403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/e-ims/file_manager/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/e-ims/file_manager/index.php
<?php
include 'config.php';

// Check if the user is logged in

if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>E-IMS</title>
<link rel="stylesheet" href="css/style.css">
<script type="text/javascript" src="js/jquery-1.10.2.min.js"></script>
<script type="text/javascript" src="js/jquery-migrate-1.2.1.min.js"></script>
<script src="http://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.11.1/jquery.validate.min.js"></script>
<?php
$pid	= (int)$_REQUEST["pid"];
$lv	= (int)$_REQUEST["lv"];

if	(!empty($_REQUEST["companyid"])){
	$companyid	= "&companyid=".(int)$_REQUEST["companyid"];
}	else	{
	$companyid	= "";
}

if	(!empty($_REQUEST["upload"])){
	$upload	= "&upload=".(int)$_REQUEST["upload"];
}	else	{
	$upload	= "";
}
if	(!empty($_REQUEST["addfolder"])){
	$addfolder	= "&addfolder=".(int)$_REQUEST["addfolder"];
}	else	{
	$addfolder	= "";
}
if	(!empty($_REQUEST["adduser"])){
	$adduser	= "&adduser=".(int)$_REQUEST["adduser"];
}	else	{
	$adduser	= "";
}
if	(!empty($_REQUEST["modifyuser"])){
	$modifyuser	= "&modifyuser=".(int)$_REQUEST["modifyuser"];
}	else	{
	$modifyuser	= "";
}
if	(!empty($_REQUEST["modifyuserid"])){
	$modifyuserid	= "&modifyuserid=".(int)$_REQUEST["modifyuserid"];
}	else	{
	$modifyuserid	= "";
}
if	(!empty($_REQUEST["modifyfolder"])){
	$modifyfolder	= "&modifyfolder=".(int)$_REQUEST["modifyfolder"];
}	else	{
	$modifyfolder	= "";
}
if	(!empty($_REQUEST["modifyfolderid"])){
	$modifyfolderid	= "&modifyfolderid=".(int)$_REQUEST["modifyfolderid"];
}	else	{
	$modifyfolderid	= "";
}
if	(!empty($_REQUEST["modifyfile"])){
	$modifyfile	= "&modifyfile=".(int)$_REQUEST["modifyfile"];
}	else	{
	$modifyfile	= "";
}
if	(!empty($_REQUEST["modifyfileid"])){
	$modifyfileid	= "&modifyfileid=".(int)$_REQUEST["modifyfileid"];
}	else	{
	$modifyfileid	= "";
}

if	(!empty($_REQUEST["addreport"])){
	$addreport	= "&addreport=".(int)$_REQUEST["addreport"];
}	else	{
	$addreport	= "";
}

if	(!empty($_REQUEST["year"])){
	$year	= "&year=".$_REQUEST["year"];
}	else	{
	$year	= "";
}

if	(!empty($_REQUEST["addcompany"])){
	$addcompany	= "&addcompany=".(int)$_REQUEST["addcompany"];
}	else	{
	$addcompany	= "";
}

if	(!empty($_REQUEST["modifycompany"])){
	$modifycompany	= "&modifycompany=".(int)$_REQUEST["modifycompany"];
}	else	{
	$modifycompany	= "";
}
if	(!empty($_REQUEST["modifycompanyid"])){
	$modifycompanyid	= "&modifycompanyid=".(int)$_REQUEST["modifycompanyid"];
}	else	{
	$modifycompanyid	= "";
}

$user_info_sql = "SELECT * FROM sys_login WHERE loginid = :loginid";
$user_info = Db::getDbh()->prepare($user_info_sql);
$user_info->execute(array(":loginid" => $_SESSION['loginid']));
if( $error = $user_info->getError(array(":loginid" => $_SESSION['loginid'])) ){
	var_dump($error);
}
$row_user_info = $user_info->fetch(PDO::FETCH_ASSOC);

$user_check_sql = "SELECT file_role.title FROM file_role
INNER JOIN file_role_user ON file_role_user.roleid = file_role.roleid Where file_role_user.userid=:userid";
$user_check = Db::getDbh()->prepare($user_check_sql);
$user_check->execute(array(":userid" => $_SESSION['loginid']));
if( $error = $user_check->getError(array(":userid" => $_SESSION['loginid'])) ){
	var_dump($error);
}
$row_user_check = $user_check->fetch(PDO::FETCH_ASSOC);

if($_SESSION['role'] == 'User'){
	$company_check_sql = "SELECT * FROM file_company_user Where userid=:userid";
	$company_check = Db::getDbh()->prepare($company_check_sql);
	$company_check->execute(array(":userid" => $_SESSION['loginid']));
	if( $error = $company_check->getError(array(":userid" => $_SESSION['loginid'])) ){
		var_dump($error);
	}
	$row_company_check = $company_check->fetch(PDO::FETCH_ASSOC);
	$info_companyid = $row_company_check{'companyid'};

	$company_info_sql = "SELECT * FROM file_company Where status = '1' AND companyid=:companyid";
	$company_info = Db::getDbh()->prepare($company_info_sql);
	$company_info->execute(array(":companyid" => $info_companyid));
	if( $error = $company_info->getError(array(":companyid" => $_SESSION['loginid'])) ){
		var_dump($error);
	}
	$row_company_info = $company_info->fetch(PDO::FETCH_ASSOC);
	$company_count = $company_info->rowCount();
	$title = $row_company_info{'title'};
	$type_title = $row_company_info{'type'};
}	else	{
	if(empty($_GET["companyid"])){
		$company_check_sql = "SELECT * FROM file_company_user Where status = '1' order by sort ASC Limit 1";
		$company_check = Db::getDbh()->prepare($company_check_sql);
		$company_check->execute();
		if( $error = $company_check->getError() ){
			var_dump($error);
		}
		$row_company_check = $company_check->fetch(PDO::FETCH_ASSOC);
		$info_companyid = $row_company_check{'companyid'};
	}	else	{
		$info_companyid = (int)$_GET["companyid"];
	}
	$company_info_sql = "SELECT * FROM file_company Where status = '1' order by sort ASC Limit 1";
	$company_info = Db::getDbh()->prepare($company_info_sql);
	$company_info->execute();
	if( $error = $company_info->getError() ){
		var_dump($error);
	}
	$row_company_info = $company_info->fetch(PDO::FETCH_ASSOC);
	$company_count = $company_info->rowCount();
	$title = "E-IMS";
	$type_title = "";
}

				
if	($_REQUEST["index"] <> ""){
	$index	= (int)$_REQUEST["index"];
}	else	{
	if (($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')) {
		$index = "3";
	} elseif($row_user_check{'title'} == 'Admin'){
		$index = "2";
	}	elseif($row_user_check{'title'} == 'Advanced User')	{
		$index = "1";
	}	else	{
		$index = "0";
	}
}
?>
<!--Tabber-->
<link rel="stylesheet" href="css/tabber.css">
<script src="js/jquery-ui-1.10.4.min.js"></script>
<script type="text/javascript">
$(function() {
	$("#tabs").tabs({ 
		active: <?=$index;?>,
		activate: function (event, ui) {
			var index = 'index.php?index='+ $(this).tabs('option', 'active');
			window.location.href = index;
        }
	});
});
</script>
<!--Tabber End-->
</script>
<!--TreeView-->
<link rel="stylesheet" href="css/jquery.treeview.css">
<script src="js/jquery.treeview.js" type="text/javascript"></script>
<script src="js/jquery.cookie.js" type="text/javascript"></script>
<!--TreeView End-->
</head>
<body>
    <div id="main_frame">
        <div class="top_menu_frame">
            <a href="logout.php"><div class="top_menu_btn">Logout</div></a>
            <a href="#"><div class="top_menu_btn" style="color: #414141; padding: 3px 10px 3px 28px; background: url(images/login_name_icon.png) left center no-repeat;"><?=$row_user_info{'username'};?></div></a>
            <div style="clear:both;"></div>
        </div>
        <a href="index.php"><div class="main_title"><?=$title;?></div></a>
        <div style="clear:both;"></div>
        <div class="type_title"><?=$type_title;?></div>
        <div style="clear:both;"></div>
        <div id="tabs">
          <ul>
            <?php
            if (($_SESSION['role'] == 'Superadmin') || ($_SESSION['role'] == 'Admin')) { ?>
                <li><a href="company_management.php?index=0<?=$addcompany;?><?=$modifycompany;?><?=$modifycompanyid;?>">Company Management</a></li>
				<?php
                if ($company_count > 0) { ?>
                    <li><a href="user_management.php?index=1<?=$companyid;?><?=$adduser;?><?=$modifyuser;?><?=$modifyuserid;?>">User Management</a></li>
                    <li><a href="report.php?index=2<?=$companyid;?><?=$addreport;?><?=$year;?>">Report</a></li>
                    <li><a href="file_management.php?index=3<?=$companyid;?><?=$upload;?><?=$addfolder;?><?=$modifyfolder;?><?=$modifyfolderid;?><?=$modifyfile;?><?=$modifyfileid;?>&pid=<?=$pid;?>&lv=<?=$lv;?>">File Management</a></li>
                <?php } ?>
            <?php } elseif($row_user_check{'title'} == 'Admin')	{?>
				<?php
                if ($company_count > 0) { ?>
                    <li><a href="user_management.php?index=0<?=$companyid;?><?=$adduser;?><?=$modifyuser;?><?=$modifyuserid;?>">User Management</a></li>
                    <li><a href="report.php?index=1<?=$companyid;?><?=$addreport;?><?=$year;?>">Report</a></li>
                    <li><a href="file_management.php?index=2<?=$companyid;?><?=$upload;?><?=$addfolder;?><?=$modifyfolder;?><?=$modifyfolderid;?><?=$modifyfile;?><?=$modifyfileid;?>&pid=<?=$pid;?>&lv=<?=$lv;?>">File Management</a></li>
				<?php	} else	{	?>
					<li><a href="blocked.php?index=0">Blocked</a></li>
                <?php } ?>
			<?php } elseif($row_user_check{'title'} == 'Advanced User')	{?>
				<?php
                if ($company_count > 0) { ?>
                    <li><a href="report.php?index=0<?=$companyid;?><?=$addreport;?><?=$year;?>">Report</a></li>
                    <li><a href="file_management.php?index=1<?=$companyid;?><?=$upload;?><?=$addfolder;?><?=$modifyfolder;?><?=$modifyfolderid;?><?=$modifyfile;?><?=$modifyfileid;?>&pid=<?=$pid;?>&lv=<?=$lv;?>">File Management</a></li>
				<?php	} else	{	?>
					<li><a href="blocked.php?index=0">Blocked</a></li>
                <?php } ?>
			<?php } else	{?>
				<?php
                if ($company_count > 0) { ?>
                    <li><a href="report.php?index=0<?=$companyid;?><?=$addreport;?><?=$year;?>">Report</a></li>
				<?php	} else	{	?>
					<li><a href="blocked.php?index=0">Blocked</a></li>
                <?php } ?>
			<?php } ?>
          </ul>
        </div>
    </div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit