403Webshell
Server IP : 64.202.187.69  /  Your IP : 216.73.216.192
Web Server : Apache
System : Linux 69.187.202.64.host.secureserver.net 3.10.0-1160.144.1.el7.tuxcare.els6.x86_64 #1 SMP Fri May 29 16:22:24 UTC 2026 x86_64
User : transmarket ( 1001)
PHP Version : 7.2.34
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/transmarket/translator/controllers/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/transmarket/translator/controllers/confirm_password.php
<?php

include 'connection.php';

$id = $_POST['id'];
$password = $_POST['password'];
$salt = '';
$count = 0;
$email = '';

$sql = "SELECT * FROM tbl_translators WHERE id = '" . $id . "'";
$result = $mysqli->query($sql);

while ($row = $result->fetch_object()) {
    $email = $row->email;
    $row_salt = $row->salt;
    $reset_key = $row->reset_key;
    if($reset_key == $_POST['salt']) {
	    $count++;
	} 
}

if ($count != 0) {
	$salt = uniqid(mt_rand(), true);
	$passwordSHA = SHA1($salt . SHA1($salt . SHA1($password)));
	$sql = 'UPDATE tbl_translators SET reset_key = "", password = "' . addslashes($passwordSHA) . '", salt="' . addslashes($salt) . '" where email = "' . $email . '" and id ="' . $id . '"';
	$result = $mysqli->query($sql);
	$results['status'] = 200;
	$results['message'] = "Password has been changed";
}else{
	$results['status'] = 400;
	$results['message'] = "Wrong link URL or link is expired.";
}
echo json_encode($results);

?>

Youez - 2016 - github.com/yon3zu
LinuXploit