| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/(Del)standraise.com/admin/ |
Upload File : |
<?php
require_once 'configure.php';
require_once 'function_login_block.php';
die_if_login_block();
// database connect script.
//require 'db_connect.php';
require 'check_login.php';
if($logged_in == 1) {
die('You are already logged in, '.$_SESSION['username'].'.');
}
?>
<html>
<head>
<title>Admin Page</title>
<link rel="stylesheet" href="main.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=big5">
</head>
<?php
if (isset($_POST['submit'])) { // if form has been submitted
/* check they filled in what they were supposed to and authenticate */
if(!$_POST['uname'] | !$_POST['passwd']) {
die('You did not fill in a required field.');
}
// authenticate.
if (!get_magic_quotes_gpc()) {
$_POST['uname'] = addslashes($_POST['uname']);
}
//$check = $db_object->query("SELECT username, password FROM users WHERE username = '".$_POST['uname']."'");
//if (DB::isError($check) || $check->numRows() == 0) {
// die('That username does not exist in our database.');
//}
//$info = $check->fetchRow();
// check passwords match
$_POST['passwd'] = stripslashes($_POST['passwd']);
//$info['password'] = stripslashes($info['password']);
//$_POST['passwd'] = md5($_POST['passwd']);
if ($_POST['passwd'] != "srlone") {
insert_login_log($_POST['uname'], false);
die('Incorrect password, please try again.');
}
// if we get here username and password are correct,
//register session variables and set last login time.
$date = date('m d, Y');
//$update_login = $db_object->query("UPDATE users SET last_login = '$date' WHERE username = '".$_POST['uname']."'");
$_POST['uname'] = stripslashes($_POST['uname']);
$_SESSION['username'] = $_POST['uname'];
$_SESSION['password'] = $_POST['passwd'];
insert_login_log($_SESSION['username'], true);
//$db_object->disconnect();
header('Location: main.php');
?>
<?php
} else { // if form hasn't been submitted
echo $_SESSION['username'] ."<br>";
echo $_SESSION['password'] ."<br>";
?>
<body bgcolor="#FFFFFF" text="#000000">
<table border="0" align="center">
<tr>
<td height="193" valign="middle"><img src="images/banner_Logo&Name.jpg" width="435" height="120"></td>
</tr>
<tr>
<td height="44" align="center">
<form action="<?php echo $_SERVER['PHP_SELF']?>" method="post">
<table border="0" cellspacing="0" cellpadding="0">
<tr><td class='content' align="right">User Name</td><td class='content'>: </td>
<td><input type="text" name="uname" value="srl" size="25" maxlength="25" class="content"></td></tr>
<tr><td class='content' align="right">Password</td><td class='content'>: </td>
<td><input type="password" name="passwd" value=""size="25" maxlength="25" class="content"></td></tr>
<tr><td colspan="2" align="center"></td>
<td colspan="2" align="right" class="content"><input type="submit" name="submit" value="Login" class="content"></td></tr>
</table>
</form>
</td>
</tr>
</table>
<?php
}
?>
</body>
</html>