403Webshell
Server IP : 93.86.61.54  /  Your IP : 216.73.216.60
Web Server : Apache/2.4.62 (Ubuntu)
System : Linux rasin.ddns.net 6.8.0-124-generic #124~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 21:05:19 UTC x86_64
User : www-data ( 33)
PHP Version : 8.4.22
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/projects/radvre/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/projects/radvre/admin//upd_usr.php
<!DOCTYPE html>
<!--
******************************
 Project: Radno vreme, 2023.
 Version: PHP 5-7
 Author : M. Kukic
 Note   :

******************************
-->
<html>
<link rel="stylesheet" href="lgdgstil.css">

<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<link rel='shortcut icon' type='image/png' href='favicon.png'/>
<meta http-equiv="refresh" content="120">
<title>Radno vreme</title>
<link rel="stylesheet" href="forma.css">
</head>
<body>

<?php
//
//
$id=$_GET["id"];
$st=$_GET["st"];
//
$dispname = $_GET["dispname"];
$fullname = $_GET["fullname"];
$passwd = $_GET["passwd"];
$rfid = $_GET["rfid"];
$email = $_GET["email"];
$groups = $_GET["groups"];
$office = $_GET["office"];
$admin = $_GET["admin"];
$reports = $_GET["reports"];
$disabled = $_GET["disabled"];
//
include "../config.php";
//
$tabela="user";
//
echo"<div style='width:640px; word-wrap:break-word;'>";
echo "<fieldset>";
echo "<legend><h3>LogDogPlan -  Korisnici</h3></legend>";
echo "<table border=\"0\">";
echo "</fieldset>";
//
// ******************** Interni poziv INSERT
if ($sti=="in"){
	
	$sql = "INSERT INTO $tabela (id, dispname, fullname, passwd, rfid, email, groups, office, admin, reports, disabled) VALUES ('0', '$dispname', '$fullname', '$passwd', '$rfid', '$email', '$groups', '$office', '$admin', '$reports', '$disabled')";
	if ($db==5) {	
		mysql_query($sql, $dbh) or die (mysql_error($dbh));
	}else{
		mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
	}
	
	$ok=" OK!";
	$_SESSION["sti"] = "";
}
// ********************** Interni poziv UPDATE
if ($sti=="up"){

	$sql = "UPDATE $tabela SET dispname='$dispname', fullname='$fullname', passwd='$passwd', rfid='$rfid', email='$email', groups='$groups', office='$office', admin='$admin', reports='$reports', disabled='$disabled' WHERE id='$id'";
	if ($db==5) {	
		mysql_query($sql, $dbh) or die (mysql_error($dbh));
	}else{
		mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
	}
	
	$ok=" OK!";
	$_SESSION["sti"] = "";
}
// *********************** Interni poziv DELETE
if ($sti=="dl"){
	
    $sql = "DELETE FROM $tabela WHERE id='$id'";
	if ($db==5) {	
		$result = mysql_query($sql, $dbh) or die (mysql_error($dbh));
	}else{
		$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
	}
	
	$id="0";
	$dispname = "-";
	$fullname = "-";
	$passwd = "-";
	$rfid = "-";
	$email = "-";
	$groups = "-";
	$office = "-";
	$admin = "-";
	$reports = "-";
	$disabled = "-";
			
	$ok=" OK!";
	$_SESSION["sti"] = "";
}
//
// *********************** Eksterni poziv INSERT
if ($st=="ins"){

   $id="0";	
   
   $ok="Ins";
   $ct="in";
   $_SESSION["sti"] = "in";
}
//
// *********************** Eksterni poziv UPDATE
if ($st=="upd"){
	
	$sql = "SELECT * FROM $tabela WHERE id='$id'";
	if ($db==5) {	
		$result = mysql_query($sql,$dbh) or die (mysql_error($dbh));
		$row = mysql_fetch_array($result);
	}else{
		$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
		$row = mysqli_fetch_array($result);
	}
	
		$id = $row['id'];
		$dispname = $row["dispname"];
		$fullname = $row["fullname"];
		$passwd = $row["passwd"];
		$rfid = $row["rfid"];
		$email = $row["email"];
		$groups = $row["groups"];
		$office = $row["office"];
		$admin = $row["admin"];
		$reports = $row["reports"];
		$disabled = $row["disabled"];
		
		$ok="Upd";	
		$ct="up";
		$_SESSION["sti"] = "up";
}
//	
// ************************ Eksterni poziv DELETE
if ($st=="del"){
	
	$sql = "SELECT * FROM $tabela WHERE id=".$id;
	if ($db==5) {	
		$result = mysql_query($sql,$dbh) or die (mysql_error($dbh));
		$row = mysql_fetch_array($result);
	}else{
		$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
		$row = mysqli_fetch_array($result);
	}
		$id = $row['id'];
		$dispname = $row["dispname"];
		$fullname = $row["fullname"];
		$passwd = $row["passwd"];
		$rfid = $row["rfid"];
		$email = $row["email"];
		$groups = $row["groups"];
		$office = $row["office"];
		$admin = $row["admin"];
		$reports = $row["reports"];
		$disabled = $row["disabled"];
		
		$ok="Del";		
		$ct="dl";
		$_SESSION["sti"] = "dl";
}

include "form_usr.php";
//
include "close_db.php";			
//
echo "<hr>";
//echo "<a href='javascript:history.go(-1)'><img src='img/rw.png' width='80' height=''></a>";
//echo "<a href='index_adm.php'><img src='img/hom.png' width='80' height=''</a>";
echo "<img src='img/sivobl.png' width='' height=''>";
echo "<a href='adm_usr.php'><img src='img/retv.png' width='' height=''</a>";
echo "<img src='img/sivobl.png' width='' height=''>";
echo "<a href='upd_usr.php?id=0&st=ins'><img src='img/plusv.png' width='' height=''</a>";
?>
</div>
</body>
</html>


Youez - 2016 - github.com/yon3zu
LinuXploit