Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
inc	[ DIR ]	drwxr-sr-x	2008-01-09 07:51
.htaccess	394 B	-rw-r--r--	2017-10-25 14:17
.htpasswd	41 B	-rw-r--r--	2008-01-16 06:26
ADMarkComplete.php4	551 B	-rw-r--r--	2008-01-09 09:25
ADaddDone.php4	3.92 KB	-rw-r--r--	2008-01-09 09:20
ADdeleteDone.php4	3.65 KB	-rw-r--r--	2008-01-09 09:20
ADdisplayContacts.php4	23.05 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayContactsTable.php4	2.75 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayDone.php4	2.27 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayHelp.php4	1.31 KB	-rw-r--r--	2008-01-09 09:16
ADdisplayMemberFirm.php4	45.72 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayOfficeContactsTable.php4	3.47 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayOffices.php4	25.54 KB	-rw-r--r--	2008-01-16 08:04
ADdisplayTest.php4	1.21 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayrecords.php4	3.28 KB	-rw-r--r--	2008-01-09 09:25
ADdisplaytblMemberFirmOffices.php4	3.62 KB	-rw-r--r--	2008-01-09 09:25
ADdisplaytblMemberFirms.php4	3.79 KB	-rw-r--r--	2008-01-09 09:25
ADeditDone.php4	3.75 KB	-rw-r--r--	2008-01-09 09:20
ADfixDisplayTable.php4	15.31 KB	-rw-r--r--	2008-01-09 09:25
ShadeTable.js	535 B	-rw-r--r--	2008-01-09 09:16
accept.jpg	638 B	-rw-r--r--	2008-01-09 09:16
addAdvisory-listing.php4	4.08 KB	-rw-r--r--	2008-01-09 09:20
addLinks.php4	4.09 KB	-rw-r--r--	2008-01-09 09:20
addNLCC.php4	9.48 KB	-rw-r--r--	2008-01-09 09:20
addPress.php4	3.53 KB	-rw-r--r--	2008-01-09 09:20
admin_b.php	557 B	-rw-r--r--	2009-05-15 13:23
admin_b.phtml	557 B	-rw-r--r--	2008-01-09 09:16
annualdec.php4	966 B	-rw-r--r--	2008-01-09 09:16
changedivision.php4	2.65 KB	-rw-r--r--	2008-01-09 09:16
db_import.php	91 B	-rw-r--r--	2009-05-15 13:23
db_import.phtml	91 B	-rw-r--r--	2008-01-09 09:16
decline.jpg	723 B	-rw-r--r--	2008-01-09 09:16
deleteAdvisory-listing.php4	4.23 KB	-rw-r--r--	2008-01-09 09:20
deleteLinks.php4	4.21 KB	-rw-r--r--	2008-01-09 09:20
documents.php	1.11 KB	-rw-r--r--	2009-05-15 13:23
documents.phtml	1.11 KB	-rw-r--r--	2008-01-09 09:20
editAdvisory-listing.php4	4.89 KB	-rw-r--r--	2008-01-09 09:20
editLinks.php4	4.71 KB	-rw-r--r--	2008-01-09 09:20
graph.php	1.83 KB	-rw-r--r--	2009-05-15 13:23
graph.phtml	1.83 KB	-rw-r--r--	2008-01-09 09:20
ht.acl	167 B	-rw-r--r--	2008-01-09 09:16
index.php4	4.78 KB	-rw-r--r--	2010-01-19 13:04
linkscript	31 B	-rw-r--r--	2008-01-09 09:16
manageAdvisory-listing.php4	2.78 KB	-rw-r--r--	2008-01-09 09:20
manageAdvisory.php4	1.21 KB	-rw-r--r--	2008-01-09 09:16
manageLinks.php4	1.17 KB	-rw-r--r--	2008-01-09 09:16
manageLinksListing.php4	2.62 KB	-rw-r--r--	2008-01-09 09:20
membersearch.php	15.46 KB	-rw-r--r--	2009-05-15 13:23
membersearch.phtml	15.45 KB	-rw-r--r--	2009-03-02 09:59
next.jpg	491 B	-rw-r--r--	2008-01-09 09:16
notice.phtml	5.33 KB	-rw-r--r--	2008-01-09 09:20
null.php	1.39 KB	-rw-r--r--	2009-05-15 13:23
null.phtml	1.39 KB	-rw-r--r--	2008-01-09 09:20
previous.jpg	562 B	-rw-r--r--	2008-01-09 09:16
register.php	4.75 KB	-rw-r--r--	2009-05-25 13:52
register.phtml	4.75 KB	-rw-r--r--	2009-03-02 09:59
resetpw.php	2.31 KB	-rw-r--r--	2009-05-15 13:23
resetpw.phtml	2.3 KB	-rw-r--r--	2009-03-02 09:59
serverstats.php	59 B	-rw-r--r--	2009-05-15 13:23
serverstats.phtml	59 B	-rw-r--r--	2008-01-09 09:16
siteinfo.php	1.88 KB	-rw-r--r--	2009-05-15 13:23
siteinfo.phtml	1.88 KB	-rw-r--r--	2008-01-09 09:20
top20users.php	1.42 KB	-rw-r--r--	2009-05-15 13:23
top20users.phtml	1.42 KB	-rw-r--r--	2008-01-09 09:20
unregister.php	960 B	-rw-r--r--	2009-05-25 13:53
unregister.phtml	955 B	-rw-r--r--	2009-03-02 09:59
upload.htm	668 B	-rw-r--r--	2008-01-09 09:16
upload.php4	780 B	-rw-r--r--	2008-01-09 09:16
upload2.php4	583 B	-rw-r--r--	2008-01-09 09:16
username.php	2.06 KB	-rw-r--r--	2009-05-15 13:23
username.phtml	2.06 KB	-rw-r--r--	2009-03-02 09:59

Rename

<html>
<head>
<title>CESA Site Admin</title>
</head>
<body>
<h3>CESA site Administration</h3>
<?php
if ($id) {
	include('../inc/conf.inc');
	include('../inc/db.inc');
	
	$sql = "SELECT id FROM user_login WHERE contact_id = $id";
	//echo $sql;
	$result = mysql_query($sql);
	$result_rows = mysql_num_rows($result);
	if ($result_rows > 0){
		echo "This user is currently registered";
	} else {
	
	switch ($action) {
		case 1 :
			if (strlen($username) < 5 OR eregi(" ",$username))
			{
				echo "<br><h4>Error:</h4>";
				echo "<p>The username must be at least 5 characters long or you used spaces. Please go <a href=\"";
				echo $PHP_SELF;
				echo "\">back</a> and choose another username.</p><br>";
				break;
			}
			//session_register("username");
			
			$query="SELECT id FROM user_login WHERE username = '$username'";
			$result = mysql_query($query) or die('Unable to query database');
			if (mysql_num_rows($result) > 0)
			{
				echo "<br><h4>Error:</h4>";
				echo "<p>The username has already been taken. Please go ";
				echo "back and choose another username.</p><br>";
				break;
			}
			else
			{
				$sql = "SELECT PreferredEmail, ContactSurname, ContactInitials, ContactFirstName, ContactDesignation AS email FROM Contacts WHERE ContactsID = $id";
				//echo $sql;
				$result = mysql_query($sql);
				$row=mysql_fetch_array($result);
				$email = $row["PreferredEmail"];
				$sn=$row["ContactSurname"];
				$ini=$row["ContactInitials"];
				$fn=$row["ContactFirstName"];
				$dg=$row["ContactDesignation"];
				$str = md5($email + time());
				$pass = substr($str,0,7);
				$lastlogin=gmdate("Y-m-d H:i:s",time()+7200);
				$lastupdate=gmdate("Y-m-d H:i:s",time()+7200);
				$logincount=0;
				
				$str = substr(md5($email + time()),0,8);
					
				$salt = substr(ereg_replace("[^A-Za-z0-9]", "", crypt(time()+2700)) .
	                         	ereg_replace("[^A-Za-z0-9]", "", crypt(time())) .
	                         	ereg_replace("[^A-Za-z0-9]", "", crypt(time())),
	                     		0, 20);
	                     	
	                     	$pass = crypt($str, $salt);
				
				$query2 = "INSERT INTO user_login (contact_id, username, password,salt, accesslevel, lastlogin, lastupdate, logincount)
				VALUES ($id, '$username', '$pass', '$salt', 1, '$lastlogin', '$lastupdate', $logincount)";
				$result = mysql_query($query2) or die('Unable to query database');
				$query3 = "SELECT id FROM user_login WHERE contact_id = $id AND username='$username'";
				$result = mysql_query($query3) or die('Unable to query database');
                $rs = mysql_fetch_array($result);
				$theid = $rs[0];
				if (mysql_num_rows($result) != 1) {
					echo "Something crapped out";
				}
				else {
					$query4 = "INSERT INTO prefs (userid, calendar, docs, work, press) VALUES ($theid, 'y', 'n', -1,-1)";
					$result = mysql_query($query4) or die('Unable to query database');
					$subject="Account Activation: $dg $fn $ini $sn ";
					$msg="This email is to confirm the activation of the CESA member website subscription for $dg $fn $ini $sn .\nThis process was activated by an authorised CESA staff member.\nIf you have any questions, please contact CESA at +27 (011) 463 2022.\n\nYour username is ".$username.".\n
					Your password: ".$str."\n\nTo visit the site, please go to http://www.cesa.co.za/members in your browser and login using the username you created and the password from this email\n\nThank you\n\nMembership Services\nCESA";
					//echo $msg;
                                        //mail($email,$subject,$msg,"From: \"CESA Member Services\"<memberservices@cesa.co.za>");
                                        echo $subject;
                                        echo $msg;
                                        echo "<p><b>Please note the member has not been mailed.</b>";
					//echo "The user has been registered and emailed his/her username and password";
					echo "<p>Back to <a href=\"/members/saaceadmin/\">saaceadmin</a></p>";
				}
			}
			break;
		default :
	?>
	<table width="100%" cellpadding="0" cellspacing="10" border="0">
		<tr><td>
		<h4>Select a username:</h4>
		<p class="hint">
		Please type a username into the the field below. Some rules/tips for usernames:
		<ul class="hint">
		<li>The username must be <b class="hint">at least 5 characters long</b>
		<li>No spaces are allowed, i.e no sentences
		<li>Choose one only you would know
		</ul>
		</p>
		<p align="center">
		<form method="post" action="<?php echo $PHPSELF; ?>">
		<input type="text" name="username">
		<input type="hidden" name="action" value="1">
		<input type="hidden" name="id" value="<?php echo $id; ?>">
		<input type="submit" value="submit">
		</form>
		</p>
		</td></tr>
	</table>
	<?php
			break;
	} //end switch
	} //end if
} elseif (!isset($id)) {
	echo "<b>ERROR</b> - No record specified.";
}
?>
</body>
</html>