From 9e2883d47493920522eb5479b8c8f0bcf3b57870 Mon Sep 17 00:00:00 2001
From: "Marshall [ODA GENIO]" <155457480+FOX-Marshall@users.noreply.github.com>
Date: Fri, 18 Apr 2025 18:56:31 -0300
Subject: [PATCH 1/2] Fix ResetHWID Exploit

---
 dashboard/index.php | 99 +++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 96 insertions(+), 3 deletions(-)

diff --git a/dashboard/index.php b/dashboard/index.php
index 0e07beb..2264b0e 100644
--- a/dashboard/index.php
+++ b/dashboard/index.php
@@ -364,8 +364,101 @@ function doButton(value) {
     <?php
 
     if (isset($_POST['resethwid'])) {
-
-        $today = time();
+	$un = $_SESSION['un'];
+    	$url = "https://keyauth.win/api/seller/?sellerkey={$SellerKey}&type=userdata&user={$un}";
+
+    	$curl = curl_init($url);
+    	curl_setopt($curl, CURLOPT_URL, $url);
+    	curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
+	$resp = curl_exec($curl);
+    	$json = json_decode($resp);
+	$usercooldown = $json->cooldown;
+	$today = time();
+	if (is_null($cooldown)) {
+			$cooldown = $today + $appcooldown;
+        		$un = $_SESSION['un'];
+        		$url = "https://keyauth.win/api/seller/?sellerkey={$SellerKey}&type=resetuser&user={$un}";
+
+        		$curl = curl_init($url);
+        		curl_setopt($curl, CURLOPT_URL, $url);
+        		curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
+        		curl_exec($curl);
+
+        		$url = "https://keyauth.win/api/seller/?sellerkey={$SellerKey}&type=setcooldown&user={$un}&cooldown={$cooldown}";
+
+        		$curl = curl_init($url);
+        		curl_setopt($curl, CURLOPT_URL, $url);
+        		curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
+        		curl_exec($curl);
+
+        		echo '
+                            		<script type=\'text/javascript\'>
+                            
+                            		const notyf = new Notyf();
+                            		notyf
+                              		.success({
+                                		message: \'Reset HWID!\',
+                                		duration: 3500,
+                                		dismissible: true
+                              		});                
+                            
+                            		</script>
+                            		';
+        		echo "<meta http-equiv='Refresh' Content='2;'>";
+	}
+	else
+	{
+		if($today > $usercooldown)
+		{
+			$cooldown = $today + $appcooldown;
+        		$un = $_SESSION['un'];
+        		$url = "https://keyauth.win/api/seller/?sellerkey={$SellerKey}&type=resetuser&user={$un}";
+
+        		$curl = curl_init($url);
+        		curl_setopt($curl, CURLOPT_URL, $url);
+        		curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
+        		curl_exec($curl);
+
+        		$url = "https://keyauth.win/api/seller/?sellerkey={$SellerKey}&type=setcooldown&user={$un}&cooldown={$cooldown}";
+
+        		$curl = curl_init($url);
+        		curl_setopt($curl, CURLOPT_URL, $url);
+        		curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
+        		curl_exec($curl);
+
+        		echo '
+                            		<script type=\'text/javascript\'>
+                            
+                            		const notyf = new Notyf();
+                            		notyf
+                              		.success({
+                                		message: \'Reset HWID!\',
+                                		duration: 3500,
+                                		dismissible: true
+                              		});                
+                            
+                            		</script>
+                            		';
+        		echo "<meta http-equiv='Refresh' Content='2;'>";
+				}
+			else
+			{
+        			echo '
+                            	<script type=\'text/javascript\'>
+                            
+                            	const notyf = new Notyf();
+                            	notyf
+                              	.error({
+                                	message: \'Wait Cooldown!\',
+                                	duration: 3500,
+                                	dismissible: true
+                              	});                
+                            
+                            	</script>
+                            	';
+		}
+	}
+        
 
         $cooldown = $today + $appcooldown;
         $un = $_SESSION['un'];
@@ -428,4 +521,4 @@ function doButton(value) {
 }
 */
 #endregion
-?>
\ No newline at end of file
+?>

From 3852ceb99095ee5a02355085fcab209af1f35e06 Mon Sep 17 00:00:00 2001
From: "Marshall [ODA GENIO]" <155457480+FOX-Marshall@users.noreply.github.com>
Date: Fri, 18 Apr 2025 18:59:01 -0300
Subject: [PATCH 2/2] Update index.php

---
 dashboard/index.php | 32 --------------------------------
 1 file changed, 32 deletions(-)

diff --git a/dashboard/index.php b/dashboard/index.php
index 2264b0e..4a03c8d 100644
--- a/dashboard/index.php
+++ b/dashboard/index.php
@@ -458,38 +458,6 @@ function doButton(value) {
                             	';
 		}
 	}
-        
-
-        $cooldown = $today + $appcooldown;
-        $un = $_SESSION['un'];
-        $url = "https://keyauth.win/api/seller/?sellerkey={$SellerKey}&type=resetuser&user={$un}";
-
-        $curl = curl_init($url);
-        curl_setopt($curl, CURLOPT_URL, $url);
-        curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
-        curl_exec($curl);
-
-        $url = "https://keyauth.win/api/seller/?sellerkey={$SellerKey}&type=setcooldown&user={$un}&cooldown={$cooldown}";
-
-        $curl = curl_init($url);
-        curl_setopt($curl, CURLOPT_URL, $url);
-        curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
-        curl_exec($curl);
-
-        echo '
-                            <script type=\'text/javascript\'>
-                            
-                            const notyf = new Notyf();
-                            notyf
-                              .success({
-                                message: \'Reset HWID!\',
-                                duration: 3500,
-                                dismissible: true
-                              });                
-                            
-                            </script>
-                            ';
-        echo "<meta http-equiv='Refresh' Content='2;'>";
     }
     ?>
 </body>