403Webshell
Server IP : 172.64.80.1  /  Your IP : 172.70.50.62
Web Server : Apache
System : Linux mail.federalpolyede.edu.ng 5.10.0-32-amd64 #1 SMP Debian 5.10.223-1 (2024-08-10) x86_64
User : federalpolyede.edu.ng_idh35skikv ( 10000)
PHP Version : 7.4.33
Disable Function : opcache_get_status
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/vhosts/federalpolyede.edu.ng/httpdocs/eClass/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/vhosts/federalpolyede.edu.ng/httpdocs/eClass/new_material_process.php
<?php
//
//
// $name= $_FILES['user_file1']['name'];
//
//$tmp_name= $_FILES['user_file1']['tmp_name'];
//
//echo $size= $_FILES['user_file1']['size'];
//
////$path= "Uploads/Files/";
//
//if (isset($name)) {
//
//    if (empty($name))
//    {
//        header('location:' . 'new_material.php?id=3');
//    }
//    else if ((!empty($name)) && ($size < 3145728))
//    {
////        move_uploaded_file($tmp_name, $path . $name);
////        echo 'Uploaded!';
//    }
//    else
//    {
//        header('location:' . 'new_material.php?id=4');
//    }
//}

/**
 * Created by PhpStorm.
 * User: adisa
 * Date: 2016-03-24
 * Time: 06:01 PM
 */
session_start();
extract($_POST);
$staffID=$_SESSION['staffID'];
//if($password==$password2) {


    require('../connect.php');
    $db = db_connect();

    $material = $_FILES['user_file1'];
    $folder = "image/";
    $material_name = $_FILES['user_file1']['name'];
$fileT=explode('.',$material_name);
    $material_type = $_FILES['user_file1']['type'];
    $material_tmp = $_FILES['user_file1']['tmp_name'];
    $material_size = $_FILES['user_file1']['size'];

if ($material_size>3145728){
    header('location:' . 'new_material.php?id=4');
}else {

    $old = $_FILES['user_file1']['tmp_name'];
//    $staffID_pic = str_replace("/", "", $courseID);
    $new = "course_material/1_" . $courseID . "." . $fileT[1];
//echo filetype($new);
//    die();

     $file_check = "select * from uploading_tb where courseID='$courseID' and mode=1";
    $file_check = $db->query($file_check);
    $file_count = $file_check->rowCount();
    $file_count += 1;
    if ($file_count > 0) {
        $new_filename = "course_material/1_" . $courseID . "_" . $file_count . "." . $fileT[1];
    } else {
        $new_filename = "course_material/1_" . $courseID . "_1." . $fileT[1];
    }
//echo $new_filename;
    if (file_exists($new_filename)) {
        echo
        "<script>alert('Record Already Exist')</script>
     header('location:' . 'new_material.php?id=1')";
    } else {

//     die();
//die();
//    $new = "course_material/" . $courseID . ".jpg";
//     echo $new_filename;
//     die();
        move_uploaded_file($old, $new_filename);
        $d_time = date("Y-m-d H:i:s");

//     echo $result_insert = "INSERT INTO `uploading_tb` (`sn`, `courseID`, `filename`, `filetype`, `mode`, `timeFrom`, `timeTo`, `staffID`, `timeUnpload`, `timeRemoved`, `status`) VALUES (NULL,'$courseID', '$new_filename', '0', 1, '$d_time', '$d_time', '$staffID', '$d_time', '$d_time', 1)";
        $result_insert = "INSERT INTO `uploading_tb` (`sn`, `courseID`, `filename`, `filetype`, `mode`, `timeFrom`, `timeTo`, `staffID`, `timeUnpload`, `timeRemoved`, `status`) VALUES (NULL,?,?,?,?,?,?,?,?,?,?)";
        $result_insert_p = $db->prepare($result_insert);
        $result_insert_p->execute([$courseID, $new_filename, $fileT[1], 1, $d_time, $d_time, $staffID, $d_time, $d_time, 1]);

//die();

        //======================mailer======================
        $query="SELECT * FROM coursepool where sn='$courseID'";
        $rs=$db->query($query);
        $count=$rs->rowCount();
        $rs_fetch=$rs->fetch(PDO::FETCH_BOTH);
        $rs_levelID=$rs_fetch['levelID'];
        $rs_courseCode=$rs_fetch['courseCode'];
        $rs_semester=$rs_fetch['semester'];
        $rs_dept=$rs_fetch['dept'];
//     die();
        $lec="select * from staff_biodata where staffID='$staffID'";
        $lect=$db->query($lec);
        $lect->rowCount();
        if ($lect->rowCount()>0){
            $lectu=$lect->fetch(PDO::FETCH_BOTH);
            $lecturer=$lectu['fullname'];
            $type='Course Material';
            $courseCode=$rs_fetch['courseCode'];

            require_once('sendMail.php');

        }
        header('location:' . 'new_material.php?id=2');
    }
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit