1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / earnlouq / zapedex.com / control /
Filename : wallets.php
back
<?php
session_start();
error_reporting(0);
include('../../config/zconfig.php');
include('include/checklogin.php');
check_login();
include('include/header.php');
include('include/sidebar.php');
include('include/functions.php');

// Enable error reporting
error_reporting(E_ALL);
ini_set('display_errors', 1);

$title = "Decrypt Wallet Seed Phrases";
$current_date = date("Y-m-d");

// CSRF token
if (!isset($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}

// Handle decryption
$msg = '';
$type = '';
$decryptedSeed = '';
if (isset($_POST['decrypt']) && $_POST['csrf_token'] === $_SESSION['csrf_token']) {
    $id = intval($_POST['id']);
    
    // Fetch encrypted seed
    $sql = "SELECT * FROM wallets WHERE id = ?";
    $stmt = $con->prepare($sql);
    if ($stmt) {
        $stmt->bind_param("i", $id);
        $stmt->execute();
        $result = $stmt->get_result();
        if ($row = $result->fetch_assoc()) {
            try {
                $decryptedSeed = openssl_decrypt(
                    $row['encrypted_seed'],
                    'AES-256-CBC',
                    ENCRYPTION_KEY,
                    0,
                    ENCRYPTION_IV
                );
                if ($decryptedSeed === false) {
                    throw new Exception('Decryption failed');
                }
                $msg = "Seed phrase decrypted successfully!";
                $type = "success";
                // Log decryption attempt
                error_log("Decryption attempt for id: wallet: {$row['wallet_address']}, success: true");
            } catch (Exception $e) {
                $msg = "Error decrypting seed phrase";
                $type = "danger";
                error_log("Decryption error for  wallet: {$row['wallet_address']}, error: " . $e->getMessage());
            }
        } else {
            $msg = "Wallet not found";
            $type = "danger";
        }
        $stmt->close();
    } else {
        $msg = "Database error";
        $type = "danger";
    }
}

// Fetch wallets
$wallets = [];
$sql = "SELECT * FROM `wallets` ORDER BY created_at DESC";
$result = mysqli_query($con, $sql);
if ($result) {
    while ($row = mysqli_fetch_assoc($result)) {
        $wallets[] = $row;
    }
    mysqli_free_result($result);
}
?>

<!-- Content wrapper -->
<div class="content-wrapper">
    <!-- Content -->
    <div class="container-xxl flex-grow-1 container-p-y">
        <h4 class="fw-bold py-3 mb-4"><span class="text-muted fw-light">Admin/</span> Decrypt Wallet Seed Phrases</h4>
        <div class="card mb-4">
            <h5 class="card-header">Wallet Seed Phrases</h5>
            <hr class="my-0" />
            <div class="card-body">
                <?php if ($msg): ?>
                    <div class="alert alert-<?php echo htmlspecialchars($type); ?>" style="background-color: <?php echo $type === 'success' ? '#16a34a' : '#dc3545'; ?>; color: #fff;">
                        <h6 class="alert-heading fw-bold mb-1"><?php echo ucfirst($type); ?></h6>
                        <p class="mb-0"><?php echo htmlspecialchars($msg); ?></p>
                        <?php if ($decryptedSeed): ?>
                            <p class="mb-0 mt-2"><strong>Decrypted Seed Phrase:</strong> <?php echo htmlspecialchars($decryptedSeed); ?></p>
                            <p class="mb-0 text-warning">Warning: Handle with care. Do not share this seed phrase.</p>
                        <?php endif; ?>
                    </div>
                <?php endif; ?>

                <div class="table-responsive">
                    <table class="table table-striped" id="dataTables-example">
                        <thead>
                            <tr>
                                <th>ID</th>
                                <th>Wallet Address</th>
                                <th>Encrypted Seed</th>
                                <th>Action</th>
                            </tr>
                        </thead>
                        <tbody>
                            <?php foreach ($wallets as $wallet): ?>
                                <tr>
                                    <td><?php echo htmlspecialchars(sanitize_input($wallet['id'])); ?></td>
                                    <td><?php echo htmlspecialchars(sanitize_input($wallet['wallet_address'])); ?></td>
                                    <td><?php echo htmlspecialchars(sanitize_input(substr($wallet['encrypted_seed'], 0, 20) . '...')); ?></td>
                                    <td>
                                        <button class="btn btn-primary decrypt-wallet" 
                                                data-id="<?php echo htmlspecialchars($wallet['id']); ?>"
                                                style="background-color: #E67A1A; border-color: #E67A1A;"
                                                data-bs-toggle="modal" data-bs-target="#decryptModal">
                                            Decrypt
                                        </button>
                                    </td>
                                </tr>
                            <?php endforeach; ?>
                        </tbody>
                    </table>
                </div>
            </div>
        </div>
    </div>
</div>

<!-- Decrypt Modal -->
<div class="modal fade" id="decryptModal" tabindex="-1" aria-labelledby="decryptModalLabel" aria-hidden="true">
    <div class="modal-dialog">
        <div class="modal-content">
            <div class="modal-header">
                <h5 class="modal-title" id="decryptModalLabel">Confirm Decryption</h5>
                <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
            </div>
            <form method="post" action="">
                <div class="modal-body">
                    <input type="hidden" name="csrf_token" value="<?php echo htmlspecialchars($_SESSION['csrf_token']); ?>">
                    <input type="hidden" name="id" id="decrypt-id">
                    <p>Are you sure you want to decrypt this wallet's seed phrase? This action is sensitive and should be performed securely.</p>
                </div>
                <div class="modal-footer">
                    <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Cancel</button>
                    <button type="submit" name="decrypt" class="btn btn-primary" style="background-color: #E67A1A; border-color: #E67A1A;">Decrypt</button>
                </div>
            </form>
        </div>
    </div>
</div>

<script>
document.querySelectorAll('.decrypt-wallet').forEach(button => {
    button.addEventListener('click', () => {
        document.getElementById('decrypt-id').value = button.dataset.id;
    });
});
</script>

<?php include('include/footer.php'); ?>