403Webshell
Server IP : 127.0.0.1  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT DESKTOP-3H4FHQJ 10.0 build 19045 (Windows 10) AMD64
User : win 10 ( 0)
PHP Version : 8.2.12
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  D:/kvt_site_bk/craneblue.ga/cbawards/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : D:/kvt_site_bk/craneblue.ga/cbawards/upload.php
<html>
<?php
include('db.php');
session_start();
if(isset($_SESSION['id']))
{
$my_id = $_SESSION['id'];	
	
}
//////////////////////////////////////////////////////////////////////////////////// 
?>
<?php
$user_ip = getenv('REMOTE_ADDR');
$geo = unserialize(file_get_contents("http://www.geoplugin.net/php.gp?ip=$user_ip"));
$city = $geo["geoplugin_city"];
$country = $geo["geoplugin_countryName"];
///////////////////////////////////////////////////////////////////////////////////

$cur_date = date("d");
$cur_month = date("M");
$cur_year = date("Y");
///////////////////////////////////////////////////////////////////////////////////
?>
<input id="my_id" style="display:none;" value="<?php echo"$my_id";?>" />

<head>
<title>cbawards</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" type="text/css" href="main_css/upload.css" />

</head>

<body>

<div class="main_container" >
<div class="sub_title" ><img src="main_icon/bk.png" onclick="history.back();" class="close_page_icon" />Upload new video</div>
<!--h1 class="main_title" >CB Awards</h1-->


<img src="main_icon/cb_awad_log.png" class="cb_awad_log" stylek="margin-top:60px;" />

<div id="login_div" class="login_div" >

<form action="upload" method="post" enctype="multipart/form-data" >

<div id="error_output" class="error_output"></div>

<div id="upload_vid_btn" onclick="document.getElementById('new_vid').click();" class="upload_vid_btn">Click to upload video
<input type="file" id="new_vid" name="new_vid" onchange="show_vid_name();" style="display:none;"  />
</div>

<div id="sel_vid_name" class="sel_vid_name">You video name is that</div>



<?php
if(isset($_POST['new_video_now']))
{
   $new_vid = $_FILES['new_vid']['name'];
   $vid_type = explode('.',$new_vid);
   $vid_type = end($vid_type); 
   $vid_url =rand();    
   
   $vid_tmp = $_FILES['new_vid']['tmp_name'];

   $insert_vid="insert into user_videotb (my_id,video_url,video_type,cur_country,cur_city,cur_date,cur_month,cur_year,cur_time)
   values('$my_id','$vid_url','$vid_type','$country','$city','$cur_date','$cur_month','$cur_year',CURTIME() )";
   $run_insert_vid = mysqli_query($con,$insert_vid);
   if($run_insert_vid){
   move_uploaded_file($vid_tmp,'main_vid/'.$vid_url.'.'.$vid_type);
   echo"<div class='error_output' style='color:green;'>Video uploaded successfully</div>";
   echo"<script>window.open('user_account', '_self')</script>";	
   }
}
?>

<button name="new_video_now" id="upload_now" class="register_btn" >Upload now</button>
</form>

</div>







</div>

<script>
function show_create_acc_div()
{
document.getElementById('sub_vid_div').style="display:block;";
document.getElementById('login_div').style="display:none;";	
}

function show_login()
{
document.getElementById('sub_vid_div').style="display:none;";
document.getElementById('login_div').style="display:block;";	
}

function show_vid_name()
{


	new_vid = document.getElementById('new_vid').files[0];
	vid_name = new_vid.name;
	vid_type = new_vid.type;
	if(vid_type !=='video/mp4'){document.getElementById('error_output').innerHTML="Video format not supported.";}else{
	document.getElementById('sel_vid_name').innerHTML=vid_name;
    document.getElementById('error_output').innerHTML="";
	document.getElementById('upload_vid_btn').style="display:none;";
	document.getElementById('sel_vid_name').style="display:block;";
	document.getElementById('upload_now').style="display:block;";
	
	
	
	}
		
}

</script>

</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit