Shell Bypass 403 GE-C666C

Ghost Exploiter Team Official

Directory >> /home2/ajwaeing/public_html/administrator/

File / Folder	Size	Action
.	-
bootstrap	--	ren
classes	--	ren
dist	--	ren
images	--	ren
js	--	ren
plugins	--	ren
addBanner.php	6.448KB	edt ren
addCategory.php	4.82KB	edt ren
addPage.php	7.323KB	edt ren
addProduct.php	5.96KB	edt ren
changePassword.php	3.068KB	edt ren
delBanner.php	0.54KB	edt ren
dishcode.php	0.269KB	edt ren
editBanner.php	7.394KB	edt ren
editCategory.php	5.238KB	edt ren
editPage.php	9.358KB	edt ren
editStaff.php	6.956KB	edt ren
error_log	0.199KB	edt ren
header.php	2.023KB	edt ren
home.php	0.037KB	edt ren
index.php	5.087KB	edt ren
lock-screen.php	3.122KB	edt ren
lock.php	0.662KB	edt ren
login.php	3.983KB	edt ren
logout.php	0.091KB	edt ren
pager.php	2.325KB	edt ren
pages.php	0.229KB	edt ren
sidebar.php	1.964KB	edt ren
styles.css	0.637KB	edt ren
viewBanners.php	5.173KB	edt ren
viewCategories.php	3.404KB	edt ren
viewPages.php	4.314KB	edt ren
viewProducts.php	3.085KB	edt ren

<?php
session_start();
require_once "classes/dbConnection.php";
$db = new dbConnection();

if(isset($_POST["cid"]) && !empty($_POST["cid"]))
{
	$title = $db -> clean($_POST["title"]);
	$cstatus = $_POST["cstatus"];
	$parent = $_POST["parent"];
	$cid = $_POST["cid"];
	
	$Qry = "UPDATE categories SET title='$title', cstatus='$cstatus', parent='$parent' WHERE ID=$cid";
	//echo $Qry;
	//exit;
	if($db->query($Qry))
	{
		header("location:index.php?action=viewCategories&msg=2");
		exit;
	}
	else
	{
		header("location:index.php?action=viewCategories&msg=4");
		exit;
	}
}

if(isset($_GET["id"]) && !empty($_GET["id"]))
{
	$cid = $_GET["id"];
	$qry = "SELECT * FROM categories WHERE ID =$cid LIMIT 1";
	echo $qry;
	$res = $db -> query($qry);
	$row = $db -> fetch($res);
	$title = stripslashes($row["title"]);
	$cstatus = $row["cstatus"];
	$parent = $row["parent"];
	
}

});

</script>

<div class="content-wrapper">
        
        <section class="content-header">
          <h1>Edit Category</h1>
          <ol class="breadcrumb">
            <li><a href="index.php"><i class="fa fa-dashboard"></i> Home</a></li>
            <li><a href="index.php?action=viewCategories"><i class="fa fa-dashboard"></i> Category Management</a></li>
            <li class="active">Edit Category</li>
          </ol>
        </section>
		
        <section class="content">
          <div class="row">
            <div class="col-xs-12">
              <div class="box-header">
                  
              </div>

<div class="box">
                <div class="box-body">
                  <form name="form1" id="form1" method="post" action="editCategory.php" enctype="multipart/form-data">
                  <input type="hidden" name="cid" id="cid" value="<?=$cid?>">
                      <table class="table table-striped">
                        <tr>
                          <td class="leftCell">Category Name: </td>
                          <td class="rightCell">
                          <input name="title" type="text" required class="form-control" id="title" size="50" maxlength="100" value="<?=$title?>" /></td>
                        </tr>  
                        
                        
                        <tr>
                          <td class="leftCell">Parent: </td>
                          <td class="rightCell">
                          <select name="parent" id="parent" required class="form-control">
                            <option value="" selected>--Please Select--</option>
                            <option value="0">ItSelf Parent</option>
                            <?php
							$cq = "SELECT ID, title FROM categories WHERE parent=0";
							$rs = $db -> query($cq);
							while($rw = $db -> fetch($rs))
							{
								$cid = $rw["ID"];
								$ctitle = stripslashes($rw["title"]);
								?>
                              <option value="<?=$cid?>" <?php if($parent == $cid) echo "selected"; ?>><?=$ctitle?></option>
                              <?php
							  $sq = "SELECT ID, title FROM categories WHERE parent=$cid";
							  $cs = $db -> query($sq);
							  while($rwx = $db -> fetch($cs))
							{
								$cidx = $rwx["ID"];
								$ctitlex = stripslashes($rwx["title"]);
								?>
                                <option value="<?=$cidx?>" <?php if($parent == $cidx) echo "selected"; ?>>&nbsp;&nbsp;&nbsp;<?=$ctitlex?></option>
                                <?php
                                }
							}
							?>
                        	</select>                      
                        </td>
                        </tr>
                        <tr>
                          <td class="leftCell">Category Status: </td>
                          <td class="rightCell">
                          <select name="cstatus" id="cstatus" required class="form-control">
                            <option value="">--Please Select--</option>
                            <option value="0" <?php if($cstatus == "0") echo "selected"; ?>>Inactive</option>
                            <option value="1" <?php if($cstatus == "1") echo "selected"; ?>>Active</option>
                          </select>
                        </td>
                        </tr>                 
                        <tr>
                          <td align="right"><input type="submit" id="submit" value=" Submit " class="btn btn-primary" /></td>
                          <td align="left"><a href="index.php?action=viewCategories">
                          	<input type="button" value=" Cancel " class="btn btn-danger" /></a>
                          </td>
                        </tr>
                      </table>
                      </form>
                </div>
                <div class="box-footer">
                	
                </div>
              </div>
            </div>
          </div>
        </section>
        
        
      </div>
<script>
CKEDITOR.replace( 'page_content',
    {
        toolbar : 'Basic',
        uiColor : '#9AB8F3'
    });
		
</script>

<=Back