<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">



<head>



	<title>Staff CP</title>



	<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />



	<meta name="keywords" content="" />	

	<meta name="description" content="" />

	<meta name="robots" content="" /><!-- change into index, follow -->

				

	<link rel="stylesheet" href="stylesheets/style.css" type="text/css" />

	

	<!--[if lte IE 6]>

		<script type="text/javascript" src="javascripts/pngfix.js"></script>

		<script type="text/javascript" src="javascripts/ie6.js"></script>

		<link rel="stylesheet" href="stylesheets/ie6.css" type="text/css" />

	<![endif]-->



</head>



<body>



<!--  / WRAPPER \ -->

<div id="wrapper">

	

    <!--  / MAIN CONTAINER \ -->

    <div id="mainCntr">



		<!--  / HEADER CONTAINER \ -->

		<div id="headerCntr">

		

			<h1><a href="#">Web Jet</a></h1>

			  

			<!-- / MENU CONTAINER \ -->

			<div id="menuCntr">

			

				<ul>

					<li><a href="index.php">Home</a></li>

					<li><a href="hub.php">DDoS Attack</a></li>

					<li><a href="mysettings.php">My Account</a></li>

					<li><a href="pinger.php">Pinger</a></li>

					<li><a href="logout.php">Logout</a></li>

				</ul>

				

			</div>

			<!-- \  MENU CONTAINER  /-->

			

		</div>

		<!--  \ HEADER CONTAINER / -->

			

		  <!--  / HAEDING BOX \ -->

		<div class="headingBox">

			<div class="heading">

			

			<h2>Staff CP</h2>

			

			</div>

        </div>

		<!--  \ HAEDING BOX / -->

			  

       

		

        <!--  / CONTENT CONTAINER \ -->

        <div id="contentCntr" class="background">

			<div class="center">

			<!--  / LEFT CONTAINER \ -->

			<div id="leftCntr">

				



                    

                    

					<!--  / OUR BLOG BOX \ -->

					<div class="ourbloginnerBox">

						<div class="top">

							<div class="bottom">

								

                    

                    

                    

               <?php 

include "dbc.php";

page_protect();

include "includes/functions.php";

getBooterTitle();

?>











<div id="right">

<div class="small-box"><h2>Welcome, <?php echo $username; ?>!</h2>

    <div class="small-box-content">

        <p>

        Profile ID: <font color="#a5a5a5"><?php echo $id; ?></font> <br />

        Rank: <font color="#a5a5a5"><?php echo $level; ?></font> <br />

        My IP: <font color="#a5a5a5"><?php echo $_SERVER["REMOTE_ADDR"]; ?></font> <br />

        My Attacks: <font color="#a5a5a5"><?php

    $query = mysql_query("SELECT * FROM `users` WHERE id='$id' ");

    while($row = mysql_fetch_array($query)){

    $attacks = $row['myAttacks'];

    echo $attacks;

    }

?></font>

        </p>



    </div></div>



        <div class="small-box"><h2>Members Statistics</h2>

    <div class="small-box-content">

        <p>





                    <table width="100%" border="0" align="center" cellpadding="1" cellspacing="1" class="forms">

                        <font size=1>

          <tr>

            <td><font color="#575757">Total Users</font></td>

            <td><?php echo $all; ?></td></tr></font>

          



          <tr>

            <td><font color="#575757">Active Users</font></td>

            <td><?php echo $active; ?></font></td>

          </tr>



          <tr>

            <td><font color="#575757">Pending Users</font></td>

            <td><?php echo $total_pending; ?></font></td>

          </tr>

          <tr>

            <td><font color="#575757">Total Attacks</font></td>

            <td><?php

                   $result = mysql_query("SELECT * FROM logs", $link);

                   $num_rows4 = mysql_num_rows($result);

                   echo "$num_rows4";

                ?></font></td>

          </tr>

                    </font>

                    </table>

        </p>





    </div></div>



    <div class="small-box"><h2>Shells Statistics</h2>

    <div class="small-box-content">

        <p>





                    <table width="100%" border="0" align="center" cellpadding="1" cellspacing="1" class="forms">

                        <font size="1">

                                      <tr>

            <td><font color="#575757">Shell Rotation</font></td>

            <?php

            if($shellRotation == 0) { ?>

            <td><font color="red">(Off)</font></td>

            <?php } else { ?>

            <td><font color="#00bc00">(On)</font></td>

            <?php

            }

            ?>

           

          </tr>

          

          <tr>

            <td><font color="#575757">Shells Online</font></td>

            <td><font color="#00bc00"><?php echo $shellsOnline; ?></font></td>

          </tr>



          <tr>

            <td><font color="#575757">GET Shells</font></td>

            <td><font color="#00bc00"><?php echo $num_rows; ?></font></td>

          </tr>



          <tr>

            <td><font color="#575757">POST Shells</font></td>

            <td><font color="#00bc00"><?php echo $num_rows2; ?></font></td>

          </tr>



          <tr>

            <td><font color="#575757">Slowloris Shells</font></td>

            <td><font color="#00bc00"><?php echo $num_rows3; ?></font></td>

          </tr>

                        </font>

                    </table>

        </p>





    </div></div>

</div>



      

                    

                    

                    

                    

                    



					

							</div>

						</div>	 

					</div>

					<!--  / OUR BLOG BOX \ -->

					

					<!--  / OUR BLOG BOX \ -->

					<div class="ourbloginnerBox">

						<div class="top">

							<div class="bottom">

									

							<h2>Chat Member</h2>

							

							<object width="250" height="425" id="obj_1298661493293"><param name="movie" value="http://PostBooterchat.chatango.com/group"/><param name="wmode" value="transparent"/><param name="AllowScriptAccess" VALUE="always"/><param name="AllowNetworking" VALUE="all"/><param name="AllowFullScreen" VALUE="true"/><param name="flashvars" value="cid=1298661493293&b=60&f=50&l=999999&p=10&q=999999&r=100&s=1"/><embed id="emb_1298661493293" src="http://PostBooterchat.chatango.com/group" width="250" height="425" wmode="transparent" allowScriptAccess="always" allowNetworking="all" type="application/x-shockwave-flash" allowFullScreen="true" flashvars="cid=1298661493293&b=60&f=50&l=999999&p=10&q=999999&r=100&s=1"></embed></object><br>

							

                            

							</div>

						</div>	 

					</div>	

                    <p>&nbsp;</p>

					<!--  / OUR BLOG BOX \ -->

				

			</div>

			<!--  \ LEFT CONTAINER / -->

			

			<!--  / RIGHT CONTAINER \ -->

			<div id="rightCntr">

				

				<!--  / ABOUT BOX \ -->

				<div class="aboutBox">

				<h3><span>Staff CP</span></h3>

                

</div>

					

				<p>

                

                

              

              

              

              

              

              

<?php 





if(!checkMod()) {

die("<div class=\"box\">

    <h2>Mod Panel &bull; Access Denied</h2>

<div class=\"box-content\">

<p>You are not an moderator.</p>

</div></div>");

exit();

}

?><head>

<script language="JavaScript" type="text/javascript" src="javascript/jquery-1.3.2.min.js"></script>

</head>







<div class="box">

    <h2>&nbsp;</h2>

    <h2>Mod Panel &bull; Statistics</h2>

    <p>&nbsp;</p>

<div class="box-content">

<p>

      <table width="100%" border="0" cellpadding="0" cellspacing="1" class="myaccount">

        <tr>

          <td><center>Total Members: <font color="white"><?php echo $all;?></font></td>

          <td><center>Active Members: <font color="white"><?php echo $active; ?></font></td>

          <td><center>Unapproved Users: <font color="white"><?php echo $total_pending; ?></font></td>

          </tr>

          

          <tr>



          <td><center>GET Shells: <font color="white"><?php echo $num_rows; ?></font></td>

          <td><center>POST Shells: <font color="white"><?php echo $num_rows2; ?></font></td>

          <td><center>Slowloris Shells: <font color="white"><?php echo $num_rows3; ?></font></td>

          </tr>

      </table>

      <p>

</div>

</div>





<div class="box">

<h2>&nbsp;</h2>

<h2>&nbsp;</h2>

<h2>Mod Panel &bull; Maintenance</h2>

<div class="box-content">

     <table width="100%" border="0" cellpadding="0" cellspacing="1" class="myaccount">

        <tr>

          <td><center><form name="frmcontadd" action="" method="post">Empty Logs:<input class="button" type="submit" name="EmptyLogs" value="Truncate Logs"></center></font></td>

          </tr>

    </table>





</div>

</div>



<div class="box">

<h2>&nbsp;</h2>

<h2>&nbsp;</h2>

<h2>Mod Panel &bull; Add News</h2>

<?php

// News



$title = $_POST['title'];

$body = $_POST['body'];

$date = date("m-d-Y, h:i:s a", time());

$author = $username;



if(isset($_POST['Submit2'])) {

if($title == "") { die("You must supply a title for your news post"); }

if($body == "") { die("You must supply a message body for your news post"); }

if($author == "") { die("Possible hack detected."); }

    	$query = "INSERT INTO news (title, message, date, author) VALUES ('$title', '$body', '$date', '$author')";

	$result = mysql_query($query);

}





?>

<div class="box-content">

<form name="frmcontadd" action="" method="post">

News Title : <input size="41" class="entryfield" name="title" type="text" id="title"></td>

<br><br>

<textarea cols="50" rows="3" name="body">

</textarea>

<br><br><input class="button" type="submit" name="Submit2" value="Post News">

</form>

</div>

</div>



<div class="box">

<h2>&nbsp;</h2>

<h2>&nbsp;</h2>

<h2>Mod Panel &bull; Search</h2>

<div class="box-content">



	  <?php 

	  if(!empty($msg)) {

	  echo $msg[0];

	  }

	  ?>



	  

      <table width="80%" border="0" align="center" cellpadding="5" cellspacing="5" >

        <tr>

          <td><form name="form1" method="get" action="staff.php">

              Search <input name="q" type="text" id="q" size="25">

                <br>

                <br>

                <input type="radio" name="qoption" value="pending">

                Members Awaiting Approval <br>

                <input type="radio" name="qoption" value="recent">

                Recent Members <br>

                <input type="radio" name="qoption" value="banned">

                Suspended Accounts

                <br>

                <br>

                <input name="doSearch" type="submit" id="doSearch" value="Search">

              </form></td>

        </tr>

      </table>

	

      <p>

        <?php if ($get['doSearch'] == 'Search') {

	  $cond = '';

	  if($get['qoption'] == 'pending') {

	  $cond = "where `approved`='0' order by date desc";

	  }

	  if($get['qoption'] == 'recent') {

	  $cond = "order by date desc";

	  }

	  if($get['qoption'] == 'banned') {

	  $cond = "where `banned`='1' order by date desc";

	  }

	  

	  if($get['q'] == '') { 

	  $sql = "select * from users $cond"; 

	  } 

	  else { 

	  $sql = "select * from users where `user_email` = '$_REQUEST[q]' or `user_name`='$_REQUEST[q]' ";

	  }



	  

	  $rs_total = mysql_query($sql) or die(mysql_error());

	  $total = mysql_num_rows($rs_total);

	  

	  if (!isset($_GET['page']) )

		{ $start=0; } else

		{ $start = ($_GET['page'] - 1) * $page_limit; }

	  

	  $rs_results = mysql_query($sql . " limit $start,$page_limit") or die(mysql_error());

	  $total_pages = ceil($total/$page_limit);

	  

	  ?>

	  

	  

      <p>Approve -&gt; A notification email will be sent to user notifying activation.<br>

        Ban -&gt; No notification email will be sent to the user. 

      <p><strong>*Note: </strong>Once the user is banned, he/she will never be 

        able to register new account with same email address. 

      <p align="right"> 

        <?php 

	  

	  // outputting the pages

		if ($total > $page_limit)

		{

		echo "<div><strong>Pages:</strong> ";

		$i = 0;

		while ($i < $page_limit)

		{

		

		

		$page_no = $i+1;

		$qstr = ereg_replace("&page=[0-9]+","",$_SERVER['QUERY_STRING']);

		echo "<a href=\"staff.php?$qstr&page=$page_no\">$page_no</a> ";

		$i++;

		}

		echo "</div>";

		}  ?>

		</p>

		<form name "searchform" action="staff.php" method="post">

        <table width="100%" border="0" align="center" cellpadding="2" cellspacing="0">

          <tr bgcolor="#ffffff"> 

            <td width="4%"><strong>ID</strong></td>

            <td> <strong>Date</strong></td>

            <td><div align="center"><strong>User Name</strong></div></td>

            <td width="24%"><strong>Email</strong></td>

            <td width="10%"><strong>Approval</strong></td>

            <td width="10%"> <strong>Banned</strong></td>

            <td width="25%">&nbsp;</td>

          </tr>

          <tr> 

            <td>&nbsp;</td>

            <td width="10%">&nbsp;</td>

            <td width="17%"><div align="center"></div></td>

            <td>&nbsp;</td>

            <td>&nbsp;</td>

            <td>&nbsp;</td>

            <td>&nbsp;</td>

          </tr>

          <?php while ($rrows = mysql_fetch_array($rs_results)) {?>

          <tr> 

            <td><input name="u[]" type="checkbox" value="<?php echo $rrows['id']; ?>" id="u[]"></td>

            <td><?php echo $rrows['date']; ?></td>

            <td> <div align="center"><?php echo $rrows['user_name'];?></div></td>

            <td><?php echo $rrows['user_email']; ?></td>

            <td> <span id="approve<?php echo $rrows['id']; ?>"> 

              <?php if(!$rrows['approved']) { echo "Pending"; } else {echo "Active"; }?>

              </span> </td>

            <td><span id="ban<?php echo $rrows['id']; ?>"> 

              <?php if(!$rrows['banned']) { echo "no"; } else {echo "yes"; }?>

              </span> </td>

            <td> <font size="2">

              <a href="javascript:void(0);" onclick='$.get("do.php",{ cmd: "ban", id: "<?php echo $rrows['id']; ?>" } ,function(data){ $("#ban<?php echo $rrows['id']; ?>").html(data); });'>Ban</a> 

              <a href="javascript:void(0);" onclick='$.get("do.php",{ cmd: "unban", id: "<?php echo $rrows['id']; ?>" } ,function(data){ $("#ban<?php echo $rrows['id']; ?>").html(data); });'>Unban</a>  

              </font> </td>

          </tr>

          <tr> 

            <td colspan="7">

			

			<div style="display:none;font: normal 11px arial; padding:10px; background: #e6f3f9" id="edit<?php echo $rrows['id']; ?>">

			

			<input type="hidden" name="id<?php echo $rrows['id']; ?>" id="id<?php echo $rrows['id']; ?>" value="<?php echo $rrows['id']; ?>">

			User Name: <input name="user_name<?php echo $rrows['id']; ?>" id="user_name<?php echo $rrows['id']; ?>" type="text" size="10" value="<?php echo $rrows['user_name']; ?>" >

			User Email:<input id="user_email<?php echo $rrows['id']; ?>" name="user_email<?php echo $rrows['id']; ?>" type="text" size="20" value="<?php echo $rrows['user_email']; ?>" >

			Level: <input id="user_level<?php echo $rrows['id']; ?>" name="user_level<?php echo $rrows['id']; ?>" type="text" size="5" value="<?php echo $rrows['user_level']; ?>" > 1->user,5->admin

			<br><br>New Password: <input id="pass<?php echo $rrows['id']; ?>" name="pass<?php echo $rrows['id']; ?>" type="text" size="20" value="" > (leave blank)

			<input name="doSave" type="button" id="doSave" value="Save" 

			onclick='$.get("do.php",{ cmd: "edit", pass:$("input#pass<?php echo $rrows['id']; ?>").val(),user_level:$("input#user_level<?php echo $rrows['id']; ?>").val(),user_email:$("input#user_email<?php echo $rrows['id']; ?>").val(),user_name: $("input#user_name<?php echo $rrows['id']; ?>").val(),id: $("input#id<?php echo $rrows['id']; ?>").val() } ,function(data){ $("#msg<?php echo $rrows['id']; ?>").html(data); });'> 

			<a  onclick='$("#edit<?php echo $rrows['id'];?>").hide();' href="javascript:void(0);">close</a>

		 

		  <div style="color:red" id="msg<?php echo $rrows['id']; ?>" name="msg<?php echo $rrows['id']; ?>"></div>

		  </div>

		  

		  </td>

          </tr>

          <?php } ?>

        </table>

	    <p><br>

          <input name="doBan" type="submit" id="doBan" value="Ban">

          <input name="doUnban" type="submit" id="doUnban" value="Unban">

      </form>

	  

	  <?php } ?>

      &nbsp;</p>

	  <?php

	  if($_POST['doSubmit'] == 'Create')

{

$rs_dup = mysql_query("select count(*) as total from users where user_name='$post[user_name]' OR user_email='$post[user_email]'") or die(mysql_error());

list($dups) = mysql_fetch_row($rs_dup);



if($dups > 0) {

	die("The user name or email already exists in the system");

	}



if(!empty($_POST['pwd'])) {

  $pwd = $post['pwd'];	

  $hash = PwdHash($post['pwd']);

 }  

 else

 {

  $pwd = GenPwd();

  $hash = PwdHash($pwd);

  

 }

 

mysql_query("INSERT INTO users (`user_name`,`user_email`,`pwd`,`approved`,`date`,`user_level`)

			 VALUES ('$post[user_name]','$post[user_email]','$hash','1',now(),'$post[user_level]')

			 ") or die(mysql_error()); 







$message = 

"Thank you for registering with us. Here are your login details...\n

User Email: $post[user_email] \n

Passwd: $pwd \n



*****LOGIN LINK*****\n

http://$host$path/login.php



Thank You



Administrator

$host_upper

______________________________________________________

THIS IS AN AUTOMATED RESPONSE. 

***DO NOT RESPOND TO THIS EMAIL****

";



if($_POST['send'] == '1') {



	mail($post['user_email'], "Login Details", $message,

    "From: \"Member Registration\" <auto-reply@$host>\r\n" .

     "X-Mailer: PHP/" . phpversion()); 

 }

echo "<div class=\"msg\">User created with password $pwd....done.</div>"; 

}



	  ?>

	  





    <td width="12%">&nbsp;</td>

  </tr>

</table>

</div>

</div>





              

              

              

              

                

                

                

                </p>

				</div>

              

				<!--  / ABOUT BOX \ -->

				

				

			</div>

			<!--  \ RIGHT CONTAINER / -->  

			

        </div>

		</div>

        <!--  \ CONTENT CONTAINER / -->

		

	</div>

	<!--  \ MAIN CONTAINER / -->

	

	<!--  / FOOTER CONTAINER \ -->

	<div id="footerCntr">

		<div id="footerCntrinner">

		

		

			

			<div class="left">

			<div class="imageBox">

			

			<a href="#"><img src="images/footer_icon1.jpg" alt="" /></a>

			<a href="#"><img src="images/footer_icon2.jpg" alt="" /></a>

			<a href="#"><img src="images/footer_icon3.jpg" alt="" /></a>

			<a href="#"><img src="images/footer_icon4.jpg" alt="" /></a> 

			

			</div>

			

			<p>&copy; Copyright . <a href="#">jeejeepower™.</a> All Rights Reserved</p>

			  

					<ul>

						<li class="first"><a href="index.php">Home</a></li>

						<li><a href="hub.php">Attack</a></li>

						<li><a href="mysettings.php">My Account</a></li>

						<li><a href="pinger.php">Pinger</a></li>

						<li><a href="logout.php">Logout</a></li>

                     

                     

						<?php  if (checkMod()) { 

                                        // Staff only links should go below here    

                                        ?>

                        <li><a href="staff.php">Staff CP</a></li>

                        

                                        <?php } ?>



					<?php  if (checkAdmin()) { 

                                        // Admin only links should go below here    

                                        ?>

                                                                

						<li><a href="manageshells.php">Shells</a></li>

                        <li><a href="addshell.php">Add Shells</a></li>

						<li><a href="logs.php">Logs</a></li>

						<li><a href="admin.php">Admin CP</a></li>

						

					

					<?php } ?>

					</ul>

					

			</div>

			<div class="right">

				<h2>Get in Touch</h2>

				<p>Feel free to contact me or please fill up below in the 

	following details and I will be in touch shortly.</p>

				<p>Address: 1758 Sample Road, Greenvalley, 12<br />

					Telephone: +123-1234-5678<br />

					FAX: +458-4578</p>

			

			</div>

		

		</div>

	</div>

	<!--  \ FOOTER CONTAINER / -->

		

</div>

<!--  \ WRAPPER / -->



</body>



</html>