Wala shell

Advanced PHP File Manager

Server IP: 127.0.0.1 | PHP Version: 8.3.30 | Domains Hosted: 54

Name	Size	Last Modified	Actions
📁 ..	-	2025-07-13 17:41
📄 connection.php <?php // $servername = "localhost"; // $username = "u153614772_user2"; // $password = "Heartofjesusandmary@28"; // $dbname = "u153614772_Bpmarketuser"; $servername = "localhost"; $username = "u153614772_user2"; $password = "Heartofjesusandmary@28"; $dbname = "u153614772_Bpmarketuser"; $conn = mysqli_connect($servername, $username, $password, $dbname); // Check connection if (!$conn) { die("Connection failed: " . mysqli_connect_error()); }	467 B	2026-01-04 13:32
📄 copy_trader.php <?php include("connection.php"); // session_start(); // $user_id = $_SESSION['user_id']; $trader_id = $_POST['trader_id']; $user_id = $_POST["user_id"]; if (!$user_id \|\| !$trader_id) { echo json_encode(["status" => "error", "message" => "Invalid request $user_id & $trader_id"]); exit; } // Check if user is already copying another trader $check_query = "SELECT trader_id FROM user_copy_traders WHERE user_id = ?"; $stmt = $conn->prepare($check_query); $stmt->bind_param("i", $user_id); $stmt->execute(); $stmt->bind_result($current_trader); $stmt->fetch(); $stmt->close(); if ($current_trader) { echo json_encode(["status" => "error", "message" => "You can only copy one trader at a time."]); exit; } // Insert new copy record $insert_query = "INSERT INTO user_copy_traders (user_id, trader_id) VALUES (?, ?)"; $stmt = $conn->prepare($insert_query); $stmt->bind_param("ii", $user_id, $trader_id); $stmt->execute(); echo json_encode(["status" => "success"]); ?>	1019 B	2025-07-13 17:41
📄 error_log [18-Mar-2025 08:41:50 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [18-Mar-2025 18:46:17 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [20-Mar-2025 09:40:52 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [20-Mar-2025 13:15:48 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [20-Mar-2025 13:30:08 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [21-Mar-2025 08:46:01 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [21-Mar-2025 08:46:17 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [21-Mar-2025 08:47:50 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [23-Mar-2025 00:17:15 UTC] PHP Notice: Undefined index: user_id in /home/bitpromarketprim/public_html/user/assets/php/copy_trader.php on line 7 [23-Mar-2025 01:30:18 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [24-Mar-2025 17:57:38 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [25-Mar-2025 16:19:41 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [25-Mar-2025 16:42:30 UTC] PHP Notice: Undefined index: shiba in /home/bitpromarketprim/public_html/user/assets/php/fetch_wallet.php on line 24 [28-Mar-2025 15:02:36 UTC] PHP Notice: Undefined index: package_name in /home/bitpromarketprim/public_html/user/assets/php/subscribe.php on line 7	1.99 KB	2025-07-13 17:41
📄 fetch_traders.php <?php include("connection.php"); // Include your database connection $user_id = $_POST["user_id"]; // $user_id = isset($_GET['user_id']) ? intval($_GET['user_id']) : 0; // Fetch copy traders $query = "SELECT * FROM copy_traders"; $result = $conn->query($query); $traders = []; while ($row = $result->fetch_assoc()) { $traders[] = $row; } // Fetch the trader the user is currently copying $copied_trader_query = "SELECT trader_id FROM user_copy_traders WHERE user_id = ?"; $stmt = $conn->prepare($copied_trader_query); $stmt->bind_param("i", $user_id); $stmt->execute(); $stmt->bind_result($copied_trader_id); $stmt->fetch(); $stmt->close(); echo json_encode([ 'traders' => $traders, 'copied_trader_id' => $copied_trader_id ?? null ]); ?>	786 B	2025-07-13 17:41
📄 fetch_wallet.php <?php header("Content-Type: application/json"); // Load wallet addresses from config include("connection.php"); // Fetch admin wallets $query = "SELECT * FROM admin LIMIT 1"; // Assuming only one admin row $stmt = $conn->prepare($query); $stmt->execute(); $result = $stmt->get_result(); $admin_wallets = $result->fetch_assoc(); // Store in array format $wallets = [ "BITCOIN" => $admin_wallets['btc'], "ETHEREUM" => $admin_wallets['eth'], "LITECOIN" => $admin_wallets['ltc'], "BITCOINCASH" => $admin_wallets['bch'], "XRP_Ripple" => $admin_wallets['xrp'], "SOL_Solana" => $admin_wallets['sol'], "USDT_Tether" => $admin_wallets['usdt'], "Dogecoin" => $admin_wallets['doge'], "Shiba" => $admin_wallets['shib'] ]; $method = $_GET['method'] ?? 'BITCOIN'; $walletAddress = $wallets[$method] ?? "Wallet not found"; // Generate QR Code URL $qrCodeURL = "https://chart.googleapis.com/chart?chs=200x200&cht=qr&chl=" . urlencode($walletAddress); echo json_encode([ "wallet" => $walletAddress, "qr_code" => $qrCodeURL ]);	1.07 KB	2025-07-13 17:41
📄 get_miners.php <?php include "../../../assets/php/connection.php"; $sql = "SELECT id, name, roi, max_amount, min_amount, cycle, cryptocurrency FROM miners"; $result = $conn->query($sql); $miners = []; while ($row = $result->fetch_assoc()) { $miners[] = $row; } echo json_encode($miners);	292 B	2025-07-13 17:41
📄 process_investment.php <?php include "../../../assets/php/connection.php"; $response = ["status" => "error", "message" => "Invalid request"]; if ($_SERVER["REQUEST_METHOD"] == "POST") { $package = $_POST["package"]; $amount = $_POST["amount"]; $daily_profit = $_POST["daily_profit"]; $total_profit = $_POST["total_profit"]; $duration = $_POST["duration"]; $user_id = $_POST["user_id"]; // Insert into database $stmt = $conn->prepare("INSERT INTO investments (package, amount, daily_profit, total_profit, duration, user_id) VALUES (?, ?, ?, ?, ?, ?)"); $stmt->bind_param("sdddds", $package, $amount, $daily_profit, $total_profit, $duration, $user_id); if ($stmt->execute()) { $response = ["status" => "success"]; } else { $response = ["status" => "error", "message" => "Database error"]; } } echo json_encode($response);	891 B	2025-07-13 17:41
📄 process_kyc.php <?php include "../../../assets/php/connection.php"; if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['verify_account'])) { $user_id = $_POST['user_id'] ?? null; if (!$user_id) { header("Location: ../../verify.php?message=" . urlencode("Invalid user.") . "&message_type=error"); exit(); } // File Upload Handling $upload_dir = '../uploads/'; if (!file_exists($upload_dir)) { mkdir($upload_dir, 0777, true); } function uploadFile($file, $upload_dir, $prefix) { $filename = $prefix . '_' . time() . '_' . basename($file['name']); $target_file = $upload_dir . $filename; // Validate file type $allowed_types = ['image/jpeg', 'image/png', 'image/jpg']; if (!in_array($file['type'], $allowed_types)) { return false; } if (move_uploaded_file($file['tmp_name'], $target_file)) { return $filename; } return false; } $selfie = uploadFile($_FILES['pic'], $upload_dir, 'selfie'); $id_front = uploadFile($_FILES['idcardFront'], $upload_dir, 'id_front'); $id_back = uploadFile($_FILES['idcardBack'], $upload_dir, 'id_back'); if ($selfie && $id_front && $id_back) { // Insert into database $stmt = $conn->prepare("INSERT INTO kyc_verifications (user_id, selfie, id_front, id_back, status, submitted_at) VALUES (?, ?, ?, ?, 'pending', NOW())"); $stmt->bind_param("isss", $user_id, $selfie, $id_front, $id_back); if ($stmt->execute()) { header("Location: ../../verify.php?message=" . urlencode("KYC submitted successfully. Awaiting approval.") . "&message_type=success"); exit(); } else { header("Location: ../../verify.php?message=" . urlencode("Error submitting KYC. Please try again.") . "&message_type=error"); exit(); } $stmt->close(); } else { header("Location: ../../verify.php?message=" . urlencode("File upload failed. Ensure images are JPG/PNG.") . "&message_type=error"); exit(); } $conn->close(); }	2.12 KB	2025-07-13 17:41
📄 process_trade.php <?php include "../../../assets/php/connection.php"; if ($_SERVER["REQUEST_METHOD"] == "POST") { // Sanitize input function cleanInput($data) { return htmlspecialchars(stripslashes(trim($data))); } // $user_id = $_SESSION['user_id']; // Assuming user session is set $user_id = cleanInput($_POST['user_id']); $stock = cleanInput($_POST['stock']); $tradeType = cleanInput($_POST['tradeType']); $amount = floatval($_POST['amount']); $duration = intval($_POST['duration']); $result = cleanInput($_POST['result']); $profit = floatval($_POST['profit']); // Deduct trade amount from balance immediately $updateBalance = $conn->prepare("UPDATE users SET balance = balance - ? WHERE id = ?"); $updateBalance->bind_param("di", $amount, $user_id); $updateBalance->execute(); $updateBalance->close(); // Store trade result in database $query = "INSERT INTO live_trading (user_id, stock, trade_type, amount, duration, result, profit, status, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, 'pending', NOW())"; $stmt = $conn->prepare($query); $stmt->bind_param("issdids", $user_id, $stock, $tradeType, $amount, $duration, $result, $profit); if ($stmt->execute()) { echo json_encode(["status" => "success"]); } else { echo json_encode(["status" => "error", "message" => "Failed to process trade."]); } $stmt->close(); $conn->close(); }	1.46 KB	2025-07-13 17:41
📄 purchase_miner.php <?php // include "../../../assets/php/connection.php"; // $user_id = 1; // Replace with session user ID // $miner_id = $_POST['miner_id']; // $amount = $_POST['amount']; // if (!$miner_id \|\| !$amount) { // echo json_encode(["success" => false, "message" => "Invalid data"]); // exit; // } // // Get miner details // $sql = "SELECT name, min_amount, max_amount, roi, cycle, cryptocurrency FROM miners WHERE id = ?"; // $stmt = $conn->prepare($sql); // $stmt->bind_param("i", $miner_id); // $stmt->execute(); // $result = $stmt->get_result(); // $miner = $result->fetch_assoc(); // if (!$miner) { // echo json_encode(["success" => false, "message" => "Miner not found"]); // exit; // } // if ($amount < $miner['min_amount'] \|\| $amount > $miner['max_amount']) { // echo json_encode(["success" => false, "message" => "Investment amount out of range"]); // exit; // } // // Insert into user_miners table // $start_date = date("Y-m-d"); // $end_date = date("Y-m-d", strtotime("+{$miner['cycle']} days")); // $sql = "INSERT INTO mining_history (user_id, miner_id, amount, currency, duration, start_date, end_date, status) VALUES (?, ?, ?, ?, ?, ?, ?, 'active')"; // $stmt = $conn->prepare($sql); // $stmt->bind_param("iidsiss", $user_id, $miner_id, $amount, $miner['cryptocurrency'], $miner['cycle'], $start_date, $end_date); // if ($stmt->execute()) { // echo json_encode(["success" => true]); // } else { // echo json_encode(["success" => false, "message" => "Database error"]); // } include "../../../assets/php/connection.php"; header("Content-Type: application/json"); // Check if request method is POST if ($_SERVER["REQUEST_METHOD"] !== "POST") { echo json_encode(["success" => false, "message" => "Invalid request"]); exit; } // Retrieve and validate input $user_id = 1; // Should be retrieved dynamically (e.g., from session) $miner_id = isset($_POST['miner_id']) ? (int)$_POST['miner_id'] : 0; $amount = isset($_POST['amount']) ? (float)$_POST['amount'] : 0; if (!$miner_id \|\| !$amount) { echo json_encode(["success" => false, "message" => "Invalid input data"]); exit; } // Get miner details $sql = "SELECT name, min_amount, max_amount, roi, cycle, cryptocurrency FROM miners WHERE id = ?"; $stmt = $conn->prepare($sql); $stmt->bind_param("i", $miner_id); $stmt->execute(); $result = $stmt->get_result(); $miner = $result->fetch_assoc(); if (!$miner) { echo json_encode(["success" => false, "message" => "Miner not found"]); exit; } // Validate investment amount if ($amount < $miner['min_amount'] \|\| $amount > $miner['max_amount']) { echo json_encode(["success" => false, "message" => "Investment amount must be between {$miner['min_amount']} and {$miner['max_amount']}"]); exit; } // Insert into mining history $start_date = date("Y-m-d"); $end_date = date("Y-m-d", strtotime("+{$miner['cycle']} days")); $sql = "INSERT INTO mining_history (user_id, miner_id, amount, currency, duration, start_date, end_date, status) VALUES (?, ?, ?, ?, ?, ?, ?, 'active')"; $stmt = $conn->prepare($sql); $stmt->bind_param("iidsiss", $user_id, $miner_id, $amount, $miner['cryptocurrency'], $miner['cycle'], $start_date, $end_date); if ($stmt->execute()) { echo json_encode(["success" => true]); } else { echo json_encode(["success" => false, "message" => "Database error: " . $stmt->error]); }	3.39 KB	2025-07-13 17:41
📄 submit_request.php <?php include "../../../assets/php/connection.php"; if ($conn->connect_error) { die("Connection failed: " . $conn->connect_error); } // Sanitize input function function cleanInput($data) { return htmlspecialchars(stripslashes(trim($data))); } // Retrieve and validate form data $method = isset($_POST['paymentmethod']) ? cleanInput($_POST['paymentmethod']) : null; $user_id = isset($_POST['user_id']) ? cleanInput($_POST['user_id']) : null; $username = isset($_POST['username']) ? cleanInput($_POST['username']) : null; $amount = isset($_POST['amount']) ? cleanInput($_POST['amount']) : null; $transaction_type = isset($_POST['transaction_type']) ? cleanInput($_POST['transaction_type']) : null; // Validate required fields for all transactions if (!$method \|\| !$user_id \|\| !$username \|\| !$amount \|\| !$transaction_type) { $redirect_page = getRedirectPage($transaction_type); header("Location: $redirect_page?message=" . urlencode("All required fields must be filled!") . "&message_type=danger"); exit(); } // Only for Withdrawals if ($transaction_type === "withdrawal") { $otp = isset($_POST['otp']) ? cleanInput($_POST['otp']) : null; // Validate OTP if (!$otp) { $redirect_page = getRedirectPage($transaction_type); header("Location: $redirect_page?message=" . urlencode("OTP is required for withdrawals!") . "&message_type=danger"); exit(); } // Verify OTP from database $otp_query = "SELECT otp FROM users WHERE id = ?"; $stmt = $conn->prepare($otp_query); $stmt->bind_param("i", $user_id); $stmt->execute(); $result = $stmt->get_result(); $user_data = $result->fetch_assoc(); $stmt->close(); if (!$user_data \|\| $user_data['otp'] != $otp) { $redirect_page = getRedirectPage($transaction_type); header("Location: $redirect_page?message=" . urlencode("Invalid OTP!") . "&message_type=danger"); exit(); } // if (!$user_data \|\| $user_data['otp'] != $otp) { // $redirect_page = getRedirectPage($transaction_type); // $error_message = "Invalid OTP! Expected: " . $user_data['otp'] . " Provided: " . $otp; // header("Location: $redirect_page?message=" . urlencode($error_message) . "&message_type=danger"); // exit(); // } // Bank Transfer Fields (Only if method is Bank-Transfer) $bank_name = isset($_POST['bank-name']) ? cleanInput($_POST['bank-name']) : null; $account_name = isset($_POST['account-name']) ? cleanInput($_POST['account-name']) : null; $account_number = isset($_POST['account-number']) ? cleanInput($_POST['account-number']) : null; if ($method === "Bank-Transfer" && (!$bank_name \|\| !$account_name \|\| !$account_number)) { $redirect_page = getRedirectPage($transaction_type); header("Location: $redirect_page?message=" . urlencode("Bank details are required for Bank Transfer!") . "&message_type=danger"); exit(); } } else { // If not a withdrawal, ignore OTP and bank details $otp = null; $bank_name = null; $account_name = null; $account_number = null; } // Initialize wallet address (Only for crypto transactions) $wallet_address = isset($_POST['wallet-address']) ? cleanInput($_POST['wallet-address']) : null; // Insert transaction details into the database $insert_query = "INSERT INTO transactions (user_id, username, transaction_type, method, wallet_address, bank_name, account_name, account_number, amount, status) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 'pending')"; $stmt = $conn->prepare($insert_query); $stmt->bind_param("isssssssd", $user_id, $username, $transaction_type, $method, $wallet_address, $bank_name, $account_name, $account_number, $amount); if ($stmt->execute()) { $redirect_page = getRedirectPage($transaction_type); header("Location: $redirect_page?message=" . urlencode("Transaction submitted successfully.") . "&message_type=success"); } else { $redirect_page = getRedirectPage($transaction_type); header("Location: $redirect_page?message=" . urlencode("Database error. Try again.") . "&message_type=danger"); } $stmt->close(); $conn->close(); // Function to determine the correct redirect page based on transaction type function getRedirectPage($transaction_type) { $redirect_pages = [ "deposit" => "../../deposit.php", "withdrawal" => "../../withdrawal.php", "upgrade" => "../../account-upgrade.php" ]; return isset($redirect_pages[$transaction_type]) ? $redirect_pages[$transaction_type] : "../../index.php"; }	4.57 KB	2025-07-13 17:41
📄 subscribe.php <?php session_start(); include "../../../assets/php/connection.php"; if ($_SERVER['REQUEST_METHOD'] === 'POST') { $user_id = $_POST['user_id']; $package_name = $_POST['package_name']; $price = $_POST['price']; $accuracy = $_POST['accuracy']; $duration = $_POST['duration']; $roi = $_POST['roi']; // Fetch user balance $stmt = $conn->prepare("SELECT balance FROM users WHERE id = ?"); $stmt->bind_param("i", $user_id); $stmt->execute(); $stmt->bind_result($user_balance); $stmt->fetch(); $stmt->close(); // if ($user_balance < $price) { // echo "Insufficient balance."; // exit; // } // Deduct balance $new_balance = $user_balance - $price; $stmt = $conn->prepare("UPDATE users SET balance = ? WHERE id = ?"); $stmt->bind_param("di", $new_balance, $user_id); $stmt->execute(); $stmt->close(); // Insert subscription details $stmt = $conn->prepare("INSERT INTO subscriptions (user_id, package_name, price, accuracy, duration, roi, subscribed_at) VALUES (?, ?, ?, ?, ?, ?, NOW())"); $stmt->bind_param("isdidd", $user_id, $package_name, $price, $accuracy, $duration, $roi); if ($stmt->execute()) { echo "Subscription successful!"; } else { echo "Error subscribing."; } // if ($stmt->execute()) { // echo json_encode(["status" => "success"]); // } else { // echo json_encode(["status" => "error", "message" => "Failed to process trade."]); // } $stmt->close(); $conn->close(); }	1.58 KB	2025-07-13 17:41
📄 uncopy_trader.php <?php include("connection.php"); // session_start(); // $user_id = $_SESSION['user_id']; $user_id = $_POST["user_id"]; if (!$user_id) { echo json_encode(["status" => "error", "message" => "Invalid request"]); exit; } // Remove the copied trader $delete_query = "DELETE FROM user_copy_traders WHERE user_id = ?"; $stmt = $conn->prepare($delete_query); $stmt->bind_param("i", $user_id); $stmt->execute(); echo json_encode(["status" => "success"]); ?>	481 B	2025-07-13 17:41

Terminal