403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/home2/cgny/public_html/stealsaffiliates/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/home2/cgny/public_html/stealsaffiliates/addedituser.cfm
<cfinclude template="header.cfm">
          <cfquery name="checksecurity" dataSource="#ds#">
	select type,vendorid,name from steals.stealsvendorpeople
where peopleid = #session.id#
</cfquery>
          <cfquery name="checkvendor" dataSource="#ds#">
	select vendorname from steals.stealsvendor
where vendorid = #checksecurity.vendorid#
</cfquery>

<Cfif #checksecurity.type# eq 'Primary'>
<cfif parameterexists(url.add)>
	<cfquery name=addphoto datasource="#ds#">
		INSERT INTO steals.stealsvendorpeople(name,vendorid,email,password,phone,type,accesslevel,title)
	VALUES('',#checksecurity.vendorid#,'','','','',15,'')
		</cfquery>

	<Cfquery name="getlast"	dataSource="#ds#">
		select peopleid from steals.stealsvendorpeople
		order by peopleid desc
		limit 0,1
		</cfquery>
		<cflocation url="addedituser.cfm?edit=on&peopleid=#getlast.peopleid#" addToken="no">

</cfif>

<cfif parameterexists(url.editsave)>
		<cfquery name=addphoto datasource="#ds#">
		update steals.stealsvendorpeople
		set name = '#form.name#',
		email = '#form.email#',
		type = '#form.type#',
		password = '#form.password#',
		phone = '#form.phone#',
		title = '#form.title#'
		where peopleid = #url.peopleid#
	</cfquery>

		<cflocation url="index.cfm" addToken="no">


</cfif>


<cfif parameterexists(url.delete)>
	<cfquery name="del" dataSource="#ds#">
		delete from steals.stealsvendorpeople
		where peopleid = #url.delete#
	</cfquery>

</cfif>


</Cfif>
  <!-- Left navbar-header end -->
  <!-- Page Content -->
  <div id="page-wrapper">
    <div class="container-fluid">
      <div class="row bg-title">
        <div class="col-lg-3 col-md-4 col-sm-4 col-xs-12"  style="width: 90%;">
          <h4 class="page-title">Add/Edit Users for <cfoutput><u>#checkvendor.vendorname#</u></cfoutput></h4>
          User: <Cfoutput>#checksecurity.name#</Cfoutput>

<br><Br>
          <Cfif #checksecurity.type# eq 'Primary' and not parameterexists(url.edit)>
Use this page to manage your company's users. You can add additional logins for billing, offer management and tracking.
<p><br>
	<a href="addedituser.cfm?<Cfoutput>vendorid=#checksecurity.vendorid#</Cfoutput>&add=on"><b>Add a New User</b></a>
</cfif>


        </div>
      <div class="row">
        <div class="col-md-12">
          <div class="white-box">


<Cfif #checksecurity.type# eq 'Primary'>


<cfif parameterexists(url.edit)>

	<Cfif parameterexists(url.peopleid)>
		<cfset url.edit = #url.peopleid#>
	</Cfif>


	<Cfquery name="getperson" dataSource="#ds#">
		select * from steals.stealsvendorpeople
		where peopleid = #url.edit#
	</cfquery>

      <form class="form-horizontal" id="loginform" action="addedituser.cfm?editsave=on&peopleid=<cfoutput>#url.edit#</cfoutput>" method="post">

<Cfoutput query="getperson">
        <div class="form-group ">
          <div class="col-xs-12">
            Name: <input name="name" class="form-control" type="text" required="" placeholder="Name" value="#getperson.name#">
          </div>
        </div>

           <div class="form-group ">
          <div class="col-xs-12">
           Role:

           <select name="type">
	           <option value="#getperson.type#">#getperson.type#</option>
	           <option value="Billing">Billing</option>
	           <option value="Admin">Admin</option>
	           <option value="Customer Service">Customer Service</option>
	                      </select>

          </div>
        </div>

              <div class="form-group ">
          <div class="col-xs-12">
           Title: <input name="title" class="form-control" type="text" required="" placeholder="Job Title" value="#getperson.title#">
          </div>
        </div>
        <div class="form-group ">
          <div class="col-xs-12">
           Email: <input name="email" class="form-control" type="text" required="" placeholder="Email" value="#getperson.email#">
          </div>
        </div>
        <div class="form-group ">
          <div class="col-xs-12">
           Password: <input name="password" class="form-control" type="password" required="" placeholder="Password" value="#getperson.password#">
          </div>
        </div>

           Phone Number:
<input class="form-control" type="text" required="" placeholder="Phone" name="phone"  value="#getperson.phone#" >
    </Cfoutput>


        <div class="form-group text-center m-t-20">
          <div class="col-xs-12">
            <button class="btn btn-info btn-lg btn-block text-uppercase waves-effect waves-light" type="submit">Save User</button>
          </div>
        </div>

</form>
          </div>
        </div>


          </div>
        </div>
      </div>
<cfinclude template="footer.cfm">
<Cfabort>

</cfif>



            <div class="table-responsive">
                <table id="example234" class="display nowrap" cellspacing="0" width="100%">
                    <thead>
                        <tr>
                            <th>Name</th>
                            <th>Email</th>
                            <th>Title</th>
                            <th>Role</th>
                            <th>Edit</th>
                            <th>Delete</th>

                        </tr>
                    </thead>
                    <tbody>


          <Cfquery name="Geter" dataSource="#ds#">

select * from steals.stealsvendorpeople
where vendorid = #checksecurity.vendorid#
and email <> ''
</cfquery>

                     <Cfoutput query="geter">
	                        <tr>
                            <td style="border-width: 1px;border-style: solid;padding:4px;">#name#</td>
                            <td style="border-width: 1px;border-style: solid;padding:4px;">#email#</td>
                            <td style="border-width: 1px;border-style: solid;padding:4px;">#title#</td>
                            <td style="border-width: 1px;border-style: solid;padding:4px;">#type#</td>
                            <td style="border-width: 1px;border-style: solid;padding:4px;"><A href="addedituser.cfm?edit=#peopleid#">edit</A></td>
                            <td style="border-width: 1px;border-style: solid;padding:4px;"><A href="addedituser.cfm?delete=#peopleid#" onclick="return confirm('Are you sure you want to delete this user?');">delete</A></td>

                        </tr>
                                         </Cfoutput>

                    </tbody>
                </table>
            </div>
          </div>





<cfelse>

Error, you must be the primary user to add/edit sub-users of this account.
</Cfif>

          </div>
        </div>
      </div>
<cfinclude template="footer.cfm">

Youez - 2016 - github.com/yon3zu
LinuXploit