HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/public_html/archive/demo/admin/config.php
<?php
session_start();
include("../_functions.php");
dbconnect();
if (!is_logged()) auto_login();

echo "<html>\n";
echo "<head>\n";
echo "<title>".COMPANY_NAME." : General Site Configuration</title>\n";
echo "</head>\n";
echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../default.css\">\n";
echo "<body style=\"margin:15px;\">\n";

if (!admin_panel($_SESSION["auth_user"])) {
	echo "<br><br><br><br>".error("You must be logged in to access the administration panel!");
} else {
	echo "<P><img src=\"/gui/icons/cog.gif\" align=\"left\">\n";
	echo "<div class=\"headline\">General Site Configuration</div>\n";
	echo "<P>This panel allows you to manage all of the global variables that configure your intranet.\n";
	
	if (isset($_POST["submit"])) {
		$uctr = 0;
		$sctr = 0;
		while (list($key, $value) = each($_POST)) {
			if ($key != "submit") {
				$uctr++;
				if (quickUPDATE("UPDATE tbl_variables SET var_value='".$value."' WHERE var_name='".$key."'") !== FALSE) $sctr++;
			}
		}
		if ($uctr - $sctr == 0) {
			$check = update_constants();
			echo "<P>".notice("All variables have successfully been updated.");
		}
		else echo "<P>".error("Only ".$sctr." of ".$uctr." variables were updated successfully.");
	}

	$sql = "SELECT * FROM tbl_variables";
	$result = mysql_query($sql);
	for ($i=0; $i < mysql_num_rows($result); $i++) {
		$row = mysql_fetch_array($result);
		$$row["var_name"] = $row["var_value"];
		
	}
	
	echo "<form action=\"config.php\" method=\"post\">\n";
	echo "<br><br><br><table class=\"textdn\" border=0 cellspacing=1 cellpadding=3 width=100% bgcolor=\"#".COLOR_TBAR."\">\n";
	echo "<tr class=\"header\"><td colspan=2><span style=\"font-size:14px;\">General Intranet Configuration</span></td></tr>\n";	
	echo "<tr bgcolor=\"#FFFFFF\"><td><b>Formal Company Name</b><br><span style=\"font-size:9px;\">Example: \"Acme Anvils Inc.\"</span></td><td><input type=\"text\" name=\"company_name\" value=\"".$company_name."\" size=65 maxlength=255></td></tr>\n";
	echo "<tr bgcolor=\"#EFEFEF\"><td><b>Informal Company Name</b><br><span style=\"font-size:9px;\">Example: \"Acme\"</span></td><td><input type=\"text\" name=\"cmp_name_inf\" value=\"".$cmp_name_inf."\" size=65 maxlength=255></td></tr>\n";
	echo "<tr bgcolor=\"#FFFFFF\"><td><b>Intranet Title</b><br><span style=\"font-size:9px;\">Displays at the top of every page.</span></td><td><input type=\"text\" name=\"site_name\" value=\"".$site_name."\" size=65 maxlength=255></td></tr>\n";
	echo "<tr bgcolor=\"#EFEFEF\"><td><b>Company Logo Image File</b><br><span style=\"font-size:9px;\">Must be placed in \"/gui\" folder. If set, logo replaces Intranet Title.</span></td><td><input type=\"text\" name=\"logo_file\" value=\"".$logo_file."\" size=30 maxlength=255></td></tr>\n";
	echo "<tr bgcolor=\"#FFFFFF\"><td><b>Company Zip Code</b><br><span style=\"font-size:9px;\">Sets the default city in weather module.</span></td><td><input type=\"text\" name=\"weather_zip\" value=\"".$weather_zip."\" size=10 maxlength=255></td></tr>\n";
	echo "<tr bgcolor=\"#EFEFEF\"><td><b>Intranet Domain</b><br><span style=\"font-size:9px;\">Example: myintranet.com</span></td><td><input type=\"text\" name=\"domain\" value=\"".$domain."\" size=65 maxlength=255></td></tr>\n";
	echo "<tr bgcolor=\"#FFFFFF\"><td><b>Notices Per Page</b><br><span style=\"font-size:9px;\">Sets number of notices to display on each page of a noticeboard.</span></td><td><input type=\"text\" name=\"pag_length\" value=\"".$pag_length."\" size=10 maxlength=255></td></tr>\n";
	echo "<tr bgcolor=\"#EFEFEF\"><td><b>Registration Method</b><br><span style=\"font-size:9px;\">Sets how new users are added to intranet.</span></td><td><input type=\"radio\" name=\"reg_method\" value=\"open\"".($reg_method=="open"?" CHECKED":"")."> Open &nbsp; &nbsp; <input type=\"radio\" name=\"reg_method\" value=\"open/admin\"".($reg_method=="open/admin"?" CHECKED":"")."> Open/Admin  &nbsp; &nbsp; <input type=\"radio\" name=\"reg_method\" value=\"admin\"".($reg_method=="admin"?" CHECKED":"")."> Admin</td></tr>\n";
	echo "<tr bgcolor=\"#FFFFFF\"><td><b>Login Method</b><br><span style=\"font-size:9px;\">Only choose LDAP if you know what you're doing.</span></td><td><input type=\"radio\" name=\"login_method\" value=\"local\"".($login_method=="local"?" CHECKED":"")."> Local Database &nbsp; &nbsp; <input type=\"radio\" name=\"login_method\" value=\"ldap\"".($login_method=="ldap"?" CHECKED":"")."> LDAP</td></tr>\n";
	echo "<tr bgcolor=\"#EFEFEF\"><td><b>Allow Photo Uploads?</b><br><span style=\"font-size:9px;\">Can users upload their own photos to their employee profiles?</span></td><td><SELECT name=\"photo_upload\"><option value=\"0\"".($photo_upload=="0"?" SELECTED":"").">No</option><option value=\"1\"".($photo_upload=="1"?" SELECTED":"").">Yes</option></SELECT></td></tr>\n";
	echo "<tr bgcolor=\"#FFFFFF\"><td><b>Time Offset</b><br><span style=\"font-size:9px;\">Server time is now ".date("l, F j, Y h:i a",time())."</span></td><td><SELECT name=\"time_adjust\">";
	for ($i=-12; $i < 12; $i++) {
		$val = ($i<=0?"":"+").$i;
		echo "<option value=\"".$val."\"".($time_adjust==$i?" SELECTED":"").">".$val."</option>\n";
	}
	echo "</SELECT></td></tr>\n";
	echo "</table>\n";
	
	echo "<br><br><br><table class=\"textdn\" border=0 cellspacing=1 cellpadding=3 width=100% bgcolor=\"#".COLOR_TBAR."\">\n";
	echo "<tr class=\"header\"><td colspan=2><span style=\"font-size:14px;\">Database Variables</span></td></tr>\n";
	echo "<tr bgcolor=\"#FFFFFF\"><td><b>MySQL Server Name</b></td><td><input type=\"text\" name=\"mysql_server\" value=\"".$mysql_server."\" size=50 maxlength=255></td></tr>\n";
	echo "<tr bgcolor=\"#EFEFEF\"><td><b>MySQL Username</b></td><td><input type=\"text\" name=\"mysql_user\" value=\"".$mysql_user."\" size=50 maxlength=255></td></tr>\n";
	echo "<tr bgcolor=\"#FFFFFF\"><td><b>MySQL Password</b></td><td><input type=\"password\" name=\"mysql_pass\" value=\"".$mysql_pass."\" size=50 maxlength=255></td></tr>\n";
	echo "<tr bgcolor=\"#EFEFEF\"><td><b>MySQL Database Name</b></td><td><input type=\"text\" name=\"mysql_dbname\" value=\"".$mysql_dbname."\" size=50 maxlength=255></td></tr>\n";
	echo "</table>\n";
	
	echo "<br><br><br><center><input type=\"submit\" value=\" Submit \" name=\"submit\"></center>\n";
	echo "</form>\n";

	echo "<br><br><br><br>\n";
	echo "<center>Powered by <a href=\"http://www.intrabreeze.com\">IntraBreeze</a> &copy; 2005 IntraBreeze, LLC</center>\n";
}

echo "</body>\n</html>\n";
?>