F3RGUSO WEBSHELL 403

Edit file

File name : settings.php

Content :

<?php
include_once '../db.php';
$erre = NULL;
$db = new DB();
include_once '../function.php';

if (isset($_POST['save-date'])) {

if (!$_POST['name'] || !$_POST['userName']) {
        ?>

<button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">&times;</span></button>

<strong>Error!</strong> Please enter the name and username.

</div>

<?php
    } else {

$id = $_POST['id'];

$username = $_POST['user'];

$Psw = $_POST['oldPassword'] . 'galle@123';
        $enPw = md5($Psw);

$result = CheckUser($id, $username, $enPw);

if (!$result) {

$erre = 'Old password is incorrect.';
        } elseif ($_POST['newPassword'] != $_POST['confirm_password'] && !empty($_POST['confirm_password'])) {

$erre = 'Old password is Not Match.';
        } else {

$password = $_POST['newPassword'] . 'galle@123';
            $enPass = md5($password);

if (empty($_POST['newPassword'])) {

$password = $_POST['oldPasswordOld'] . 'galle@123';
                $enPass = md5($password);
            }

$sql = "UPDATE `user` SET `user_name` = '" . $_POST['userName'] . "', `password` = '" . $enPass . "',`email` = '" . $_POST['email'] . "', `name` = '" . $_POST['name'] . "' WHERE id =  '" . $_POST['id'] . "'";

$db->readQuery($sql);

header('location: login/log-out.php');
        }
    }
}

include './header.php';
?>

<div class="content-wrapper">

<h1 class="page-head-line">Change Settings </h1>

</div>

Change Settings

</div>

<?php if (!empty($erre)) { ?>

<a href="" class="close" data-dismiss="alert" aria-label="close">&times;</a>

</div>

<?php } ?>

</div>

</div>

<label for="Email" class=" control-label">Email</label>

</div>

</div>

<label for="oldPassword" class=" control-label">Old Password</label>

<label for="newPassword" class=" control-label">New Password</label>

</div>

<label for="newPassword" class=" control-label">Confirm Password</label>

</div>

$('#confirm_password').on('keyup', function () {

if ($(this).val() == $('#newPassword').val()) {

$('#message').html('Password matching').css('color', 'green');

} else
                                        $('#message').html('Password not matching').css('color', 'red');

});

</script>

</div>

</form>

</div>

</div>

</div>

<?php
include './footer.php';

F3RGUSO WEBSHELL COUNTER 403

Edit file