403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Old Sites/ees_request/externalpages/ams/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Old Sites/ees_request/externalpages/ams/appStatus_editForm_appForm.php
<?php
    include('config.php');
    define( '_JEXEC', 1 );
    define('JPATH_BASE', dirname(__FILE__) );
    define( 'DS', DIRECTORY_SEPARATOR );
    require_once ( JPATH_BASE .DS.'includes'.DS.'defines.php' );
    require_once ( JPATH_BASE .DS.'includes'.DS.'framework.php' );
    require_once ( JPATH_BASE .DS.'libraries'.DS.'joomla'.DS.'factory.php' );

    $mainframe =& JFactory::getApplication('site');
    $user =& JFactory::getUser(); 
    
                $db_connection=mysql_connect($host, $username, $password, $db_name);

                if (!$db_connection) {
                    die("<br><b>Database Error:</b> Could not connected. Try again later.<br>");
                    exit;
                }
                @mysql_select_db($db_name, $db_connection) or die("Unable to select database.");
                mysql_query("SET NAMES 'utf8'", $db_connection);      
    
    if (!$user->guest) {    
            
        if (isset($_POST['save_button'])) {
          
            $Q = "UPDATE application_form SET userNotes='".$_POST['userNotes']."', semesterTeaching='".$_POST['semesterTeaching']."' WHERE lessonId='".$_POST['lessonId']."' AND userId='".$user->id."' AND departmentId='".$_POST['departmentId']."' AND sectionId='".$_POST['sectionId']."' AND academicYear='".$_POST['academicYear']."'";  
            
            if(mysql_query($Q)) {
                echo "<b><font color='blue'>Οι Αλλαγές σας Αποθηκεύτηκαν επιτυχώς!</font></b><br>";
                echo "[<a href='?option=com_content&view=article&id=47'> Συνέχεια </a>]"; 
            }
            else {
                echo "<font color='red'>Υπήρξε Σφάλμα κατά την Επεξεργασία της εγγραφής σας.</font><br><br>";
                echo "[<a href='?option=com_content&view=article&id=47'> Πίσω </a>]";     
            }
            unset($_POST['save_button']);  
        }
        else {
        
        $Q = "SELECT * FROM lesson where id='".$_GET['lId']."' ORDER BY semester,lessonTitle";
        $result = mysql_query($Q);
        $lesson = mysql_fetch_array($result);
        
            $Q2 = "SELECT * FROM application_form,lesson WHERE application_form.lessonId=lesson.id AND lessonId='".$_GET['lId']."' AND userId='".$user->id."' AND application_form.departmentId='".$_GET['dId']."' AND application_form.sectionId='".$_GET['sId']."' AND academicYear='".$_GET['year']."' ORDER BY semester,lessonTitle";
            $result2 = mysql_query($Q2);
            
            if( mysql_num_rows($result2) > 0 ) {
                $row = mysql_fetch_array($result2);

         ?>
         <br>
         <form method="POST" action="?option=com_content&view=article&id=50">
                <table>  
                <input type="hidden" name="lessonId" value="<?php echo $row['lessonId']; ?>">
                <input type="hidden" name="departmentId" value="<?php echo $row['departmentId']; ?>">
                <input type="hidden" name="sectionId" value="<?php echo $row['sectionId']; ?>">
                <input type="hidden" name="academicYear" value="<?php echo $row['academicYear']; ?>">  
                <tr>
                    <tr>
                        <td>Τίτλος Μαθήματος</td><td><?php echo $lesson['lessonTitle']; ?></td> 
                    </tr>
                    <tr>
                        <td>Εξάμηνο</td><td><?php echo $lesson['semester'];?></td>
                    </tr>
                    <tr>
                        <td>Εξάμηνα Διδασκαλίας</td><td>
                                <select name="semesterTeaching" >
                                <?php
                                    for($semester = 0; $semester <= 50; $semester++) {
                                        if($row['semesterTeaching'] == $semester ) {echo "<option selected id='$semester'>$semester</option>"; }
                                        else { echo "<option id='$semester'>$semester</option>";}
                                    }       
                                ?>
                                </select>        
                        </td>
                    </tr>
                    <tr>
                        <td>Χρήση Εγκεκριμένων Σημειώσεων</td><td>
                                <select name="userNotes">
                                <?php
                                    if( $row['userNotes'] == 'Όχι' ) {
                                        echo "<option selected id='0' value='Όχι'>Όχι</option>";
                                        echo "<option id='1' value='Ναί'>Ναί</option>";
                                    }
                                    else {
                                        echo "<option id='0' value='Όχι'>Όχι</option>"; 
                                        echo "<option selected id='1' value='Ναί'>Ναί</option>";
                                    }
                                ?>
                                </select>        
                        </td>
                    </tr>
                    <tr>
                        <td colspan="2" align="right"><input type="reset" value="Απαλοιφή"> <input type="submit" name="save_button" value="Αποθήκευση"></td>
                    </tr>
                </table>
            </form>     
<?php
            }
            else {
                echo "<br><font color='red'Δεν βρέθηκε Μάθημα για Επεξεργασία</font>";   
            }
        }
               
    }
    else {
        echo "<br><font color='red'>Απογορεύεται η πρόσβαση. Δεν είστε συνδεδεμένοι!</fpnt>";
    }
?>

Youez - 2016 - github.com/yon3zu
LinuXploit