From e9c85297eb1e5718925f9d49614d228c19b8c7bb Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Sat, 3 Feb 2024 14:30:03 -0500
Subject: [PATCH] Feature: Allow to upload custom fav icon under settings >
 Theme, icon is limited to .ico format only

---
 post/setting.php    |  40 ++++++++++++++++++++++++++++++++++++++++
 settings_theme.php  |  22 ++++++++++++++++++++++
 uploads/favicon.ico | Bin 0 -> 15086 bytes
 3 files changed, 62 insertions(+)
 create mode 100644 uploads/favicon.ico

diff --git a/post/setting.php b/post/setting.php
index 220a132f..024e28c4 100644
--- a/post/setting.php
+++ b/post/setting.php
@@ -325,6 +325,46 @@ if (isset($_POST['edit_theme_settings'])) {
     header("Location: " . $_SERVER["HTTP_REFERER"]);
 }
 
+if (isset($_POST['edit_favicon_settings'])) {
+
+    validateCSRFToken($_POST['csrf_token']);
+    
+    validateAdminRole();
+
+    // Check to see if a file is attached
+    if ($_FILES['file']['tmp_name'] != '') {
+        if ($new_file_name = checkFileUpload($_FILES['file'], array('ico'))) {
+            $file_tmp_path = $_FILES['file']['tmp_name'];
+
+            // Delete old file
+            if(file_exists("uploads/favicon.ico")) {
+                unlink("uploads/favicon.ico");
+            }
+
+            // directory in which the uploaded file will be moved
+            $upload_file_dir = "uploads/";
+            //Force File Name
+            $new_file_name = "favicon.ico";
+            $dest_path = $upload_file_dir . $new_file_name;
+
+            move_uploaded_file($file_tmp_path, $dest_path);
+
+            $_SESSION['alert_message'] = 'File successfully uploaded.';
+        }else{
+
+            $_SESSION['alert_message'] = 'There was an error moving the file to upload directory. Please make sure the upload directory is writable by web server.';
+        }
+    }
+
+    //Logging
+    mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Settings', log_action = 'Modify', log_description = '$session_name updated the favicon', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_user_id = $session_user_id");
+
+    $_SESSION['alert_message'] = "You updated the favicon";
+
+    header("Location: " . $_SERVER["HTTP_REFERER"]);
+
+}
+
 if (isset($_POST['edit_notification_settings'])) {
 
     validateCSRFToken($_POST['csrf_token']);
diff --git a/settings_theme.php b/settings_theme.php
index 401cf458..0b2879fb 100644
--- a/settings_theme.php
+++ b/settings_theme.php
@@ -44,6 +44,28 @@ require_once "inc_all_settings.php";
         </div>
     </div>
 
+    <div class="card card-dark">
+        <div class="card-header py-3">
+            <h3 class="card-title"><i class="fas fa-fw fa-image mr-2"></i>Favicon</h3>
+        </div>
+        <div class="card-body">
+            <form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off">
+                <input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">
+
+                <img class="mb-3" src="<?php if(file_exists("uploads/favicon.ico")) { echo "uploads/favicon.ico"; } else { echo "favicon.ico"; } ?>">
+
+                <div class="form-group">
+                    <input type="file" class="form-control-file" name="file" accept=".ico">
+                </div>
+
+                <hr>
+
+                <button type="submit" name="edit_favicon_settings" class="btn btn-primary text-bold"><i class="fa fa-check mr-2"></i>Upload Icon</button>
+
+            </form>
+        </div>
+    </div>
+
 <?php
 require_once "footer.php";
 
diff --git a/uploads/favicon.ico b/uploads/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..09666cf3a968a3ce80dd5cc8eda808f1a3a56fdb
GIT binary patch
literal 15086
zcmeI2Z)jCz9LJwIb(Y%Jz+jHr$`T3E`9h5}mV%a*=?f8wut5cZFTy{Bfna26^&)#0
zAtoV2M3T`T`eXD*WWGp+NJ|hItypEj%&duPr|)Nbe)I9{oO|xs-Q1*m;p6i>zdzsK
z?>zV1bI(1_xe8b5nwp%(M)%fj&dqhsH8%QnjdQ1EtI>%6$+6CDSHKL#D8;o1?7gpB
z`-bwr<sB&RKzRqsJ1~4Z&~j%~Czgp-MKWJ;RaqSoBZw_lmmcb}bVI-5>%{@lE&eT%
zvx-|E>Lkq-vq2DBtS&v!OMQ}Fl1;HI1$j|UzEQlsNt0jr1TlGa>1AcI>OiYv*9@Wt
zJslTQ1}gSh@cEd${S&_?O*d{QR)jTv)B02KNx;XN9~Kvd#pdmwTr|)MwW&o-(=E0C
z_oX#aj2C?Vpi<l|{uEXxZ~x??ftKk~gId%y-BSC1Pg=S&y!<8GJW*=@^DbA_J*R33
zYL@%&+k>yQ7hJR1Z)1+;kBRfb_9^fALoOO<nJy!>sA;;To<DrfI8WkGzbB}Zw|{cc
zi0iVZW-0xLeT6!O=HIDi*7cK^LK;avddYMBT%`DOgQ&xG@Y?w2(bo6`F-biZveC;T
z)5#hYJ3(v`#{}mDoDktLwQJ2@nxE_U{35hDw~4hpG|;mCsX;CC(*wOs$kGn|iXS7c
z7gIb_HGU?j!@bMnBJ`*3d#KA?dAtv%iw0U~qD>8Ih5j*djl65=jT0XV>wi^VjkI`a
zaxZHAQ)66OY$3byIBwpn7sQSjFKK;B&_AE2{bHMl#}&Emu{bo)vg-vksAYZ|>51N^
zrX7QPEy8r@bF@KkEmwK}j~3{^PRIAO*e-Zq2g_FF9uoHcF~>GoJ@V*@-g5mGOFPyq
zyRT>cZ_kP!DZl!x5Z4L2-Z9pSSA_M?99tMePQ^&|O<n4XM?|YQ9>90f8Daf155Mb(
zC5PM*I|kLBCQb|MGw(?5w2^ubRGWKU?iKU)ZSmv|`2BLFjwhjizC*cxp|2$H+4n5R
zFxvX(e7H}{72)p@=GgFs=i6xOpU-91{Xa3I_58Wo`#+(*trz1&RSazSh#9T>&*$?C
z5k89w=lF;jt^HeH#f~HW`JJV`{5{yuV*9o@a%Wws>wUbAYV$jAx40m<uIGUqa*O`m
z8LvMSYt^q2_li|HAt&`&`%v^&)+p~lc?ZfnP~L&`9f*2g&JA|#b`4#w*|~04-I+Kx
zS9f;fPa9M6deGgXzS^UxHM%r*aVQPWbuw088qFR>-OUm4{o}J0eQRt<RCo5-)5fHn
z(8kWO9^A;^X*G&_ME~DumA@6W8|7D_9nifK|4+=lR~qBf@=M7@Q~9;xHE~oNNdWsE
zaYMWZY~EKW7wy`3uC3);DE=09AD=XGe|*2?*oaNwOUg0ZdHEMwPJEPaiRkhg{NEGL
z@(%m4&D$?(T#=BwLUw%AA~wuL3p?6N;<>iQ=VOTFx%4$+vLBz(h`pHl#D=+O<*mQj
z`eIc6I<HYo{dKY2&4Z}_k#e5$bs6`2jbiE(8|I=_%<(T)oW1|VCqez?;qm$XSuQ)i
zq#U!My*Qq0Yx!n~9|XS_(PAXm*4>)(oNd5wTWsD(Oj0fyX!F&S_>zz3-nR?>w(J4%
zrl9^lzs7!t81QTxoA+5RIpm^&7Iw4;<kF1nlf=!UQQRcz#mfSXSN$4$gSaIH`Fbpu
z9CFb>3p?7>m=xat**1w^#Lodd2SI~pJE7g?KgkZZ4o7<)ghptm#-^0|9bV6Lxo-R@
z7|muQI=t7w-0U`{<x(T5{zTbrf7qiW*uxtI`+1k3E-=T2kC>!fvr%JW{P?rh${8!>
ziigC5;tBDGhdDNU#0>bGs4V>~zciN$o-5hsi;;5!LK`tlv-I-%rD@k+t66Bg?E0Ix
zR#JRWpX<o$!mh9M#T*+x`Wnvq7p0%|{X5+CSE~p6ex2;+*ywGzkH1GXP71rfIPB-x
z@C{e}wO+f>d1t=0N#{^0Hr1Xk_+CFMj--H(nCYd|O3Rfl?|DrIx&9t0tybCo|JZ@P
z=L?tr+ga6CZJh1s*m<s_<Jj5O_MK+yY3|+vZO&Ce)Uze(rL8K8puIJUIy(9=8)L$Y
zo532<DEgmM4EeXG#E0Oe&)p=kMr`z~*Eq+dnG0;@C$|4yPxG1LjNsnrd-0Fh73A;o
zHhjboJ2UXl*7{fRu&5IU#NNQa*W2(BL+tFp-=sD72VAq?73l8?{Cm6&A2Gx>1^!yC
zw~EgN{k<WU1%B?avEd_z*xujU8o7UBKemat#VPTkcs>R;e8dn-4!M@ULvwPT6X?Ss
zkFD_$Lu_xp^%#!w@twI_eCuJpI*du1D~^7+)^k707|t`#V8xUFf!HT_zkoTmV)82$
z_m22WaJ~R@Y?Wz!hjzs+5F5ls5Ay|K%xIZM!86vcwmNrmmvf8<4?6dyjuv<x+|}UR
K1)b51Va|V55~yVW

literal 0
HcmV?d00001