403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/HostingSpaces/admin/penpaleurope.com/backup/app/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/HostingSpaces/admin/penpaleurope.com/backup/app/validatelogin.php
<?php
include "general.php";
include "connect.php";
include 'sendmailclient.php';

function rand_string( $length ) {
		$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";

		$size = strlen( $chars );
		for( $i = 0; $i < $length; $i++ ) {
			$str .= $chars[ rand( 0, $size - 1 ) ];
		}

		return $str;
	}


function rand_string2( $length ) {
		$chars = "0123456789";

		$size = strlen( $chars );
		for( $i = 0; $i < $length; $i++ ) {
			$str .= $chars[ rand( 0, $size - 1 ) ];
		}

		return $str;
	}


function getUsername( $musername,$domain)
{
 include "connect.php";
 $cnt ="";
// $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
   // echo mysqli_error($con);
   //echo "-1";
  // die();
  // }
 $query ="select * from userlogin where username='". $musername ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
  var_dump( mysqli_error($con));
  //echo "me";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
	//echo "nosa";
}

//echo $cnt."kate";
mysqli_close($con);
return $cnt;
}



function getPhone( $phonenumber,$domain)
{
include "connect.php";
 $cnt ="";
// $con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
   // echo mysqli_error($con);
   //echo "-1";
  // die();
  // }
 $query ="select * from userlogin where phonenumber='". $phonenumber ."' and domain='".$domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}





function getEmail( $memail,$domain)
{
 $cnt ="";
 include "connect.php";
 //$con=mysqli_connect("127.0.0.1","smsEngine","guEnaR28T","smartsmsrouter");
 // Check connection
 //if (mysqli_connect_errno())
   //{
   // echo mysqli_error($con);
   //echo "-1";
  // die();
  // }
 $query ="select * from userlogin where email='". $memail ."' and domain='". $domain."'";
//echo $query;
if(!$result= mysqli_query($con,$query))
{
  //echo mysqli_error($con);
  echo "Database error please try again";
   mysqli_close($con);
   exit();
}

$cnt= "";
while($row = mysqli_fetch_array($result))
{
	//$cnt = $row['balairtime'];
	$cnt="yes";
}

//echo $cnt;
mysqli_close($con);
return $cnt;
}








//**************************
//**************************
// end of function

$myMessage ="<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'> <html xmlns='http://www.w3.org/1999/xhtml'> <head> <meta http-equiv='Content-Type' content='text/html; charset=utf-8' /> <meta name='viewport' content='width=device-width, initial-scale=1' /> <title>Penpal Africa - Welcome Email</title> <style type='text/css' media='screen'> /* Force Hotmail to display emails at full width */ .ExternalClass { display: block !important; width: 100%; } /* Force Hotmail to display normal line spacing */ .ExternalClass, .ExternalClass p, .ExternalClass span, .ExternalClass font, .ExternalClass td, .ExternalClass div { line-height: 100%; } body, p, h1, h2, h3, h4, h5, h6 { margin: 0; padding: 0; } body, p, td { font-family: Arial, Helvetica, sans-serif; font-size: 15px; color: #333333; line-height: 1.5em; } h1 { font-size: 24px; font-weight: normal; line-height: 24px; } body, p { margin-bottom: 0; -webkit-text-size-adjust: none; -ms-text-size-adjust: none; } img { outline: none; text-decoration: none; -ms-interpolation-mode: bicubic; } a img { border: none; } .background { background-color: #333333; } table.background { margin: 0; padding: 0; width: 100% !important; } .block-img { display: block; line-height: 0; } a { color: white; text-decoration: none; } a, a:link { color: #2A5DB0; text-decoration: underline; } table td { border-collapse: collapse; } td { vertical-align: top; text-align: left; } .wrap { width: 600px; } .wrap-cell { padding-top: 30px; padding-bottom: 30px; } .header-cell, .body-cell, .footer-cell { padding-left: 20px; padding-right: 20px; } .header-cell { background-color: #eeeeee; font-size: 24px; color: #ffffff; } .body-cell { background-color: #ffffff; padding-top: 30px; padding-bottom: 34px; } .footer-cell { background-color: #eeeeee; text-align: center; font-size: 13px; padding-top: 30px; padding-bottom: 30px; } .card { width: 400px; margin: 0 auto; } .data-heading { text-align: right; padding: 10px; background-color: #ffffff; font-weight: bold; } .data-value { text-align: left; padding: 10px; background-color: #ffffff; } .force-full-width { width: 100% !important; } .body-cell1 { padding-left: 20px; padding-right: 20px; } .footer-cell1 { padding-left: 20px; padding-right: 20px; } </style> <style type='text/css' media='only screen and (max-width: 600px)'> @media only screen and (max-width: 600px) { body[class*='background'], table[class*='background'], td[class*='background'] { background: #eeeeee !important; } table[class='card'] { width: auto !important; } td[class='data-heading'], td[class='data-value'] { display: block !important; } td[class='data-heading'] { text-align: left !important; padding: 10px 10px 0; } table[class='wrap'] { width: 100% !important; } td[class='wrap-cell'] { padding-top: 0 !important; padding-bottom: 0 !important; } } </style> </head> <body leftmargin='0' marginwidth='0' topmargin='0' marginheight='0' offset='0' bgcolor='' class='background'> <table align='center' border='0' cellpadding='0' cellspacing='0' height='100%' width='100%' class='background'> <tr> <td align='center' valign='top' width='100%' class='background'> <center> <table cellpadding='0' cellspacing='0' width='600' class='wrap'> <tr> <td valign='top' class='wrap-cell' style='padding-top:30px; padding-bottom:30px;'> <table cellpadding='0' cellspacing='0' class='force-full-width'> <tr> <td height='60' valign='top' class='header-cell'><img width='196' height='60' src='http://www.penpalafrica.com/api/penpallogo.png' alt='logo' /></td> </tr> <tr> <td valign='top' class='body-cell'> <table cellpadding='0' cellspacing='0' width='100%' bgcolor='#ffffff'> <tr> <td valign='top' style='padding-bottom:15px; background-color:#ffffff;'> <h1>Welcome to Penpal Africa</h1> </td> </tr> <tr> <td valign='top' style='padding-bottom:20px; background-color:#ffffff;'> Dear <b>##username##</b><br><br /> You provided us the following information during registration:<br><br /> Phonenumber:<b>##phone##</b><br /> Age:<b>##age##</b><br /> Sex:<b>##sex##</b><br /> Location:<b>##location##</b><br /> Country:<b>##country##</b><br /> Email:<b>##email##</b><br /> Profile:<b>##profile##</b><br /><br /> Your PIN is ##pin##. Other Pals will used it to communicate with you through SMS.<br /><br /> Use the link below to activate your account. </td> </tr> <tr> <td> <table cellspacing='0' cellpadding='0' width='100%' bgcolor='#ffffff'> <tr> <td style='width:200px;background:#008000;'> <div><!--[if mso]> <v:rect xmlns:v='urn:schemas-microsoft-com:vml' xmlns:w='urn:schemas-microsoft-com:office:word' href='#' style='height:40px;v-text-anchor:middle;width:200px;' stroke='f' fillcolor='#008000'> <w:anchorlock/> <center> <![endif]--> <a href='http://www.penpalafrica.com/activateac.php?id=##messageid##&en=##encry##' style='background-color:#008000;color:#ffffff;display:inline-block;font-family:sans-serif;font-size:18px;line-height:40px;text-align:center;text-decoration:none;width:200px;-webkit-text-size-adjust:none;'>Activate Account</a> <!--[if mso]> </center> </v:rect> <![endif]--></div> </td> <td width='360' style='background-color:#ffffff; font-size:0; line-height:0;'>&nbsp;</td> </tr> </table> </td> </tr> <tr> <td style='padding-top:20px;background-color:#ffffff;'> Thanks for your interest in our service.<br> Support @ PenpalAfrica </td> </tr> </table> </tr> <tr> <td valign='top' class='footer-cell'> <b>Penpal Africa</b><br> Powered By Swift Alliance Ltd </td> </tr> </table> </td> </tr> </table> </center> </td> </tr> </table> </body> </html>";

date_default_timezone_set('africa/lagos');

 $email =$_POST["email"];
 $pass =$_POST["pass"];


 $query = "select palid from penpalsubscriber where email ='$email' and pass =password('".$pass."')";
 $queryresponse = getQuery1($query);

 //echo $query.'<br>';
 //echo $queryresponse;
 //exit;
 if($queryresponse=="#"){
	 header('Location: login.php?err=22');
    die();
 }

 $palid = $queryresponse;



 $query = "select vemail from penpalsubscriber where palid  = '$palid'";
 $queryresponse = getQuery1($query);
 $vemail= $queryresponse;
 if ($vemail =="0"){
 header('Location:  login.php?err=28');
     die();

 }

 $query = "select nickname from penpalsubscriber where email ='$email' and pass =password('".$pass."')";
 $queryresponse = getQuery1($query);

$nickname = $queryresponse;
$_SESSION['palid']= $palid;
$_SESSION['nickname']= $nickname;



$query = "select status from penpalsubscriber where email ='$email' and pass =password('".$pass."')";
$queryresponse = getQuery1($query);

if ($queryresponse=="0"){

	$query = "update penpalsubscriber set lastlogin =now(),online='1',lastactive=now() where email= '$email' and pass =password('".$pass."') and domain ='$domain'";
	$queryresponse =updateQuery($query);
	header('Location: /penpal/photo.php');
	die();

}else{
	$query = "update penpalsubscriber set lastlogin =now(),online='1',lastactive=now() where email= '$email' and pass =password('".$pass."') and domain ='$domain'";
	$queryresponse =updateQuery($query);


}


//echo $query;
//exit();
if (  $_SESSION['redirectpage'] != "")
{

 	$landingPage =  $_SESSION['redirectpage'];
 	 $_SESSION['redirectpage']= "";
	header('Location: '. $landingPage);

	 die();
}

                $_SESSION["user_id"]= $palid;
		$_SESSION["user_name"] = $nickname;
		$_SESSION["user_avatar"] =      "http://www.penpalafrica.com/penpal/assets/img/subscribers/$palid/profile/$palid". ".jpg";
		$_SESSION["user_link"] = "http://www.penpalafrica.com/penpal/onlineprofile.php?id=".$palid;
		


 //header('Location: chatindex.php');
  header('Location: /joli/penpalchat.php');
  die();



?>

Youez - 2016 - github.com/yon3zu
LinuXploit