From 797b5ae4afb3e13a5d7f105a2aa74c95a9b540b5 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 9 May 2026 16:20:03 +0000
Subject: [PATCH 1/2] fix: unmask server control and FTP passwords on edit page

Agent-Logs-Url: https://github.com/GameServerPanel/GSP/sessions/96e1b41b-9f2f-4572-b7c2-49c247725f2c

Co-authored-by: iaretechnician <2749183+iaretechnician@users.noreply.github.com>
---
 modules/user_games/edit_home.php | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/modules/user_games/edit_home.php b/modules/user_games/edit_home.php
index 458fe986..7f1f1fbb 100644
--- a/modules/user_games/edit_home.php
+++ b/modules/user_games/edit_home.php
@@ -710,12 +710,14 @@ function exec_ogp_module()
 	echo "<input type=submit name='change_name' value='". get_lang("change_name") ."' />";
 	echo "</form></td></tr>";
 	echo "<tr><td colspan='2' class='info'>". get_lang("change_name_info") ."</td></tr>";
+	$copy_password_js = "if(navigator.clipboard&&navigator.clipboard.writeText){navigator.clipboard.writeText(this.form[this.getAttribute('data-copy-field')].value);}else{this.form[this.getAttribute('data-copy-field')].select();document.execCommand('copy');}";
 
 	// Form to edit control password
 	echo "<tr><td class='right'>". get_lang("game_control_password") .":</td><td class='left'>";
 	echo "<form action='?m=user_games&p=edit&home_id=".$home_id."' method='post'>";
 	echo "<input type='hidden' name='home_id' value=\"$home_id\" />\n";
-	echo "<input type='password' size='30' name='control_password' value=\"".str_replace('"', "&quot;", $home_info['control_password'])."\" />";
+	echo "<input type='text' size='30' name='control_password' value=\"".str_replace('"', "&quot;", $home_info['control_password'])."\" />";
+	echo "<button type='button' data-copy-field='control_password' aria-label=\"".str_replace('"', "&quot;", get_lang("copy")." ".get_lang("game_control_password"))."\" onclick=\"".$copy_password_js."\">". get_lang("copy") ."</button>";
 	echo "<input type='submit' name='change_control_password' value='". get_lang("change_control_password") ."' />";
 	echo "</form></td></tr>";
 	echo "<tr><td colspan='2' class='info'>". get_lang("change_control_password_info") ."</td></tr>";
@@ -754,7 +756,8 @@ function exec_ogp_module()
 		// Form to edit control ftp password
 		echo "<tr><td class='right'>". get_lang("server_ftp_password") .":</td><td class='left'>";
 		echo "<form action='?m=user_games&p=edit&home_id=".$home_id."' method='post'>";
-		echo "<input type='password' size='30' name='ftp_password' value=\"".str_replace('"', "&quot;", $home_info['ftp_password'])."\" />";
+		echo "<input type='text' size='30' name='ftp_password' value=\"".str_replace('"', "&quot;", $home_info['ftp_password'])."\" />";
+		echo "<button type='button' data-copy-field='ftp_password' aria-label=\"".str_replace('"', "&quot;", get_lang("copy")." ".get_lang("server_ftp_password"))."\" onclick=\"".$copy_password_js."\">". get_lang("copy") ."</button>";
 		echo "<input type='submit' name='change_ftp_password' value='". get_lang("change_ftp_password") ."' />";
 		echo "</form></td></tr>";
 		echo "<tr><td  colspan='2' class='info'>". get_lang("change_ftp_password_info") ."</td></tr>";

From cb9fe454e26b272462d9e913ad7d655533d5e27f Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 9 May 2026 16:22:18 +0000
Subject: [PATCH 2/2] feat: show and copy control/FTP passwords in edit home UI

Agent-Logs-Url: https://github.com/GameServerPanel/GSP/sessions/96e1b41b-9f2f-4572-b7c2-49c247725f2c

Co-authored-by: iaretechnician <2749183+iaretechnician@users.noreply.github.com>
---
 modules/user_games/edit_home.php | 41 ++++++++++++++++++++++++++++----
 1 file changed, 37 insertions(+), 4 deletions(-)

diff --git a/modules/user_games/edit_home.php b/modules/user_games/edit_home.php
index 7f1f1fbb..b50b7a2d 100644
--- a/modules/user_games/edit_home.php
+++ b/modules/user_games/edit_home.php
@@ -710,14 +710,12 @@ function exec_ogp_module()
 	echo "<input type=submit name='change_name' value='". get_lang("change_name") ."' />";
 	echo "</form></td></tr>";
 	echo "<tr><td colspan='2' class='info'>". get_lang("change_name_info") ."</td></tr>";
-	$copy_password_js = "if(navigator.clipboard&&navigator.clipboard.writeText){navigator.clipboard.writeText(this.form[this.getAttribute('data-copy-field')].value);}else{this.form[this.getAttribute('data-copy-field')].select();document.execCommand('copy');}";
-
 	// Form to edit control password
 	echo "<tr><td class='right'>". get_lang("game_control_password") .":</td><td class='left'>";
 	echo "<form action='?m=user_games&p=edit&home_id=".$home_id."' method='post'>";
 	echo "<input type='hidden' name='home_id' value=\"$home_id\" />\n";
 	echo "<input type='text' size='30' name='control_password' value=\"".str_replace('"', "&quot;", $home_info['control_password'])."\" />";
-	echo "<button type='button' data-copy-field='control_password' aria-label=\"".str_replace('"', "&quot;", get_lang("copy")." ".get_lang("game_control_password"))."\" onclick=\"".$copy_password_js."\">". get_lang("copy") ."</button>";
+	echo "<button type='button' class='copy-credential-btn' data-copy-field='control_password' aria-label=\"".str_replace('"', "&quot;", get_lang("copy")." ".get_lang("game_control_password"))."\">". get_lang("copy") ."</button>";
 	echo "<input type='submit' name='change_control_password' value='". get_lang("change_control_password") ."' />";
 	echo "</form></td></tr>";
 	echo "<tr><td colspan='2' class='info'>". get_lang("change_control_password_info") ."</td></tr>";
@@ -757,11 +755,46 @@ function exec_ogp_module()
 		echo "<tr><td class='right'>". get_lang("server_ftp_password") .":</td><td class='left'>";
 		echo "<form action='?m=user_games&p=edit&home_id=".$home_id."' method='post'>";
 		echo "<input type='text' size='30' name='ftp_password' value=\"".str_replace('"', "&quot;", $home_info['ftp_password'])."\" />";
-		echo "<button type='button' data-copy-field='ftp_password' aria-label=\"".str_replace('"', "&quot;", get_lang("copy")." ".get_lang("server_ftp_password"))."\" onclick=\"".$copy_password_js."\">". get_lang("copy") ."</button>";
+		echo "<button type='button' class='copy-credential-btn' data-copy-field='ftp_password' aria-label=\"".str_replace('"', "&quot;", get_lang("copy")." ".get_lang("server_ftp_password"))."\">". get_lang("copy") ."</button>";
 		echo "<input type='submit' name='change_ftp_password' value='". get_lang("change_ftp_password") ."' />";
 		echo "</form></td></tr>";
 		echo "<tr><td  colspan='2' class='info'>". get_lang("change_ftp_password_info") ."</td></tr>";
 	}
+	$copy_label_json = json_encode(get_lang("copy"), JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT);
+	echo "<script type='text/javascript'>
+document.addEventListener('DOMContentLoaded', function() {
+	var copyButtons = document.querySelectorAll('.copy-credential-btn');
+	var copiedLabel = '✓';
+	var copyLabel = ".$copy_label_json.";
+	function showCopyState(button, successful) {
+		button.textContent = successful ? copiedLabel : copyLabel;
+		if (successful) {
+			setTimeout(function() {
+				button.textContent = copyLabel;
+			}, 1500);
+		}
+	}
+	Array.prototype.forEach.call(copyButtons, function(copyButton) {
+		copyButton.addEventListener('click', function() {
+			var fieldName = this.getAttribute('data-copy-field');
+			if (!this.form || !fieldName || !this.form[fieldName]) {
+				return;
+			}
+			var field = this.form[fieldName];
+			var copyValue = field.value;
+			if (navigator.clipboard && navigator.clipboard.writeText) {
+				navigator.clipboard.writeText(copyValue)
+					.then(showCopyState.bind(null, this, true))
+					.catch(showCopyState.bind(null, this, false));
+			} else {
+				field.focus();
+				field.select();
+				showCopyState(this, document.execCommand('copy'));
+			}
+		});
+	});
+});
+</script>";
 		
 	if ( $isAdmin )
 	{