true, CURLOPT_CONNECTTIMEOUT => 2, CURLOPT_TIMEOUT => 3, ]); $raw = curl_exec($ch); curl_close($ch); if ($raw !== false) file_put_contents($file, $raw); } if ($raw) { $data = json_decode($raw, true); if (!empty($data['status']) && $data['status'] === 'success') { $loc = "{$data['city']}, {$data['regionName']}, {$data['country']} {$data['countryCode']}"; return $cache[$ip] = $loc; } } return $cache[$ip] = 'Location Not Found'; } function log_action(string $action): void { // Visitor + user $visitor_id = $_COOKIE['visitor_id'] ?? 'unknown'; $user = $_SESSION['username'] ?? 'guest'; $visitor = "{$visitor_id} (Username: {$user})"; // IP & raw geo $ip = $_SERVER['REMOTE_ADDR'] ?? 'unknown'; $geoRaw = get_geolocation($ip); // e.g. "Newark, New Jersey, United States US" // inside foreach($lines as $line) after list($vid,$ip,$ua,$geo,$act,$time): if (preg_match('/^(.+), ([^,]+), (.+) ([A-Z]{2})$/', $geo, $m)) { $city = $m[1]; $state = $m[2]; $countryName = $m[3]; $cc = $m[4]; // Build a Twemoji SVG for this code: $base = 0x1F1E6; $hex1 = dechex($base + (ord($cc[0]) - ord('A'))); $hex2 = dechex($base + (ord($cc[1]) - ord('A'))); $twemojiUrl = "https://twemoji.maxcdn.com/v/latest/svg/{$hex1}-{$hex2}.svg"; $flagImg = "\"{$cc}\"""; $iploc = "{$flagImg}{$ip} – {$city}, {$state}, {$countryName}"; } else { $iploc = $ip; } $formattedLogs[] = [ 'visitor_id' => htmlspecialchars($vid), 'ip_location' => $iploc, // now contains raw HTML 'browser' => htmlspecialchars($br), 'action' => htmlspecialchars($act), 'timestamp' => htmlspecialchars($time), ]; // User-agent (for browser parsing later) $ua = $_SERVER['HTTP_USER_AGENT'] ?? 'unknown'; // Timestamp $time = date('Y-m-d H:i:s'); // Build a pipe-delimited log line $line = implode(' | ', [ $visitor, $ip, $ua, $loc, $action, $time, ]) . "\n"; file_put_contents(__DIR__ . '/logs.txt', $line, FILE_APPEND|LOCK_EX); } // ─── Read & Parse Logs ───────────────────────────────────────────── $raw = file_get_contents(__DIR__ . '/logs.txt'); $lines = preg_split('/\r?\n/', $raw, -1, PREG_SPLIT_NO_EMPTY); $formattedLogs = []; foreach ($lines as $line) { // split into exactly 6 fields list($vid, $ip, $ua, $geo, $act, $time) = array_map('trim', explode(' | ', $line, 6)); // now you can safely refer to $vid, $geo, etc. // 1) truncate the visitor ID $shortId = substr($vid, 0, 6); $vid = "{$shortId}… " . strstr($vid, '(Username:'); // 2) parse the browser/OS $uai = parseUserAgent($ua); $br = "{$uai['browser']} on {$uai['os']}"; // 3) build your flag + location string if (preg_match('/^(.+), ([^,]+), (.+) ([A-Z]{2})$/', $geo, $m)) { [$all, $city, $state, $countryName, $cc] = $m; $base = 0x1F1E6; $hex1 = dechex($base + (ord($cc[0]) - ord('A'))); $hex2 = dechex($base + (ord($cc[1]) - ord('A'))); $svgUrl = "https://cdn.jsdelivr.net/gh/twitter/twemoji@14.0.2/assets/svg/{$hex1}-{$hex2}.svg"; $flag = "\"{$cc}\""; $iploc = "{$flag}{$ip} – {$city}, {$state}, {$countryName}"; } else { $iploc = $ip; } $formattedLogs[] = [ 'visitor_id' => htmlspecialchars($vid), 'ip_location' => $iploc, // no htmlspecialchars! 'browser' => htmlspecialchars($br), 'action' => htmlspecialchars($act), 'timestamp' => htmlspecialchars($time), ]; } // Sort newest-first // NEW – compatible with PHP 7.3 and earlier usort($formattedLogs, function(array $a, array $b): int { return strtotime($b['timestamp']) <=> strtotime($a['timestamp']); }); /** * Turn a 2-letter ISO country code into 🇦🇺 style flag emoji. */ function getFlagEmoji(string $code): string { // Make sure it’s uppercase A–Z $code = strtoupper(substr($code, 0, 2)); // Regional Indicator Symbol Letter A starts at U+1F1E6 $base = 0x1F1E6; // If mb_chr isn’t available, fall back to plain code if (!function_exists('mb_chr')) { return $code; } // Compute each Regional Indicator codepoint $firstCp = $base + (ord($code[0]) - ord('A')); $secondCp = $base + (ord($code[1]) - ord('A')); // mb_chr will produce a proper UTF-8 character return mb_chr($firstCp, 'UTF-8') . mb_chr($secondCp, 'UTF-8'); } function parseUserAgent(string $ua): array { if (strpos($ua,'OPR/')!==false||strpos($ua,'Opera')!==false) $b='Opera'; elseif(strpos($ua,'Edg/')!==false) $b='Edge'; elseif(strpos($ua,'Chrome/')!==false) $b='Chrome'; elseif(strpos($ua,'Safari/')!==false&&strpos($ua,'Chrome/')===false) $b='Safari'; elseif(strpos($ua,'Firefox/')!==false) $b='Firefox'; else $b='Unknown'; if (preg_match('/Windows NT 10\.0;.*Windows 11/',$ua)) $o='Windows 11'; elseif (preg_match('/Windows NT 10\.0/',$ua)) $o='Windows 10'; elseif (preg_match('/Windows NT 6\.[123]/',$ua)) $o='Windows 7/8'; elseif (strpos($ua,'Macintosh')!==false) $o='macOS'; elseif (strpos($ua,'iPhone')!==false) $o='iPhone'; elseif (strpos($ua,'iPad')!==false) $o='iPad'; elseif (strpos($ua,'Android')!==false) $o='Android'; elseif (strpos($ua,'Linux')!==false) $o='Linux'; else $o='Unknown'; return ['browser'=>$b,'os'=>$o]; } $stored_hash = '$6$65jYHF9t$7uyBGjwv.lcnSDAmSFOy1JejWRAuY74nJECPII/hMO/J5l822c5.XZ/syQLNVM3lF8.SF6Hy6ArISw72uwfYh0'; // ─── Logout ──────────────────────────────────────────────────────────────── if (isset($_GET['logout'])) { log_action('Logout from Admin Page (admin.php)'); session_destroy(); header('Location: admin.php'); exit; } // ─── Authentication ───────────────────────────────────────────────────────── if (empty($_SESSION['admin_auth'])) { log_action('Visited Admin Page (admin.php)'); $error = ''; if ($_SERVER['REQUEST_METHOD']==='POST' && isset($_POST['password'])) { if (crypt($_POST['password'],$stored_hash) === $stored_hash) { $_SESSION['admin_auth'] = true; log_action('Login to Admin Page (admin.php)'); header('Location: admin.php'); exit; } else { $error = 'Invalid password.'; } } echo <<Admin Login

Admin Login

{$error}

HTML; exit; } // ─── Clear Logs ───────────────────────────────────────────────────────────── if (isset($_GET['clearlogs'])) { file_put_contents(__DIR__ . '/logs.txt', ''); echo json_encode(['status'=>'success']); exit; } // ─── Handle “Clear Error Logs” BEFORE any HTML output ─────────────────────────── if (isset($_GET['clearerrors'])) { @file_put_contents(__DIR__ . '/error.log', ''); echo json_encode(['status'=>'success']); exit; } // ─── Photo Deletion ────────────────────────────────────────────────────────── if (isset($_GET['delete'])) { $file = basename($_GET['delete']); $path = __DIR__ . '/uploads/' . $file; if (is_file($path) && unlink($path)) { log_action("Deleted photo $file"); echo json_encode(['status'=>'success']); } else { echo json_encode(['status'=>'failure']); } exit; } // ─── VirusTotal Integration ────────────────────────────────────────────────── $virusTotalApiKey = '78e2de724beffa237867f5125b113a7aed68e08391e40d9c7bf3072f841d175d'; function scanWithVirusTotal(string $path): ?string { global $virusTotalApiKey; $file = curl_file_create($path); $ch = curl_init('https://www.virustotal.com/api/v3/files'); curl_setopt_array($ch, [ CURLOPT_HTTPHEADER => ["x-apikey: {$virusTotalApiKey}"], CURLOPT_RETURNTRANSFER=> true, CURLOPT_POST => true, CURLOPT_POSTFIELDS => ['file'=>$file], ]); $resp = curl_exec($ch); curl_close($ch); if (!$resp) return null; $data = json_decode($resp,true); return $data['data']['id'] ?? null; } function getVirusTotalReport(string $id): ?string { global $virusTotalApiKey; $ch = curl_init("https://www.virustotal.com/api/v3/analyses/$id"); curl_setopt_array($ch, [ CURLOPT_HTTPHEADER => ["x-apikey: {$virusTotalApiKey}"], CURLOPT_RETURNTRANSFER=> true, ]); $resp = curl_exec($ch); curl_close($ch); $data = json_decode($resp,true); return $data['meta']['file_info']['sha256'] ?? null; } // ─── Gallery Upload ───────────────────────────────────────────────────────── $uploadMessage = ''; if (isset($_POST['upload_image'])) { if (!isset($_FILES['fileToUpload']) || $_FILES['fileToUpload']['error']!==UPLOAD_ERR_OK) { $uploadMessage = '

Upload error ('.$_FILES['fileToUpload']['error'].').

'; } else { $name = basename($_FILES['fileToUpload']['name']); $tmp = $_FILES['fileToUpload']['tmp_name']; $dest = __DIR__ . '/uploads/' . $name; $aid = scanWithVirusTotal($tmp); if (!$aid) { $uploadMessage = '

VT scan failed. Manual scan.

'; } else { $hash=null; for($i=0;$i<5;$i++){sleep(2); if($h=getVirusTotalReport($aid)){ $hash=$h; break; }} if (!$hash) { $uploadMessage = '

VT report unavailable.

'; } elseif (move_uploaded_file($tmp,$dest)) { log_action("Uploaded photo $name"); $link = "https://www.virustotal.com/gui/file/{$hash}"; $uploadMessage = "

Uploaded {$name}. View VT report

"; } else { $uploadMessage = '

Failed to save file.

'; } } } } ?> Admin Panel

Admin Panel

🏠 Home 🚪 Logout