403Webshell
Server IP : 192.169.170.185  /  Your IP : 216.73.216.97
Web Server : Apache
System : Linux p3plmcpnl495852.prod.phx3.secureserver.net 4.18.0-553.52.1.lve.el8.x86_64 #1 SMP Wed May 21 15:31:29 UTC 2025 x86_64
User : akhilnew ( 1712764)
PHP Version : 5.6.40
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/akhilnew/www/cropandweed/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/akhilnew/www/cropandweed/admin/articles.php
<?php
if($opt1 && $opt1 === 'view' && $opt2):
	$stmt = $mysqli->prepare("SELECT $firstcol, fullname, address, email, phone, affiliation, designation, title, runningtitle, keywords, authorpow, abstractfile, articlefile, expert_1, expert_2, expert_3, expert_4, creation FROM $table WHERE $firstcol = ? LIMIT 1") or die($mysqli->error);
	$stmt->bind_param('i', $opt2);
	$stmt->execute();
	$stmt->store_result();
	$count_rows = $stmt->num_rows();
	$stmt->bind_result($id, $fullname, $address, $email, $phone, $affiliation, $designation, $title, $runningtitle, $keywords, $authorpow, $abstractfile, $articlefile, $expert_1, $expert_2, $expert_3, $expert_4, $creation);
	$stmt->fetch();
	$stmt->close();
	if($count_rows !== 1):
		die('Invalid data selection.');
	endif;
	$address = nl2br($address);
echo <<<EOJ
	<div class="head white">
		<button type="button" class="waves-effect btn-flat" onclick="history.back()"><i class="material-icons">keyboard_return</i></button>
		<button type="button" class="waves-effect btn-flat" onclick="window.open('{$abstractdir}{$abstractfile}');"><i class="material-icons left">file_download</i>abstract files</button>
		<button type="button" class="waves-effect btn-flat" onclick="window.open('{$articlesdir}{$articlefile}');"><i class="material-icons left">file_download</i>article files</button>
	</div>
	<table class="table view">
		<tr><th>Article Id</th><td>&num;{$opt2}</td></tr>
		<tr><th>Full Name</th><td>{$fullname}</td></tr>
		<tr><th>Address</th><td>{$address}</td></tr>
		<tr><th>Email</th><td>{$email}</td></tr>
		<tr><th>Phone</th><td>{$phone}</td></tr>
		<tr><th>Affiliation</th><td>{$affiliation}</td></tr>
		<tr><th>Designation</th><td>{$designation}</td></tr>
		<tr><th>Title</th><td>{$title}</td></tr>
		<tr><th>Running Title</th><td>{$runningtitle}</td></tr>
		<tr><th>Keywords</th><td>{$keywords}</td></tr>
		<tr><th>Author and Place of work</th><td>{$authorpow}</td></tr>
		<tr><th>Expert 1</th><td>{$expert_1}</td></tr>
		<tr><th>Expert 2</th><td>{$expert_2}</td></tr>
		<tr><th>Expert 3</th><td>{$expert_3}</td></tr>
		<tr><th>Expert 4</th><td>{$expert_4}</td></tr>
		<tr><th>Date Created</th><td>{$fn->nice_date($creation)}</td></tr>
	</table>
EOJ;
else:
	$keyword = "%$keyword%";
	if($opt1 === 'search'):
		$stmt = $mysqli->prepare("SELECT * FROM $table WHERE (fullname LIKE ? OR address LIKE ? OR email LIKE ? OR phone LIKE ? OR title LIKE ?)") or die($mysqli->error);
		$stmt->bind_param('sssss', $keyword, $keyword, $keyword, $keyword, $keyword);
		$stmt->execute();
		$stmt->store_result();
		$total_rows = $stmt->num_rows();
		$stmt->close();
	else:
		$stmt = $mysqli->prepare("SELECT * FROM $table") or die($mysqli->error);
		$stmt->execute();
		$stmt->store_result();
		$total_rows = $stmt->num_rows();
		$stmt->close();
	endif;
echo <<<EOJ
	<div class="head white">
		<button type="submit" class="waves-effect btn-flat" onclick="sOPT('downloademails', '')"><i class="material-icons left">file_download</i>emails</button>
		<button type="submit" class="waves-effect btn-flat h" onclick="sOPT('delete', 'Do you really want to delete?')"><i class="material-icons">delete</i></button>
		{$pagination->get($total_rows, $page_number, $item_per_page)}
	</div>
	<table class="table">
		<thead>
		<tr>
		<th class="xs center-align"><input type="checkbox" name="checkall" id="checkall" value="" /></th>
		<th class="xs center-align">s. no.</th>
		<th style="width:170px">name</th>
		<th>address</th>
		<th style="width:200px">email</th>
		<th style="width:130px">phone</th>
		<th class="lg right-align">date created</th>
		<th class="xs center-align">action</th>
		</tr>
		</thead>
		<tbody>
EOJ;
		if($opt1 === 'search'):
			$stmt = $mysqli->prepare("SELECT $firstcol, fullname, address, email, phone, creation FROM $table WHERE (fullname LIKE ? OR address LIKE ? OR email LIKE ? OR phone LIKE ? OR title LIKE ?) ORDER BY $firstcol DESC LIMIT $page_position, $item_per_page") or die($mysqli->error);
			$stmt->bind_param('sssss', $keyword, $keyword, $keyword, $keyword, $keyword);
		else:
			$stmt = $mysqli->prepare("SELECT $firstcol, fullname, address, email, phone, creation FROM $table ORDER BY $firstcol DESC LIMIT $page_position, $item_per_page") or die($mysqli->error);
		endif;
		$stmt->execute();
		$stmt->store_result();
		if($stmt->num_rows() > 0):
			$stmt->bind_result($id, $fullname, $address, $email, $phone, $creation);
			while($stmt->fetch()):
				$snum = $page_number === 1 ? $snum + 1 : $page_position++ + 1;
				$address = nl2br($address);
echo <<<EOJ
				<tr>
				<td class="center-align"><input type="checkbox" name="dataid[]" value="{$id}" class="checkbox" /></td>
				<td class="center-align">{$snum}</td>
				<td>{$fullname}</td>
				<td>{$address}</td>
				<td>{$email}</td>
				<td>{$phone}</td>
				<td class="right-align">{$fn->nice_date($creation)}</td>
				<td class="center-align"><button type="button" class="blue-text text-accent-3" onclick="cURL('view/{$id}')">view</button></td>
				</tr>
EOJ;
			endwhile;
		else:
			echo '<tr><td colspan="8" class="center-align">MySQL returned an empty result set (i.e. zero rows).</td></tr>';
		endif;
		$stmt->close();
	echo '</tbody>';
	echo '</table>';
endif;
?>

Youez - 2016 - github.com/yon3zu
LinuXploit