|
Server IP : 10.111.40.2 / Your IP : 216.73.216.60 Web Server : Apache System : Linux webd002.cluster111.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64 User : comimage ( 973271) PHP Version : 7.4.33 Disable Function : _dyuweyrj4,_dyuweyrj4r,dl MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON Directory (0705) : /home/comimage/atia2m.fr/../../comimage/arti/../louisdanielcoiffure.com/ancien/admin/ |
| [ Home ] | [ C0mmand ] | [ Upload File ] |
|---|
<?php
// la valeur de $path est utilisé pour eviter un probleme d'inclusion de fichier
// ../ indique que l'inclusion est vient d'un sus dossier comme le dossier /admin
$path = "../";
require_once '../includes/conf.inc.php';
if (!isset($_SESSION)) {
session_start();
}
$formaction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING']) && $_SERVER['QUERY_STRING'] != ''){
$formaction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}
$status = "";
// premiere login de l'user apres installation
// suppression du dossier d'installation avec ses contenu
if(isset($_GET["fl"])){
if(is_dir("../install")){
if(!removeDir("../install")){
$status = "Echec de suppression du dossier d'installation !!<br /> Veuillez supprimer manuellement le dossier << install >> ";
}
}
}
if (isset($_GET['accesscheck'])) {
$_SESSION['PrevUrl'] = $_GET['accesscheck'];
$status = "Vous devez vous identifier";
}
if(isset($_GET['status']) && strlen($_GET['status']) > 0){
$status = $_GET['status'];
}
if (isset($_POST['login'])) {
$loginUsername=$_POST['login'];
$loginPassword=md5($_POST['password']);
$MM_fldUserAuthorization = "";
$MM_redirectLoginSuccess = "listarticle.php";
$MM_redirectLoginFailed = "index.php";
$MM_redirecttoReferrer = true;
$loginsql=sprintf("SELECT `user`, `password`, `groupe` FROM `".$prefix."admin` WHERE `user`=%s AND `password`=%s",
getSQLValueString($loginUsername, "text"),
getSQLValueString($loginPassword, "text"));
$rslogin = $con->createResultSet($loginsql, $databasename);
$loginFoundUser = $rslogin->getNumberRows();
if ($loginFoundUser) {
$logGroup = $rslogin->current();
$loginStrGroup = $logGroup["groupe"];
//declare two session variables and assign them
$_SESSION['MM_Username'] = $loginUsername;
$_SESSION['MM_UserGroup'] = $loginStrGroup;
if (isset($_SESSION['PrevUrl']) && true) {
// $MM_redirectLoginSuccess = $_SESSION['PrevUrl'];
}
header("Location: " . $MM_redirectLoginSuccess );
}else{
$goto = $MM_redirectLoginFailed . "?status=" . urlencode('Utilisateur inconnu ou mot de passe incorrect.');
header("Location: " . $MM_redirectLoginFailed );
}
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Administration de votre site</title>
<link rel="stylesheet" href="style.css" type="text/css" />
</head>
<body>
<div id='connexion'>
<img src='../images/webcom-cms.gif'>
<?php
if($status != ''){
echo '<h2>' . $status . '</h2>';
}
?>
<form action="<?php echo $formaction; ?>" name="form1" method="post">
<table>
<tr>
<td align="right">Identifiant :</td>
<td><input type="text" name="login" id="login" /></td>
</tr>
<tr>
<td align="right">Mot de passe :</td>
<td><input type="password" name="password" id="password" /></td>
</tr>
<tr>
<td> </td>
<td><input type="submit" name="Submit" id="Submit" value="Valider" /></td>
</tr>
</table>
</form>
</div>
</body>
</html>