403Webshell
Server IP : 192.169.170.185  /  Your IP : 216.73.216.97
Web Server : Apache
System : Linux p3plmcpnl495852.prod.phx3.secureserver.net 4.18.0-553.52.1.lve.el8.x86_64 #1 SMP Wed May 21 15:31:29 UTC 2025 x86_64
User : akhilnew ( 1712764)
PHP Version : 5.6.40
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/akhilnew/public_html/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/akhilnew/public_html/admin/u.php
<?php
session_start();
if(file_exists('../inc/config.php')) : require_once('../inc/config.php'); else : die('Database configuration file doesn\'t exist.'); endif;

$files_inc = array('encryptions.class', 'functions.class', 'sendmail.class', 'akiniklogin', 'pagination.class', 'transaction.class', 'MPDF53/mpdf');
foreach($files_inc as $file_inc):
	if(file_exists(REQSEC.$file_inc.'.php')): require_once(REQSEC.$file_inc.'.php'); else: die('Required file doesn\'t exist.'); endif;
endforeach;
require_once('../../twm/TwilioWhatsApp.php');

if (!$login->auth()):
	header('Location:'.$adminurl.'logout'); exit();
endif;

$snum = 0;
$page = isset($_GET['page']) ? strip_tags(html_entity_decode($fn->escape($_GET['page']))) : '';
$opt1 = isset($_GET['opt1']) ? strip_tags(html_entity_decode($fn->escape($_GET['opt1']))) : '';
$opt2 = isset($_GET['opt2']) ? strip_tags(html_entity_decode($fn->escape($_GET['opt2']))) : '';
$opt3 = isset($_GET['opt3']) ? strip_tags(html_entity_decode($fn->escape($_GET['opt3']))) : '';
$opt4 = isset($_GET['opt4']) ? strip_tags(html_entity_decode($fn->escape($_GET['opt4']))) : '';
$table= $page;

$pageurl = $adminurl.'u/'.$page;

if($page !== 'dashboard'):
	$stmt = $mysqli->prepare("SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE (TABLE_SCHEMA = ? AND TABLE_NAME = ?) ORDER BY ORDINAL_POSITION ASC LIMIT 1") or die($mysqli->error);
	$stmt->bind_param('ss', $dbname, $table);
	$stmt->execute();
	$stmt->store_result();
	$stmt->bind_result($firstcol);
	$stmt->fetch();
	$stmt->close();
	$margin  = 91;
else:
	$firstcol= '';
	$margin  = 58;
endif;

$stmt = $mysqli->prepare("SELECT settingsid, websitename, websiteemail, fromname, fromemail, replyname, replyemail, deliverycharges, signature, bookchapterdeadline, blockedword, accountdetails FROM settings ORDER BY settingsid DESC LIMIT 1") or die($mysqli->error);
$stmt->execute();
$stmt->store_result();
$stmt->bind_result($settingsid, $websitename, $websiteemail, $fromname, $fromemail, $replyname, $replyemail, $deliverycharges, $signature, $bookchapterdeadline, $blockedword, $accountdetails);
$stmt->fetch();
$stmt->close();

$option = isset($_POST['option']) ? $fn->sanitize($fn->escape($_POST['option'])) : null;
$dataid = isset($_POST['dataid']) ? $_POST['dataid'] : null;

if($_SERVER['REQUEST_METHOD'] === 'POST' && $option):
	if(!$login->auth()):
		die(output('You are not logged in.'));
	endif;

	if(file_exists('inc/'.$page.'.php')):
		$idcount = count($dataid); $null = '';

		require_once('inc/'.$page.'.php');
	else:
		die(output('Processing file not found.'));
	endif;
endif;
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title><?php echo ucwords(str_replace('_', ' ', $page)).' ~ cPanel';?></title>
<link rel="shortcut icon" href="<?php echo $imageurl;?>favicon.ico" />
<link type="text/css" rel="stylesheet" href="https://www.akinik.com/cpanel_assets/css/smoothness/jquery-ui-1.8.13.custom.css" />
<link type="text/css" rel="stylesheet" href="https://www.akinik.com/cpanel_assets/css/elrte.min.css" />
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:400,500|Material+Icons" />
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0-rc.2/css/materialize.min.css" />
<style type="text/css">
*{margin:0;box-sizing:border-box !important;outline:none}html,body{width:100%}
body{height:100%;font-size:13px;font-family:'Roboto', sans-serif;overflow-y:scroll}

b,strong,label,h1,h2,h3,h4,h5,h6,th{font-weight:500}img,a img{float:left;max-width:100%;overflow:hidden;object-fit:cover}

input[type=text],input[type=password],button,select,textarea{height:32px;border-radius:3px !important;font-size:13px !important;font-family:'Roboto', sans-serif;resize:none}
input::placeholder,textarea::placeholder{color:#999;font-size:13px}

button.btn-flat,.btn.btn-flat{float:left;width:auto;height:32px !important;line-height:33px !important;margin-right:8px;padding:0 10px;background-color:#e5e5e5;color:#333;font-size:11px !important;font-weight:500}
button.btn-flat i.left{margin-right:6px}.btn-floating{height:40px !important}
button.btn-flat:last-child{margin:0}button.btn-flat.blue,button.btn-flat.green{color:#fff}button.btn-flat.h{display:none}

.col input[type=text],.col input[type=password],.col textarea,.col select{height:32px;margin:0;padding:0 5px;background-color:#fff;border:1px solid #d9d9d9;border-radius:3px;font-size:13px;font-family:'Roboto', sans-serif;clear:both}
.col textarea{min-height:100px;padding:5px}
.col input[type=text]:focus,.col input[type=password]:focus,.col textarea:focus,.col select:focus{border-color:#2979ff !important;box-shadow:0 1px 1px rgba(0,0,0,0.2) inset !important;outline:none}
.col input[type=text]:disabled,.col input[type=password]:disabled,.col textarea:disabled,.col select:disabled{border:1px solid #e5e5e5}

.row{margin-bottom:0}.head,.body,.foot{float:left;width:100%;height:auto}

.header,.form > .head,.exceloutput > .head{padding-top:8px;padding-bottom:8px;position:fixed;top:0;left:0;right:0;z-index:999}
.header a.menu{height:32px;margin-right:10px}
.header a.menu i{line-height:32px}
.header i.left{font-size:32px}
.header a.btn-flat{height:32px;line-height:33px;padding:0 5px;font-size:11px;font-weight:500}

.header form{border-radius:3px;-webkit-border-radius:3px;display:flex;overflow:hidden}
.header form input[type=text]{height:32px;margin:0;padding:0 10px;border:none}
.header form input[type=text]:focus,.header form input[type=text]:disabled{border:none !important;box-shadow:none}
.header form button{width:36px;height:32px;background-color:transparent;border:none;cursor:pointer}
.header form button i{line-height:32px;font-size:21px}

.sidenav{z-index:99999}

.db .col .card{margin:0 0 15px;border-radius:4px;overflow:hidden}
.db .col .card-content{line-height:42px;padding:5px 10px 20px;border-radius:0;text-transform:uppercase;text-shadow:0 1px 0 #000}
.db .col .card-content h5{margin:0;font-size:24px;font-weight:normal}
.db .col .card-action{padding:0}
.db .col .card-action a{width:100%;line-height:37px;font-size:11px;font-weight:500}

.form > .head,.exceloutput > .head{padding:5px 10px;background-color:#fff;border-bottom:1px solid #d9d9d9;top:48px}

.form > .head input[type=text]{width:auto;height:32px;margin:0;padding:0 5px;border:none;border-radius:3px;-webkit-border-radius:3px;font-size:13px;font-family:'Roboto', sans-serif}
.form > .head input[type=text]:focus{border:none !important;box-shadow:none !important}
.form > .head b{line-height:32px;margin-right:9px;font-size:11px}

.form > .body{padding-top:10px;box-shadow:0 1px 2px rgba(0,0,0,0.3);-webkit-box-shadow:0 1px 2px rgba(0,0,0,0.3)}
.form > .body .row{margin-bottom:0}
.form > .body .col{margin-bottom:15px}
.form > .body .col label{float:left;width:100%;color:#333;font-size:11px;font-weight:500;text-transform:uppercase}
.form > .body .col .flex{float:left;width:100%;display:flex}
.form > .body .col .flex label{flex-grow:1}

.col label.chklab{float:left;width:auto !important;height:32px;line-height:32px;padding:0 8px;border:1px solid #d9d9d9;border-radius:3px;-webkit-border-radius:3px}
.col label.chklab [type=checkbox],.col label.chklab [type=radio]{float:left;margin:9px 5px 0 0;position:static;opacity:1;pointer-events:auto}

.rad-li li{float:left;margin-right:10px;display:inline-block}

.md .workzone,.md textarea,.md iframe{height:200px !important}
.lg .workzone,.lg textarea,.lg iframe{height:400px !important}

.txnbox .col{padding:12px 30px 16px;background:url(<?php echo $imageurl;?>txnbg.png) center top no-repeat;background-size:95% 84px;font-size:20px;text-transform:uppercase}
.txnbox .col .xs{margin-top:10px;font-size:11px;font-weight:500}

.table{background-color:#fff}
.table > thead > tr > th,.table > tbody > tr > td{padding:7px 5px;border:1px solid #e5e5e5;border-top:none;position:relative}
.table > thead > tr > th{padding:8px 5px 7px;background-color:#eee;font-size:11px;text-transform:uppercase}
.table > thead > tr > th.xs{width:50px}.table > thead > tr > th.sm{width:90px}.table > thead > tr > th.md{width:120px}.table > thead > tr > th.lg{width:140px}

.table [type=checkbox]{margin:auto;top:0;bottom:0;left:0;right:0;opacity:1;pointer-events:auto;position:inherit;}

.table [type=text]{height:30px !important;border:none !important;margin:0 !important;border-radius:0 !important;box-shadow:none !important}

.table button.link{height:auto;line-height:normal;margin:0 3px;padding:0;background-color:transparent;border:none;font-size:11px !important;font-weight:500;font-family:'Roboto', sans-serif;text-transform:uppercase;cursor:pointer;display:inline-block}
.table button.link:hover{text-decoration:underline}
.table button.link i{float:left}

.table td .txnst{float:left;width:100%;padding:3px 5px;border-radius:2px;-webkit-border-radius:2px;font-size:10px;font-weight:500;text-transform:uppercase}

.txnview{table-layout:fixed}
.txnview td{padding:0;border:1px solid #e5e5e5;text-align:center;vertical-align:top}
.txnview td .head{padding:7px 5px 5px;background-color:#eee;border-bottom:1px solid #e5e5e5;font-size:12px;font-weight:500;text-transform:uppercase}
.txnview td .body{min-height:100px;padding:10px}
.txnview td .body .date{width:80px;height:68px;margin:0px auto;box-shadow:0px 1px 1px rgba(0,0,0,0.3)}
.txnview td .body .date span.top{float:left;width:100%;height:42px;line-height:42px;font-size:18px;font-weight:500}
.txnview td .body .date span.bot{float:left;width:100%;height:26px;line-height:26px;font-weight:500;text-transform:uppercase}
.txnview td .body .time{font-size:14px;clear:both}


form.fix{width:480px;border-radius:5px 5px 0 0;-webkit-border-radius:5px 5px 0 0;overflow:hidden;position:fixed;bottom:0;right:5px;z-index:9999;display:none}
form.fix .head{line-height:26px;padding:5px 8px;text-transform:uppercase}
form.fix .head button{width:26px !important;min-width:26px !important;height:26px !important;line-height:26px !important;padding:0;border-radius:25px !important;-webkit-border-radius:25px !important}
form.fix .head button i{line-height:26px;font-size:18px}

form.fix .body input[type=text],form.fix .body textarea{height:36px;margin:0;padding:0 5px;border-color:#e5e5e5;border-radius:0 !important;font-size:13px !important;font-family:'Roboto', sans-serif !important}
form.fix .body textarea{min-height:232px;padding:5px}
form.fix .body input[type=text]:focus,form.fix .body textarea:focus{border-color:#2979ff;box-shadow:none}

form.fix .body input[type=file]{width:100%;height:340px;margin-bottom:5px;padding:10px;border-bottom:1px solid #e5e5e5;font-family:'Roboto', sans-serif !important}

form.fix .foot{padding:5px 8px 10px}form.fix .foot button{min-width:64px}

.modal-header{line-height:36px;padding:5px;border-bottom:1px solid #ddd;}
.modal .col{margin-bottom:15px}
.modal .col label{float:left;width:100%;color:#333;font-size:11px;font-weight:500;text-transform:uppercase}
.modal .col input[type=text],
.modal .col select{width:100%;height:32px;margin:0;padding:0 5px;background-color:#fff;border:1px solid #d9d9d9;border-radius:3px;font-size:13px;font-family:'Roboto', sans-serif;clear:both}
.modal .col input[type=text]:focus,
.modal .col select:focus{border:1px solid #2979ff !important;box-shadow:0 1px 1px rgba(0,0,0,0.2) inset !important;outline:none}

.progress{margin:0;border-radius:0;position:fixed;top:0;z-index:9999;display:none}
#toast-container{top:auto;bottom:30px;left:30px;right:auto}.toast{font-size:14px}
</style>
</head>
<body class="white black-text">
<div id="loadpage">
<?php
$item_per_page = isset($_SESSION['ROW_LIMIT']) ? trim($_SESSION['ROW_LIMIT']) : 30;
$page_number   = isset($_GET['pn']) ? $_GET['pn'] : 1;
$page_position = ($page_number - 1) * $item_per_page;

$pagination->set($pageurl, $opt1, $opt2);

$keyword = ($opt1 === 'search' || $opt1 === 'datesearch') ? $opt2 : '';
$back = '<button type="button" class="waves-effect btn-flat" onclick="history.back()"><i class="material-icons">keyboard_return</i></button>';
$emptyrows = 'MySQL returned an empty result set (i.e. zero rows).';

echo <<<EOJ
<div class="progress amber darken-2"><div class="indeterminate amber lighten-3"></div></div>
<div class="row header blue accent-3">
	<div class="col s12 m12 l3">
		<a href="#" class="left menu sidenav-trigger" data-target="sidenav"><i class="material-icons white-text">menu</i></a>
		<i class="material-icons white-text left">verified_user</i>
		<b class="white-text">Logged is as: {$login->auth()->username} ({$login->auth()->role})</b>
	</div>
	<div class="col s12 m12 l4">
		<form action="{$pageurl}/search" method="get" name="searchform" class="white" onsubmit="if (this.keyword.value) { let key = this.keyword.value; location = this.action + '/' + key.replace(/ /gi, '+'); } return false;">
			<input type="text" name="keyword" value="{$keyword}" placeholder="Search in {$page}" />
			<button type="submit" class="white"><i class="material-icons grey-text">search</i></button>
		</form>
	</div>
	<div class="col s12 m12 l5 right-align">
		<a href="{$pageurl}" class="waves-effect btn-flat white-text">return</a>
		<a href="{$adminurl}u/dashboard" class="waves-effect btn-flat white-text">dashboard</a>
		<a href="{$adminurl}u/settings" class="waves-effect btn-flat white-text">settings</a>
		<a href="{$baseurl}" target="_blank" class="waves-effect btn-flat white-text">view site</a>
		<a href="{$adminurl}logout" class="waves-effect btn-flat white-text">logout</a>
	</div>
</div>
<ul id="sidenav" class="sidenav">
EOJ;
$stmt = $mysqli->prepare("SELECT TABLE_NAME AS table_name FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_SCHEMA = ?") or die($mysqli->error);
$stmt->bind_param('s', $dbname);
$stmt->execute();
$stmt->store_result();
$stmt->bind_result($table_list);
while($stmt->fetch()):
	echo '<li><a href="'.$adminurl.'u/'.$table_list.'">'.ucwords(str_replace('_', ' ', $table_list)).'</a></li>';
endwhile;
$stmt->close();
echo <<<EOJ
</ul>
<div class="row holder white" style="margin:{$margin}px 0 50px">
	<form action="{$pageurl}" method="post" name="adminform" id="form" class="form ajax" enctype="multipart/form-data">
		<input type="hidden" name="option" value="{$opt1}" readonly />
		<input type="hidden" name="confrm" readonly />
EOJ;
		if($page && file_exists($page. '.php')):
			require_once($page.'.php');
		else:
			echo '<div class="card col s12 m12 l5 error" style="float:none;margin:auto"><div class="card-content center-align"><i class="material-icons red-text" style="font-size:48px">info</i><h2 style="margin:10px 0">404</h2><b>OOPS, SORRY WE CAN&apos;T FIND THAT PAGE</b><br clear="all">Either something went wrong or the page doesn&apos;t exist anymore.<br clear="all"><br clear="all"><br clear="all"><a href="'.$adminurl.'u/dashboard" class="waves-effect btn-flat blue accent-3 white-text">DASHBOARD</a></div></div>';
		endif;
echo <<<EOJ
	</form>
</div>
<form action="{$adminurl}u/sendmail" method="post" name="emailform" class="fix ajax white z-depth-1 emf" enctype="multipart/form-data">
	<input type="hidden" name="option" value="" readonly />
	<input type="hidden" name="confrm" value="" readonly />
	<div class="head grey darken-3 white-text">New Message<button type="reset" class="btn-floating waves-effect btn-flat grey right" onclick="$(this.form).hide(0);"><i class="material-icons">close</i></button></div>
	<div class="body white">
		<input type="text" name="to" placeholder="To" class="to" />
		<input type="text" name="cc" placeholder="Cc" class="cc left" style="width:50%" />
		<input type="text" name="bcc" placeholder="Bcc" class="right" style="width:50%" />
		<input type="text" name="subject" placeholder="Subject" />
		<textarea rows="25" cols="25" name="message" placeholder="Type your message here..." class="materialize-textarea"></textarea>
	</div>
	<div class="foot white">
		<button type="submit" class="waves-effect btn-flat blue accent-3" onclick="this.form.option.value='sendmail';">send</button>
		<button type="reset" class="waves-effect btn-flat white" onclick="$(this.form).hide(0);">cancel</button>
	</div>
</form>
<form action="{$adminurl}u/upload" method="post" name="uploadform" class="fix white z-depth-1 upf" enctype="multipart/form-data" onsubmit="return uploadFile(this)">
	<input type="hidden" name="option" value="upload" readonly />
	<input type="hidden" name="confrm" value="" readonly />
	<div class="head grey darken-3 white-text">Upload File<button type="reset" class="waves-effect btn-flat grey right" onclick="$(this.form).hide(0);"><i class="material-icons white-text">close</i></button></div>
	<div class="body white">
		<input type="file" name="file" />
	</div>
	<div class="foot white">
		<button type="submit" class="waves-effect btn-flat blue accent-3">send</button>
		<button type="reset" class="waves-effect btn-flat white" onclick="$(this.form).hide(0);">cancel</button>
	</div>
</form>
<form action="{$adminurl}u/sms" method="post" name="smsform" class="fix ajax white z-depth-1 smf" enctype="multipart/form-data">
	<input type="hidden" name="option" value="sendsms" readonly />
	<input type="hidden" name="confrm" value="" readonly />
	<div class="head grey darken-3 white-text">Send SMS<button type="reset" class="waves-effect btn-flat grey right" onclick="$(this.form).hide(0);"><i class="material-icons white-text">close</i></button></div>
	<div class="body white">
		<input type="text" name="to" placeholder="To" class="to phone" />
		<textarea rows="25" cols="25" name="message" placeholder="Type your message here..." class="materialize-textarea" style="min-height:300px"></textarea>
	</div>
	<div class="foot">
		<button type="submit" class="waves-effect btn-flat blue accent-3">send</button>
		<button type="reset" class="waves-effect btn-flat white" onclick="$(this.form).hide(0);">cancel</button>
	</div>
</form>
<form action="{$adminurl}u/sendsms" method="post" name="smsform" class="fix ajax white z-depth-1 sms" enctype="multipart/form-data">
	<input type="hidden" name="option" value="sendsms" readonly />
	<input type="hidden" name="confrm" value="" readonly />
	<div class="head grey darken-3 white-text">Send SMS Reminder<button type="reset" class="waves-effect btn-flat grey right" onclick="$(this.form).hide(0);"><i class="material-icons white-text">close</i></button></div>
	<div class="body white">
		<input type="file" name="file" />
	</div>
	<div class="foot white">
		<button type="submit" class="waves-effect btn-flat blue accent-3">send</button>
		<button type="reset" class="waves-effect btn-flat white" onclick="$(this.form).hide(0);">cancel</button>
	</div>
</form>
EOJ;
?>
<script type="text/javascript" src="https://www.akinik.com/js/jquery.js" defer></script>
<script type="text/javascript" src="https://www.akinik.com/js/jquery.form.min.js" defer></script>
<script type="text/javascript" src="https://www.akinik.com/cpanel_assets/js/jquery-1.6.1.min.js" defer></script>
<script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0-rc.2/js/materialize.min.js" defer></script>
<script type="text/javascript" src="https://www.akinik.com/cpanel_assets/js/jquery-ui-1.8.13.custom.min.js" defer></script>
<script type="text/javascript" src="https://www.akinik.com/cpanel_assets/js/elrte.min.js" defer></script>
<script type="text/javascript" src="https://www.akinik.com/cpanel_assets/js/i18n/elrte.ru.js" defer></script>
<script type="text/javascript">
function downloadJSAtOnload(){
var element = document.createElement('script');
element.src = '<?php echo $adminurl;?>script.js?<?php echo time();?>';
document.body.appendChild(element);
}
if(window.addEventListener)
window.addEventListener('load', downloadJSAtOnload, false);
else if (window.attachEvent)
window.attachEvent('onload', downloadJSAtOnload);
else window.onload = downloadJSAtOnload;

function uploadFile(el) {
    fetch(el.action, {
        method: "POST",
        body: new FormData(el)
    })
    .then(response => response.json())
    .then(json => {
        if (typeof(json.text) != 'undefined') {
            alert(json.text);
        }
        if (typeof(json.path) != 'undefined') {
            $('.fieldbox').show(0).find('input').val(json.path); el.reset(); el.style.display = 'none';
        }
    })
    .catch(error => {
        console.log(error);
    });

    return false;
}
</script>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit