403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/e-ims/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/e-ims/webadmin/sys_login_modifyform.php
<?php
include 'config.php';

// Check if the user is logged in

if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
?>
<?php
require("configure.php");
$loginid 		= $_GET["loginid"];
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Content Management System (CMS) - Powered by One Solution Limited</title>
<link rel="stylesheet" type="text/css" href="css/style.css" />
<script type="text/javascript" src="js/jquery-1.10.2.min.js"></script>
<script type="text/javascript" src="js/jquery-migrate-1.2.1.min.js"></script>
<!-- Main Menu -->
<link rel="stylesheet" type="text/css" href="css/menu.css" />
<script type="text/javascript" src="js/ddaccordion.js"></script>
<script type="text/javascript" src="js/menuddaccordion.js"></script>
<!-- End Main Menu -->
<script src="http://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.11.1/jquery.validate.min.js"></script>
<script type="text/javascript">
$(document).ready(function(e) {
	$('#save_btn')
		.click(function() {
			$('#myform').submit();
	});
	$("#myform").validate({
		rules: {
			username: "required",
			loginname: "required"
		},
		messages: {
			username: {
				required: "Please Enter Your User Name"
			},
			loginname: {
				required: "Please Enter Your Login Name"
			}
		}
	});
});
</script>
</head>
<body>
<table width="1000" height="600" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td width="200" align="left" valign="top"><table width="200" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td height="70" align="left" valign="middle">&nbsp;</td>
	  </tr>
	  <tr>
	  	<td width="200" align="left" valign="top"><!-- Main Menu --><?php require("menu.php");?><!-- End Main Menu --></td>
	</tr>
	</table></td>
	<td width="1000" align="left" valign="top">
	<?php
	$sql = "SELECT * FROM sys_login WHERE loginid = :loginid";
	$sth = Db::getDbh()->prepare($sql);
	$sth->execute(array(":loginid" => $loginid));
	if( $error = $sth->getError(array(":loginid" => $loginid)) ){
		var_dump($error);
	}
	$row = $sth->fetch(PDO::FETCH_ASSOC);
	
	$sth->execute(array(":loginid" => $row{'lastupby'}));
	if( $error = $sth->getError(array(":loginid" => $row{'lastupby'})) ){
		var_dump($error);
	}
	$row9 = $sth->fetch(PDO::FETCH_ASSOC);
    ?>
    <form action="sys_login_modify.php" method="post" name="modifyform" id="myform" enctype="multipart/form-data">
    <input type="hidden" name="loginid" value="<?=$row{'loginid'};?>">
    <table width="800" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td height="70" align="right" valign="middle" class="icontxt"><table border="0" cellpadding="0" cellspacing="0">
          <tr>        
            <td width="50" align="center"><a href="#" id="save_btn"><img src="images/iconSave.png" alt="Save" width="32" height="32" border="0"><br>
              &nbsp;Save&nbsp;&nbsp;</a></td>
            <td width="50" align="center"><a href="sys_login_index.php"><img src="images/iconCancel.png" alt="Cancel" width="32" height="32" border="0"><br>
              &nbsp;Cancel&nbsp;&nbsp;</a></td>
            <td>&nbsp;</td>
          </tr>
        </table></td>
      </tr>
      <tr>
        <td class="pagetitletxt"><span style="float:left;" class="pagetitletxt">&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle" /> CMS User Management </b></span><span style="float:right;" class="msg">Last Update: <?=$row9{'username'}.'&nbsp;&nbsp;&nbsp;'.$row{'lastupdate'};?></span></td>
      </tr>
      <tr>
        <td align="left" valign="middle"><!-- Content -->
        <table border="0" cellpadding="0" cellspacing="0">
        <?php
        session_start();
        if (($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')) { ?>
            <tr>
                <td width="120" align="right" valign="top" class='content'>User Name</td>
                <td class='content' valign="top">:&nbsp;</td>
                <td class='content'><input type="text" class="content" name="username" id="username" value="<?=$row{'username'}?>"size="50" maxlength="80" /><br><span class="msg">Maxlength:80</span></td>
            </tr>
            <tr>
                <td width="120" align="right" valign="top" class='content'>Role</td>
                <td class='content' valign="top">:&nbsp;</td>
                <td class='content'><select name="role" class="content" >
				<?php
                if (($_SESSION['role'] == 'Superadmin')){
                ?>
                <option value="Superadmin" <?php if($row{'role'} == 'Superadmin') { echo 'selected'; } ?>>Superadmin</option>
                <?php
                }
                ?>
                <option value="Admin" <?php if($row{'role'} == 'Admin') { echo 'selected'; } ?>>Admin</option>
                <option value="User" <?php if($row{'role'} == 'User') { echo 'selected'; } ?>>User</option>
                </select>
                </td>
            </tr>
        <?php } else	{?>
            <tr>
                <td width="120" align="right" valign="top" class='content'>User Name</td>
                <td class='content' valign="top">:&nbsp;</td>
                <td class='content'><label><?=$row{'username'}?></label><input name="username" type="hidden" value="<?=$row{'username'}?>" /></td>
            </tr>
            <tr>
                <td width="120" align="right" valign="top" class='content'>Role</td>
                <td class='content' valign="top">:&nbsp;</td>
                <td class='content'><label><?=$row{'role'}?></label><input name="role" type="hidden" value="<?=$row{'role'}?>" /></td>
            </tr>
        <?php }?>
            <tr>
                <td width="120" align="right" valign="top" class='content'>Login Name</td>
                <td class='content' valign="top">:&nbsp;</td>
                <td class='content'><input type="text" class="content" id="loginname" name="loginname" value="<?=$row{'loginname'}?>" size="50" maxlength="30" /><br><span class="msg">Maxlength:30</span></td>
            </tr>
            <tr>
                <td width="120" align="right" valign="top" class='content'>Change Password</td>
                <td class='content' valign="top">:&nbsp;</td>
                <td class='content'><input type="password" class="content" id="loginpw" name="loginpw" size="50" maxlength="15" /><?=Password::ajax_validate('loginpw', 'ajax_passwordChecker.php', 'loginname', false)?></td>
            </tr>
            <tr>
                <td width="120" align="right" valign="top" class='content'>Confirm Password</td>
                <td class='content' valign="top">:&nbsp;</td>
                <td class='content'><input type="password" class="content" name="loginpw_check" size="50" maxlength="15" /></td>
            </tr>
            </table>		
        <!-- End Content --></td>
      </tr>
      <tr>
        <td align="left" valign="middle">&nbsp;</td>
      </tr>
    </table>
    </form>
	</td>
  </tr>
</table>
</body>
</html>
<?php
function getSelect($field1, $field2)
{
	if ($field1 == $field2)
	{
		return "selected";
	}
	else
	{
		return "";
	}
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit