403Webshell
Server IP : 27.254.152.13  /  Your IP : 216.73.217.38
Web Server : Apache/2
System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : coloflew ( 1072)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/coloflew/domains/fulltion.com/private_html/parcel/tester/lib/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /home/coloflew/domains/fulltion.com/private_html/parcel/tester/lib//barcode2.php.old
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><head>

	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<head></head>
<html>
<body>
<?php


	$dbi['sql_username']	= base64_decode($_GET['U']);
	$dbi['sql_password']	= base64_decode($_GET['P']); 
	$dbi['sql_host']		= base64_decode($_GET['H']);
	$dbi['sql_dbname']		= base64_decode($_GET['D']);
	
//echo '<pre>';print_r($dbi);exit;
########## Database Info ##########
define( "DB_SERVER", $dbi['sql_host'] );
define( "DB_NAME", $dbi['sql_dbname'] ); 
define( "DB_USER", $dbi['sql_username'] ); 
define( "DB_PASSWD", $dbi['sql_password']  ); 
define( "DB_PREFIX", "tasoft_" );
define( "DB_TYPE", "MySQL" );

########## Type File ##########
define( "FILE_TYPE", "txt,pdf,doc,zip,rar,xls,xlsx,docx,ppt,pptx,swf,wma,3gp,mp4,avi,flv" );
define( "IMAGE_TYPE", "gif,jpg,png" );
define( "IMAGE_SIZE", "51200000" );
define( "FILE_SIZE", "524288000" );

define( "TIMESTAMP", time() );
	//define('PATH', 'D:\xampp\htdocs\senahome');
require_once('../lib/class/SC_Query.php');
require_once('../lib/class/SC_Mysql.php');
require_once('../lib/class/SC_Master.php');
require_once('../lib/class/SC_Email.php');
require_once('../lib/class/SC_Function.php');
$db = new SC_Query();
$objMaster = new SC_Master();
$objFun = new SC_Function();
if(isset($_SESSION['lang_code']) && @$_GET['lang']){
	//$la = $_GET['lang'] ? $_GET['lang'] : "En";
	$_SESSION['lang_code'] = $_GET['lang'];
	$lang_code =  $_SESSION['lang_code'];
}elseif(isset($_SESSION['lang_code'])){
	$lang_code =  $_SESSION['lang_code'];
}else{
	$lang_code = "En";
	$_SESSION['lang_code'] = $lang_code;
}

$lang_value = $db->getAll('language_value','*',"lang_code='".$lang_code."'");
//echo "<pre>"; print_r($lang_value);
if($lang_value){
	$lang_set = array();
	foreach($lang_value as $ke => $va){
		$lang_set[$va['name']] = $va['value'];
		//echo $lang_set[$va['name']];
		//$lang = $lang_f;
	}	
}

$GetInvoiceID = array();
	if(isset($_GET['InvoiceID']))
	{
		unset($_SESSION['SSInvoiceReport']);
		$_SESSION['SSInvoiceReport'][] = $_GET['InvoiceID'];
	}
	//$_SESSION['SSInvoice'] = $_GET['InvoiceID'];
	$GetInvoiceID = $_SESSION['SSInvoiceReport'];
	//$GetInvoiceID['end'] = '0';
	//$GetInvoiceID = $_SESSION['SSInvoice'];
	unset($_SESSION['SSInvoiceReport']);
	
	foreach($GetInvoiceID as $val){ 
		$GetInvoice = $db->getOne( "invoice", "*"," InvoiceID = '".$val."'","" );
		$Getproduct = $db->getAll( "invoicedetail", "*"," InvoiceID = '".$GetInvoice['InvoiceID']."'","Order By InvoiceDetailID" );
		$sendRes = $db->getOne("customer","*"," CustomerID='".$GetInvoice['InvoiceSendID']."'"); 
		$StartDelivery = $db->getOne("deliverypoint","*"," DeliveryPointID='".$GetInvoice['InvoiceStartPoint']."'"); 
		$EndDelivery = $db->getOne("deliverypoint","*"," DeliveryPointID='".$GetInvoice['InvoiceSetEndPoint']."'"); 
		
		$StartProvince = $db->getOne("province","*"," PROVINCE_ID='".$StartDelivery['DeliveryPointProvince']."'"); 
		$EndProvince = $db->getOne("province","*"," PROVINCE_ID='".$EndDelivery['DeliveryPointProvince']."'"); 
	}


foreach($Getproduct as $key => $va){

?>
<script type="text/javascript">
	runCmd("ping 127.0.0.1");
</script>
<?PHP
@mkdir('C:\\Test');
$strFileName = "tset_".$va['ProductCode'].".prn";
$objCreate = @fopen('C:\\Test\\'.$strFileName, 'w');
$strText1 = "SM0,0\n
STt\n
SS3\n
SD17\n
SA0\n
TA0\n
SL400,24,G\n
SOT\n
SW607\n
CUTn\n
T222,60,0,2,2,0,2,N,N,'".@$objMaster->getdbdateformat(@$GetInvoice['InvoiceDate'])."'\n
B1539,200,0,3,6,80,2,7,'".$va['ProductCode']."'\n
T575,250,1,2,2,0,2,N,N,'".$StartDelivery['DeliveryPointName']."-".$EndDelivery['DeliveryPointName']."'\n
T575,295,1,2,2,0,2,N,N,'".$GetInvoice['InvoiceCode']."'\n
T222,295,1,2,2,0,2,N,N,'".$EndDelivery['DeliveryPointCode']."'\n
T575,385,2,2,2,0,2,N,N,'".$StartProvince['PROVINCE_NAME']."-".$EndProvince['PROVINCE_NAME']."'\n
P1\n";
fwrite($objCreate, $strText1);
fclose($objCreate);


echo exec(' COPY C:\\Test\\tset_'.$va['ProductCode'].'.prn /B \\\\127.0.0.1\\BIXOLONS');

echo "<script>t = 1*1000;
			setTimeout('',t); 
			</script>";

}

echo "<script>t = 1*1000;
			setTimeout('window.close()',t); 
			</script>";
?>



</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit