FM / miniflux

/var/softaculous/miniflux

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
changelog.txt	3531	0644	edit dl rm
config.php	4014	0644	edit dl rm
extend.php	8951	0644	edit dl rm
fileindex.php	240	0644	edit dl rm
import.php	3152	0644	edit dl rm
info.xml	2833	0644	edit dl rm
install.js	921	0644	edit dl rm
install.php	4505	0644	edit dl rm
install.xml	1308	0644	edit dl rm
md5	6811	0644	edit dl rm
notes.txt	476	0644	edit dl rm
update_pass.php	497	0644	edit dl rm
_edit.php	4128	0644	edit dl rm
_edit.xml	433	0644	edit dl rm

Edit: /var/softaculous/miniflux/_edit.php (4128B)

<?php

//////////////////////////////////////////////////////////////
//===========================================================
// edit.php(For individual softwares)
//===========================================================
// SOFTACULOUS 
// Version : 1.0
// Inspired by the DESIRE to be the BEST OF ALL
// ----------------------------------------------------------
// Started by: Alons
// Date:       10th Jan 2009
// Time:       21:00 hrs
// Site:       http://www.softaculous.com/ (SOFTACULOUS)
// ----------------------------------------------------------
// Please Read the Terms of use at http://www.softaculous.com
// ----------------------------------------------------------
//===========================================================
// (c)Softaculous Inc.
//===========================================================
//////////////////////////////////////////////////////////////

if(!defined('SOFTACULOUS')){

die('Hacking Attempt');

}

/////////////////////////////////////////
// All functions in this PAGE must begin
// with TWO UNDERSCORE '__' to avoid 
// clashes with SOFTACULOUS Functions
// e.g. __funcname()
/////////////////////////////////////////

//////////////////////////////////////////
// Note : The path of the upgrade package 
//        is $software['path'].'/' . So to
//        access other files use 
//        $software['path'].'/other_file.ext'
//////////////////////////////////////////

//The Edit process
function __edit($installation){

global $__settings, $globals, $setupcontinue, $software, $error;

$__settings = $installation;

$__settings['admin_username'] = optPOST('admin_username');
	$__settings['admin_pass'] = optPOST('admin_pass');

// Do we need to reset the password ?
	if(!empty($__settings['admin_pass'])){

// We need the username
		if(empty($__settings['admin_username'])){
			$error[] = '{{err_no_username}}';
			return false;
		}

//This is to validate password length 
		sp_include_once($software['path'].'/install.php');
		$__settings['admin_pass'] = __ad_pass($__settings['admin_pass']);

// This is to get db details from import.php
		sp_include_once($software['path'].'/import.php');

$r = call_user_func('__import_'.$software['softname'], $__settings['softpath']);

$__settings['softdbhost'] = $r['softdbhost'];
		$__settings['softdbuser'] = $r['softdbuser'];
		$__settings['softdbpass'] = $r['softdbpass'];
		$__settings['softdb'] = $r['softdb'];

if(!empty($error)){
			return false;
		}

$query = "SELECT `id` FROM `users` WHERE `username` = '".$__settings['admin_username']."';";

// Does this user exist ?
		$result = sdb_query($query, $__settings['softdbhost'], $__settings['softdbuser'], $__settings['softdbpass'], $__settings['softdb']);

$userid = $result[0]['id'];

if(empty($userid)){
			$error[] = '{{err_no_such_user}}';
			return false;			
		}else{	
			
			if(sversion_compare(phpversion(), '5.3', '<')){
				sconfigure('update_pass.php', false, 0, 1);
				
				// We are setting this blank because the current value is plain text pass and we are trying to fetch the encrypted pass if we do not get the encrypted pass we have an error check below
				$__settings['admin_pass'] = '';
				
				$resp = swget($__settings['softurl'].'/update_pass.php');
				
				if(empty($resp)){
					$error[] = '{{no_domain_verify}}';
					return false;
				}
				
				if(preg_match('/<update_pass>(.*?)<\/update_pass>/is', $resp, $matches)){
					$__settings['admin_pass'] = $matches[1];
				}
				
				if(empty($__settings['admin_pass'])){
					$error[] = '{{no_pass_encrypt}}';
					return false;
				}
				sunlink($__settings['softpath'].'/update_pass.php');
			}else{
				
				$__settings['admin_pass'] = __password_hash($__settings['admin_pass'], PASSWORD_DEFAULT);
			}

if(!empty($error)){
				return false;
			}
 
			// Update the password now
			$update_query = "UPDATE `users` SET `password` = '".$__settings['admin_pass']."' WHERE `id` = '".$userid."';";
			$result = sdb_query($update_query, $__settings['softdbhost'], $__settings['softdbuser'], $__settings['softdbpass'], $__settings['softdb']);
			
		}
	}
}

(.*?)<\/update_pass>/is', $resp, $matches)){ $__settings['admin_pass'] = $matches[1]; } if(empty($__settings['admin_pass'])){ $error[] = '{{no_pass_encrypt}}'; return false; } sunlink($__settings['softpath'].'/update_pass.php'); }else{ $__settings['admin_pass'] = __password_hash($__settings['admin_pass'], PASSWORD_DEFAULT); } if(!empty($error)){ return false; } // Update the password now $update_query = "UPDATE `users` SET `password` = '".$__settings['admin_pass']."' WHERE `id` = '".$userid."';"; $result = sdb_query($update_query, $__settings['softdbhost'], $__settings['softdbuser'], $__settings['softdbpass'], $__settings['softdb']); } } } ?>