Shell Bypass 403 GE-C666C

Ghost Exploiter Team Official

Directory >> /home2/ajwaeing/www/administrator/

File / Folder	Size	Action
.	-
bootstrap	--	ren
classes	--	ren
dist	--	ren
images	--	ren
js	--	ren
plugins	--	ren
addBanner.php	6.448KB	edt ren
addCategory.php	4.82KB	edt ren
addPage.php	7.323KB	edt ren
addProduct.php	5.96KB	edt ren
changePassword.php	3.068KB	edt ren
delBanner.php	0.54KB	edt ren
dishcode.php	0.269KB	edt ren
editBanner.php	7.394KB	edt ren
editCategory.php	5.238KB	edt ren
editPage.php	9.358KB	edt ren
editStaff.php	6.956KB	edt ren
error_log	0.199KB	edt ren
header.php	2.023KB	edt ren
home.php	0.037KB	edt ren
index.php	5.087KB	edt ren
lock-screen.php	3.122KB	edt ren
lock.php	0.662KB	edt ren
login.php	3.983KB	edt ren
logout.php	0.091KB	edt ren
pager.php	2.325KB	edt ren
pages.php	0.229KB	edt ren
sidebar.php	1.964KB	edt ren
styles.css	0.637KB	edt ren
viewBanners.php	5.173KB	edt ren
viewCategories.php	3.404KB	edt ren
viewPages.php	4.314KB	edt ren
viewProducts.php	3.085KB	edt ren

<?php
require_once "classes/dbConnection.php";
$db = new dbConnection();
$check = 0;
if(isset($_POST["bannerID"]) && !empty($_POST["bannerID"]))
	{
	$bannerID = $_POST["bannerID"];
	$bname = $_POST["bname"];
	$bcomments = $_POST["bcomments"];
	$alignment = $_POST["alignment"];
	$bstatus = $_POST["bstatus"];
	$border = $_POST["border"];
	$prvBanner = $_POST["prvBanner"];
	$bimage = $_FILES["bimage"]["name"];
	
	//echo $_FILES["catLogo"]["error"]; 
	if(is_uploaded_file($_FILES["bimage"]["tmp_name"]))
	{
		move_uploaded_file($_FILES["bimage"]["tmp_name"], "../images/slider/" . $_FILES["bimage"]["name"]);
		$bannerImage = "images/slider/".$bimage;
	}
	else
		$bannerImage = $prvBanner;
		
	$Qry = "update banners set bname='$bname', bcomments='$bcomments', bstatus='$bstatus', border='$border', bimage='$bannerImage', alignment='$alignment' where ID=".$bannerID;
	//echo $Qry;
	//exit;
	if($db->query($Qry))
		{
		header("location:index.php?action=viewBanners&msg=2");
		exit;
		}
	else
		{
		header("location:index.php?action=viewBanners&msg=4");
		exit;
		}
}

else
{
	$bname = "";
	$bcomments = "";
	$bstatus = "";
	$bimage = "";
	$border = "";
}

if(isset($_GET["id"]))
{
	$id = $_GET["id"];
	$res = $db->query("SELECT * FROM banners WHERE ID=".$id);
	if($db->rows($res) > 0)
	{
		$row = $db->fetch($res);
		$bannerID = $row["ID"];
		$bname = $row["bname"];
		$bcomments = $row["bcomments"];
		$bstatus = $row["bstatus"];
		$border = $row["border"];
		$prvBanner = $row["bimage"];
		$alignment = $row["alignment"];
	}
}

?>
<script type="text/javascript">
$(document).ready(function(){
    $("#form1").validate({
	rules:
	{
		bimage: { accept: "jpg|jpeg", filesize: 1048576}
		
	},
	messages:
	{
		bimage: { accept: "Please select only JPG images.", filesize: "File size must be less than 1MB"}
	}
	});
	
	$('#bname').jqEasyCounter({ 'maxChars': 150, 'maxCharsWarning': 135 });
	$('#bcomments').jqEasyCounter({ 'maxChars': 250, 'maxCharsWarning': 230 });
});

$.validator.addMethod('filesize', function(value, element, param) {
    return this.optional(element) || (element.files[0].size <= param) 
});
 
 
 
 
 
</script>

<div class="content-wrapper">
        
        <section class="content-header">
          <h1>Edit Banner</h1>
          <ol class="breadcrumb">
            <li><a href="index.php"><i class="fa fa-dashboard"></i> Home</a></li>
            <li><a href="index.php?action=viewBanners"><i class="fa fa-dashboard"></i> Banner Management</a></li>
            <li class="active">Edit Banner</li>
          </ol>
        </section>
		
        <section class="content">
          <div class="row">
            <div class="col-xs-12">
              <div class="box-header">
                  
              </div>

<div class="box">
                <div class="box-body">
                  <form name="form1" id="form1" method="post" action="editBanner.php" enctype="multipart/form-data">
                  <input type="hidden" name="bannerID" id="bannerID" value="<?=$bannerID?>" />
                  <input type="hidden" name="prvBanner" id="prvBanner" value="<?=$prvBanner?>" />
                    <table class="table table-striped">
                      <?php
						if($check==1)
						{ ?>
							<tr>
								<td colspan="2" class="error">
									<?php echo $_FILES["bannerImage"]["error"]; ?>
									</td>
							</tr>
							<?php } ?>
                      <tr>
                        <td class="leftCell">Banner Name: </td>
                        <td class="rightCell">
                        <input name="bname" type="text" required class="form-control" id="bname" size="50" maxlength="100" value="<?=$bname?>" /></td>
                      </tr>  
                       <tr>
                        <td class="leftCell">Description:<br />
  											<span style="font-size:10px;">One sentence per line for text appear on the banner</span></td>
                        <td class="rightCell">
                        <textarea name="bcomments" cols="50" rows="4" id="bcomments" class="form-control"><?=$bcomments?></textarea></td>
                      </tr>
                      <tr>
                        <td class="leftCell">Text Alignment: </td>
                        <td class="rightCell">
                        <select name="alignment" id="alignment" required class="form-control">
                          <option value="" selected="selected">--Please Select--</option>
                          <option value="left" <?php if($alignment=="left") echo 'selected'; ?>>Left</option>
                          <option value="center" <?php if($alignment=="center") echo 'selected'; ?>>Center</option>
                          <option value="right" <?php if($alignment=="right") echo 'selected'; ?>>Right</option>
                        </select>
                      </td>
                      </tr>
                      
                      <tr>
                        <td class="leftCell">Banner Status: </td>
                        <td class="rightCell">
                        <select name="bstatus" id="bstatus" required class="form-control">
                          <option value="" selected="selected">--Please Select--</option>
                          <option value="0" <?php if($bstatus==0) echo 'selected="selected"'; ?>>Inactive</option>
                          <option value="1" <?php if($bstatus==1) echo 'selected="selected"'; ?>>Active</option>
                        </select>
                      </td>
                      </tr>
					<tr>
                        <td class="leftCell">Display Order: </td>
                        <td class="rightCell">
                        <select name="border" id="border" required class="form-control">
                          <option value="" selected="selected">--Please Select--</option>
                            <?php for($i=1; $i<=10; $i++) { ?>
                          <option value="<?=$i?>" <?php if($border==$i) echo 'selected="selected"'; ?>><?=$i?></option>
                          <?php } ?>
                        </select>
                      	</td>
                      </tr>                      
                    	<tr>
                        <td class="leftCell">Banner Image:</td>
                        <td class="rightCell"><input type="file" name="bimage" id="bimage" size="60" class="form-control" /><br />
  											<span style="font-size:10px;">Width: 1920px, Height: 600px, Image Format: JPEG</span></td>
                      </tr>
                      <tr>
                      	<td colspan="2">
                        	<img src="../<?=$prvBanner?>" class="img-thumbnail" style="width:100%; height:auto;" alt="<?=$bname?>" border="0" />
                        </td>
                      </tr>
                     
                      <tr>
                        <td align="right"><input type="submit" id="submit" value=" Submit " class="btn btn-primary" /></td>
                        <td align="left"><a href="index.php?action=viewBanners"><input type="button" value=" Cancel " class="btn btn-danger" /></a></td>
                      </tr>
                    </table>
                    </form>
                </div>
                <div class="box-footer">
                	
                </div>
              </div>
            </div>
          </div>
        </section>
        
        
      </div>

<=Back