403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.216.231
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/inetpub/wwwroot/icd/msc/sources/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/inetpub/wwwroot/icd/msc/sources/admin_user_edit.php
<?php
	global $fields, $mCtrl;

	include_once 'lib/lib.php';
	include_once 'sources/admin_user_edit_fields.php';
			
	function checkValidity(){
		global $fields, $mCtrl;
		
		$ret = TRUE;
		$fields->checkValidity();		
		if ($fields->numOfInvalid > 0){
			$ret = FALSE;
			$errMsg = "";
			if ($fields->numOfInvalid > 1){
				$errMsg = $mCtrl->str("WARNING_MULTIPLE_ERRORS");
				$errMsg = str_replace("@{NumOfErrors}", $fields->numOfInvalid, $errMsg);
			}else{
				$errMsg = $mCtrl->str("WARNING_SINGLE_ERROR");
				$fldLabel = $fields->invalidsArray[0]->getLabel($mCtrl);
				$errMsg = str_replace("@{ErrorField}", $fldLabel, $errMsg);			
			}
			$mCtrl->setFlashWarning($errMsg);					
		}		
		return $ret;
	}
		
	$uid = Utils::vGet("u");
	$mode = Utils::vRequest("mode");
	$action = Utils::vPost("action");
	
	if (strlen($mode) ==0 ) $mode = "edit";
	
	if ((strlen($uid) == 0) && (strlen($mode) == 0)) $mCtrl->redirectTo("@[URLROOT]/admin_users.php");
	
	$showForm = FALSE;
	
	$fields->fieldsHash['password']->ruleMinLength = ($mode == "edit")? 0 : 6;

	switch ($action) {
		case 'edit':
			$fields->getValues();
			if (checkValidity()){
				$fields->updateValuesToDB();					
				$mCtrl->setFlashMessage("changes saved successfully");					
			}			
			$showForm = TRUE;
			break;

		case 'new':
			$fields->getValues();
			if (checkValidity()){
				$fields->insertValuesToDB();
				$mCtrl->setFlashMessage("new user saved successfully");					
				$mCtrl->redirectTo("@[URLROOT]/admin_users.php");
			}else{
				$showForm = TRUE;
			}			
			break;
		
		default:
			switch ($mode) {
				case 'new':
					
					break;
				
				default:
					if (strlen($uid) == 0) $mCtrl->redirectTo("@[URLROOT]/admin_users.php");
					$fields->fieldsHash['username']->Value = $uid;
					$fields->getValuesFromDB();
					
					break;
			}
			$showForm = TRUE;			
			break;
	}
	
	$mCtrl->printHeaders();
?>

<h2><?php echo ($mode == "new")? "New" : "Edit" ?> User</h2>

<?php	
	
	if ($showForm){
			$fields->fieldsHash['username']->readOnly = ($mode == "edit");
			$fields->fieldsHash['password']->Value = "";
?>

			<a href="@[URLROOT]/admin_users.php">back to users list</a>
			<form name="user_form" method="POST">
				<input type="hidden" name="action" value="<?php echo $mode; ?>" />
				<table id="contacttable" cols="2">
			<?php
				$fields->render($mCtrl);
			?>
					
					<tr>
						<td></td>
						<td><input type="submit" name="butSubmit" value="@[LBL_SAVE]" style="width: 390px;" /></td>
					</tr>
				</table>
			</form>

<?php		
	}		
?>

Youez - 2016 - github.com/yon3zu
LinuXploit