opensourcepos/app/Helpers/security_helper.php

<?php

use CodeIgniter\Encryption\Encryption;
use Config\Services;

/**
 * @return bool
 */
function check_encryption(): bool
{
    $old_key = config('Encryption')->key;

    if ((empty($old_key)) || (strlen($old_key) < 64)) {
        // Create Key
        $encryption = new Encryption();
        $key = bin2hex($encryption->createKey());
        config('Encryption')->key = $key;

        // Write to .env
        $config_path = ROOTPATH . '.env';
        $new_config_path = WRITEPATH . '/backup/.env';
        $backup_path = WRITEPATH . '/backup/.env.bak';

        $backup_folder = WRITEPATH . '/backup';

        if (!file_exists($backup_folder) && !mkdir($backup_folder)) {
            log_message('error', 'Could not create backup folder');
            return false;
        }

        if (!copy($config_path, $backup_path)) {
            log_message('error', "Unable to copy $config_path to $backup_path");
        }

        // Copy to backup
        @chmod($config_path, 0660);
        @chmod($backup_path, 0660);

        $config_file = file_get_contents($config_path);
        $config_file = preg_replace("/(encryption\.key.*=.*)('.*')/", "$1'$key'", $config_file);

        if (!empty($old_key)) {
            $old_line = "# encryption.key = '$old_key' REMOVE IF UNNEEDED\r\n";
            $insertion_point = stripos($config_file, 'encryption.key');
            $config_file = substr_replace($config_file, $old_line, $insertion_point, 0);
        }

        $handle = @fopen($config_path, 'w+');

        if (empty($handle)) {
            log_message('error', "Unable to open $config_path for updating");
            return false;
        }

        @chmod($config_path, 0660);
        $write_failed = !fwrite($handle, $config_file);
        fclose($handle);

        if ($write_failed) {
            log_message('error', "Unable to write to $config_path for updating.");
            return false;
        }
        log_message('info', "File $config_path has been updated.");
    }

    return true;
}

/**
 * @return void
 */
function abort_encryption_conversion(): void
{
    $config_path = ROOTPATH . '.env';
    $backup_path = WRITEPATH . '/backup/.env.bak';

    $config_file = file_get_contents($backup_path);

    $handle = @fopen($config_path, 'w+');

    if (empty($handle)) {
        log_message('error', "Unable to open $config_path to undo encryption conversion");
    } else {
        @chmod($config_path, 0660);
        $write_failed = !fwrite($handle, $config_file);
        fclose($handle);

        if ($write_failed) {
            log_message('error', "Unable to write to $config_path to undo encryption conversion.");
            return;
        }
        log_message('info', "File $config_path has been updated to undo encryption conversion");
    }
}

/**
 * @return void
 */
function remove_backup(): void
{
    $backup_path = WRITEPATH . '/backup/.env.bak';
    if (! file_exists($backup_path)) {
        return;
    }
    if (!unlink($backup_path)) {
        log_message('error', "Unable to remove $backup_path.");
        return;
    }
    log_message('info', "File $backup_path has been removed");
}

function purifyHtml($data)
{
    if (is_array($data)) {
        return array_map('purifyHtml', $data);
    } elseif (is_string($data)) {
        return Services::HtmlPurifier()->purify($data);
    }

    return $data;
}