| Attention: Uname: Php: Hdd: Cwd: | Mr.X WSO Webshell! - Personal WEB SHELL Mr.X BYPASS! V2.5 Telegram: @jackleet 5.3.29 Safe mode: OFF Datetime: 2026-04-09 00:24:27 1999.30 GB Free: 82.89 GB (4%) /home/httpd/html/stoptube.com/ drwxr-xr-x [ root ] [ home ] Text | Server IP: 127.0.0.54 Client IP: 216.73.216.53 |
| [ Files ] | [ Logout ] |
|---|
<?
session_start();
include('admin/db.php');
if(!$_SESSION[userid]) {
header("Location: /login.php");
exit();
}
if($_POST) {
$uniq = uniqid();
$newpassword = mysql_real_escape_string($_POST[newpassword]);
$age = mysql_real_escape_string(htmlentities($_POST[age]));
$gender = mysql_real_escape_string(htmlentities($_POST[gender]));
$description = mysql_real_escape_string(htmlentities($_POST[description]));
$location = mysql_real_escape_string(htmlentities($_POST[location]));
$email = mysql_real_escape_string(htmlentities($_POST[email]));
$custom = mysql_real_escape_string(serialize($_POST[custom]));
mysql_query("UPDATE users SET email = '$email', location = '$location', age = '$age', gender = '$gender', description = '$description', custom = '$custom' WHERE record_num = '$_SESSION[userid]'");
$message = "Your information has been updated.";
if($_POST[newpassword]) {
$newpass = mysql_real_escape_string(md5($_POST[newpassword]));
mysql_query("UPDATE users SET password = '$newpass' WHERE record_num = '$_SESSION[userid]'");
}
if($_FILES[file][tmp_name]) {
if(filesize($_FILES[file][tmp_name]) > 51200) {
$message = "Your avatar is too big. It can be a maximum of 50kb in GIF,JPG, or PNG format.";
}
else {
$ext = explode(".",strtolower($_FILES[file][name]));
$ext = array_reverse($ext);
if($ext[0] != 'jpg' && $ext[0] != 'jpeg' && $ext[0] != 'png' && $ext[0] != 'gif') {
$message = "You may only upload image files.";
}
else {
$filename = $uniq.'.'.$ext[0];
$target = $misc_path."/".$filename;
move_uploaded_file($_FILES[file][tmp_name],$target);
list($width, $height, $type, $attr) = getimagesize($target);
//if($width > $thumbwidth || $height > $thumbheight) {
// $message = "Your image may be a maximum of $thumbwidth"."x".$thumbheight;
// @unlink($target);
//}
//else {
mysql_query("UPDATE users SET avatar = '$filename' WHERE record_num = '$_SESSION[userid]'");
$message = "Your information has been updated.";
//}
}
}
}
}
$result = mysql_query("SELECT * FROM users WHERE record_num = '$_SESSION[userid]'");
$row = mysql_fetch_array($result);
$custom = unserialize($row[custom]);
$title = 'Edit Profile';
$headertitle = 'Edit Profile';
if($isMobile) {
include($basepath.'/templates/mobile.overall_header.php');
}
else {
include($basepath.'/templates/template.overall_header.php');
}
?>
<? if($message) { echo "<p>$message</p>"; } ?>
<form action="" method="post" enctype="multipart/form-data" name="form1" id="form1">
<table width="560" border="0" align="left">
<tr>
<td width="143">Change Password</td>
<td width="407"><input type="text" name="newpassword" id="textfield" value='' /></td>
</tr>
<tr>
<td width="143">Email Address</td>
<td width="407"><input type="text" name="email" id="textfield" value='<? echo $row[email]; ?>' /></td>
</tr>
<tr>
<td width="143">Location</td>
<td width="407"><input type="text" name="location" id="textfield" value='<? echo $row[location]; ?>' /></td>
</tr>
<tr>
<td>Age</td>
<td><select name="age" id="select" style='width: 50px;'>
<? for($i = 18; $i < 100; $i++) {
if($row[age] == $i) { $selected = 'selected'; } else { $selected = ''; }
echo "<option $selected value='$i'> $i </option>";
}
?>
</select>
</td>
</tr>
<tr>
<td>Gender</td>
<td><select name="gender" id="select2">
<option <? if($row[gender] == 'Male') { echo 'selected'; } ?> value='Male'>Male</option>
<option <? if($row[gender] == 'Female') { echo 'selected'; } ?> value='Female'>Female</option>
</select>
</td>
</tr>
<?
foreach($custom_user_fields as $k=>$v) {
?>
<tr>
<td><? echo $k; ?></td>
<td>
<? if(is_array($v)) { ?>
<select name="custom[<? echo $k; ?>]">
<? foreach($v as $i) {
if($custom[$k] == $i) { $selected = 'selected'; } else { $selected = ''; }
?>
<option <? echo $selected; ?>><? echo $i; ?></option>
<? } ?>
</select>
<? } else { ?>
<input type="text" name="custom[<? echo $k; ?>]" id="textfield" value='<? echo htmlentities($custom[$k]); ?>' />
<? } ?>
</td>
</tr>
<? } ?>
<tr>
<td valign="top">A Bit About Yourself...</td>
<td><textarea name="description" id="textarea" cols="45" rows="8"><? echo $row[description]; ?></textarea></td>
</tr>
<tr>
<td>Upload Avatar (<? echo $thumbwidth; ?>x<? echo $thumbheight; ?>, max 50kb)</td>
<td><input type="file" name="file" id="fileField" /></td>
</tr>
<? if($row[avatar] != '') { ?>
<tr>
<td>Current Avatar</td>
<td align='left'><img src='<? echo $misc_url; ?>/<? echo $row[avatar]; ?>' width=<? echo $thumbwidth; ?> height=<? echo $thumbheight; ?> /></td>
</tr>
<? } ?>
<tr>
<td colspan="2" align="center"><input type="submit" name="button" id="button" value="Save" /></td>
</tr>
</table>
</form>
<br class="clearfloat" />
<?
if($isMobile) {
include($basepath.'/templates/mobile.overall_footer.php');
}
else {
include($basepath.'/templates/template.overall_footer.php');
}
?>