403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/alliancealliance/webadmin/plupload/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/alliancealliance/webadmin/plupload/ajax_delete_image.php
<?php
	include '../config.php';
	// Check if the user is logged in

	if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1')) {
		header("Location: ../login.php");
		exit;
	}

	//delete file
	if($_POST["clean_temp"] == 1){
		//delete temp file in plupload/uploads which over 1 week
		//$time_ago = 1 * 24 * 60 * 60;

		/*$files = glob('uploads/*');
		foreach($files as $file) {
			$file_modifiy_time = filemtime($file);
			if($file_modifiy_time < (time() - $time_ago)){
				unlink($file);
			}
		}*/

		$sql = "select * from temp_file where createdate <= ?";
		$parameters = array(date("Y-m-d H:i:s", strtotime("-1 week")));
		if (!($sth = $dbh->prepare($sql))) {
			throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
			exit;
		}

		if (!$sth->execute($parameters)) {
			throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
			exit;
		}
		while($file_info = $sth->fetch(PDO::FETCH_ASSOC)){

			if(is_file("uploads/".$file_info{"file_name"}))
			{
				if (!unlink("uploads/".$file_info{"file_name"})){

				} else {
					$sql2 = "delete from temp_file where file_id = ?";
					$parameters2 = array($file_info{"file_id"});
					if (!($sth2 = $dbh->prepare($sql2))) {
						throw new Exception('[' . $sth2->errorCode() . ']: ' . print_r($sth2->errorInfo()));
						exit;
					}

					if (!$sth2->execute($parameters2)) {
						throw new Exception('[' . $sth2->errorCode() . ']: ' . print_r($sth2->errorInfo()));
						exit;
					}
				}
			}

		}

		echo ("success");

	}else{
		$file_id = $_POST["file_id"];
		$sql = "delete from temp_file where file_id = ?";
		$parameters = array($file_id);
		if (!($sth = $dbh->prepare($sql))) {
			throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
			exit;
		}

		if (!$sth->execute($parameters)) {
			throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
			exit;
		}
		$file_info = $sth->fetch(PDO::FETCH_ASSOC);

		if(is_file("uploads/".$file_info{"file_name"})) {
			if (!unlink("uploads/" . $file_info{"file_name"})) {
				echo("fail");
			} else {
				echo("success");
			}
		}
	}


?>


Youez - 2016 - github.com/yon3zu
LinuXploit