LittleDemon WebShell


Linux premium274.web-hosting.com 4.18.0-553.45.1.lve.el8.x86_64 #1 SMP Wed Mar 26 12:08:09 UTC 2025 x86_64
Path : /home/whagcoha/mos.mwagalwaservices.com/
File Upload :
Command :
Current File : /home/whagcoha/mos.mwagalwaservices.com/signin.php

<?php
session_start(); 


?>

<?php
//session_start(); 
include 'dbconfig/db.php';

// Security

if ((isset($_SESSION['gen256']))  ) {
  echo "<script>
        window.open('index.php','_self');
    </script>";  
}

?>

<!DOCTYPE html>
<html>
<head>
	<meta charset="utf-8">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	<title>Mwagalwa Services Ltd Office System</title>
	<style type="text/css">
		 @import url('https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap');

 * {
     margin: 0;
     padding: 0;
     box-sizing: border-box;
     font-family: 'Poppins', sans-serif
 }

 body {
     background: #ecf0f3
 }

 .wrapper {
     max-width: 350px;
     min-height: 500px;
     margin: 80px auto;
     padding: 40px 30px 30px 30px;
     background-color: #ecf0f3;
     border-radius: 15px;
     box-shadow: 13px 13px 20px #cbced1, -13px -13px 20px #fff
 }

 .logo {
     width: 80px;
     margin: auto
 }

 .logo img {
     width: 100%;
     height: 80px;
     object-fit: cover;
     border-radius: 50%;
     box-shadow: 0px 0px 3px #5f5f5f, 0px 0px 0px 5px #ecf0f3, 8px 8px 15px #a7aaa7, -8px -8px 15px #fff
 }

 .wrapper .name {
     font-weight: 600;
     font-size: 1.4rem;
     letter-spacing: 1.3px;
     padding-left: 10px;
     color: #555
 }

 .wrapper .form-field input {
     width: 100%;
     display: block;
     border: none;
     outline: none;
     background: none;
     font-size: 1.2rem;
     color: #666;
     padding: 10px 15px 10px 10px
 }

 .wrapper .form-field {
     padding-left: 10px;
     margin-bottom: 20px;
     border-radius: 20px;
     box-shadow: inset 8px 8px 8px #cbced1, inset -8px -8px 8px #fff
 }

 .wrapper .form-field .fas {
     color: #555
 }

 .wrapper .btn {
     box-shadow: none;
     width: 100%;
     height: 40px;
     background-color: #03A9F4;
     color: #fff;
     border-radius: 25px;
     box-shadow: 3px 3px 3px #b1b1b1, -3px -3px 3px #fff;
     letter-spacing: 1.3px
 }

 .wrapper .btn:hover {
     background-color: #039BE5
 }

 .wrapper a {
     text-decoration: none;
     font-size: 0.8rem;
     color: #03A9F4
 }

 .wrapper a:hover {
     color: #039BE5
 }

 @media(max-width: 380px) {
     .wrapper {
         margin: 30px 20px;
         padding: 40px 15px 15px 15px
     }
 }
	</style>
</head>
<body>

<div class="wrapper">
    <div class="logo"> <img src="images/l2.png" alt=""> </div>
    <div class="text-center mt-4 name"> Office Track </div>
    <form class="p-3 mt-3" method="post">
        <div class="form-field d-flex align-items-center"> <span class="far fa-user"></span> 

        	<input type="text" id="userName" name="login_email" placeholder="Email / Phone"> </div>
        <div class="form-field d-flex align-items-center"> <span class="fas fa-key"></span> 

        	<input type="password" name="login_password" id="myInput" id="pwd" placeholder="Password"> 



        </div>

<div class="form-group">
                             <label class="check-text">Show Password 
      <input onclick="myFunction()" type='checkbox'/><span class="glyphicon glyphicon-eye-open checked"></span><span class="glyphicon glyphicon-eye-close unchecked"></span>
    </label><br></div>

         <button class="btn mt-3" name="login">Login</button>
    </form>
    <div class="text-center fs-6"> <a href="#">Forget password?</a>  </div>
</div>
</body>

</html>
<?php
include 'dbconfig/db.php';
if(isset($_POST['login'])){
    $email = $_POST['login_email'];
    $password=$_POST['login_password'];
    

    $email = mysqli_escape_string($conn,$email);
    $password = mysqli_escape_string($conn,$password);

    $pass1=sha1($password);
    $pass2=md5($pass1);



    
    
 
     
    
    $select_query = mysqli_query($conn,"SELECT * FROM users WHERE email ='$email' OR tel='$email'");

    $count = mysqli_num_rows($select_query);

    if($count <= 0){
     echo "<script>alert('Email or password doesnot exist')</script>";
    }else{
        while($row = mysqli_fetch_array($select_query)){
            $fname = $row['fname'];
            $lname = $row['oname'];
            $email = $row['email'];
            $user_pass = $row['password'];
            $user_id = $row['id'];
            $role = $row['role'];
            $campid = $row['campid'];
            $profilepic= $row['image'];
           
            // $district = $row['district'];
            // $parish = $row['parish'];
            // $village = $row['village'];


            $hash = password_verify($pass2,$user_pass);


 
        }

        
         if($email == $email && $pass2 == $user_pass){



            $_SESSION['gen256']['fname']=$fname;
            $_SESSION['gen256']['campid']=$campid;
            $_SESSION['gen256']['lname']=$lname;
            $_SESSION['gen256']['email']=$email;
            $_SESSION['gen256']['role']=$role;
            $_SESSION['gen256']['id']=$user_id;
            $_SESSION['gen256']['profilepic']=$profilepic;

            require 'geo.php';






               $sql2 = "INSERT INTO userlogs(ipaddress,country,city,userid) VAlUES('$ip','$ipc','$ipcity','$user_id')";

             mysqli_query($conn,$sql2);




            echo"<script>
            window.open('index.php','_self');
            </script>"; 

    
          


       
        }
       



        else{
            echo "<script>alert('password Does not exist')</script>";
            
        }
    }
  
}







?>

LittleDemon - FACEBOOK
[ KELUAR ]