Cyberbyte-Studios / CyberWorks

views/core/login.php

Spacing +16 added lines, -16 removed lines

@@ -15,20 +15,20 @@ 
     if (formtoken::validateToken($_POST)) {
         $to = $_POST['emailed'];
         $token = tokenGen(32);
-        $sql = "SELECT  `user_id` FROM `users` WHERE  `user_email` =  '" . $to . "';";
+        $sql = "SELECT  `user_id` FROM `users` WHERE  `user_email` =  '".$to."';";
         $result = $db_connection->query($sql);
         if ($result->num_rows > 0) {
             $row = $result->fetch_assoc();
-            $sql = "UPDATE  `users` SET  `token` =  '" . $token . "' WHERE  `user_id` = '" . $row['user_id'] . "';";
+            $sql = "UPDATE  `users` SET  `token` =  '".$token."' WHERE  `user_id` = '".$row['user_id']."';";
             $result_of_query = $db_connection->query($sql);
 
             //Send the reset Email
             $subject = "Password Reset";
-            $headers = "MIME-Version: 1.0" . "\r\n";
-            $headers .= "Content-type:text/html;charset=iso-8859-1" . "\r\n";
+            $headers = "MIME-Version: 1.0"."\r\n";
+            $headers .= "Content-type:text/html;charset=iso-8859-1"."\r\n";
             //$headers .= "From: Password Reset <no-reply@cyberbyte.org.uk>\r\n";
-            $headers .= "From: " . $settings['community'] . " Panel <" . $email . ">\r\n" . "Reply-To: " . $email . "\r\n";
-            $msg = "Password reset<br/> token: " . $token . " <br/> url: <a href='" . $settings['url'] . "?token=" . $token . "&uID=" . $row['user_id'] . "'>" . $settings['url'] . "?token=" . $token . "&uID=" . $row['user_id'] . "</a>";
+            $headers .= "From: ".$settings['community']." Panel <".$email.">\r\n"."Reply-To: ".$email."\r\n";
+            $msg = "Password reset<br/> token: ".$token." <br/> url: <a href='".$settings['url']."?token=".$token."&uID=".$row['user_id']."'>".$settings['url']."?token=".$token."&uID=".$row['user_id']."</a>";
             $mail = mail($to, $subject, $msg, $headers);
 
             $message = "Your password has been reset please check your email";
@@ -42,11 +42,11 @@ 
         if ($_POST['user_password_new'] !== $_POST['user_password_repeat']) {
             $error = 'Password and password repeat are not the same';
         } else {
-            $sql = "SELECT `user_id` FROM `users` WHERE  `user_id` = '" . $_GET['uID'] . "' AND `token` =  '" . $_GET['token'] . "';";
+            $sql = "SELECT `user_id` FROM `users` WHERE  `user_id` = '".$_GET['uID']."' AND `token` =  '".$_GET['token']."';";
             $result_of_query = $db_connection->query($sql);
             if ($result_of_query->num_rows == 1) {
                 $user_password_hash = password_hash($_POST['user_password_new'], PASSWORD_DEFAULT);
-                $sql = "UPDATE `users` SET `user_password_hash` =  '" . $user_password_hash . "', `token` = '' WHERE  `user_id` = '" . $_GET['uID'] . "' AND `token` =  '" . $_GET['token'] . "';";
+                $sql = "UPDATE `users` SET `user_password_hash` =  '".$user_password_hash."', `token` = '' WHERE  `user_id` = '".$_GET['uID']."' AND `token` =  '".$_GET['token']."';";
                 $result_of_query = $db_connection->query($sql);
                 $message = 'Your password been updated';
             } else {
@@ -54,7 +54,7 @@ 
             }
         }
     } else {
-    $sql = "SELECT `user_id` FROM `users` WHERE  `user_id` = '" . $_GET['uID'] . "' AND `token` =  '" . $_GET['token'] . "';";
+    $sql = "SELECT `user_id` FROM `users` WHERE  `user_id` = '".$_GET['uID']."' AND `token` =  '".$_GET['token']."';";
     $result_of_query = $db_connection->query($sql);
     if ($result_of_query->num_rows == 1) {
 ?>
@@ -91,7 +91,7 @@ 
 <?php
         } else {
             $error = 'User not found or token invalid';
-            logAction($_POST['email'], ' ' . $lang['passreset'], 3);
+            logAction($_POST['email'], ' '.$lang['passreset'], 3);
         }
     }
 }
@@ -106,16 +106,16 @@ 
             <?php
             if ($login->messages) {
                 foreach ($login->messages as $message) {
-                    echo '<div style="margin-top: 120px;" class="alert alert-info animated infinite bounce" role="alert">' . $message . '</div>';
+                    echo '<div style="margin-top: 120px;" class="alert alert-info animated infinite bounce" role="alert">'.$message.'</div>';
                 }
             } elseif ($login->errors) {
                 foreach ($login->errors as $error) {
-                    echo '<div style="margin-top: 120px;" class="alert alert-danger animated infinite bounce" role="alert">' . $error . '</div>';
+                    echo '<div style="margin-top: 120px;" class="alert alert-danger animated infinite bounce" role="alert">'.$error.'</div>';
                 }
             } elseif (isset($message)) {
-                echo '<div style="margin-top: 120px;" class="alert alert-info animated infinite bounce" role="alert">' . $message . '</div>';
+                echo '<div style="margin-top: 120px;" class="alert alert-info animated infinite bounce" role="alert">'.$message.'</div>';
             } elseif (isset($error)) {
-                echo '<div style="margin-top: 120px;" class="alert alert-danger animated infinite bounce" role="alert">' . $error . '</div>';
+                echo '<div style="margin-top: 120px;" class="alert alert-danger animated infinite bounce" role="alert">'.$error.'</div>';
             } else {
                 echo '<div style="margin-top: 190px;"></div>';
             } ?>
@@ -161,11 +161,11 @@ 
                                         echo '<select id = "lang" name = "lang" class="form-control login_input" >';
 
                                         foreach ($settings['installedLanguage'] as $language) {
-                                            echo '<option value = "' . $language[1] . '" ';
+                                            echo '<option value = "'.$language[1].'" ';
                                             if ($tempLang == $language[1]) {
                                                 echo 'selected';
                                             }
-                                            echo '> ' . $language[0] . '</option>';
+                                            echo '> '.$language[0].'</option>';
                                         }
                                     echo '</select><br>';
                                     }

views/core/newDB.php

Spacing +6 added lines, -6 removed lines

@@ -3,7 +3,7 @@ 
     if (formtoken::validateToken($_POST)) {
         $db_type = $_POST['db_type'];
     
-        $sql = "INSERT INTO `db` (`type`, `sql_host`, `sql_user`, `sql_pass`, `sql_name`) VALUES ('" . $db_type . "', '" . encrypt($_POST['SQL_host']) . "', '" . encrypt($_POST['SQL_user']) . "', '" . encrypt($_POST['SQL_pass']) . "', '" . encrypt($_POST['SQL_name']) . "');";
+        $sql = "INSERT INTO `db` (`type`, `sql_host`, `sql_user`, `sql_pass`, `sql_name`) VALUES ('".$db_type."', '".encrypt($_POST['SQL_host'])."', '".encrypt($_POST['SQL_user'])."', '".encrypt($_POST['SQL_pass'])."', '".encrypt($_POST['SQL_name'])."');";
         $result_of_query = $db_connection->query($sql);
     
         message($lang['newdb']);
@@ -17,7 +17,7 @@ 
         <form method="post" action="newDB" name="newDB" id="newDB">
             <?php echo formtoken::getField() ?>
             <h2 class="form-login-heading">
-                <?php echo $lang['new'] . ' ' . $lang['database'] ?>
+                <?php echo $lang['new'].' '.$lang['database'] ?>
             </h2>
             <div class="form-group">
                 <label for="db_type">Server type: </label>
@@ -32,7 +32,7 @@ 
                        class=" form-control login_input" type="text"
                        name="SQL_host"
 
-                    <?php if (isset($_POST['SQL_host'])) echo 'value="' . htmlspecialchars($_POST['SQL_host']) . '"' ?>
+                    <?php if (isset($_POST['SQL_host'])) echo 'value="'.htmlspecialchars($_POST['SQL_host']).'"' ?>
                        required>
                 </div>
                 <div class="form-group">
@@ -40,7 +40,7 @@ 
                     <input placeholder="SQL User" id="SQL_user"
                        class=" form-control login_input" type="text"
                        name="SQL_user"
-                        <?php if (isset($_POST['SQL_user'])) echo 'value="' . htmlspecialchars($_POST['SQL_user']) . '"' ?>
+                        <?php if (isset($_POST['SQL_user'])) echo 'value="'.htmlspecialchars($_POST['SQL_user']).'"' ?>
                        required autocapitalize="off">
                     </div>
                     <div class="form-group">
@@ -49,7 +49,7 @@ 
                        class=" form-control login_input" type="password"
                        name="SQL_pass"
 
-                            <?php if (isset($_POST['SQL_pass'])) echo 'value="' . htmlspecialchars($_POST['SQL_pass']) . '"' ?>
+                            <?php if (isset($_POST['SQL_pass'])) echo 'value="'.htmlspecialchars($_POST['SQL_pass']).'"' ?>
                        required autocapitalize="off" autocomplete="off">
                         </div>
                         <div class="form-group">
@@ -58,7 +58,7 @@ 
                        class=" form-control login_input" type="text"
                        name="SQL_name"
 
-                                <?php if (isset($_POST['SQL_name'])) echo 'value="' . htmlspecialchars($_POST['SQL_name']) . '"' ?>
+                                <?php if (isset($_POST['SQL_name'])) echo 'value="'.htmlspecialchars($_POST['SQL_name']).'"' ?>
                        required>
                             </div>
                             <input class="btn btn-lg btn-primary" style="float:right;" type="submit" name="setup"

views/core/logs.php

Spacing +13 added lines, -13 removed lines

@@ -1,16 +1,16 @@ 
 <?php
 $db_link = serverConnect();
 
-$max = 'LIMIT ' . ($pageNum - 1) * $_SESSION['items'] . ',' . $_SESSION['items'];
+$max = 'LIMIT '.($pageNum - 1) * $_SESSION['items'].','.$_SESSION['items'];
 
 if (isset($search)) {
-    $sql = "SELECT count(`logid`) FROM `logs` WHERE `logid` LIKE '" . $search . "' OR `user` LIKE '%" . $search . "%' OR `action` LIKE '%" . $search . "%' OR `level` LIKE '" . $search . "';";
+    $sql = "SELECT count(`logid`) FROM `logs` WHERE `logid` LIKE '".$search."' OR `user` LIKE '%".$search."%' OR `action` LIKE '%".$search."%' OR `level` LIKE '".$search."';";
     $total_records = $db_link->query($sql);
     if ($pageNum > $total_records) {
         $pageNum = $total_records;
     }
-    $sql = "SELECT `logid`,`date_time`,`user`,`action`,`level` FROM `logs` WHERE `logid` LIKE '" . $search . "' OR `user` LIKE '%" . $search . "%' OR `action` LIKE '%" . $search . "%' OR `level` LIKE '" . $search . "' ORDER BY `logid` DESC " . $max . " ;";
-    logAction($_SESSION['user_name'], $lang['searched'] . ' (' . $search . ') ' . $lang['in'] . ' ' . $lang['logs'], 2);
+    $sql = "SELECT `logid`,`date_time`,`user`,`action`,`level` FROM `logs` WHERE `logid` LIKE '".$search."' OR `user` LIKE '%".$search."%' OR `action` LIKE '%".$search."%' OR `level` LIKE '".$search."' ORDER BY `logid` DESC ".$max." ;";
+    logAction($_SESSION['user_name'], $lang['searched'].' ('.$search.') '.$lang['in'].' '.$lang['logs'], 2);
 } else {
     $sql = "SELECT `logid` FROM `logs`;";
     $result_of_query = $db_link->query($sql);
@@ -18,7 +18,7 @@ 
     if ($pageNum > $total_records) {
         $pageNum = $total_records;
     }
-    $sql = "SELECT `logid`,`date_time`,`user`,`action`,`level` FROM `logs` ORDER BY `logid` DESC " . $max . " ;";
+    $sql = "SELECT `logid`,`date_time`,`user`,`action`,`level` FROM `logs` ORDER BY `logid` DESC ".$max." ;";
 }
 $result_of_query = $db_connection->query($sql);
 if ($result_of_query->num_rows > 0) {
@@ -28,7 +28,7 @@ 
         <div class="col-lg-12">
             <h1 class="page-header">
                 <?php echo $lang['logs']; ?>
-                <small><?php echo " " . $lang['overview']; ?></small>
+                <small><?php echo " ".$lang['overview']; ?></small>
             </h1>
         </div>
     </div>
@@ -37,7 +37,7 @@ 
         <div class="content-panel">
             <h4>
                 <i class="fa fa-edit"></i>
-                <?php echo " " . $lang['logs'];
+                <?php echo " ".$lang['logs'];
                 include("views/templates/search.php"); ?>
             </h4>
             <hr class="hidden-xs">
@@ -45,7 +45,7 @@ 
                 <thead>
                 <tr>
                     <th class="hidden-xs"><i
-                            class="fa fa-pencil-square-o"></i> <?php echo $lang['log'] . ' ' . $lang['id'] ?>
+                            class="fa fa-pencil-square-o"></i> <?php echo $lang['log'].' '.$lang['id'] ?>
                     </th>
                     <th class="hidden-xs"><i class="fa fa-calendar"></i>  <?php echo $lang['time']; ?></th>
                     <th class="hidden-xs"><i class="fa fa-user"></i> <?php echo $lang['user']; ?></th>
@@ -57,11 +57,11 @@ 
                 <?php
                 while ($row = mysqli_fetch_assoc($result_of_query)) {
                     echo "<tr>";
-                    echo "<td class='hidden-xs'>" . $row["logid"] . "</td>";
-                    echo "<td class='hidden-xs'>" . $row["date_time"] . "</td>";
-                    echo "<td class='hidden-xs'>" . $row["user"] . "</td>";
-                    echo "<td>" . $row["action"] . "</td>";
-                    echo "<td class='hidden-xs'>" . $row["level"] . "</td>";
+                    echo "<td class='hidden-xs'>".$row["logid"]."</td>";
+                    echo "<td class='hidden-xs'>".$row["date_time"]."</td>";
+                    echo "<td class='hidden-xs'>".$row["user"]."</td>";
+                    echo "<td>".$row["action"]."</td>";
+                    echo "<td class='hidden-xs'>".$row["level"]."</td>";
                     echo "</tr>";
                 };
                 echo "</tbody></table>";

classes/csrf.php

Spacing +1 added lines, -1 removed lines

@@ -16,7 +16,7 @@
      */
     public static function getField()
     {
-        return "<input name='token' value='" . $_SESSION['formtoken'][0] . "' type='hidden' />";
+        return "<input name='token' value='".$_SESSION['formtoken'][0]."' type='hidden' />";
     }
 
         /**

classes/update.php

Spacing +3 added lines, -3 removed lines

@@ -6,7 +6,7 @@ 
     $lang = array('English', 'en');
     array_push($settings['installedLanguage'], $lang);
     $settings['version'] = 0.3;
-    file_put_contents('config/settings.php', '<?php return ' . var_export($settings, true) . ';');
+    file_put_contents('config/settings.php', '<?php return '.var_export($settings, true).';');
     $updated = true;
 }
 if ($settings['version'] < 0.4) {
@@ -17,8 +17,8 @@ 
     $settings['2factor'] = true;
     $settings['force2factor'] = 'none';
     $settings['version'] = 0.4;
-    $settings['item'] = array(5,10,15,25,50);
-    file_put_contents('config/settings.php', '<?php return ' . var_export($settings, true) . ';');
+    $settings['item'] = array(5, 10, 15, 25, 50);
+    file_put_contents('config/settings.php', '<?php return '.var_export($settings, true).';');
     $updated = true;
 }
 if (isset($updated)) {

classes/GuestReg.php

Spacing +2 added lines, -2 removed lines

@@ -95,7 +95,7 @@ 
                 $user_password_hash = password_hash($user_password, PASSWORD_DEFAULT);
 
                 // check if user or email address already exists
-                $sql = "SELECT * FROM `users` WHERE `user_name` = '" . $user_name . "' OR `user_email = '" . $user_email . "';";
+                $sql = "SELECT * FROM `users` WHERE `user_name` = '".$user_name."' OR `user_email = '".$user_email."';";
                 $query_check_user_name = $this->db_connection->query($sql);
 
                 if ($query_check_user_name->num_rows == 1) {
@@ -108,7 +108,7 @@ 
 
                     // write new user's data into database
                         $sql = "INSERT INTO `users` (`user_name`, `user_password_hash`, `user_email`, `playerid`, `user_level`, `permissions`, `user_profile`) VALUES
-                    ('" . $user_name . "', '" . $user_password_hash . "', '" . $user_email . "', '" . $_SESSION['playerid'] . "', '1', '" . $userPerms . "', '1');";
+                    ('" . $user_name."', '".$user_password_hash."', '".$user_email."', '".$_SESSION['playerid']."', '1', '".$userPerms."', '1');";
 
                     $query_new_user_insert = $this->db_connection->query($sql);
 

validators/newUser.php

Spacing +2 added lines, -2 removed lines

@@ -13,7 +13,7 @@ 
         case 'email':
             if (isset($_POST['user_email'])) {
                 $email = $_POST['user_email'];
-                $sql = "SELECT `user_id` FROM `users` WHERE `user_email` = '" . $email . "';";
+                $sql = "SELECT `user_id` FROM `users` WHERE `user_email` = '".$email."';";
                 $result_of_query = $db_connection->query($sql);
                 if (mysqli_num_rows($result_of_query) == 1) {
                     $isAvailable = false;
@@ -27,7 +27,7 @@ 
         case 'username':
             if (isset($_POST['user_name'])) {
                 $username = $_POST['user_name'];
-                $sql = "SELECT `user_id` FROM `users` WHERE `user_name` = '" . $username . "';";
+                $sql = "SELECT `user_id` FROM `users` WHERE `user_name` = '".$username."';";
                 $result_of_query = $db_connection->query($sql);
                 if (mysqli_num_rows($result_of_query) == 1) {
                     $isAvailable = false;

validators/newServer.php

Spacing +1 added lines, -1 removed lines

@@ -12,7 +12,7 @@
     switch ($_POST['type']) {
         case 'username':
             $username = clean($_POST['server_name'], 'string');
-            $sql = "SELECT `name` FROM `servers` WHERE `name` = '" . $username . "'";
+            $sql = "SELECT `name` FROM `servers` WHERE `name` = '".$username."'";
             $result_of_query = $db_connection->query($sql);
             if (mysqli_num_rows($result_of_query) == 1) {
                 $isAvailable = false;

validators/pass.php

Spacing +1 added lines, -1 removed lines

@@ -8,7 +8,7 @@
     if (isset($_POST['current_password'])) {
         $db_connection = masterConnect();
         $isAvailable = false;
-        $sql = "SELECT `user_password_hash` FROM `users` WHERE `user_name` = '" . $_SESSION['user_name'] . "' ";
+        $sql = "SELECT `user_password_hash` FROM `users` WHERE `user_name` = '".$_SESSION['user_name']."' ";
         $user = $db_connection->query($sql)->fetch_object();
         if (password_verify($_POST['current_password'], $user->user_password_hash)) {
             $isAvailable = true;