403Webshell
Server IP : 127.0.0.1  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT DESKTOP-3H4FHQJ 10.0 build 19045 (Windows 10) AMD64
User : win 10 ( 0)
PHP Version : 8.2.12
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  D:/crane_image/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : D:/crane_image/auto_page.php
<?php 
//$message_text = mysqli_real_escape_string($con,$message_text);
//include('db_b.php'); 
include('db.php');
session_start();
$status = $_GET['status'];
//////////////////////////////////////////////////////////
$curr_day = date("d");
$curr_month = date("m");
$curr_year = date("Y");
/////////////////////////////////////////////////////////////// 
?>
<div style="display:none;">
<?php
$user_ip = getenv('REMOTE_ADDR');
$geo = unserialize(file_get_contents("http://www.geoplugin.net/php.gp?ip=$user_ip"));
$city = $geo["geoplugin_city"];
$region = $geo["geoplugin_regionName"];
$country = $geo["geoplugin_countryName"];
/*echo"$user_ip";
echo "City: ".$city."<br>";
echo "Region: ".$region."<br>";
echo "Country: ".$country."<br>";
/*
geoplugin_request
geoplugin_status
geoplugin_credit
geoplugin_city
geoplugin_region
geoplugin_areaCode
geoplugin_dmaCode
geoplugin_countryCode
geoplugin_countryName
geoplugin_continentCode
geoplugin_latitude
geoplugin_longitude
geoplugin_regionCode
geoplugin_regionName
geoplugin_currencyCode
geoplugin_currencySymbol
geoplugin_currencySymbol_UTF8
geoplugin_currencyConverter
*/
?> 
</div>
<?php
////////////////////////////////////////////////////////////// 
if($status =="insert_category")
{
   $my_id = $_GET['my_id'];
   $category_input = $_GET['category_input'];
   
   if($category_input ==""){echo"Field Empty";}else{
   
   $get_cat = "select * from categorytb where category ='$category_input'";
   $run_get_cat = mysqli_query($con,$get_cat);
   $check_get_cat = mysqli_num_rows($run_get_cat);
   
   if($check_get_cat >0){echo"This Category Already Available";}else{
   
   
   $insert_cat ="insert into categorytb(my_id,category,cur_country,cur_city,cur_date,cur_time)values('$my_id','$category_input','$country','$city',CURDATE(),CURTIME() )";
   $run_insert_cat = mysqli_query($con,$insert_cat);
}
}
}

///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

if($status =="insert_describe_action")
{
   $my_id = $_GET['my_id'];
   $describe_action_input = $_GET['describe_action_input'];
   
     if($describe_action_input ==""){echo"Field Empty";}else{
		 
   $get_action = "select * from describe_actiontb where describe_action ='$describe_action_input'";
   $run_get_action = mysqli_query($con,$get_action);
   $check_get_action = mysqli_num_rows($run_get_action);
   
   if($check_get_action >0){echo"This Action Already Available";}else{
    
   $insert_action ="insert into describe_actiontb(my_id,describe_action,cur_country,cur_city,cur_date,cur_time)values('$my_id','$describe_action_input','$country','$city',CURDATE(),CURTIME() )";
   $run_insert_action = mysqli_query($con,$insert_action);
}
}
}
///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

if($status == 'disp_category_option')
{
	   $get_cat_disp = "select * from categorytb ";
       $run_get_cat = mysqli_query($con,$get_cat_disp);
	   while($row_get_cat_disp = mysqli_fetch_array($run_get_cat))
	   {
		   $category = $row_get_cat_disp['category'];
		   ?>

		 <option class="sel_category" > <?php echo"$category"; ?>  </option> 

		   <?php
	   }   

}
/////////////////////////////////////////////////////////////////////////////////////


if($status == 'disp_describe_action_option')
{
	   $get_describe_disp = "select * from describe_actiontb ";
       $run_get_describe = mysqli_query($con,$get_describe_disp);
	   while($row_get_describe = mysqli_fetch_array($run_get_describe))
	   {
		   $describe_action = $row_get_describe['describe_action'];
		   ?>
		 <option class="sel_category" > <?php echo"$describe_action"; ?>  </option> 
		   <?php
	   }   

}


/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

if($status =='insert_new_image')
{
	$my_id = $_GET['my_id'];
	$category_option = $_GET['category_option'];
	$describe_option = $_GET['describe_option'];
	$fileName = $_FILES['image_input']['name'];
	$tmp_file = $_FILES['image_input']['tmp_name'];
	
	if($fileName ==""){
		
      $random_name =""; $file_type =""; $file_dot ="";
      }else{
	
    $file_type = explode('.',$fileName);
    $file_type = end($file_type);
    $file_dot =".";
    $random_name = rand();
	//}
	
	
	$random_name = mysqli_real_escape_string($con,$random_name);
	$file_type = mysqli_real_escape_string($con,$file_type);
	
	$category_option = mysqli_real_escape_string($con,$category_option);
	$describe_option = mysqli_real_escape_string($con,$describe_option);

    $insert_image ="insert into crane_imgtb (my_id,image_url,category,describe_actions,cur_country,cur_city,cur_date,cur_time) values
	('$my_id','$random_name$file_dot$file_type','$category_option','$describe_option','$country','$city',CURDATE(),CURTIME())";
	$run_insert_image = mysqli_query($con,$insert_image);
	
	if($run_insert_image)
	{
		move_uploaded_file($tmp_file,"post_image/$random_name.$file_type");
		echo"<script>window.open('index.php','_self')</script>";	echo"vicent";
	}else{echo"Image Not Uploaded, Something Went Wrong.";}
}
	
}


//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

if($status =="disp_post_img")
{
	$new_load_limit = $_GET['new_load_limit'];
		?>
	<input id="cur_load_limit" value="<?php echo $new_load_limit ?>" style='display:none;' />
	<?php
	$get_post_img ="select * from crane_imgtb limit $new_load_limit";
	$run_get_post_img = mysqli_query($con,$get_post_img);
    while($row_get_post_img = mysqli_fetch_array($run_get_post_img))
{
	$post_img = $row_get_post_img['image_url'];
	$post_my_id = $row_get_post_img['my_id'];
	$post_img_id = $row_get_post_img['id'];
	//echo"$post_img";
	
	 $studio_user ="select * from studio_usertb where my_id_studio='$post_my_id' ";
	 $run_studio = mysqli_query($con,$studio_user);
	 while($row_studio = mysqli_fetch_array($run_studio))
	 {
		 $my_id_studio = $row_studio['my_id_studio'];
		 $channel_name = $row_studio['channel_name'];
		 $image_url = $row_studio['image_url'];
		 $channel_description = $row_studio['description'];
	
	?>
	
 <div class="post_image_div" >
 
	 <a href="profile?sel=<?php echo $post_img;?>&pro=<?php echo $my_id_studio;?>&imi=<?php echo $post_img_id;?>">	
	 <div class="img_post_header" >
<?php
   
   if($image_url == 'avatar2.jpg' ){
?>
	   <img src="avatar_image/avatar2.jpg" class="user_profile_img"  />
	   
	 <?php }else{	?>
	  <img src="avatar_image/ <?php  echo $image_url	?>" class="user_profile_img"  />
	 <?php  }	?>
	   <div class="user_name" ><?php echo $channel_name;?></div>
	   <div class="channel_description" ><?php echo $channel_description;?></div>
	 
	 </div>
	 
	  <div class="single_image_div" >
	    <img src="post_image/<?php echo $post_img; ?>" class="post_image" />
      </div>
	  <div class="img_cover" ></div>
	  
    </a>
 </div>
	<?php 
}
}
}

/////////////////////////////////////////////////////////////////////////////////////////////

if($status =='curr_image')
{
	$user_my_id = $_GET['user_my_id'];
	$get_post_img ="select * from crane_imgtb where my_id='$user_my_id'";
	$run_get_post_img = mysqli_query($con,$get_post_img);
    while($row_get_post_img = mysqli_fetch_array($run_get_post_img))
{
	$post_img = $row_get_post_img['image_url'];
	$img_id = $row_get_post_img['id'];
	//echo"$post_img";
	?>
<div onClick="show_img_id(this.id)" id="<?php echo $img_id; ?>" class="single_right_div" >

<img name="<?php echo $post_img; ?>" onClick="disp_zoomed_img(this.name)" src="post_image/<?php echo $post_img; ?>" class="post_image" />
<!--input id="img_id" value="<?php echo $img_id; ?>" /-->

</div>
	<!--input id="coming_image" value="image2.JFIF" /-->
<?php
}

}

////////////////////////////////////////////////////////////////////

if($status =='disp_search_sub')
{
	$coming_search = $_GET['coming_search'];
	/*$get_search_result ="select * from crane_imgtb where category LIKE '%$coming_search%'";
	$run_get_search_result = mysqli_query($con,$get_search_result);
    while($row_get_search_result = mysqli_fetch_array($run_get_search_result))
{
	$sea_category = $row_get_search_result['category'];
	
	echo"<div>$sea_category</div>";
 }*/
 
?>
<div id="search_title" class="search_title" >Search Result For '<?php echo $coming_search ?>'</div>
<?php
$get_post_img ="select * from crane_imgtb where category LIKE '%$coming_search%' OR describe_actions LIKE '$coming_search%' ";
	$run_get_post_img = mysqli_query($con,$get_post_img);
	$check_post_img = mysqli_num_rows($run_get_post_img);
	
	if($check_post_img >0){
		
    while($row_get_post_img = mysqli_fetch_array($run_get_post_img))
{
	$post_img = $row_get_post_img['image_url'];
	$post_my_id = $row_get_post_img['my_id'];
	$post_img_id = $row_get_post_img['id'];
	//echo"$post_img";
	
	 $studio_user ="select * from studio_usertb where my_id_studio='$post_my_id' ";
	 $run_studio = mysqli_query($con,$studio_user);
	 while($row_studio = mysqli_fetch_array($run_studio))
	 {
		 $my_id_studio = $row_studio['my_id_studio'];
		 $channel_name = $row_studio['channel_name'];
		 $channel_description = $row_studio['description'];
	 
	//echo"<script>window.open('http://craneblue.com','_self')</script>";	
	
	
	?>
	
 <div class="post_image_div" >
 
	 <a href="profile?sel=<?php echo $post_img;?>&pro=<?php echo $my_id_studio;?>&imi=<?php echo $post_img_id;?>">	
	 <div class="img_post_header" >

	   <img src="avatar_image/avatar2.jpg" class="user_profile_img"  />
	   
	   <div class="user_name" ><?php echo $channel_name;?></div>
	   <div class="channel_description" ><?php echo $channel_description;?></div>
	 
	 </div>
	 
	  <div class="single_image_div" >
	    <img src="post_image/<?php echo $post_img; ?>" class="post_image" />
      </div>
	  <!--div class="img_cover" ></div-->
	  
    </a>
 </div>
	<?php 
}
}
	}else{
		
	 $studio_user ="select * from studio_usertb where channel_name LIKE '%$coming_search%' OR description LIKE '%$coming_search%' ";
	 $run_studio = mysqli_query($con,$studio_user);
	 while($row_studio = mysqli_fetch_array($run_studio))
	 {
		 $my_id_studio = $row_studio['my_id_studio'];
		 $channel_name = $row_studio['channel_name'];
		 $channel_description = $row_studio['description'];
	 
	//echo"<script>window.open('http://craneblue.com','_self')</script>";	
	
	
	
	$get_post_img ="select * from crane_imgtb where my_id ='$my_id_studio' ";
	$run_get_post_img = mysqli_query($con,$get_post_img);
	//$check_post_img = mysqli_num_rows($run_get_post_img);
	
	//if($check_post_img >0){
		
    while($row_get_post_img = mysqli_fetch_array($run_get_post_img))
{
	$post_img = $row_get_post_img['image_url'];
	$post_my_id = $row_get_post_img['my_id'];
	$post_img_id = $row_get_post_img['id'];
	
	
	
	
	
	?>
	
 <div class="post_image_div" >
 
	 <a href="profile?sel=<?php echo $post_img;?>&pro=<?php echo $my_id_studio;?>&imi=<?php echo $post_img_id;?>">	
	 <div class="img_post_header" >

	   <img src="avatar_image/avatar2.jpg" class="user_profile_img"  />
	   
	   <div class="user_name" ><?php echo $channel_name;?></div>
	   <div class="channel_description" ><?php echo $channel_description;?></div>
	 
	 </div>
	 
	  <div class="single_image_div" >
	    <img src="post_image/<?php echo $post_img; ?>" class="post_image" />
      </div>
	  <!--div class="img_cover" ></div-->
	  
    </a>
 </div>
	<?php 
}
}
		
		}

}

//////////////////////////////////////////////////////////////////////////////////

if($status =='img_download_count_insert')
{
    $my_id = $_GET['my_id'];
    $id_img = $_GET['id_img'];
	
	$get_down_count_img ="select * from img_down_counttb where my_ip='$user_ip' AND img_id='$id_img' ";
	$run_down_count_img = mysqli_query($con,$get_down_count_img);
	$check_downl_count_img = mysqli_num_rows($run_down_count_img);
	if($check_downl_count_img >0){}else{
	
	$insert_img_downl_count ="insert into img_down_counttb(my_id,my_ip,img_id,cur_country,cur_city,cur_day,cur_month,cur_year,cur_time) 
	values('$my_id','$user_ip','$id_img','$country','$city','$curr_day','$curr_month','$curr_year',CURTIME() )";
	$run_insert_img_downl_count = mysqli_query($con,$insert_img_downl_count);
	}	
}

if($status =='display_img_downl_conut')
{
    $img_id = $_GET['img_id'];
	$get_down_count_img ="select * from img_down_counttb where img_id='$img_id' ";
	$run_down_count_img = mysqli_query($con,$get_down_count_img);
	$check_downl_count_img = mysqli_num_rows($run_down_count_img);
	if($check_downl_count_img >0){
		
	echo $check_downl_count_img;
 }
	
}

////////////////////////////////////////////////////////////////////////////////////

if($status =='img_view_insert')
{
	    
	$my_id = $_GET['my_id'];
    $id_img = $_GET['id_img'];
	
	$get_view_img ="select * from img_viewtb where my_ip='$user_ip' AND img_id='$id_img' ";
	$run_view_img = mysqli_query($con,$get_view_img);
	$check_view_img = mysqli_num_rows($run_view_img);
	if($check_view_img >0){}else{
	
	$insert_img_view ="insert into img_viewtb(my_id,my_ip,img_id,cur_country,cur_city,cur_day,cur_month,cur_year,cur_time) 
	values('$my_id','$user_ip','$id_img','$country','$city','$curr_day','$curr_month','$curr_year',CURTIME() )";
	$run_insert_img_downl_count = mysqli_query($con,$insert_img_view);
}
}

////////////////////////////////////////////////////////////////////////////////////////

if($status =="display_img_view")
{
	$img_id = $_GET['img_id'];
	$get_view_img ="select * from img_viewtb where img_id='$img_id' ";
	$run_view_img = mysqli_query($con,$get_view_img);
	$check_view_img = mysqli_num_rows($run_view_img);
	if($check_view_img >0){
	
	echo $check_view_img;
 }
}

///////////////////////////////////////////////////////////////////////////////////////






?>

Youez - 2016 - github.com/yon3zu
LinuXploit