403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Old Sites/dastafiles/admin/lib/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Old Sites/dastafiles/admin/lib/misc-functions.php
<?php

function strip($string) {
	# Function to strip string special chars to prevent SQL injection
	$string=get_magic_quotes_gpc() ? stripslashes($string) : $string;
	$string=function_exists("mysql_real_escape_string") ? mysql_real_escape_string($string) : mysql_escape_string($string);
	return $string;
}

function escape_chars($subject, $dn=false, $ignore=null) {
	$search=array_flip($dn ? array('\\', ',', '=', '+', '<', '>', ';', '"', '#') : array('\\', '*', '(', ')', "\x00"));

	if(is_array($ignore)) $ignore=array_values($ignore);
	for($char=0; isset($ignore[$char]); $char++) unset($search[$ignore[$char]]);

	$search=array_keys($search);
	$replace=array();
	foreach($search as $char) $replace[]=sprintf("\\%02x", ord($char));

	return str_replace($search, $replace, $subject);
}

function authenticate_user($username, $password) {
	$user_exists_d=mysql_query("SELECT id FROM members WHERE enabled=1 AND username='".$username."' AND passwd='".$password."'");
	
	if(mysql_num_rows($user_exists_d)==1) {
		$user_exists_i=mysql_fetch_array($user_exists_d);
		return $user_exists_i["id"];
	}
	else return false;
}

function unix_time_to_timestamp($date) {
	$unix_time=substr($date, 0, 10);
	$dt=new DateTime("@".$unix_time);
	$timestamp=$dt->format("Y-m-d H:i:s");
	$additional_hours=substr($date, 15, 1);
	
	$timestamp=date("Y-m-d H:i:s", strtotime($timestamp)+$additional_hours*3600);
	
	return $timestamp;
}

function convert_date($date_string) {
	return unix_time_to_timestamp(substr($date_string, 6, -2));
}

function no_null_date($value) {
	$return_value=($value!=NULL ? convert_date($value) : "");
	return $return_value;
}

function get_countries_list() {
	$return_value="";
	
	$countries_d=mysql_query("SELECT * FROM ".DB_PREFIX."countries ORDER BY name ASC");
	while($countries_i=mysql_fetch_array($countries_d)) {
		$return_value.='<option value="'.$countries_i["id"].'">'.$countries_i["name"].'</option>';
	}

	return $return_value;
}

function get_prefectures_list() {
	$return_value="";
	
	$prefectures_d=mysql_query("SELECT * FROM ".DB_PREFIX."prefectures ORDER BY name ASC");
	while($prefectures_i=mysql_fetch_array($prefectures_d)) {
		$return_value.='<option value="'.$prefectures_i["id"].'">'.$prefectures_i["name"].'</option>';
	}

	return $return_value;
}

function get_cities_list() {
	$return_value="";
	
	$cities_d=mysql_query("SELECT c.id, p.name pname, c.name cname FROM ".DB_PREFIX."cities c INNER JOIN ".DB_PREFIX."prefectures p ON p.id=c.prefecture_id ORDER BY p.name ASC, c.name ASC");
	while($cities_i=mysql_fetch_array($cities_d)) {
		$return_value.='<option value="'.$cities_i["id"].'">'.$cities_i["cname"].' ('.$cities_i["pname"].')</option>';
	}

	return $return_value;
}

function get_physical_objects_list() {
	$return_value="";
	
	$physical_objects_d=mysql_query("SELECT * FROM ".DB_PREFIX."physical_objects ORDER BY name ASC");
	while($physical_objects_i=mysql_fetch_array($physical_objects_d)) {
		$return_value.='<option value="'.$physical_objects_i["id"].'">'.$physical_objects_i["name"].' ('.$physical_objects_i["id"].')</option>';
	}

	return $return_value;
}

function get_registered_students_list() {
	$return_value="";
	
	$registered_students_d=mysql_query("SELECT * FROM ".DB_PREFIX."registered_students ORDER BY greek_last_name ASC, greek_first_name ASC");
	while($registered_students_i=mysql_fetch_array($registered_students_d)) {
		$return_value.='<option value="'.$registered_students_i["id"].'">'.$registered_students_i["greek_last_name"].' '.$registered_students_i["greek_first_name"].' ('.$registered_students_i["academic_id_number"].')</option>';
	}

	return $return_value;
}

function get_providers_list() {
	$return_value="";
	
	$providers_d=mysql_query("SELECT * FROM ".DB_PREFIX."providers ORDER BY name ASC");
	while($providers_i=mysql_fetch_array($providers_d)) {
		$return_value.='<option value="'.$providers_i["id"].'">'.$providers_i["name"].' ('.$providers_i["afm"].')</option>';
	}

	return $return_value;
}

function get_country($id) {
	$country_i=mysql_fetch_array(mysql_query("SELECT * FROM ".DB_PREFIX."countries WHERE id='".$id."'"));

	return $country_i["name"];
}

function get_prefecture($id) {
	$prefecture_i=mysql_fetch_array(mysql_query("SELECT * FROM ".DB_PREFIX."prefectures WHERE id='".$id."'"));

	return $prefecture_i["name"];
}

function get_city($id) {
	$return_value="";
	
	$city_i=mysql_fetch_array(mysql_query("SELECT c.id, p.name pname, c.name cname FROM ".DB_PREFIX."cities c INNER JOIN ".DB_PREFIX."prefectures p ON p.id=c.prefecture_id WHERE c.id='".$id."'"));

	return $city_i["cname"].' ('.$city_i["pname"].')';
}

function get_physical_objects_finished($finished_position_id) {
	$return_value="";
	
	$physical_objects_d=mysql_query("SELECT p.name pname FROM ".DB_PREFIX."finished_positions_to_physical_objects f INNER JOIN ".DB_PREFIX."physical_objects p ON p.id=f.id_physical_object WHERE f.id_finished_position='".$finished_position_id."' ORDER BY p.name ASC");
	while($physical_objects_i=mysql_fetch_array($physical_objects_d)) {
		$return_value.=$physical_objects_i["pname"].' | ';
	}

	return $return_value;
}

function get_registered_student($id) {
	$registered_student_i=mysql_fetch_array(mysql_query("SELECT * FROM ".DB_PREFIX."registered_students WHERE id='".$id."'"));

	return $registered_student_i["greek_last_name"].' '.$registered_student_i["greek_first_name"].' ('.$registered_student_i["academic_id_number"].')';
}

function get_provider($id) {
	$provider_i=mysql_fetch_array(mysql_query("SELECT * FROM ".DB_PREFIX."providers WHERE id='".$id."'"));

	return $provider_i["name"].' ('.$provider_i["afm"].')';
}

function return_academics($id) {
	$academics_i=mysql_fetch_array(mysql_query("SELECT a.department fad, a.school fas, i.name fin FROM ".DB_PREFIX."academics a INNER JOIN ".DB_PREFIX."institutions i ON a.institution_id=i.id WHERE a.id='".$id."'"));

	return 'Πανεπιστήμιο: '.$academics_i["fin"].'<br />Σχολή: '.$academics_i["fas"].'<br />Τμήμα: '.$academics_i["fad"];
}

function name_to_sex($first_name) {
	$first_name=mb_strtoupper($first_name, "UTF-8");
	$first_name=str_replace("Ά", "Α", $first_name);
	$first_name=str_replace("Έ", "Ε", $first_name);
	$first_name=str_replace("Ή", "Η", $first_name);
	$first_name=str_replace(array("Ί", "Ϊ", "ΐ"), "Ι", $first_name);
	$first_name=str_replace("Ό", "Ο", $first_name);
	$first_name=str_replace(array("Ύ", "Ϋ", "ΰ"), "Υ", $first_name);
	$first_name=str_replace("Ώ", "Ω", $first_name);
	$first_name=str_replace("ς", "Σ", $first_name);
	
	$first_name=str_replace("-", " ", $first_name);
	$first_name=strtok($first_name, " ");
	
	$sex_i=mysql_fetch_array(mysql_query("SELECT sex FROM sex_names WHERE first_name='".$first_name."'"));
	if($sex_i["sex"]) return $sex_i["sex"];
	
	
}

?>

Youez - 2016 - github.com/yon3zu
LinuXploit