403Webshell
Server IP : 93.86.61.54  /  Your IP : 216.73.216.60
Web Server : Apache/2.4.62 (Ubuntu)
System : Linux rasin.ddns.net 6.8.0-124-generic #124~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 21:05:19 UTC x86_64
User : www-data ( 33)
PHP Version : 8.4.22
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/projects/ilink_2.0/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/projects/ilink_2.0/user-upd.php
<!DOCTYPE html>
<!--
*********************************
 Project: Internet Link
 File   :  
 Version: 2021-01-13
 Author : M. Kukic
 Note   : PHP v5 + MySQL + Apache 
**********************************
-->
<html>

<style>
table, th, td {
    border: 1px solid black;
}
th, td {
    padding: 4px;
    text-align: center;
}
</style>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1250">
<link rel='shortcut icon' type='image/png' href='favicon.ico'/>
<title>ILink</title>
</head>
<body>

<?php
//
// Spoljasnji pozivi $st-> del, upd i ins
// unutrasni pozivi $ct-> up i in
//
$id=$_GET["id"];
$st=$_GET["st"];

$user = $_GET["user"];
$pass = $_GET["pass"];
$dbp = $_GET["dbp"];
$status = $_GET["status"];
//
include "config.php";
//
echo"<div style='width:".$resn."px; word-wrap:break-word;'>";
echo "<fieldset>";
echo "<legend><h3>iLink - User Update</h3></legend>";
echo "<table border=\"0\">";
echo "</fieldset>";
//
if ($st=="in"){
		$sql = "INSERT INTO user (id, user, pass, dbp, status) VALUES ('0', '$user', '$pass', '$dbp', '$status')";
	if ($phpv==5){		
		mysql_query($sql, $dbh) or die(mysql_error());
	}else{
		mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
	}	
}
//
if ($st=="up"){
		$sql = "UPDATE user SET user='".$user."', pass='".$pass."', dbp='".$dbp."', status='".$status."' WHERE id='".$id."'";
	if ($phpv==5){	
		mysql_query($sql, $dbh) or die(mysql_error());
	}else{
		mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
	}
}
//
if ($st=="del"){
    $sql = "DELETE FROM user WHERE id ='".$id."'";
		if ($phpv==5){	
			$result = mysql_query($sql, $dbh) or die(mysql_error());
		}else{
			$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
		}
			//$id=$id;
			$user="-";
			$pass="-";
			$dbp="-";
			$status="-";
			$ct="dl";
}
//
if ($st=="ins"){
   $ct="in";
}
//
if ($st=="upd"){
		$sql = "SELECT * FROM user WHERE id=".$id;
	if ($phpv==5){	
		$result = mysql_query($sql, $dbh) or die (mysql_error());
		$row = mysql_fetch_array($result);
	}else{
		$result = mysqli_query($dbh, $sql) or die (mysqli_error($dbh));
		$row = mysqli_fetch_array($result);
	}	
			$id=$row['id'];
			$user=$row['user'];
			$pass=$row['pass'];
			$dbp=$row['dbp'];
			$status=$row['status'];
			
			$ct="up";
}	
//
if ($phpv==5){
	mysql_close($conn);	
}else{
	mysqli_close($conn);			
}
//
echo "<form action='user-upd.php'>";
echo "ID: <input type='text' name='id' id='id' value='$id' size='5'>";
echo "<br><br>";
echo "User: <input type='text' name='user' id='user' value='$user' size='10'> ";
echo "<br><br>";
echo "Pass: <input type='text' name='pass' id='pass' value='$pass' size='10'>";
echo "<br><br>";
echo "DBp: <input type='text' name='dbp' id='dbp' value='$dbp' size='10'>";
echo "<br><br>";
echo "Status: <input type='text' name='status' id='status' value='$status' size='10'>";
echo "<br><br>";
echo "St: <input type='text' name='st' id='st' value='$ct' size='1'>";
//echo "<br><br>";
echo str_repeat('&nbsp;', 12)."<input type='submit' value='Enter'>";
echo "</form>";
//
?>
<hr>
<a href='javascript:history.go(-1)'><img src='img/back.png'></a><a href='index.html'><img src='img/hom.png'><a href='help.php'><img src='img/info.png'></a>
</div>
</body>
</html>


Youez - 2016 - github.com/yon3zu
LinuXploit