403WebShell

????JFIF??x?x????'403WebShell403Webshell

Server IP : 79.136.114.73 / Your IP : 216.73.216.61
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/www/evacuationplans.astacus.se/login/

Upload File :

[ Back ]

Current File : /var/www/evacuationplans.astacus.se/login/addproject.php

<?php
		session_start();

		if( (($_SESSION['EP_SSO_INFO'])=='' )){
					header('location: http://www.evacuationplans.se/loggain.php');
		}

		require_once("createNewProject.php");

		
		$Projectname = "EP_".$_POST['Projectname'];
		

	
		$CompanyId = $_SESSION['EP_SSO_INFO'][1];
	
		$SystemUserId = $_SESSION['EP_SSO_INFO'][0];
		$UserGroupId = $_SESSION['EP_SSO_INFO'][4];
		$Name = $_SESSION['EP_SSO_INFO'][2];
		$Email = $_SESSION['EP_SSO_INFO'][3];
		$Phone = $_SESSION['EP_SSO_INFO'][5];
		$Orderdate = date("Y-m-d");

		$Type = $_POST['ordertype'];


		if($Type == "Evacuation plan"){
			
			
$Description = "Order type: ".$Type." <br><br>Objects name: ".$_POST['Projectname']."
<br><br>
Assembly point: ".$_POST['assembly']."
<br><br>
Emergency number: ".$_POST['emergency']."
<br><br>
Situation plan: ".$_POST['situation']."
<br><br>
Map URL: ".$_POST['url']."
<br><br>
Address: ".$_POST['address']."
<br><br>
Plan rotation: ".$_POST['rotation']."
<br><br>
PDF size: ".$_POST['PDF']."
<br><br>
Print service: ".$_POST['print']."
<br><br>
Deliver with frame: ".$_POST['frame']."
<br><br><br>
Other information: ".nl2br($_POST['other'])."
";
			
		}else{
			
$Description = "Order type: ".$Type." <br><br>Objects name: ".$_POST['Projectname']."
<br><br>
Plan rotation: ".$_POST['rotation']."
<br><br>
PDF size: ".$_POST['PDF']."
<br><br>
Print service: ".$_POST['print']."
<br><br>
Deliver with frame: ".$_POST['frame']."
<br><br><br>
Other information: ".nl2br($_POST['other'])."
";
		}
		

		
		$result = createNewProject($Projectname,"EP-Project",$CompanyId,$SystemUserId ,$UserGroupId ,$Name,$Email,$Phone,1,date("Y-m-d h:m"),18,0,$Orderdate);	
		

		$LogDate = date("Y-m-d H:i:s");  
		$ProjectId = $result;
		
		$Message = "<i>Your new project $Projectname ($result) has now been created!</i><br><br>".$Description;
		//sendNotification($result,"[EP] A new project is created: ".$CompanyId."_".$Projectname." ($ProjectId)!",$Message);
		
		$sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',4,'');";
		$result = mysql_query($sql);


				$headers  = 'MIME-Version: 1.0' . "\r\n";
				$headers .= "Content-type: text/html; charset=iso-8859-1\r\n"; 
				$headers .= "Date: ".date("r")."\r\n";
				$headers .= "From: noreply@astacus.se\r\n";
				$headers .= "Reply-To: noreply@astacus.se\r\n";
				$headers .= "Return-Path: astacusproject@astacus.se\r\n";

	mail("utrymningsplaner@astacus.se", "EP - New Project: ".$ProjectId, $Message."<br><br>Best regards, ".$_SESSION['EP_SSO_INFO'][3]." <br><br>To answer this message, please log in to www.evacuationplans.se and add a message to the communication log.", $headers);

mail($_SESSION['EP_SSO_INFO'][3], "EP - Project Confirmation: ".$ProjectId, "Dear ".$Name.",<br><br>This is a confirmation that the following project details has been recevied by us: <br><br>". $Message."<br><br>Best regards, Astacus Evacuation Plan Team", $headers);
				
				
$sql  = "delete from ICADNotification where ProjectId = $ProjectId";
		mysql_query($sql);
		$x = 1;
		while($x < 6){
			mysql_query("insert into ICADNotification values(Null,$x,$SystemUserId,$ProjectId);");
			$x++;
		}


		header("Location: uploadfiles.php?projectid=".$ProjectId);
	
?>

Youez - 2016 - github.com/yon3zu
LinuXploit