403Webshell
Server IP : 27.254.152.13  /  Your IP : 216.73.217.38
Web Server : Apache/2
System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : coloflew ( 1072)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/coloflew/domains/fulltion.com/private_html/administrator/modules/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/coloflew/domains/fulltion.com/private_html/administrator/modules/admin/index.php
<?PHP
if($_GET['act']=="add"){
	$arrData = array();
	
		$arrData['user']		= $_POST['user'];
		$arrData['pwd']			= $_POST['pwd'];
		$arrData['email']		= $_POST['email'];
		$arrData['fullname']	= $_POST['fullname'];
		$arrData['created']		= date('Y-m-d h:i:s',time());
		//echo "<pre>"; print_r($arrData); exit();
		foreach($arrData as $k => $v ){
				$arrData[$k] = str_replace("'", "\'", $v); 
			}
		$db->insertData("admin",$arrData);		
		
	
	$msg = $lang_set['save_complete'];
	$res = true;
	
}elseif($_GET['act']=="editdata"){
	$arrData = array();
		$arrData['user']		= $_POST['user'];
		$arrData['pwd']			= $_POST['pwd'];
		$arrData['email']		= $_POST['email'];
		$arrData['fullname']	= $_POST['fullname'];
		
		foreach($arrData as $k => $v ){
				$arrData[$k] = str_replace("'", "\'", $v); 
			}
		//if($_POST['user_name']){ $arrData['user_name']	= $_POST['user_name']; }
		//if($_POST['user_pass']){ $arrData['user_pass']	= md5($_POST['user_pass']); }
	
	//echo "<pre>"; print_r($arrData); exit();

	$db->updateData("admin",$arrData,"id='".$_POST['id']."'");
	
	$msg = $lang_set['edit_complete'];
	$res = true;

	}elseif($_GET['act']=="edit"){
		
		$arrRes = $db->getOne("admin","*","id='".$_GET['id']."'");
		
		//echo "<pre>"; print_r($arrRes);
		
	}elseif($_GET['act']=="deletedata"){
	
//	$getchkp = $db->getAll("page","*","page_parent='".$_GET['page_id']."'");
//			
//	if($getchkp){
//		foreach($getchkp as $ke => $va){
//			$db->deleteData("page","page_id='".$va['page_id']."'");
//			$objMaster->deleteFiles("../images/page", $va['page_image'], "0");
//			$objMaster->deleteFiles("../images/page/thumbs", $va['page_image'], "0");
//			
//			$objMaster->deleteFiles("../images/page", $va['page_banner'], "0");
//			$objMaster->deleteFiles("../images/page/thumbs", $va['page_banner'], "0");
//		}
//	}
//	$getDel = $db->getOne("page","*","page_id='".$_GET['page_id']."'");
	$db->deleteData("admin","id='".$_GET['id']."'");
//	$objMaster->deleteFiles("../images/page", $getDel['page_image'], "0");
//	$objMaster->deleteFiles("../images/page/thumbs", $getDel['page_image'], "0");
//	
//	$objMaster->deleteFiles("../images/page", $getDel['page_banner'], "0");
//	$objMaster->deleteFiles("../images/page/thumbs", $getDel['page_banner'], "0");

	echo '<meta http-equiv="refresh" content="0;URL=index.php?ck=admin&name=admin">';
	
	}elseif($_GET['act']=="deleteAll"){
	//echo "<pre>"; print_r($_POST);
	//exit;
		if(count($_POST['admindel']) > 0){
			foreach($_POST['admindel'] as $key => $val){
				$getchkp = $db->getAll("admin","*","id='".$val."'");
				if($getchkp){
					foreach($getchkp as $ke => $va){
						$db->deleteData("admin","id='".$va['id']."'");
					}
				}
			}
		}
	echo '<meta http-equiv="refresh" content="0;URL=index.php?ck=admin&name=admin">';
}

$page = @$_GET['page'] ? @$_GET['page'] : 1;
$where = "";
$where_f = "";
if(@$_POST['keyword']){
	if($where){
		$where .= " and user like '%".@$_POST['keyword']."%'";
		$where_f .= " and user like '%".@$_POST['keyword']."%'";
	}else{
		$where = " user like '%".@$_POST['keyword']."%'";
		$where_f = "  user like '%".@$_POST['keyword']."%'";
	}	
}

$arrdesP = $db->getAll("admin", "*",$where_f,"");
$arrPage = $objMaster->viewPages($page, $arrdesP, "15");
$getdes = $db->getAll("admin","*","","","");
$getPage = $db->getAll("admin","*",$where_f,"",$arrPage["offset"]);
?>
<div class="block">
	<div class="block_head">
		<div class="bheadl"></div>
		<div class="bheadr"></div>
					
		<h2><?php echo $lang_set['admin_title']; ?></h2>
					
		<ul>
        	<li><a href="#add"><?php echo $lang_set['add_admin']; ?></a></li>
		</ul>
         <form action="?name=admin" method="post">
			<input type="text" class="text" value="Search" name="keyword" />
		</form>
	</div>		
    <!-- .block_head ends -->
    <div class="block_content">
	<form action="index.php?name=admin&act=deleteAll" method="post">
	<table cellpadding="0" cellspacing="0" width="100%">
		<tr>
			<td width="20"><input type="checkbox" class="check_all" /></td>
			<th width="120"><?php echo $lang_set['username']; ?></th>
            <th width="120"><?php echo $lang_set['password']; ?></th>
            <th width="120"><?php echo $lang_set['email']; ?></th>
            <th width="120"><?php echo $lang_set['last_login']; ?></th>
            <th width="120"><?php echo $lang_set['created']; ?></th>
			<td width="77">&nbsp;</td>
		</tr>
        <?php 
		if($getPage){
			foreach($getPage as $key => $val){
		?>
		<tr>
			<td><input type="checkbox" name="admindel[]" value="<?php echo $val['id'];?>"/></td>
            <td align="center"><?php echo $val['user'];?></td>
            <td><?php echo $val['pwd'];?></td>
            <td><?php echo $val['email'];?></td>
            <td><?php echo $val['last_login'];?></td>
            <td><?php echo $val['created'];?></td>
			<td class="delete"><a href="index.php?name=admin&bl=add&act=edit&id=<?php echo $val['id']?>#add"><?php echo $lang_set['edit']; ?></a>&nbsp;<?PHP if($val['id'] != $_SESSION['member']['userid'] ){?><a href="index.php?name=admin&act=deletedata&id=<?php echo $val['id']?>"><?php echo $lang_set['delete']; ?></a>
            <?PHP }?>
            </td>
		</tr>
        	
		<?php
			}
		}else{
		?>
        <tr>
			<td colspan="11" style="text-align:center"><?php echo $lang_set['not_data']; ?></td>
		</tr>
        <?php 
		}
		?>
	</table>
	<div class="tableactions">
	<select name="actdel">
		<option value="del"><?php echo $lang_set['delete']; ?></option>
	</select>
	<input type="submit" class="submit tiny" value="<?php echo $lang_set['selected']; ?>" />
	</div>		
    <!-- .tableactions ends -->
   <?php if( $arrPage["startPage"]!="" && $arrPage["endPage"] !="" ){?>
    		<div class="pagination right">           
            	<a href="index.php?name=admin&page=<?php echo ($page-1);?>">&laquo;</a>
                <?php 
				for($i = $arrPage["startPage"]; $i <= $arrPage["endPage"]; ++$i) {
					echo'<a href="index.php?name=admin&page='.$i.'" '.($page == $i ? 'class="active"' : '').'>'.($i).'</a>';
				}?>
                <a href="index.php?name=admin&page=<?php echo ($page+1);?>">&raquo;</a>
    
            </div>	
     <?php }?>
		<!-- .pagination ends -->
	</form>
	</div>		<!-- .block_content ends -->
    <div class="block_content" id="add" >
    <hr />
    	<?php if(@$res){?>
             <div class="message success"><p><?php echo $msg;?></p></div>
            <meta http-equiv="refresh" content="3;URL=index.php?name=admin">
           
            
        <?php }?>
		<form action="index.php?name=admin&act=<?php echo (@$_GET['act']=="edit" ? "editdata" : "add");?>" method="post" enctype="multipart/form-data" onsubmit="return checkadmin();>
        <input type="hidden" name="id" value="<?php echo  $arrRes['id'];?>">
        <p>
          <label><?php echo $lang_set['username']; ?>:</label> <br />
			<input type="text" class="text small" name="user" id="user" value="<?php echo @$arrRes['user'];?>" /> 
            <span class="note error" id="span_user"><?php echo $lang_set['require']; ?>!</span>
        </p>
		<p>
			<label><?php echo $lang_set['password']; ?>:</label><br />
			<input type="text" class="text small" name="pwd" id="pwd" value="<?php echo @$arrRes['pwd'];?>" /> 
            <span class="note error" id="span_pwd"><?php echo $lang_set['require']; ?>!</span>
		</p>
        <p>
			<label><?php echo $lang_set['fullname']; ?>:</label><br />
			<input type="text" class="text small" name="fullname" id="fullname" value="<?php echo @$arrRes['fullname'];?>" /> 
		</p>
        <p>
			<label><?php echo $lang_set['email']; ?>:</label><br />
			<input type="text" class="text small" name="email" value="<?php echo @$arrRes['email'];?>" /> 
		</p>
		<p>
				<input type="submit" class="submit mid" value="<?php echo $lang_set['submit']; ?>" />
		</p>
	</form>						
    </div><!-- .block_content ends -->
				
	<div class="bendl"></div>
	<div class="bendr"></div>
</div>

Youez - 2016 - github.com/yon3zu
LinuXploit