OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	05/20/2025 11:54:41 PM	rwxrwxrwx
📄 add.nominee.php	5.7 KB	12/02/2020 03:45:24 PM	rw-rw-r--
📄 chk.login.php	816 bytes	12/02/2020 03:45:24 PM	rw-rw-r--
📄 edit.nominee.php	15.99 KB	12/02/2020 03:45:24 PM	rw-rw-r--
📄 endorse.nominee.php	4.01 KB	12/02/2020 03:45:24 PM	rw-rw-r--
📄 forgot.password.php	1.9 KB	12/02/2020 03:45:25 PM	rw-rw-r--
📄 logout.php	105 bytes	12/02/2020 03:45:26 PM	rw-rw-r--
📄 register.php	3.04 KB	12/02/2020 03:45:26 PM	rw-rw-r--
📄 submit.nominee.php	18.61 KB	12/02/2020 03:45:26 PM	rw-rw-r--
📄 update.nominee.php	5.86 KB	12/02/2020 03:45:26 PM	rw-rw-r--
📄 view.endorsement.php	1.48 KB	12/02/2020 03:45:26 PM	rw-rw-r--
📄 view.nominee.php	10.59 KB	12/02/2020 03:45:27 PM	rw-rw-r--

Editing: endorse.nominee.php

<?
//	Endorse Nominee

include '../inc/utils.php';
include '../inc/PHPMailer/Exception.php';
include '../inc/PHPMailer/PHPMailer.php';
include '../inc/PHPMailer/SMTP.php';

use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\SMTP;
use PHPMailer\PHPMailer\Exception;

$key = isset($_POST["key"]) ? $_POST["key"] : '';
$nomineeComments = isset($_POST["nomineeComments"]) ? $_POST["nomineeComments"] : '';

if ($key <> '') {
 $data = simpleEncDec($key, 'd');
 $arrData = explode('|', $data);
 if (count($arrData) == 2) {
 $nomineeId = $arrData[0];
 $endorserId = $arrData[1];

$nomineeName = '';
  $sql = "SELECT salutation,fname,sname FROM nomination WHERE id=$nomineeId";
  $result = mysqli_query($con, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows > 0) {
   $row = mysqli_fetch_assoc($result);
   $nomineeName = $row['salutation'] . ' ' . $row['fname'] . ' ' . $row['sname'];
  }

$sql = "SELECT endorsernum,salutation,fname,sname,email FROM endorser WHERE id=$endorserId";
  $result = mysqli_query($con, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows > 0) {
   $row = mysqli_fetch_assoc($result);
   $endorserNum = $row['endorsernum'];
   $endorserSalutation = $row['salutation'];
   $endorserFirstName = $row['fname'];
   $endorserLastName = $row['sname'];
   $endorserEmail = $row['email'];

$sql = "UPDATE endorser SET comments='$nomineeComments' WHERE id=$endorserId";
   mysqli_query($con, $sql);

$sql = "UPDATE nomination SET endorsed" . $endorserNum . "='YES' WHERE id=$nomineeId";
   mysqli_query($con, $sql);

$fileUploaded = 0;
   if (isset($_FILES['nomineeUpload'])) {
    $temp = $_FILES['nomineeUpload'];
    if (is_uploaded_file($temp['tmp_name'])) {
     $fileExt = strtolower(pathinfo($temp['name'], PATHINFO_EXTENSION));
     $fileUpload = $nomineeId . '-' . time() . '.' . $fileExt;
     move_uploaded_file($temp['tmp_name'], '../uploads/' . $fileUpload);
     $sql = "UPDATE endorser SET fileupload='$fileUpload' WHERE id=$endorserId";
     mysqli_query($con, $sql);
     $fileUploaded = 1;
    }
   }

// Mail to Endorser
 $endorserTxt = "Dear $endorserSalutation $endorserFirstName $endorserLastName, ";
 $endorserTxt .= "Thank you for recording your referee comments for the nominee $nomineeName. ";
 $endorserTxt .= "Your comments are reproduced below for your records: ";
 if ($nomineeComments == '') {
 $endorserTxt .= "Null ";
 } else {
 $endorserTxt .= "$nomineeComments ";
 }
 if ($fileUploaded == 1) {
 $endorserTxt .= "You have uploaded a file. <a href='https://award.accsindia.org/uploads/$fileUpload' target='_blank'>Click here to view</a>. ";
 }
 $endorserTxt .= "Thank you for your support. Should you have questions please reply to this email. ";
 $endorserTxt .= "Sincerely, ";
 $endorserTxt .= "Saragur M. Srinidhi, PhD ";
 $endorserTxt .= "President ";
 $endorserTxt .= "Advanced Computing and Communications Society (ACCS) ";
 $endorserTxt .= "Gate No. 2, Sir C. V. Raman Avenue ";
 $endorserTxt .= "Indian Institute Science, Bangalore 560012 ";
 $endorserTxt .= "Telefax: +91 80 2360 7142 ";
 $endorserTxt .= "Mobile: +91 98450 67476 ";
 $endorserTxt .= "Email: <a href='mailto:ssrinidhi@accsindia.org'>ssrinidhi@accsindia.org</a> ";
 try {
 $mail = new PHPMailer(true);
 $mail->isSMTP();
 $mail->Host = 'smtp.office365.com';
 $mail->SMTPAuth = true;
 $mail->Username = 'president@accsindia.org';
 $mail->Password = 'Xaf55215';
 $mail->SMTPSecure = 'tls';
 $mail->Port = 587;
 $mail->isHTML(true);
 $mail->setFrom('president@accsindia.org', 'ACCS Awards');
 $mail->addAddress($endorserEmail, $endorserFirstName . ' ' . $endorserLastName);
 $mail->Subject = "Thank you for your endorsement for ACCS Awards";
 $mail->Body = $endorserTxt;
 $mail->send();
 } catch (Exception $e) {
 }
 echo 'OK';
 }
 }
}