403Webshell
Server IP : 192.169.170.185  /  Your IP : 216.73.216.97
Web Server : Apache
System : Linux p3plmcpnl495852.prod.phx3.secureserver.net 4.18.0-553.52.1.lve.el8.x86_64 #1 SMP Wed May 21 15:31:29 UTC 2025 x86_64
User : akhilnew ( 1712764)
PHP Version : 5.6.40
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/akhilnew/public_html/psychiatrypaper/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/akhilnew/public_html/psychiatrypaper/admin/pages.php
<?php
if($opt1 && ($opt1 === 'add' OR $opt1 === 'edit')):
	if($opt1 === 'edit' && $opt2):
		$stmt = $mysqli->prepare("SELECT $firstcol, name, title, h1heading, metadescription, metakeyword, content, hits, status, creation FROM $table WHERE $firstcol = ? LIMIT 1") or die($mysqli->error);
		$stmt->bind_param('i', $opt2);
		$stmt->execute();
		$stmt->store_result();
		$count_rows = $stmt->num_rows();
		$stmt->bind_result($id, $name, $title, $h1heading, $metadescription, $metakeyword, $content, $hits, $status, $creation);
		$stmt->fetch();
		$stmt->close();
		if($count_rows !== 1):
			die('Invalid data selection.');
		endif;
		$title = html_entity_decode($title);$metadescription = html_entity_decode($metadescription);$metakeyword = html_entity_decode($metakeyword);$content = html_entity_decode($content);
	else:
		$id = '';$name = '';$title = '';$h1heading = '';$metadescription = '';$metakeyword = '';$content = '';$status = 'enabled';
	endif;

	$status = $status === 'enabled' ? 'checked' : '';
echo <<<EOJ
	<input type="hidden" name="dataid" value="{$id}" readonly />
	<div class="head white">
		<button type="button" class="waves-effect btn-flat" onclick="history.back()"><i class="material-icons">keyboard_return</i></button>
		<button type="submit" class="waves-effect btn-flat blue accent-3">submit</button>
		<div class="fieldbox right" style="display:none">
			<input type="text" name="uploadedfileurl" placeholder="Uploaded file URL" class="grey lighten-2" onkeypress="return (event.keyCode!=13)" onfocus="this.select()" />
		</div>
	</div>
	<div class="body white">
		<div class="row">
			<div class="col s12 m4 l3">
				<label for="name">page name<b class="red-text right">*</b></label>
				<input type="text" name="name" value="{$name}" id="name" />
			</div>
			<div class="col s12 m8 l9">
				<label for="title">page title<b class="red-text right">*</b></label>
				<input type="text" name="title" value="{$title}" id="title" />
			</div>
		</div>
		<div class="row">
			<div class="col s12 m12 l12">
				<label for="h1heading">h1heading</label>
				<input type="text" name="h1heading" value="{$h1heading}" id="h1heading" />
			</div>
		</div>
		<div class="row">
			<div class="col s12 m12 l12">
				<label for="metadescription">meta description<b class="red-text right">*</b></label>
				<input type="text" name="metadescription" value="{$metadescription}" id="metadescription" />
			</div>
		</div>
		<div class="row">
			<div class="col s12 m12 l12">
				<label for="metakeyword">meta keywords<b class="red-text right">*</b></label>
				<input type="text" name="metakeyword" value="{$metakeyword}" id="metakeyword" />
			</div>
		</div>
		<div class="row">
			<div class="col s12 m12 l12 lg">
				<label for="content">content</label><br clear="all">
				<textarea rows="25" cols="25" name="content" id="htmleditor">{$content}</textarea>
			</div>
		</div>
		<div class="row chk">
			<div class="col s12 m12 l12">
				<div class="chklab left">
					<label for="status"><input type="checkbox" name="status" value="enabled" id="status" {$status} />status</label>
				</div>
			</div>
		</div>
	</div>
	<div class="fixed-action-btn">
		<button type="button" class="btn-floating blue accent-3" onclick="compose('.upf')"><i class="large material-icons">file_upload</i></button>
	</div>
EOJ;
else:
	$stmt = $mysqli->prepare("SELECT * FROM $table") or die($mysqli->error);
	$stmt->execute();
	$stmt->store_result();
	$total_rows = $stmt->num_rows();
	$stmt->close();
echo <<<EOJ
	<div class="head white">
		<button type="button" class="waves-effect btn-flat green" onclick="cURL('add')">add new</button>
		<button type="submit" class="waves-effect btn-flat blue accent-3 h" onclick="sOPT('savechanges', '')">save changes</button>
		<button type="submit" class="waves-effect btn-flat h" onclick="sOPT('enabled', '')">enable</button>
		<button type="submit" class="waves-effect btn-flat h" onclick="sOPT('disabled', '')">disable</button>
		<button type="submit" class="waves-effect btn-flat h" onclick="sOPT('delete', 'Do you really want to delete?')"><i class="material-icons">delete</i></button>
		<div class="pagination right"><b class="left">Total Rows : {$total_rows}</b></div>
	</div>
	<table class="table">
		<thead>
		<tr>
		<th class="xs center-align"><input type="checkbox" name="checkall" id="checkall" value="" /></th>
		<th class="xs center-align">s. no.</th>
		<th class="lg">name</th>
		<th>title</th>
		<th class="xs center-align">visit</th>
		<th class="sm center-align">hits</th>
		<th class="sm center-align">status</th>
		<th class="lg right-align">creation</th>
		<th class="xs center-align">action</th>
		</tr>
		</thead>
		<tbody>
EOJ;
		$stmt = $mysqli->prepare("SELECT $firstcol, name, title, hits, status, creation FROM $table ORDER BY name ASC") or die($mysqli->error);
		$stmt->execute();
		$stmt->store_result();
		if($stmt->num_rows() > 0):
			$stmt->bind_result($id, $name, $title, $hits, $status, $creation);
			while($stmt->fetch()):
				$snum  = $snum + 1;
				$title = html_entity_decode($title);
				$link  = ltrim(pathinfo('http://www.dermatologypaper.com/', PATHINFO_BASENAME), 'www.') === $name ? $baseurl : $baseurl.$name;
				$statuscolor = $status === 'enabled' ? 'green-text' : 'red-text';
				$option = $status === 'enabled' ? 'disabled' : 'enabled';
echo <<<EOJ
				<tr>
				<td class="center-align"><input type="checkbox" name="dataid[]" value="{$id}" class="checkbox" /></td>
				<td class="center-align">{$snum}</td>
				<td>{$name}</td>
				<td><input type="text" name="title[$id]" value="{$title}" onkeypress="return (event.keyCode!=13)" /></td>
				<td class="center-align"><button type="button" onclick="window.open('{$link}')"><i class="material-icons">link</i></button></td>
				<td class="center-align">{$hits}</td>
				<td class="center-align"><button type="submit" class="{$statuscolor}" onclick="sOPT('{$option}', '', this)">{$status}</button></td>
				<td class="right-align">{$fn->nice_date($creation)}</td>
				<td class="center-align">
					<button type="button" class="blue-text text-accent-3" onclick="cURL('edit/{$id}')">edit</button>
				</td>
				</tr>
EOJ;
			endwhile;
		else:
			echo '<tr><td colspan="9" class="center-align">MySQL returned an empty result set (i.e. zero rows).</td></tr>';
		endif;
		$stmt->close();
	echo '</tbody>';
	echo '</table>';
endif;
?>

Youez - 2016 - github.com/yon3zu
LinuXploit