FM / openb

/var/softaculous/openb

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
.htaccess	2091	0755	edit dl rm
config.php	18224	0755	edit dl rm
database.php	4569	0755	edit dl rm
extend.php	9133	0755	edit dl rm
fileindex.php	131	0755	edit dl rm
import.php	4205	0755	edit dl rm
info.xml	4862	0755	edit dl rm
install.js	924	0755	edit dl rm
install.php	8906	0755	edit dl rm
install.xml	1482	0755	edit dl rm
md5	6456	0755	edit dl rm
notes.txt	290	0755	edit dl rm
soft.htaccess	127	0755	edit dl rm
update_pass.php	516	0755	edit dl rm
_edit.php	3416	0755	edit dl rm
_edit.xml	433	0755	edit dl rm
_index.php	59	0755	edit dl rm

Edit: /var/softaculous/openb/_edit.php (3416B)

<?php

//////////////////////////////////////////////////////////////
//===========================================================
// edit.php(For individual softwares)
//===========================================================
// SOFTACULOUS 
// Version : 1.0
// Inspired by the DESIRE to be the BEST OF ALL
// ----------------------------------------------------------
// Started by: Alons
// Date:       10th Jan 2009
// Time:       21:00 hrs
// Site:       http://www.softaculous.com/ (SOFTACULOUS)
// ----------------------------------------------------------
// Please Read the Terms of use at http://www.softaculous.com
// ----------------------------------------------------------
//===========================================================
// (c)Softaculous Inc.
//===========================================================
//////////////////////////////////////////////////////////////

if(!defined('SOFTACULOUS')){

die('Hacking Attempt');

}

/////////////////////////////////////////
// All functions in this PAGE must begin
// with TWO UNDERSCORE '__' to avoid 
// clashes with SOFTACULOUS Functions
// e.g. __funcname()
/////////////////////////////////////////

//////////////////////////////////////////
// Note : The path of the upgrade package 
//        is $software['path'].'/' . So to
//        access other files use 
//        $software['path'].'/other_file.ext'
//////////////////////////////////////////

//The Edit process
function __edit($installation){

global $__settings, $globals, $setupcontinue, $software, $error;

$__settings['admin_username'] = optPOST('admin_username');
	$__settings['admin_pass'] = optPOST('admin_pass');
		
	// Do we need to reset the password ?
	if(!empty($__settings['admin_pass'])){
	
		// We need the username
		if(empty($__settings['admin_username'])){
			$error[] = '{{err_no_username}}';
			return false;
		}
		
		// This is to get dbprefix from import.php
		sp_include_once($software['path'].'/import.php');
		
		$r = call_user_func('__import_'.$software['softname'], $installation['softpath']);
					
		$__settings['dbprefix'] = $r['dbprefix'];
		$__settings['softdbhost'] = $r['softdbhost'];
		$__settings['softdbuser'] = $r['softdbuser'];
		$__settings['softdbpass'] = $r['softdbpass'];
		$__settings['softdb'] = $r['softdb'];
				
		if(!empty($error)){
			return false;
		}
		
		$query = "SELECT `id` FROM `".$__settings['dbprefix']."users` WHERE `username` = '".$__settings['admin_username']."';";
		
		// Does this user exist ?
		$result = sdb_query($query, $__settings['softdbhost'], $__settings['softdbuser'], $__settings['softdbpass'], $__settings['softdb']);
		
		$userid = $result[0]['id'];
		
		if(empty($userid)){
			$error[] = '{{err_no_such_user}}';
			return false;			
		}else{			
						
			// This is to obtain password method from install.php
			sp_include_once($software['path'].'/install.php');			
		
			// creating password using install.php __ad_pass() function
			$__settings['admin_pass'] = __ad_pass($__settings['admin_pass']);
			
			if(!empty($error)){
				return false;
			}
										
			// Update the password now
			$update_query = "UPDATE `".$__settings['dbprefix']."users` SET `password` = '".$__settings['admin_pass']."' WHERE `id` = '".$userid."';";
			$result = sdb_query($update_query, $__settings['softdbhost'], $__settings['softdbuser'], $__settings['softdbpass'], $__settings['softdb']);
		
		}
	}
}