Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
inc	[ DIR ]	drwxr-sr-x	2008-01-09 07:51
.htaccess	394 B	-rw-r--r--	2017-10-25 14:17
.htpasswd	41 B	-rw-r--r--	2008-01-16 06:26
ADMarkComplete.php4	551 B	-rw-r--r--	2008-01-09 09:25
ADaddDone.php4	3.92 KB	-rw-r--r--	2008-01-09 09:20
ADdeleteDone.php4	3.65 KB	-rw-r--r--	2008-01-09 09:20
ADdisplayContacts.php4	23.05 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayContactsTable.php4	2.75 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayDone.php4	2.27 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayHelp.php4	1.31 KB	-rw-r--r--	2008-01-09 09:16
ADdisplayMemberFirm.php4	45.72 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayOfficeContactsTable.php4	3.47 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayOffices.php4	25.54 KB	-rw-r--r--	2008-01-16 08:04
ADdisplayTest.php4	1.21 KB	-rw-r--r--	2008-01-09 09:25
ADdisplayrecords.php4	3.28 KB	-rw-r--r--	2008-01-09 09:25
ADdisplaytblMemberFirmOffices.php4	3.62 KB	-rw-r--r--	2008-01-09 09:25
ADdisplaytblMemberFirms.php4	3.79 KB	-rw-r--r--	2008-01-09 09:25
ADeditDone.php4	3.75 KB	-rw-r--r--	2008-01-09 09:20
ADfixDisplayTable.php4	15.31 KB	-rw-r--r--	2008-01-09 09:25
ShadeTable.js	535 B	-rw-r--r--	2008-01-09 09:16
accept.jpg	638 B	-rw-r--r--	2008-01-09 09:16
addAdvisory-listing.php4	4.08 KB	-rw-r--r--	2008-01-09 09:20
addLinks.php4	4.09 KB	-rw-r--r--	2008-01-09 09:20
addNLCC.php4	9.48 KB	-rw-r--r--	2008-01-09 09:20
addPress.php4	3.53 KB	-rw-r--r--	2008-01-09 09:20
admin_b.php	557 B	-rw-r--r--	2009-05-15 13:23
admin_b.phtml	557 B	-rw-r--r--	2008-01-09 09:16
annualdec.php4	966 B	-rw-r--r--	2008-01-09 09:16
changedivision.php4	2.65 KB	-rw-r--r--	2008-01-09 09:16
db_import.php	91 B	-rw-r--r--	2009-05-15 13:23
db_import.phtml	91 B	-rw-r--r--	2008-01-09 09:16
decline.jpg	723 B	-rw-r--r--	2008-01-09 09:16
deleteAdvisory-listing.php4	4.23 KB	-rw-r--r--	2008-01-09 09:20
deleteLinks.php4	4.21 KB	-rw-r--r--	2008-01-09 09:20
documents.php	1.11 KB	-rw-r--r--	2009-05-15 13:23
documents.phtml	1.11 KB	-rw-r--r--	2008-01-09 09:20
editAdvisory-listing.php4	4.89 KB	-rw-r--r--	2008-01-09 09:20
editLinks.php4	4.71 KB	-rw-r--r--	2008-01-09 09:20
graph.php	1.83 KB	-rw-r--r--	2009-05-15 13:23
graph.phtml	1.83 KB	-rw-r--r--	2008-01-09 09:20
ht.acl	167 B	-rw-r--r--	2008-01-09 09:16
index.php4	4.78 KB	-rw-r--r--	2010-01-19 13:04
linkscript	31 B	-rw-r--r--	2008-01-09 09:16
manageAdvisory-listing.php4	2.78 KB	-rw-r--r--	2008-01-09 09:20
manageAdvisory.php4	1.21 KB	-rw-r--r--	2008-01-09 09:16
manageLinks.php4	1.17 KB	-rw-r--r--	2008-01-09 09:16
manageLinksListing.php4	2.62 KB	-rw-r--r--	2008-01-09 09:20
membersearch.php	15.46 KB	-rw-r--r--	2009-05-15 13:23
membersearch.phtml	15.45 KB	-rw-r--r--	2009-03-02 09:59
next.jpg	491 B	-rw-r--r--	2008-01-09 09:16
notice.phtml	5.33 KB	-rw-r--r--	2008-01-09 09:20
null.php	1.39 KB	-rw-r--r--	2009-05-15 13:23
null.phtml	1.39 KB	-rw-r--r--	2008-01-09 09:20
previous.jpg	562 B	-rw-r--r--	2008-01-09 09:16
register.php	4.75 KB	-rw-r--r--	2009-05-25 13:52
register.phtml	4.75 KB	-rw-r--r--	2009-03-02 09:59
resetpw.php	2.31 KB	-rw-r--r--	2009-05-15 13:23
resetpw.phtml	2.3 KB	-rw-r--r--	2009-03-02 09:59
serverstats.php	59 B	-rw-r--r--	2009-05-15 13:23
serverstats.phtml	59 B	-rw-r--r--	2008-01-09 09:16
siteinfo.php	1.88 KB	-rw-r--r--	2009-05-15 13:23
siteinfo.phtml	1.88 KB	-rw-r--r--	2008-01-09 09:20
top20users.php	1.42 KB	-rw-r--r--	2009-05-15 13:23
top20users.phtml	1.42 KB	-rw-r--r--	2008-01-09 09:20
unregister.php	960 B	-rw-r--r--	2009-05-25 13:53
unregister.phtml	955 B	-rw-r--r--	2009-03-02 09:59
upload.htm	668 B	-rw-r--r--	2008-01-09 09:16
upload.php4	780 B	-rw-r--r--	2008-01-09 09:16
upload2.php4	583 B	-rw-r--r--	2008-01-09 09:16
username.php	2.06 KB	-rw-r--r--	2009-05-15 13:23
username.phtml	2.06 KB	-rw-r--r--	2009-03-02 09:59

Rename

<html>
<head>
<title>CESA Site Admin</title>
</head>
<body>
<h3>CESA site Administration</h3>
<?php
if ($id) {
	include('../inc/conf.inc');
	include('../inc/db.inc');
	
	$sql = "SELECT id FROM user_login WHERE contact_id = $id";
	//echo $sql;
	$result=mysql_query($sql);
	$result_rows=mysql_num_rows($result);
	if ($result_rows == 1) {	
	$sql = "SELECT PreferredEmail, ContactSurname, ContactInitials, ContactFirstName, ContactDesignation FROM Contacts WHERE ContactsID= $id";
	//echo $sql;
	$result = mysql_query($sql);
	$row=mysql_fetch_array($result);
	$email=$row["PreferredEmail"];
	$sn=$row["ContactSurname"];
	$ini=$row["ContactInitials"];
	$fn=$row["ContactFirstName"];
	$dg=$row["ContactDesignation"];
	$str = md5($email + time());
	$pass = substr($str,0,7);
	$lastlogin=gmdate("Y-m-d H:i:s",time()+7200);
	$lastupdate=gmdate("Y-m-d H:i:s",time()+7200);
	$logincount=0;
	
	$str = substr(md5($email + time()),0,8);
		
	$salt = substr(ereg_replace("[^A-Za-z0-9]", "", crypt(time()+2700)) .
         	ereg_replace("[^A-Za-z0-9]", "", crypt(time())) .
         	ereg_replace("[^A-Za-z0-9]", "", crypt(time())),
     		0, 20);
     	
     	$pass = crypt($str, $salt);
     	//echo $str." ".$pass." ".$salt;
     	$sql="UPDATE user_login SET password='$pass', salt='$salt' WHERE contact_id=$id";
     	//echo $sql;
     	$result = mysql_query($sql);
     	$subject="New Password for $dg $fn $ini $sn (cesa.co.za)";
	$msg="The password for $dg $fn $ini $sn has been changed by CESA.\nIf you have any questions, please contact CESA at +27 (011) 463 2022.\n\nYour username stays as it was.\n
	Your password: ".$str."\n\nTo visit the site, please go to http://www.cesa.co.za/members in your browser and login using the your username and the password from this email\n\nThank you\n\nMembership Services\nCESA";
	mail($email,$subject,$msg,"From: \"CESA Member Services\" <members@cesa.co.za>\nReply-to: members@cesa.co.za\n");
	echo "The member's password has been changed and mailed to them.<br>email address: <b>$email</b> <br> password: <b>$str</b> <br>";
	echo "Go back to <a href=\"/saaceadmin/\">saaceadmin</a>";
	
	} elseif ($result_rows > 1) {
		echo "More than one row returned";	
	} else {
		echo "This user is not currently registered";
	}
} else {
	echo "<b>Error</b>: No record specified. Please gpo back and choose a record.";
}
?>
</body>
</html>