403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Old Sites/repository/thesaurus/common/include/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/Old Sites/repository/thesaurus/common/include//session.php
<?php
if ((stristr( $_SERVER['REQUEST_URI'], "session.php") ) || ( !defined('T3_ABSPATH') )) die("no access");
#   TemaTres : aplicación para la gestión de lenguajes documentales #       #
#                                                                        #
#   Copyright (C) 2004-2013 Diego Ferreyra tematres@r020.com.ar
#   Distribuido bajo Licencia GNU Public License, versión 2 (de junio de 1.991) Free Software Foundation
#  
###############################################################################################################
# Gestion de sesiones #

  session_start();

  $SQL_CFG_LC=SQL("select","id,titulo,autor,idioma,cobertura,keywords,tipo,cuando,url_base,polijerarquia from $DBCFG[DBprefix]config where id=1");

  if(!is_object($SQL_CFG_LC))
	{
		header("Location:install.php");
	}
  
    $CFG_LC=$SQL_CFG_LC->FetchRow();

    $_SESSION["id_tesa"]      =$CFG_LC[0];
    $_SESSION["CFGTitulo"]    =$CFG_LC[1];
    $_SESSION["CFGAutor"]     =$CFG_LC[2];
    $_SESSION["CFGIdioma"]    =$CFG_LC[3];
    $_SESSION["CFGCobertura"] =$CFG_LC[4];
    $_SESSION["CFGKeywords"]  =$CFG_LC[5];
    $_SESSION["CFGTipo"]      =$CFG_LC[6];
    $_SESSION["CFGCreacion"]  =$CFG_LC[7];
    $_SESSION["CFGURL"]       =$CFG_LC[8];
    $_SESSION["CFGPolijerarquia"]  =$CFG_LC[9];
    $_SESSION["CFGVersion"]   =$CFG[Version];
    
    //Load config values
	loadConfigValues(1);
    if($_GET[setLang]){
   		$_SESSION[$_SESSION["CFGURL"]][lang]=$idiomas_disponibles[$_GET[setLang]];
   	}	
   
   $_SESSION["CFGIdioma"] = ($_SESSION["CFGIdioma"]) ? $_SESSION["CFGIdioma"] : $idiomas_disponibles[0][2];
   
   //NO hay idioma, idioma por default ES
   if(!$_SESSION[$_SESSION["CFGURL"]][lang])
   {
   		$_SESSION[$_SESSION["CFGURL"]][lang]=$idiomas_disponibles[$_SESSION["CFGIdioma"]];
   }

	//prevent missing language file
   if(in_array($_SESSION[$_SESSION["CFGURL"]][lang],$idiomas_disponibles))
	{
		require_once(T3_ABSPATH . 'common/lang/'.$_SESSION[$_SESSION["CFGURL"]][lang][1]);
	}
	else
	{
		require_once(T3_ABSPATH . 'common/lang/'.$idiomas_disponibles[en][1]);
	}
	

 if($_GET[cmdlog]==substr(md5(date("Ymd")),"5","10")){
	
	//Save stadistics
	$stats=doLastModified(); 
    unset($_SESSION[$_SESSION["CFGURL"]]);
    header("Location:index.php");
    };

if($_POST[id_correo_electronico]){
	
	$chk_user='';

	$chk_user=ARRAYcheckLogin($_POST[id_correo_electronico]);
	 
	 if($chk_user["user_id"])
	 {		 
		//if the hash not hashed because the admin of tematres change the CFG_HASH_PASS config in db.tematres.php
		if (( strlen($chk_user["pass"]) < 34 ) && (CFG_HASH_PASS)){

			setPassword($chk_user["user_id"],$chk_user[pass],CFG_HASH_PASS);

			$chk_user=ARRAYcheckLogin($_POST[id_correo_electronico]);
		}
		 
		 
		if(check_password($_POST["id_password"],$chk_user["pass"]))
		{
			$_SESSION[$_SESSION["CFGURL"]][ssuser_id]=$chk_user["user_id"];
			$_SESSION[$_SESSION["CFGURL"]][ssuser_nivel]=$chk_user["nivel"];
			$_SESSION[$_SESSION["CFGURL"]][ssuser_nombre]=$chk_user["name"];
			//redirigir
			header("Location:index.php");
		}
	 }
 }
?>

Youez - 2016 - github.com/yon3zu
LinuXploit