Shell Bypass 403 GE-C666C

Ghost Exploiter Team Official

Directory >> /home2/ajwaeing/www/administrator/

File / Folder	Size	Action
.	-
bootstrap	--	ren
classes	--	ren
dist	--	ren
images	--	ren
js	--	ren
plugins	--	ren
addBanner.php	6.448KB	edt ren
addCategory.php	4.82KB	edt ren
addPage.php	7.323KB	edt ren
addProduct.php	5.96KB	edt ren
changePassword.php	3.068KB	edt ren
delBanner.php	0.54KB	edt ren
dishcode.php	0.269KB	edt ren
editBanner.php	7.394KB	edt ren
editCategory.php	5.238KB	edt ren
editPage.php	9.358KB	edt ren
editStaff.php	6.956KB	edt ren
error_log	0.199KB	edt ren
header.php	2.023KB	edt ren
home.php	0.037KB	edt ren
index.php	5.087KB	edt ren
lock-screen.php	3.122KB	edt ren
lock.php	0.662KB	edt ren
login.php	3.983KB	edt ren
logout.php	0.091KB	edt ren
pager.php	2.325KB	edt ren
pages.php	0.229KB	edt ren
sidebar.php	1.964KB	edt ren
styles.css	0.637KB	edt ren
viewBanners.php	5.173KB	edt ren
viewCategories.php	3.404KB	edt ren
viewPages.php	4.314KB	edt ren
viewProducts.php	3.085KB	edt ren

<?php
require_once "classes/dbConnection.php";
$db1 = new dbConnection();

?>
<script type="text/javascript">
function func(delUrl)
{
	var answer = confirm("Are you sure you want to delete?")
		if (answer)
		{
			document.location = delUrl;
		}
	else
		{
	
		}
}
</script>
<div class="content-wrapper">
        
        <section class="content-header">
          <h1>Banner Management</h1>
          <ol class="breadcrumb">
            <li><a href="index.php"><i class="fa fa-dashboard"></i> Home</a></li>
            <li class="active">Banner Management</li>
          </ol>
        </section>
		
        <section class="content">
          <div class="row">
            <div class="col-xs-12">
              <div class="box-header">
                  <span class="pull-right col-sm-3 text-right">
                  <a href="index.php?action=addBanner" class="btn btn-primary">Add Banner</a></span>
                  <span class="pull-left col-sm-9 text-danger">

<?php 
                    if(isset($_GET["msg"]))
                        {
                        $newMsg = $_GET["msg"];
                        $Msg->showInformation($newMsg, "Banner");
                        }
                     ?>

</span>
              </div>

<div class="box">
                <div class="box-body">
                  <table class="table table-bordered table-striped">
                      <?php
												$sQry = "select ID, bname, bstatus, bimage from banners order by border asc";
												$res = $db1->query($sQry);
												$Num = $db1->rows($res);
												//echo $Num;
												$t="#fff";
												if($Num > 0)
												{
												while($Row = $db1->fetch($res))
												{
													if($t=="#fff")
														$t = "#def";
													else
														$t = "#fff";
												?>
												 <tr style="background-color:<?=$t?>;">
													<td style="width:150px;">Banner Name:</td>
													<td style="width:200px;"><strong><?=$Row["bname"]?></strong></td>
													<td rowspan="4" class="text-right">
													<a href="index.php?action=editBanner&id=<?=$Row["ID"]?>">
														<img src="../<?=$Row["bimage"]?>" alt="<?=$Row["bname"]?>" border="0" class="img-thumbnail" style="width:100%; height:auto;" />
														</a>
													</td>
												</tr>
												<tr style="background-color:<?=$t?>;">
													<td>Banner Status</td>
													<td><strong><?php if($Row["bstatus"]==0) echo "Disabled"; else echo"Enabled"; ?></strong></td>
												</tr>
												<tr style="background-color:<?=$t?>;">
													<td>&nbsp;</td>
													<td><a href="index.php?action=editBanner&id=<?=$Row["ID"]?>">Edit</a>
													</td>
												</tr>
												<tr style="background-color:<?=$t?>;">
													<td>&nbsp;</td>
													<td><a href="javascript:func('delBanner.php?id=<?=$Row["ID"]?>')">Delete</a></td>
												</tr>
											
											 <?php
													}
												}
												else
												{
													echo "No Data Available";
												}
												?>
                      
                    </table>
                </div>
                <div class="box-footer">
                	
                </div>
              </div>
            </div>
          </div>
        </section>
        
        
      </div>

<div id="body-area">
<table width="98%" border="0" cellspacing="0" cellpadding="0" style="background-color:#fff;">
  <tr style="background-color:#FFFFFF; height:30px; vertical-align:middle;">
    <td colspan="3" class="pageTitle">Home Page Banners</td>
  </tr>
    <tr>
				<td colspan="3" class="errors">
				<?php 
				if(isset($_GET["msg"]))
					{
					$newMsg = $_GET["msg"];
					$Msg->showInformation($newMsg, "Banner");
					}
				 ?>
				</td>
	</tr>

<?php
  $sQry = "select ID, bname, bstatus, bimage from banners order by border asc";
  $res = $db1->query($sQry);
  $Num = $db1->rows($res);
  //echo $Num;
  $t="#fff";
  if($Num > 0)
  {
	while($Row = $db1->fetch($res))
	{
		if($t=="#fff")
			$t = "#def";
		else
			$t = "#fff";
  ?>
   <tr style="background-color:<?=$t?>;">
    <td>Banner Name:</td>
    <td><strong><?=$Row["bname"]?></strong></td>
    <td rowspan="4">
    <a href="index.php?action=editBanner&id=<?=$Row["ID"]?>">
      <img src="../thumb.php?src=<?=$Row["bimage"]?>&wmax=250&hmax=100" width="250" height="100" alt="<?=$Row["bname"]?>" border="0" />
      </a>
    </td>
  </tr>
  <tr style="background-color:<?=$t?>;">
    <td>Banner Status</td>
    <td><strong><?php if($Row["bstatus"]==0) echo "Disabled"; else echo"Enabled"; ?></strong></td>
  </tr>
  <tr style="background-color:<?=$t?>;">
    <td>&nbsp;</td>
    <td><a href="index.php?action=editBanner&id=<?=$Row["ID"]?>">Edit</a>
    </td>
  </tr>
  <tr style="background-color:<?=$t?>;">
    <td>&nbsp;</td>
    <td><a href="javascript:func('delBanner.php?id=<?=$Row["ID"]?>')">Delete</a></td>
  </tr>

<?php
		}
	}
	else
	{
		echo "No Data Available";
	}
	?>
  <tr>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
</table>

</div>

<=Back