Gecko [ beghelli.com.mx ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
.mad-root	0 B	-rw-r--r--
adminer.php	465.43 KB	-rw-r--r--
mainModel.php	15.06 KB	-rw-r--r--
pwnkit	10.99 KB	-rwxr-xr-x

Code Editor : mainModel.php

<?php
	if($ajaxRequest){
        require_once "../config/server.php";
		require_once "../config/app.php";
    }else{
        require_once "./config/server.php";
		require_once "./config/app.php";
    }
    
    class mainModel{

protected static function connect(){
            $conexion = new PDO(SGBD,USER,PASS); 
            $conexion -> exec("SET CHARACTER SET utf8");
            return $conexion;
        }

public function disconnect($consulta){
			global $conexion, $consulta;
			$consulta=null;
			$conexion=null;
			return $consulta;
		}

protected static function simple_query($consulta){
            $sql = self::connect() -> prepare($consulta);
            $sql -> execute();
            return $sql;
        }

public function call_simple_query($query){
			return $this->simple_query($query);
		}

public static function encryption($string){
			$output=FALSE;
			$key=hash('sha256', SECRET_KEY);
			$iv=substr(hash('sha256', SECRET_ID), 0, 16);
			$output=openssl_encrypt($string, METHOD, $key, 0, $iv);
			$output=base64_encode($output);
			return $output;
        }
        
		public static function decryption($string){
			$key=hash('sha256', SECRET_KEY);
			$iv=substr(hash('sha256', SECRET_ID), 0, 16);
			$output=openssl_decrypt(base64_decode($string), METHOD, $key, 0, $iv);
			return $output;
        }

protected static function verify_data($filtro, $cadena){
            if(preg_match("/^".$filtro."$/",$cadena)){
                return false;
            }else{
                return true; // regresa verdadero en caso de haber errores
            }
        }
        
        protected static function verify_email($cadena){
            if(filter_var($cadena, FILTER_VALIDATE_EMAIL)){
                return false;
            }else{
                return true; // regresa verdadero en caso de haber errores
            }
        }

protected static function clean_string($string){
            $string = str_ireplace("<script>","",$string); // elimina <script>
            $string = str_ireplace("</script>","",$string); // elimina <script>
            $string = str_ireplace("<script src>","",$string); // elimina <script>
            $string = str_ireplace("<script type=>","",$string); // elimina <script>
            $string = str_ireplace("SELECT * FROM","",$string); // elimina <script>
            $string = str_ireplace("DELETE FROM","",$string); // elimina <script>
            $string = str_ireplace("INSERT INTO","",$string); // elimina <script>
            $string = str_ireplace("DROP TABLE","",$string); // elimina <script>
            $string = str_ireplace("DROP DATABASE","",$string); // elimina <script>
            $string = str_ireplace("TRUNCATE TABLE","",$string); // elimina <script>
            $string = str_ireplace("SHOW TABLES","",$string); // elimina <script>
            $string = str_ireplace("SHOW DATABASES","",$string); // elimina <script>
            $string = str_ireplace("<?php","",$string); // elimina <script>
            $string = str_ireplace("?>","",$string); // elimina <script>
            $string = str_ireplace("--","",$string); // elimina <script>
            $string = str_ireplace(">","",$string); // elimina <script>
            $string = str_ireplace("<","",$string); // elimina <script>
            $string = str_ireplace("[","",$string); // elimina <script>
            $string = str_ireplace("]","",$string); // elimina <script>
            $string = str_ireplace("^","",$string); // elimina <script>
            $string = str_ireplace("==","",$string); // elimina ==
            $string = str_ireplace(";","",$string); // elimina ;
            $string = str_ireplace(":","",$string); // elimina :
            $string = str_ireplace("::","",$string); // elimina ::
            return $string;
        }

protected static function update_data($tabla,$datos,$condicion){
			$query="UPDATE $tabla SET ";

$C=0;
			foreach ($datos as $campo => $indice){
				if($C<=0){
					$query.=$campo."=".$indice["campo_marcador"];
				}else{
					$query.=",".$campo."=".$indice["campo_marcador"];
				}
				$C++;
			}

$query.=" WHERE ".$condicion["condicion_campo"]."=".$condicion["condicion_marcador"];

$sql=self::connect()->prepare($query);

foreach ($datos as $campo => $indice){
				$sql->bindParam($indice["campo_marcador"],$indice["campo_valor"]);
			}

$sql->bindParam($condicion["condicion_marcador"],$condicion["condicion_valor"]);

$sql->execute();
			$error = $sql->errorInfo();
			return $sql;
		}

protected static function save_data($tabla,$datos){
			$query="INSERT INTO $tabla (";
			$C=0;
			foreach ($datos as $campo => $indice){
				if($C<=0){
					$query.=$campo;
				}else{
					$query.=",".$campo;
				}
				$C++;
			}
			
			$query.=") VALUES(";
			$Z=0;
			foreach ($datos as $campo => $indice){
				if($Z<=0){
					$query.=$indice["campo_marcador"];
					
				}else{
					$query.=",".$indice["campo_marcador"];
				}
				$Z++;
			}

$query.=")";
			$conexion = self::connect();
			$sth=$conexion->prepare($query);

foreach ($datos as $campo => $indice){
				$sth->bindParam($indice["campo_marcador"],$indice["campo_valor"]);
			}

$sth->execute();

$error = $sth->errorInfo();
			
			return $sth;
		}

protected static function save_data_id($tabla,$datos){
			$query="INSERT INTO $tabla (";
			$C=0;
			foreach ($datos as $campo => $indice){
				if($C<=0){
					$query.=$campo;
				}else{
					$query.=",".$campo;
				}
				$C++;
			}
			
			$query.=") VALUES(";
			$Z=0;
			foreach ($datos as $campo => $indice){
				if($Z<=0){
					$query.=$indice["campo_marcador"];
					
				}else{
					$query.=",".$indice["campo_marcador"];
				}
				$Z++;
			}

$query.=")";
			$conexion = self::connect();
			$sth=$conexion->prepare($query);

foreach ($datos as $campo => $indice){
				$sth->bindParam($indice["campo_marcador"],$indice["campo_valor"]);
			}

$sth->execute();
			$id = $conexion->lastInsertId();
			$error = $sth->errorInfo();
			return array($sth,$id);
		}

protected static function delete_data($tabla,$campo,$id){
            $sql=self::connect()->prepare("DELETE FROM $tabla WHERE $campo=:ID");

$sql->bindParam(":ID",$id);
            $sql->execute();
            
            return $sql;
        }

protected static function page_table($pagina,$Npaginas,$url,$botones){
			$tabla='<nav aria-label="Page navigation example"><ul class="pagination justify-content-center">';

if($pagina==1){
				$tabla.='<li class="page-item disabled"><a class="page-link"><i class="fas fa-angle-double-left"></i></a></li>';
			}else{
				$tabla.='
				<li class="page-item"><a class="page-link" href="'.$url.'1/"><i class="fas fa-angle-double-left"></i></a></li>
				<li class="page-item"><a class="page-link" href="'.$url.($pagina-1).'/">Anterior</a></li>
				';
			}

$ci=0;
			for($i=$pagina; $i<=$Npaginas; $i++){
				if($ci>=$botones){
					break;
				}

if($pagina==$i){
					$tabla.='<li class="page-item"><a class="page-link active" href="'.$url.$i.'/">'.$i.'</a></li>';
				}else{
					$tabla.='<li class="page-item"><a class="page-link" href="'.$url.$i.'/">'.$i.'</a></li>';
				}

$ci++;
			}

if($pagina==$Npaginas){
				$tabla.='<li class="page-item disabled"><a class="page-link"><i class="fas fa-angle-double-right"></i></a></li>';
			}else{
				$tabla.='
				<li class="page-item"><a class="page-link" href="'.$url.($pagina+1).'/">Siguiente</a></li>
				<li class="page-item"><a class="page-link" href="'.$url.$Npaginas.'/"><i class="fas fa-angle-double-right"></i></a></li>
				';
			}

$tabla.='</ul></nav>';
			return $tabla;
		}

protected static function data_table($tipo,$tabla,$campo,$id){
			$tipo= $tipo;
			$tabla= $tabla;
			$campo= $campo;

if($tipo=="Unico"){
                $sql=self::connect()->prepare("SELECT * FROM $tabla WHERE $campo=:ID");
                $sql->bindParam(":ID",$id);
            }elseif($tipo=="Normal"){
                $sql=self::connect()->prepare("SELECT $campo FROM $tabla");
            }
            $sql->execute();
            return $sql;
		}

protected static function file_newname($path, $filename){
			if ($pos = strrpos($filename, '.')) {
				   $name = substr($filename, 0, $pos);
				   $ext = substr($filename, $pos);
			} else {
				   $name = $filename;
			}
		
			$newpath = $path.'/'.$filename;
			$newname = $filename;
			$counter = 0;
			while (file_exists($newpath)) {
				   $newname = $name .'_'. $counter . $ext;
				   $newpath = $path.'/'.$newname;
				   $counter++;
			 }
		
			return $newname;
		}

protected static function clean_name_file($string){
			
			$ext = pathinfo($string, PATHINFO_EXTENSION);
			$string = basename($string,'.'.$ext);

//Reemplazamos la A y a
			$string = str_replace(
			array('Á', 'À', 'Â', 'Ä', 'á', 'à', 'ä', 'â', 'ª'),
			array('A', 'A', 'A', 'A', 'a', 'a', 'a', 'a', 'a'),
			$string
			);

//Reemplazamos la E y e
			$string = str_replace(
			array('É', 'È', 'Ê', 'Ë', 'é', 'è', 'ë', 'ê'),
			array('E', 'E', 'E', 'E', 'e', 'e', 'e', 'e'),
			$string );

//Reemplazamos la I y i
			$string = str_replace(
			array('Í', 'Ì', 'Ï', 'Î', 'í', 'ì', 'ï', 'î'),
			array('I', 'I', 'I', 'I', 'i', 'i', 'i', 'i'),
			$string );

//Reemplazamos la O y o
			$string = str_replace(
			array('Ó', 'Ò', 'Ö', 'Ô', 'ó', 'ò', 'ö', 'ô'),
			array('O', 'O', 'O', 'O', 'o', 'o', 'o', 'o'),
			$string );

//Reemplazamos la U y u
			$string = str_replace(
			array('Ú', 'Ù', 'Û', 'Ü', 'ú', 'ù', 'ü', 'û'),
			array('U', 'U', 'U', 'U', 'u', 'u', 'u', 'u'),
			$string );

//Reemplazamos la N, n, C y c
			$string = str_replace(
			array('Ñ', 'ñ', 'Ç', 'ç'),
			array('N', 'n', 'C', 'c'),
			$string
			);

//Reemplazamos la N, n, C y c
			$string = str_replace(
				array('_', '-', ' ', '(', ')', '.'),
				array('', '', '', '', '', ''),
				$string
				);
			
			
			return $string.".".$ext;
			
		}

protected static function clean_name_to($string){

//Reemplazamos la A y a
			$string = str_replace(
			array('Á', 'À', 'Â', 'Ä', 'á', 'à', 'ä', 'â', 'ª'),
			array('A', 'A', 'A', 'A', 'a', 'a', 'a', 'a', 'a'),
			$string
			);

//Reemplazamos la E y e
			$string = str_replace(
			array('É', 'È', 'Ê', 'Ë', 'é', 'è', 'ë', 'ê'),
			array('E', 'E', 'E', 'E', 'e', 'e', 'e', 'e'),
			$string );

//Reemplazamos la I y i
			$string = str_replace(
			array('Í', 'Ì', 'Ï', 'Î', 'í', 'ì', 'ï', 'î'),
			array('I', 'I', 'I', 'I', 'i', 'i', 'i', 'i'),
			$string );

//Reemplazamos la O y o
			$string = str_replace(
			array('Ó', 'Ò', 'Ö', 'Ô', 'ó', 'ò', 'ö', 'ô'),
			array('O', 'O', 'O', 'O', 'o', 'o', 'o', 'o'),
			$string );

//Reemplazamos la U y u
			$string = str_replace(
			array('Ú', 'Ù', 'Û', 'Ü', 'ú', 'ù', 'ü', 'û'),
			array('U', 'U', 'U', 'U', 'u', 'u', 'u', 'u'),
			$string );

//Reemplazamos la N, n, C y c
			$string = str_replace(
			array('Ñ', 'ñ', 'Ç', 'ç'),
			array('N', 'n', 'C', 'c'),
			$string
			);

//Reemplazamos la N, n, C y c
			$string = str_replace(
				array('_', '-', ' ', '(', ')', '.'),
				array('', '', '', '', '', ''),
				$string
				);
			
			
			return $string;
			
		}

protected static function update_relation($tabla,$datos,$condicion1,$condicion2){
			$query="UPDATE $tabla SET ";

$query.=" WHERE ".$condicion1["condicion_campo"]."=".$condicion1["condicion_marcador"]." AND ".$condicion2["condicion_campo"]."=".$condicion2["condicion_marcador"];

$sql=self::connect()->prepare($query);

foreach ($datos as $campo => $indice){
				$sql->bindParam($indice["campo_marcador"],$indice["campo_valor"]);
			}

$sql->bindParam($condicion1["condicion_marcador"],$condicion1["condicion_valor"]);
			$sql->bindParam($condicion2["condicion_marcador"],$condicion2["condicion_valor"]);

$sql->execute();

return $sql;
		}

protected static function save_relations($tabla,$datos){
			$query="INSERT INTO $tabla (";
			$C=0;
			foreach ($datos as $campo => $indice){
				if($C<=0){
					$query.=$campo;
				}else{
					$query.=",".$campo;
				}
				$C++;
			}
			
			$query.=") VALUES(";
			$Z=0;
			foreach ($datos as $campo => $indice){
				if($Z<=0){
					$query.=$indice["campo_marcador"];
					
				}else{
					$query.=",".$indice["campo_marcador"];
				}
				$Z++;
			}

$query.=")";
			$sql=self::connect();
			$stmt = $sql->prepare($query);
			$sql->beginTransaction();
			foreach ($datos as $campo => $indice){
				$stmt->bindParam($indice["campo_marcador"],$indice["campo_valor"]);
			}
			$stmt->execute();
			$sql->commit();
			return $stmt;
		}

protected static function delete_relation($tabla,$campo,$campo2,$id1,$id2){
            $sql=self::connect()->prepare("DELETE FROM $tabla WHERE $campo=:ID AND $campo2=:ID2");

$sql->bindParam(":ID",$id1);
			$sql->bindParam(":ID2",$id2);
            $sql->execute();
            
            return $sql;
        }

protected static function delete_all_relation($tabla,$campo,$id){
			$sql=self::connect()->prepare("DELETE FROM $tabla WHERE $campo=:ID");

$sql->bindParam(":ID",$id);
			$sql->execute();
			
			return $sql;
		}

protected static function start_transaction() {
			try {
				$db = self::connect(); // Conectar a la base de datos
				$db->beginTransaction(); // Iniciar la transacción
			} catch (PDOException $e) {
				throw new Exception("Error al iniciar la transacción: " . $e->getMessage());
			}
		}

protected static function commit_transaction() {
			try {
				$db = self::connect(); // Conectar a la base de datos
				$db->commit(); // Confirmar la transacción
			} catch (PDOException $e) {
				throw new Exception("Error al confirmar la transacción: " . $e->getMessage());
			}
		}

protected static function rollback_transaction() {
			try {
				$db = self::connect(); // Conectar a la base de datos
				$db->rollBack(); // Revertir la transacción
			} catch (PDOException $e) {
				throw new Exception("Error al revertir la transacción: " . $e->getMessage());
			}
		}
		
		public static function clean_name($string) {
			$unwanted_array = array(
				'á' => 'a', 'é' => 'e', 'í' => 'i', 'ó' => 'o', 'ú' => 'u',
				'Á' => 'A', 'É' => 'E', 'Í' => 'I', 'Ó' => 'O', 'Ú' => 'U',
				'ñ' => 'n', 'Ñ' => 'N'
			);
			// Eliminar acentos y convertir a minúsculas
			$clean_string = strtr($string, $unwanted_array);
			// Reemplazar espacios con guiones
			$clean_string = str_replace(' ', '-', $clean_string);
			// Convertir a minúsculas para URLs amigables
			return strtolower($clean_string);
		}

}

${this.title}

Code Editor : mainModel.php