403Webshell
Server IP : 192.169.170.185  /  Your IP : 216.73.216.97
Web Server : Apache
System : Linux p3plmcpnl495852.prod.phx3.secureserver.net 4.18.0-553.52.1.lve.el8.x86_64 #1 SMP Wed May 21 15:31:29 UTC 2025 x86_64
User : akhilnew ( 1712764)
PHP Version : 5.6.40
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/akhilnew/www/thepharmajournal/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/akhilnew/www/thepharmajournal/admin/fonts.php
<?php
if(($opt1) && ($opt1 === 'add' || $opt1 === 'edit')):
	if(($opt1 === 'edit' && $opt2)):
		$stmt = $mysqli->prepare("SELECT $firstcol, name FROM $table WHERE $firstcol = ? LIMIT 1") or die($mysqli->error);
		$stmt->bind_param('i', $opt2);
		$stmt->execute();
		$stmt->store_result();
		$count_rows = $stmt->num_rows();
		$stmt->bind_result($id, $name);
		$stmt->fetch();
		$stmt->close();
		if($count_rows !== 1):
			die('Invalid data selection.');
		endif;
		$optfld = '';
	else:
		$id = '';$name = '';
	endif;
echo <<<EOJ
	<input type="hidden" name="dataid" value="{$id}" readonly />
	<div class="head">
		{$back}
		<input type="reset" value="reset" class="action" />
		<input type="submit" value="submit" class="action b button" />
	</div>
	<div class="body">
		<div class="row">
			<div class="fl">
				<label class="flbl">Font Name :<span>*</span></label>
				<input type="text" name="name" value="{$name}" class="field" />
			</div>
			<div class="fr">
				<label class="flbl">Font File <small>(Only TTF and OTF file allowed)</small>:{$optfld}</label>
				<input type="file" name="font" class="field field-file lg" />
			</div>
		</div>
	</div>
EOJ;
else:
	$keyword = "%$keyword%";
	if($opt1 === 'search'):
		$stmt = $mysqli->prepare("SELECT * FROM $table WHERE name LIKE ?") or die($mysqli->error);
		$stmt->bind_param('s', $keyword);
		$stmt->execute();
		$stmt->store_result();
		$total_rows = $stmt->num_rows();
		$stmt->close();
	else:
		$stmt = $mysqli->prepare("SELECT * FROM $table") or die($mysqli->error);
		$stmt->execute();
		$stmt->store_result();
		$total_rows = $stmt->num_rows();
		$stmt->close();
	endif;
echo <<<EOJ
	<div class="head">
		<input type="button" value="create new" class="action g" onclick="cURL('add')" />
		<!--
		<input type="submit" value="transfer to j access" class="action" onclick="sOPT('transfertojaccess', 'Do you really want to transfer to J Access?')" />
		-->
		<input type="submit" value="" class="action ico delete hidden" onclick="sOPT('delete', 'Do you really want to delete?')" />
		<div class="fr">{$pagination->get($total_rows, $page_number, $item_per_page)}</div>
	</div>
	<table border="0" cellpadding="0" cellspacing="0" class="table">
		<thead>
		<tr>
		<th align="center" valign="middle" class="xs"><input type="checkbox" name="checkall" id="checkall" value="" /></th>
		<th align="center" valign="middle" class="xs">s. no.</th>
		<th align="left" valign="middle">font name</th>
		<th align="left" valign="middle">font</th>
		<th align="right" valign="middle" class="md">creation</th>
		<th align="center" valign="middle" class="sm">action</th>
		</tr>
		</thead>
		<tbody>
EOJ;
		if($opt1 === 'search'):
			$stmt = $mysqli->prepare("SELECT $firstcol, name, file, creation FROM $table WHERE name LIKE ? ORDER BY $firstcol DESC") or die($mysqli->error);
			$stmt->bind_param('s', $keyword);
		else:
			$stmt = $mysqli->prepare("SELECT $firstcol, name, file, creation FROM $table ORDER BY $firstcol DESC") or die($mysqli->error);
		endif;
		$stmt->execute();
		$stmt->store_result();
		if($stmt->num_rows() > 0):
			$stmt->bind_result($id, $name, $file, $creation);
			while($stmt->fetch()):
				$snum = $snum + 1;
				$file = (($file && file_exists($fontuploadpath.$file))) ? '<a href="'.$fontsdir.$file.'">'.$file.'</a>' : 'N/A';
echo <<<EOJ
				<tr>
				<td align="center" valign="middle"><input type="checkbox" name="dataid[]" value="{$id}" class="checkbox" /></td>
				<td align="center" valign="middle">{$snum}</td>
				<td align="left" valign="middle">{$name}</td>
				<td align="left" valign="middle">{$file}</td>
				<td align="right" valign="middle">{$fn->dateformat($creation)}</td>
				<td align="center" valign="middle"><button type="button" onclick="cURL('edit/{$id}')">edit</button></td>
				</tr>
EOJ;
			endwhile;
			$stmt->close();
		else:
			echo '<tr><td align="center" valign="middle" colspan="6">'.$emptyrows.'</td></tr>';
		endif;
	echo '</tbody>';
	echo '</table>';
endif;
?>

Youez - 2016 - github.com/yon3zu
LinuXploit