403Webshell
Server IP : 192.169.170.185  /  Your IP : 216.73.216.97
Web Server : Apache
System : Linux p3plmcpnl495852.prod.phx3.secureserver.net 4.18.0-553.52.1.lve.el8.x86_64 #1 SMP Wed May 21 15:31:29 UTC 2025 x86_64
User : akhilnew ( 1712764)
PHP Version : 5.6.40
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/akhilnew/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/akhilnew/public_html//submit_description.php
<?php
if(file_exists('inc/config.php')): require_once('inc/config.php'); else: die('Required file doesn\'t exist.'); endif;

$files_inc = array('encryptions.class', 'functions.class', 'sendmail.class');
foreach($files_inc as $file_inc):
	if(file_exists(REQ.$file_inc.'.php')): require_once(REQ.$file_inc.'.php'); else: die('Required file doesn\'t exist.'); endif;
endforeach;

$bookchapterid = isset($_GET['id']) ? $_GET['id'] : null;
$token = isset($_GET['token']) ? $_GET['token'] : null;

if ($bookchapterid && $token) {
	$stmt = $mysqli->prepare("SELECT bookname, volume FROM bookchapters WHERE (bookchapterid = ? AND descriptiontoken = ?)") or die($mysqli->error);
	$stmt->bind_param('is', $bookchapterid, $token);
	$stmt->execute();
	$stmt->store_result();
	$count_rows = $stmt->num_rows();
	$stmt->bind_result($bookname, $volume);
	$stmt->fetch();
	$stmt->close();
	if ($count_rows > 0) {
		if ($_SERVER['REQUEST_METHOD'] === 'POST') {
			$description = $_POST['description'];
			if ($description) {
				$stmt = $mysqli->prepare("SELECT fromname, fromemail, replyname, replyemail FROM settings ORDER BY settingsid DESC LIMIT 1") or die('An error occurred. Please try after some time.');
				$stmt->execute();
				$stmt->store_result();
				$stmt->bind_result($fromname, $fromemail, $replyname, $replyemail);
				$stmt->fetch();
				$stmt->close();

				$subject  = 'Description given by editor for "'.$bookname.' (Volume - '.$volume.')"';
				$message  = 'The description has been submitted by the editor for "'.$bookname.' (Volume - '.$volume.')" which is given below:-<br><br>';
				$message .= '<b>Description</b>: '.$description;

				$sm->SendMail('akinikbooks@gmail.com', '', '', $subject, $message, $fromname, $fromemail, $replyname, $replyemail);

				$stmt = $mysqli->prepare("UPDATE bookchapters SET descriptiontoken = NULL, editor_book_description = ? WHERE (bookchapterid = ? AND descriptiontoken = ?)") or die('An error occurred. Please try after some time.');
				$stmt->bind_param('sis', $description, $bookchapterid, $token);
				$stmt->execute();
				$stmt->close();

				die(json_encode(array('text' => 'Thank you! Your description has been submitted.', 'stat' => true)));
			} else {
				die(json_encode(array('text' => 'The description field is required.')));
			}
		}
?>
<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<meta http-equiv="X-UA-Compatible" content="IE=edge">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<title>Submit Description</title>
	<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-1BmE4kWBq78iYhFldvKuhfTAU6auU8tT94WrHftjDbrCEXSU1oBoqyl2QvZ6jIW3" crossorigin="anonymous">
	<link href="https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;1,100;1,300;1,400;1,500;1,700&display=swap" rel="stylesheet">
	<style>
		body{
			font-family: 'Roboto', sans-serif;
		}
	</style>
</head>
<body>
<div class="container-fluid bg-primary">
	<div class="row">
		<div class="col py-2 d-flex align-items-center justify-content-between">
			<a href="https://www.akinik.com" class="float-start text-white text-decoration-none d-flex align-items-center">
				<img src="https://www.akinik.com/bookdepartment/images/logo.png" alt="AkiNik Publications" height="36" class="me-2">
				AkiNik Publications
			</a>
			<a href="https://www.akinik.com" class="btn btn-light">
				Home
			</a>
		</div>
	</div>
</div>
<?php
echo <<<EOJ
<div class="container mt-5">
	<div class="row">
		<div class="col-12 col-md-6 mx-auto">
			<form action="{$baseurl}submit_description/{$bookchapterid}/{$token}" method="post" name="paymentform" onsubmit="return post(this)">
				<div class="card">
					<div class="card-header py-3">
						<h6 class="mb-0">Submit Description</h6>
					</div>
					<div class="card-body">
						<label for="description" class="d-block">Description<b class="float-end text-danger">*</b></label>
						<textarea style="height: 250px;" name="description" id="description" class="form-control"></textarea>
					</div>
					<div class="card-footer">
						<button type="submit" id="b" class="btn btn-primary">Submit</button>
					</div>
				</div>
			</form>
		</div>
	</div>
</div>

<div id="myToastEl" class="toast mx-auto align-items-center text-white bg-dark border-0" role="alert" aria-live="assertive" aria-atomic="true" data-bs-delay="10000" data-bs-animation="false">
	<div id="tb" class="toast-body"></div>
</div>
EOJ;
?>
	
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js" integrity="sha384-ka7Sk0Gln4gmtz2MlQnikT1wXgYsOg+OMhuP+IlRH9sENBO0LRn5q+8nbTov4+1p" crossorigin="anonymous"></script>
<script>
myToast = new bootstrap.Toast(myToastEl);
post = (f) => {
	b.disabled = true;myToast.hide();tb.innerHTML = '';

	fetch(f.action, {
		method: 'post',
		mode: 'same-origin',
		cache: 'no-cache',
		headers: {
			'Accept': 'application/json',
		},
		body: new FormData(f)
	})
	.then(response => response.json())
	.then(response => {
		tb.innerHTML = response.text;

		if (response.stat == true) {
			f.reset();
		}
	})
	.catch(error => {
		tb.innerHTML = error;
	})
	.finally(() => {
		b.disabled = false;myToast.show();
	});

	return false;
}
</script>
</body>
</html>
<?php
	} else {
		header('location:'.$baseurl);
		exit();
	}
} else {
	header('location:'.$baseurl);
	exit();
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit