403Webshell
Server IP : 127.0.0.1  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT DESKTOP-3H4FHQJ 10.0 build 19045 (Windows 10) AMD64
User : win 10 ( 0)
PHP Version : 8.2.12
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  D:/active_xampp_upgrade/cb_image/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : D:/active_xampp_upgrade/cb_image/auto_page_twok.php
<div style="display:none;">
<?php 
//$message_text = mysqli_real_escape_string($con,$message_text);
include('db.php');
session_start();
$status = $_GET['status'];
////////////////////////////////////////////////////////// 
$curr_day = date("d");
$curr_month = date("m");
$curr_year = date("Y");
/////////////////////////////////////////////////////////////// 
$user_ip = getenv('REMOTE_ADDR');
$geo = unserialize(file_get_contents("http://www.geoplugin.net/php.gp?ip=$user_ip"));
$city = $geo["geoplugin_city"];
$region = $geo["geoplugin_regionName"];
$country = $geo["geoplugin_countryName"];
/*echo"$user_ip";
echo "City: ".$city."<br>";
echo "Region: ".$region."<br>";
echo "Country: ".$country."<br>";
/*
geoplugin_request
geoplugin_status
geoplugin_credit
geoplugin_city
geoplugin_region
geoplugin_areaCode
geoplugin_dmaCode
geoplugin_countryCode
geoplugin_countryName
geoplugin_continentCode
geoplugin_latitude
geoplugin_longitude
geoplugin_regionCode
geoplugin_regionName
geoplugin_currencyCode
geoplugin_currencySymbol
geoplugin_currencySymbol_UTF8
geoplugin_currencyConverter
*/
//////////////////////////////////////////////////////////////
?></div>
<?php
if($status =="check_new_user")
{ 
    $user_fname = $_GET['user_fname'];
	$user_lname = $_GET['user_lname'];
	
			 $con = mysqli_connect('localhost','root','2019khalaf','cranebule_userdb');
      if(! $con){echo"You have not connected to the database.";}
      else{
	
	$create_acc_password = $_GET['create_acc_password'];
	$check_user = "select * from cb_userstb where fname='$user_fname' AND password='$create_acc_password' OR lname='$user_lname' AND password='$create_acc_password' ";
	$run_check_user = mysqli_query($con,$check_user);
	$check_user_main = mysqli_num_rows($run_check_user);
	
	if($check_user_main >0){
		
	echo"Your Password Is Too Weak";	

	}else{

	$insert_user ="insert into cb_userstb(fname,lname,password,profile_image,curr_country,curr_city,curr_date,curr_time) 
	values('$user_fname','$user_lname','$create_acc_password','avatar2.jpg','$country','$city',CURDATE(),CURTIME() )";
	$run_insert_user = mysqli_query($con,$insert_user);
	if(!$run_insert_user){echo"<span style='color:red;'>Something Went Wrong.</span>";}
	else{
		
	

	  $get_user = "select * from cb_userstb where fname='$user_fname' AND password='$create_acc_password' OR lname='$user_lname' AND password='$create_acc_password'";
	
	$run_get_user = mysqli_query($con,$get_user);
	$check_user = mysqli_num_rows($run_get_user);
	
	if($check_user <1){echo"<div class='login_output'>Check Your Email,Username or Password And Try Again.</div>";
	
	}else{
		
    while($row_get_user = mysqli_fetch_array($run_get_user))
	{
		$user_id = $row_get_user['id'];
		$new_id ='CB'.$user_id;
		
		$update_user_acc= "update cb_userstb set my_id='$new_id' where id='$user_id' ";
        $run_update_user_acc = mysqli_query($con,$update_user_acc);
		if($run_update_user_acc){
			
		$my_id = $row_get_user['id'];	
		$user_fname = $row_get_user['fname'];
		$_SESSION['id']=$my_id;
	    $_SESSION['fname']=$user_fname;
		
		}

		
	//	echo"<script>window.open('http://craneblue.com/market/store','_self')</script>";
    	echo"Your Account Has Been Created";
		?>
		<input id="load_login" value="1" style="display:none;" />
		<?php

	}
	
	}
}
		
		
		}	

}
}
/*//////////////////////////////////////////////////////////////////////////////////////////////////////
if($status =="insert_new_user")
{	
	$fname = $_GET['user_fname'];
	$lname = $_GET['user_lname'];
	$create_acc_contact = $_GET['contact'];
	$username = $_GET['final_username'];
	$create_acc_email = $_GET['final_user_email'];
	$create_acc_password = $_GET['create_acc_password'];

		$insert_user ="insert into cb_userstb(fname,lname,contact,username,email,password,profile_image,curr_country,curr_city,curr_date,curr_time) 
		values('$fname','$lname','$create_acc_contact','$username','$create_acc_email','$create_acc_password','avatar2.jpg','$country','$city',CURDATE(),CURTIME() )";

	$run_insert_user = mysqli_query($con,$insert_user);
	

	if(!$run_insert_user){echo"<span style='color:red;'>Something Went Wrong.</span>";}
	//echo"the man of all seasons";	
}
*//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
if($status =="get_user_profile")
{
   $my_id = $_GET['my_id'];
 
	$user_profile = "select * from cb_userstb where id='$my_id' ";
	$run_user_profile = mysqli_query($con,$user_profile);
	while($row_user_profile = mysqli_fetch_array($run_user_profile))
	{
		$fname = $row_user_profile['fname'];
		$profile_image = $row_user_profile['profile_image'];
		if($profile_image =='avatar2.jpg'){
		?>
		<div class="profile_div" ><img src="avatar_image/<?php echo"$profile_image"; ?>" class="profile_image" /></div>
		<?php }else{ ?>
		<div class="profile_div" ><img src="user_profile/<?php echo"$profile_image"; ?>" class="profile_image" /></div>
		<?php }?>
        <div class="username_div" ><?php echo"$fname"; ?></div>
		<?php
	}
}
///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
?>

Youez - 2016 - github.com/yon3zu
LinuXploit