403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/m.musiccircle/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/m.musiccircle/activation.php
<? include('_init.php');?>
<?
	if($_GET['link'] && $_GET['type']){
		$refid = aes_crypt($_GET['link'],2);
		$type = aes_crypt($_GET['type'],2);
		
		if($type == 'tutor'){
			//
			$sql = "select id,cmsloginid from tutor_main 
					where id = ? and (isemailverified is null or isemailverified = 0) LIMIT 1";
			$parameters = array($refid);
			$row_tutor = bind_pdo($sql, $parameters, "selectone");
			$sql = "select id from tutor_main 
					where id = ? and isemailverified = 1 LIMIT 1";
			$parameters = array($refid);
			$row2_tutor = bind_pdo($sql, $parameters, "selectone");
		}else if($type == 'student'){
			//
			$sql = "select id,cmsloginid from student_main 
					where id = ? and (isemailverified is null or isemailverified = 0) LIMIT 1";
			$parameters = array($refid);
			$row_student = bind_pdo($sql, $parameters, "selectone");

			$sql = "select id from student_main 
					where id = ? and isemailverified = 1 LIMIT 1";
			$parameters = array($refid);
			$row2_student = bind_pdo($sql, $parameters, "selectone");
		}
		//
		$status = 'false';
		if($row_tutor['id']){
			if($row_tutor['id']){
				unset($tmp_data);
				$tmp_data['status'] = 2;
				$tmp_data['isemailverified'] = 1;
				$sql = mysql_install($tmp_data,'tutor_main','edit','id');
				$tmp_data['id'] = $row_tutor['id'];
				$arraykey=array_keys($tmp_data);
				unset($parameters);
				for($i=0;$i<count($arraykey);$i++){
					$parameters[$i]=$tmp_data[$arraykey[$i]];
				}
				bind_pdo($sql, $parameters);
				$status = 'true';
			}elseif($row2_tutor['id']){
				$status = 'again';
			}else{
				$status = 'false';
			}
		}else if($row_student['id']){
			if($row_student['id']){
				unset($tmp_data);
				$tmp_data['status'] = 2;
				$tmp_data['isemailverified'] = 1;
				$sql = mysql_install($tmp_data,'student_main','edit','id');
				$tmp_data['id'] = $row_student['id'];
				$arraykey=array_keys($tmp_data);
				unset($parameters);
				for($i=0;$i<count($arraykey);$i++){
					$parameters[$i]=$tmp_data[$arraykey[$i]];
				}
				bind_pdo($sql, $parameters);
				$status = 'true';
			}elseif($row2_student['id']){
				$status = 'again';
			}else{
				$status = 'false';
			}
		}
	}else{
		$status = 'false';	
	}
	if($status=='true'){
		unset($_SESSION['student_login']);
		unset($_SESSION['member_login']);
		if($row_tutor['id']){
			$_SESSION['member_login'] = $row_tutor['id'];
			$path = 'signupTutor.php';
			$parameters = array($row_tutor['cmsloginid'],'user',0);
		}else if($row_student['id']){
			$_SESSION['student_login'] = $row_student['id'];
			$path = 'signupStudent.php';
			$parameters = array($row_student['cmsloginid'],'user',0);
		}
		
		$sql = "select cmsloginname,cmsloginid,cmsrole,is_tutor,is_student from sys_cms_login as tb 
				where `cmsloginid` = ? and cmsrole = ? and deleted = ? LIMIT 1";
		$row_cms = bind_pdo($sql, $parameters, "selectone");

		$_SESSION['loginname'] = aes_crypt($row_cms['cmsloginname'],2);
		$_SESSION['cmsloginname'] = aes_crypt($row_cms['cmsloginname'],2);
		$_SESSION['cmsusername'] = aes_crypt($row_cms['cmsloginname'],2);
		$_SESSION['cmsloginid'] = $row_cms['cmsloginid'];
		$_SESSION['loginid'] = $row_cms['cmsloginid'];
		$_SESSION['cmsrole'] = $row_cms['cmsrole'];
		$_SESSION['role'] = $row_cms['cmsrole'];
		$_SESSION['is_tutor'] = $row_cms['is_tutor'];
		$_SESSION['is_student'] = $row_cms['is_student'];
		if($row_tutor['id']){
			$_SESSION['member_login'] = $row_tutor['id'];
		}else if($row_student['id']){
			$_SESSION['student_login'] = $row_student['id'];
		}
		@header("Location: {$path}");
		echo "<script language='JavaScript'>window.location='{$path}'</script>";
		exit();
	}else if($status=='again'){
		//$path = 'index.php';
	}else if($status=='false'){
		//$path = 'index.php';
	}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<? include('_head.php');?>
<link href="css/_sign.css" type="text/css" rel="stylesheet">
</head>

<body>
<!-- Navigation -->
<? include('_header.php');?>
<? include('_dialog.php') ?>
<div class="formSection" style="margin-top:150px;">
  <div class="TutorForm">
    <? if($status=='true'){?>
    <p class="general_txt success bigger">
       <?=_lang("Thank you for verification!")?> </p>
    <? }else if($status=='again'){?>
    <p class="general_txt success bigger">
      <?=_lang("Thank you for verification! You have verified before. Please login your account.")?></p>
    <? }else if($status=='false'){?>
    <p class="general_txt error bigger">
       <?=_lang("Thank you for verification! Verification is not success. Please try again.")?></p>
    <? }?>
  </div>
</div>
<? include('_footer.php')?>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit