-local"] {
            width: 100%;
            padding: 10px;
        }
        
        /* Search functionality styles */
        .search-container {
            margin: 20px 0;
            position: relative;
            width: 100%;
            max-width: 400px;
        }
        
        .search-input {
            width: 100%;
            padding: 12px;
            border: 1px solid #bdc3c7;
            border-radius: 6px;
            font-size: 16px;
            transition: border-color 0.3s ease;
        }
        
        .search-suggestions {
            position: absolute;
            width: 100%;
            max-height: 200px;
            overflow-y: auto;
            background: white;
            border: 1px solid #ddd;
            border-top: none;
            border-radius: 0 0 6px 6px;
            box-shadow: 0 4px 8px rgba(0, 0, 0, 0.1);
            z-index: 1000;
            display: none;
        }
        
        .suggestion-item {
            padding: 10px 15px;
            cursor: pointer;
            border-bottom: 1px solid #f0f0f0;
        }
        
        .suggestion-item:hover {
            background-color: #f5f5f5;
        }
        
        .suggestion-item:last-child {
            border-bottom: none;
        }
        
        .no-suggestions {
            padding: 10px 15px;
            color: #7f8c8d;
            font-style: italic;
        }
        
        /* Modal styles */
        .modal {
            display: none;
            position: fixed;
            z-index: 1000;
            left: 0;
            top: 0;
            width: 100%;
            height: 100%;
            background-color: rgba(0,0,0,0.5);
        }
        
        .modal-content {
            background-color: #fefefe;
            margin: 15% auto;
            padding: 20px;
            border-radius: 10px;
            box-shadow: 0 5px 15px rgba(0,0,0,0.2);
            width: 50%;
            max-width: 500px;
            animation: modalopen 0.3s;
        }
        
        @keyframes modalopen {
            from {opacity: 0; transform: translateY(-20px);}
            to {opacity: 1; transform: translateY(0);}
        }
        
        .close-modal {
            color: #aaa;
            float: right;
            font-size: 28px;
            font-weight: bold;
            cursor: pointer;
        }
        
        .close-modal:hover {
            color: #333;
        }
        
        .modal-title {
            margin-top: 0;
            color: #2c3e50;
        }
        
        .modal-actions {
            text-align: center;
            margin-top: 20px;
        }
        
        .alert {
            padding: 15px;
            margin: 20px 0;
            border-radius: 6px;
            font-weight: 500;
            text-align: center;
        }
        
        .alert-success {
            background-color: #d4edda;
            color: #155724;
            border: 1px solid #c3e6cb;
        }
        
        .alert-danger {
            background-color: #f8d7da;
            color: #721c24;
            border: 1px solid #f5c6cb;
        }
    </style>
    <link href="https://fonts.googleapis.com/css2?family=Roboto:wght@400;500;700&display=swap" rel="stylesheet">

<body>
    <div class="container">
        <button onclick="window.location.href='dashboard.php?filter=week'">Back</button>
        <h1>Pro Users</h1>
        <button onclick="displayForm()">Add Pro</button>
        
        
        <div class="search-container">
            <input type="text" id="search-input" class="search-input" placeholder="Search user by name..." oninput="showSuggestions()">
            <div id="search-suggestions" class="search-suggestions"></div>
        </div>
        
        <form method="POST" action="addPro.php" class="set-date" id="set-date">
            <label for="userId">User ID</label>
            <input type="number" id="userId" name="userId" placeholder="User ID" required>
            <label for="end_date">End Date:</label>
            <input type="datetime-local" id="end_date" name="end_date" required>
            <button type="submit">Submit</button>
        </form>
        
        <div>Count-<?= sizeof($users) ?></div>
        <div class="table-container">
            <table id="users-table">
                <thead>
                    <tr>
                        <th>ID</th>
                        <th>Name</th>
                        <th>Plan Type</th>
                        <th>End Date</th>
                        <th>Actions</th>
                    </tr>
                </thead>
                <tbody>
                    <?php foreach ($users as $user): ?>
                        <tr>
                            <td><?php echo htmlspecialchars($user['userId']); ?></td>
                            <td><?php echo htmlspecialchars($user['full_name'] ?? 'N/A'); ?></td>
                            <td><?php echo htmlspecialchars($user['plan_type'] ?? 'N/A'); ?></td>
                            <td><?php echo htmlspecialchars($user['end_date'] ?? 'N/A'); ?></td>
                            <td>
                                <button class="action-btn edit-btn" onclick="openEditModal('<?php echo htmlspecialchars($user['userId']); ?>', '<?php echo htmlspecialchars($user['full_name'] ?? 'N/A'); ?>', '<?php echo htmlspecialchars($user['end_date'] ?? ''); ?>')">Edit</button>
                                <button class="action-btn delete-btn" onclick="openDeleteModal('<?php echo htmlspecialchars($user['userId']); ?>', '<?php echo htmlspecialchars($user['full_name'] ?? 'N/A'); ?>')">Delete</button>
                            </td>
                        </tr>
                    <?php endforeach; ?>
                </tbody>
            </table>
        </div>
    </div>
    
    
    <div id="edit-modal" class="modal">
        <div class="modal-content">
            <span class="close-modal" onclick="closeModal('edit-modal')">&times;</span>
            <h3 class="modal-title">Edit End Date</h3>
            <p>Update subscription end date for <strong id="edit-user-name"></strong></p>
            
            <form method="POST" action="">
                <input type="hidden" id="edit-user-id" name="user_id">
                <div class="form-group">
                    <label for="edit-end-date">New End Date:</label>
                    <input type="datetime-local" id="edit-end-date" name="new_end_date" required>
                </div>
                <div class="modal-actions">
                    <button type="button" onclick="closeModal('edit-modal')">Cancel</button>
                    <button type="submit" name="edit_user">Update</button>
                </div>
            </form>
        </div>
    </div>
    
    
    <div id="delete-modal" class="modal">
        <div class="modal-content">
            <span class="close-modal" onclick="closeModal('delete-modal')">&times;</span>
            <h3 class="modal-title">Remove Pro Subscription</h3>
            <p>Are you sure you want to remove pro subscription for <strong id="delete-user-name"></strong>?</p>
            
            <form method="POST" action="">
                <input type="hidden" id="delete-user-id" name="user_id">
                <div class="modal-actions">
                    <button type="button" onclick="closeModal('delete-modal')">Cancel</button>
                    <button type="submit" name="delete_user" class="delete-btn">Delete</button>
                </div>
            </form>
        </div>
    </div>
</body>

</html>
<?php
} else {
    // If the request is not from verify_payment.php, throw an HTTP 500 error.
    header('HTTP/1.1 500 Internal Server Error');
    exit();
}
?>