web app security fix

2026-05-11 13:49:44 +07:00
parent d989e59edc
commit 7a87909392
7 changed files with 107 additions and 21 deletions
@@ -0,0 +1,45 @@
+<?php
+
+//<><><><><><><><> MAIN TRCLOUD <><><><><><><><>//
+if(true){
+	$isTest 		= "master";
+	$server_url 	= "/mn3wms/app/";           // URL path to the app root
+	$include_url	= $_SERVER['DOCUMENT_ROOT']."/mn3wms/app/";
+
+	$db_server		= "localhost";              // usually localhost
+	$db_user 		= "root";                   // usually root
+	$db_pass		= "CHANGE_ME";              // database password
+	$db_type		= "mysql";                  // database type
+	$db_database 	= "wms";                    // database name main
+
+	//~ $db_server2 = "";
+	//~ $db_user2 	= "";
+	//~ $db_pass2 	= "";
+	//~ $db_type2 	= "";
+	$db_database2 		= "wms2";               // database for client
+
+	$db_server2 	= (!empty($db_server2))?$db_server2:$db_server;
+	$db_user2 		= (!empty($db_user2))?$db_user2:$db_user;
+	$db_pass2 		= (!empty($db_pass2))?$db_pass2:$db_pass;
+	$db_type2 		= (!empty($db_type2))?$db_type2:$db_type;
+
+	$time_zone 		= "Asia/Bangkok";
+
+}
+
+
+
+// unique key
+$pinkey = "wms";
+/**
+ * default smtp server
+ */
+$SMTP = [];
+$SMTP['server']   = "smtp.gmail.com";
+$SMTP['username'] = "your_email@gmail.com";  // Gmail address
+$SMTP['port']     = "587";
+$SMTP['password'] = "CHANGE_ME";             // Gmail app password (not your login password)
+// password encoding
+$method = "AES-256-CBC";
+$iv = "1234567890123456"; // Must be exactly 16 bytes
+$SMTP['password'] = openssl_encrypt($SMTP['password'], $method, $pinkey, 0, $iv);