ucast.upm.edu.my ~ Shell I

Editing file /var/www/password.php (0775)

<?php

///////////////////////////////////////////////////////////////////////////////////////
// PHPmotion                                                http://www.phpmotion.com //
///////////////////////////////////////////////////////////////////////////////////////
// License: You are not to sell or distribute this software without permission       //
// Main Author: Brian Shawa -  bshawa@gmail.com                                      //
// Help and support please visit http://www.phpmotion.com                            //
// Copyright reserved                                                                //
///////////////////////////////////////////////////////////////////////////////////////

include_once ("classes/config.php");

include_once ('classes/login_check.php');
include_once ('classes/menu.php');
include_once ('classes/sessions.php');
include_once ("classes/private_msg.php");

//inc_ load picture loading include
include_once ("inc_mypicture.php");

/********************start *************************/
//get user details
//////////////////

$sql = "SELECT * FROM member_profile WHERE user_id = $user_id";// AND random_code = '$user_random_code'";

//echo $sql;
$result1 = @mysql_query($sql);
$result = @mysql_fetch_array($result1);

//echo $sql;
$email_address = $result["email_address"];
$password = $result["password"];

///////////////////
//disply clean page
///////////////////

if ($_POST["submitted"] !== "yes") {
    $template = "templates/main_1.htm";
    $inner_template1 = "templates/inner_myaccount_update_password.htm";//middle of page
    $TBS = new clsTinyButStrong;
    $TBS->NoErr = true;// no more error message displayed.
    $TBS->LoadTemplate("$template");
    $TBS->Show();

@mysql_close();
    die();
}

if ($_POST["submitted"] == "yes") {

if ($_POST["email_address"] == "") {
        $email_address = mysql_real_escape_string($email_address);
    }
    else {
        $email_address = mysql_real_escape_string($_POST["email_address"]);
    }

if ($_POST["password"] == "") {
        $password = mysql_real_escape_string($password);
    }
    else {
        $password = mysql_real_escape_string($_POST["password"]);
        $password = md5($password);
    }

//////////////////////
    //checking valid email
    //displaying error page
    //////////////////////
    if (!eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$",
        $email_address)) {
        $error_message = $config["invalid_email_format"];
        $message_type = $config["notification_error"];
        $blk_notification = 1;//html table - error block
        $template = "templates/main_1.htm";
        $inner_template1 = "templates/inner_myaccount_update_password.htm";//middle of page
        $TBS = new clsTinyButStrong;
        $TBS->NoErr = true;// no more error message displayed.
        $TBS->LoadTemplate("$template");
        $TBS->Show();

@mysql_close();
        die();
    }

/////////////////////////
    //checking valid password
    //displaying error page
    /////////////////////////
    if (!eregi("^[ _a-z0-9-]*$", $password)) {
        $error_message = $config["invalid_email_text"];
        $message_type = $config["notification_error"];
        $blk_notification = 1;//html table - error block
        $template = "templates/main_2.htm";
        $inner_template1 = "templates/inner_myaccount_update_password.htm";//middle of page
        $TBS = new clsTinyButStrong;
        $TBS->NoErr = true;// no more error message displayed.
        $TBS->LoadTemplate("$template");
        $TBS->Render = TBS_OUTPUT;
        $TBS->Show();

@mysql_close();
        die();
    }

/////////////////////////////////////////
    //If all checks out well, update database
    /////////////////////////////////////////

$sql = "UPDATE member_profile SET password ='$password', email_address ='$email_address' WHERE user_id = $user_id";// AND random_code = '$user_random_code'";

@mysql_query($sql);

//display updated page profile
    ////////////////////////////////

//get user details again
    ////////////////////////

$sql = "SELECT * FROM member_profile WHERE user_id = $user_id";// AND random_code = '$user_random_code'";

//echo $sql;
    $result1 = @mysql_query($sql);
    $result = @mysql_fetch_array($result1);

//echo $sql;
    $email_address = processtext_back($result["email_address"]);
    $error_message = $config["request_completed"];
    $message_type = $config["notification_success"];
    $blk_notification = 1;//html table - error block
    $template = "templates/main_1.htm";
    $inner_template1 = "templates/inner_myaccount_update_password.htm";//middle of page
    $TBS = new clsTinyButStrong;
    $TBS->NoErr = true;// no more error message displayed.
    $TBS->LoadTemplate("$template");
    $TBS->Render = TBS_OUTPUT;
    $TBS->Show();

@mysql_close();
    die();
}