| Server IP : 208.122.213.31 / Your IP : 216.73.216.185 Web Server : Apache System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64 User : WHMCS_MIA_382 ( 1001) PHP Version : 7.4.33 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/httpd/html/baberankings.com.bak/members/admin/ |
Upload File : |
<?
/* K-Rate
(C) Rinalds Uzkalns, 2003-2004. All Rights Reserved
http://turn-k.net
Version: 1.00 (22.09.04)
*/
?>
<?php
ob_start();
session_start();
define('in_admin',true);
//print_r($_SESSION);
//login form
function login_form() {
ob_clean();
?>
<html><head><title>K-Rate Administrator Login</title></head>
<body><form method=post action=verify_session.php>
<input type=hidden name=req value=dologin>
<table>
<tr><td class=key>Username:</td><td><input type=text name=user></td></tr>
<tr><td class=key>Password:</td><td><input type=password name=pass></td></tr>
<tr><td colspan=2 align=center><br><input type=submit name=sm value='Login!'></td></tr>
</table>
</form></body></html>
<?
exit;
}
//process login
if ($_REQUEST['req'] == 'dologin') {
chdir('..');
include 'kernel/initialize.php';
$result = mysql_query("SELECT * FROM $admtable WHERE adm_user='{$en['user']}' AND adm_pass='".md5($en['pass'])."'") or die(mysql_error());
if (mysql_num_rows($result) > 0) {
//login successful, setting up session
ob_clean();
$line = mysql_fetch_assoc($result);
session_start();
$time_started = md5(mktime());
$secure_session_user = md5($line['adm_id'].$line['adm_user'].$line['adm_pass']);
$_SESSION['krate_user'] = $line['adm_user'];
$_SESSION['krate_id'] = $line['adm_id'];
$_SESSION['krate_pass'] = $en['pass'];
$_SESSION['krate_username'] = $line['adm_user'];
$_SESSION['krate_session_key'] = $time_started.$secure_session_user.session_id();
$_SESSION['krate_current_session'] = $line['adm_user']."=".$_SESSION['krate_session_key'];
header('Location: index.php');
exit;
} else {
login_form();
}
}
session_start();
//check login
if ($_SESSION['krate_current_session'] != $_SESSION['krate_user']."=".$_SESSION['krate_session_key'])
login_form();
//process logout
if ($req == "logout") {
ob_clean();
$_SESSION = array();
header("Location: index.php");
exit;
}
$result = mysql_query("SELECT * FROM $membtable WHERE m_user='{$_SESSION['krate_user']}'") or die (mysql_error());
$usrdata = mysql_fetch_assoc($result);
if (is_array($usrdata))
foreach ($usrdata as $key=>$value) $en[$key] = $value;
$result = mysql_query("SELECT * FROM $admtable LEFT JOIN $membtable ON adm_user=m_user WHERE adm_user='$_SESSION[krate_user]' AND adm_pass='".md5($_SESSION['krate_pass'])."'") or die (mysql_error());
if (mysql_num_rows($result) == 0) {
login_form();
}
$admin = @mysql_fetch_assoc($result);
$admin_rights = unserialize(base64_decode($admin['adm_rights']));
$en['sess_pass'] = $_SESSION['krate_pass'];
?>