403Webshell
Server IP : 127.0.0.1  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT DESKTOP-3H4FHQJ 10.0 build 19045 (Windows 10) AMD64
User : win 10 ( 0)
PHP Version : 8.2.12
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  D:/xamppkk/htdocs-coblaa/marketk/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : D:/xamppkk/htdocs-coblaa/marketk/upload_ad.php
<html>

<?php 
session_start();
include('db.php'); 
//include('function.php');
?>

<?php
if(isset($_SESSION['my_id']))
{
//$_SESSION['email']=$user_email;
$my_id = $_SESSION['my_id'];
//echo"$my_id";
}
?>
<div style="display:none;">
<input type="text" id="my_id" class="helping_id" style="display:none;" value="<?php echo $my_id;?>"> 

 <?php
$user_ip = getenv('REMOTE_ADDR');
$geo = unserialize(file_get_contents("http://www.geoplugin.net/php.gp?ip=$user_ip"));
$city = $geo["geoplugin_city"];
$region = $geo["geoplugin_regionName"];
$country = $geo["geoplugin_countryName"];
/*echo"$user_ip";
echo "City: ".$city."<br>";
echo "Region: ".$region."<br>";
echo "Country: ".$country."<br>";
/*
geoplugin_request
geoplugin_status
geoplugin_credit
geoplugin_city
geoplugin_region
geoplugin_areaCode
geoplugin_dmaCode
geoplugin_countryCode
geoplugin_countryName
geoplugin_continentCode
geoplugin_latitude
geoplugin_longitude
geoplugin_regionCode
geoplugin_regionName
geoplugin_currencyCode
geoplugin_currencySymbol
geoplugin_currencySymbol_UTF8
geoplugin_currencyConverter
*/
if(isset($_SESSION['my_id']))
{
//$_SESSION['email']=$user_email;
$my_id = $_SESSION['my_id'];
}

?>
</div>

<head>

<title>Cobmaill online store</title>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<!--link rel="icon" href="kvt_con/khalaf_log.jpg" type="image/ico"-->
<link rel="stylesheet" type="text/css" href="main_css/upload_ad.css" />

</head>

<body>

<div class="main_home_area">

<a href="https://coblaa.com/market/index"><div class="main_home_tile">Cobmall</div></a>

<div class="sub_home_btn_area">
<a href="https://coblaa.com/market/index"><button class="home_btn">Home</button></a>
<?php
if($my_id='CB1')
{?>
<button onClick="show_add_cat_div()" class="home_btn">Add Cat</button>
<?php } ?>
<!--a href="log_out.php"><button class="home_upload_ad_btn">Logout</button></a-->

<?php
if(isset($_SESSION['my_id']))
{?>
<a href="log_out"><button class="home_upload_ad_btn">Logout</button></a>
<a href="upload_ad"><button class="home_upload_ad_btn">Upload Ad</button></a>
<!--button onClick="show_add_cat_div()" class="home_upload_ad_btn">Add Cat</button-->
<?php }else{ ?>

<a href="login"><button class="home_upload_ad_btn">Login</button></a>
<a href="login"><button class="home_upload_ad_btn">Upload Ad</button></a>

<?php } ?>


</div>

<script>


</script>

</div>
<div class="positioning_div"></div>


<!--div class="upoad_new_ad_input_div">

<form method="post" enctype="multipart/form-data" >

<div class="upload_ad_title" >Upload the your Ad</div>

<select type="text" id="ad_cartegory" name="ad_cartegory" class="upload_ad_input" >

<option selected disabled class="category_btn">Select Cartegory</option>
<option class="category_btn">Computers</option>
<option class="category_btn">Phones</option>
<option class="category_btn">Phones Accessories</option>
<option class="category_btn">Electronics</option>
<option class="category_btn">Beauty Health</option>
<option class="category_btn">Furniture</option>
<option class="category_btn">Appliances</option>
<option class="category_btn">Sports Outdoors</option>
<option class="category_btn">Men Fashion</option>
<option class="category_btn">Women Kids Goods</option>
<option class="category_btn">Home Garden</option>

</select>

<select type="text" id="product_status" name="product_status" class="upload_ad_input" >

<option selected disabled class="category_btn">Select Product Status</option>
<option class="category_btn">brand new</option>
<option class="category_btn">second hand</option>

</select>

<input type="text" id="product_name" name="product_name" class="upload_ad_input" placeholder="Product name" />
<textarea type="text" id="product_details" name="product_details" class="product_details" maxlength="97" placeholder="Product details" ></textarea>
<input type="text" id="product_price" name="product_price" class="upload_ad_input" placeholder="optional" />
<input type="text" id="product_url" name="product_url" class="upload_ad_input" placeholder="Product url" />
<input type="file" id="product_file" name="product_file"  class="select_image_btn" />

<!--button onclick="document.getElementById('ad_file').click();" class="select_image_btn">Select Image</button-->
<!--div class="selected_file_name"></div-->
<!--div id="ad_input_output" class="ad_input_output"></div>

<button id="upload_ad_final_btn" name="upload_ad_final_btn" class="upload_ad_btn" style="display:none;">Upoad Now</button>

</form>

<button id="upload_ad_next_btn"  onclick="start_upload_ad();" class="upload_ad_btn">Next</button>

<script>


function start_upload_ad()
{
	cartegory_ad = document.getElementById('ad_cartegory').value;
	product_status = document.getElementById('product_status').value;
    product_name = document.getElementById('product_name').value;
    product_details = document.getElementById('product_details').value;
    product_file = document.getElementById('product_file').value;

if(cartegory_ad =="Select Cartegory" || product_status =="Select Product Status"|| product_name=="" || product_details=="" || product_file=="" ){
	
    document.getElementById('ad_input_output').innerHTML="<span style='color:red;'>Fill All The Spaces</span>";	
}else{ 

document.getElementById('upload_ad_final_btn').style.display="block";
document.getElementById('upload_ad_next_btn').style.display="none";

}
}

</script>

<?php
/*
if(isset($_POST['upload_ad_final_btn']))
{
	$product_name = $_POST['product_name'];
	$product_name = mysqli_real_escape_string($con,$product_name);
	$product_details = $_POST['product_details'];
	$product_details = mysqli_real_escape_string($con,$product_details);
	$ad_cartegory = $_POST['ad_cartegory'];
	$product_price = $_POST['product_price'];
	$product_status = $_POST['product_status'];
	$product_url = $_POST['product_url'];
	
	
	$product_file = $_FILES['product_file']['name'];
	
	$type = explode('.',$product_file);
	$type = end($type);
	$random_name = rand();
	$tmp_image = $_FILES['product_file']['tmp_name'];
	
	
	
	
	
	$insert_ad ="insert into adverttb(my_id,product_name,product_detail,product_cartegory,product_price,product_image,product_url,product_status,curr_date,curr_time)
	values('$my_id','$product_name','$product_details','$ad_cartegory','$product_price','$random_name.$type','$product_url','$product_status',CURDATE(),CURTIME() )";
	$run_insert_ad = mysqli_query($con,$insert_ad);
	if($run_insert_ad){

    move_uploaded_file($tmp_image,'advert_images/'.$random_name.'.'.$type);

	}else{echo"<span style='color:red;'>Something Went Wrong,Your Information Has Not Been Saved</span>";}

}
*/
?>

</div><!--end of upoad_new_ad_input_div-->






<div id="add_cat_div" class="add_cat_div">

<div class="add_cat_title" >Add Category</div>
<form method="post" enctype="multipart/form-data">
<div class="add_cat_lebal" >Category Name</div>
<input type="text" id="cat_name" name="cat_name" class="cat_name" />
<div class="add_cat_lebal">Category Image</div>
<input type="file" id="cat_img" name="cat_img" class="cat_name" />


<?php 
if(isset($_POST['save_category'])){
	$cat_name = $_POST['cat_name'];
    $cat_img = $_FILES['cat_img']['name'];
	
	if($cat_name =="" || $cat_img ==""){}else{
	
	$type = explode('.',$cat_img);
	$type = end($type);
	$random_name = rand();
	$tmp_image = $_FILES['cat_img']['tmp_name'];
	$cat_name = mysqli_real_escape_string($con,$cat_name);
	
		
	$insert_ad ="insert into categorytb(my_id,cat_img,cat_name,cur_country,cur_city,cur_date,cur_time)
	values('$my_id','$random_name.$type','$cat_name','$country','$city',CURDATE(),CURTIME() )";
	$run_insert_ad = mysqli_query($con,$insert_ad);
	if($run_insert_ad){

    move_uploaded_file($tmp_image,'category_img/'.$random_name.'.'.$type);
	//if(move_uploaded_file){}else{echo"Something Went Wrong, Data Not Saved.";}
	echo"<div style='float:left;width:90%;height:40px;line-height:40px;color:green;text-align:center;'>Your File Has Been Uploaded!</div>";
	
}else{echo"<div style='float:left;width:90%;height:40px;line-height:40px;color:red;text-align:center;'>Something Went Wrong, Data Not Saved!</div>";}
}
}
 ?>

<button name="save_category" class="add_cat_btn" style="color:green;" >Add</button>
</form>
 <button onClick="close_add_cat_div();" class="add_cat_btn" style="color:red;" >Cancel</button>

</div>









<div class="upoad_new_ad_input_div">

<form method="post" enctype="multipart/form-data" >

<div class="upload_ad_title" >Upload your Product</div>

<select type="text" id="ad_cartegory" name="ad_cartegory" class="upload_ad_input" >

<option selected disabled class="category_btn">Select Cartegory</option>
<?php

 $search_input = $_GET['search_input'];
 $get_more_cat ="select * from categorytb where cat_name like '%$search_input%' ";
 $run_more_cat = mysqli_query($con,$get_more_cat); 
 while($row_more_cat = mysqli_fetch_array($run_more_cat))
 {
	 $more_cat_name = $row_more_cat['cat_name'];
	 echo"<option>$more_cat_name</option>";

 }

?>
</select>

<select type="text" id="product_status" name="product_status" class="upload_ad_input" >

<!--option selected disabled class="category_btn">Select Product Status</option-->
<option class="category_btn">Brand New</option>
<option class="category_btn">Second Hand</option>

</select>

<input type="text" id="product_name" name="product_name" class="upload_ad_input" placeholder="Product name" />
<input type="text" id="product_url" name="product_url" class="upload_ad_input" placeholder="Product url" />
<input type="text" id="product_be4_price" name="product_be4_price" class="upload_ad_input" placeholder="Before Price optional" />
<input type="text" id="product_price" name="product_price" class="upload_ad_input" placeholder="Price" />
<select type="text" id="product_country" name="product_country" class="upload_ad_input" placeholder="Price" >
<option class="category_btn">Select Country</option>
<option class="category_btn">All</option>
<option class="category_btn">Uganda</option>

</select>

<!--input type="text" id="product_city" name="product_city" class="upload_ad_input" placeholder="City" />
<input type="text" id="product_adress" name="product_adress" class="upload_ad_input" placeholder="Adress" />
<input type="text" id="product_contact" name="product_contact" class="upload_ad_input" placeholder="Contact" /--> 


<textarea type="text" id="product_details" name="product_details" class="product_details" maxlength="500" placeholder="Product details" ></textarea>


<input type="file" id="product_file" name="product_file" onchange="show_file_name();"  class="select_image_original_btn" />
<input type="file" id="product_file2" name="product_file2" onchange="show_file2_name();"  class="select_image_original_btn" />
<input type="file" id="product_file3" name="product_file3" onchange="show_file3_name();"  class="select_image_original_btn" />
<input type="file" id="product_file4" name="product_file4" onchange="show_file4_name();"  class="select_image_original_btn" />


<button id="sub_upload_ad_final_btn" name="upload_ad_final_btn" class="upload_ad_btn" style="display:none;">Click</button>

</form>

<button onclick="document.getElementById('product_file').click();" id="select_image_btn" class="select_image_btn">Select Image 1</button>
<div id="selected_file_name" class="selected_file_name"></div>

<button onclick="document.getElementById('product_file2').click();" id="select_image2_btn" class="select_image2_btn">Select Image 2</button>
<div id="selected_file_name2" class="selected_file_name"></div>

<button onclick="document.getElementById('product_file3').click();" id="select_image3_btn" class="select_image_btn">Select Image 3</button>
<div id="selected_file_name3" class="selected_file_name"></div>

<button onclick="document.getElementById('product_file4').click();" id="select_image4_btn" class="select_image2_btn">Select Image 4</button>
<div id="selected_file_name4" class="selected_file_name"></div>

<div id="ad_input_output" class="ad_input_output"></div>

<button id="upload_ad_next_btn"  onclick="start_upload_ad();" stylek="display:none;" class="upload_ad_next_btn">Next</button>
<button id="upload_ad_final_btn"  onclick="document.getElementById('sub_upload_ad_final_btn').click();" style="background:green;display:none;" class="upload_ad_next_btn">Finish</button>

<script>

function show_file_name()
{
	file_name = document.getElementById('product_file').files[0].name;
	document.getElementById('selected_file_name').innerHTML=file_name;
	document.getElementById('select_image_btn').innerHTML="Image 1 Selected";
	document.getElementById('select_image_btn').style="background:green;";
	//alert(file_name);
}

function show_file2_name()
{
	file_name = document.getElementById('product_file2').files[0].name;
	document.getElementById('selected_file_name2').innerHTML=file_name;
	document.getElementById('select_image2_btn').innerHTML="Image 2 Selected";
	document.getElementById('select_image2_btn').style="background:green;";
	//alert(file_name);
}

function show_file3_name()
{
	file_name = document.getElementById('product_file3').files[0].name;
	document.getElementById('selected_file_name3').innerHTML=file_name;
	document.getElementById('select_image3_btn').innerHTML="Image 3 Selected";
	document.getElementById('select_image3_btn').style="background:green;";
	//alert(file_name);
}

function show_file4_name()
{
	file_name = document.getElementById('product_file4').files[0].name;
	document.getElementById('selected_file_name4').innerHTML=file_name;
	document.getElementById('select_image4_btn').innerHTML="Image 4 Selected";
	document.getElementById('select_image4_btn').style="background:green;";
	//alert(file_name);
}



function start_upload_ad()
{
	cartegory_ad = document.getElementById('ad_cartegory').value;
	product_status = document.getElementById('product_status').value;
    product_name = document.getElementById('product_name').value;
    product_details = document.getElementById('product_details').value;
    product_file = document.getElementById('product_file').value;
	product_country = document.getElementById('product_country').value;

if(cartegory_ad =="Select Cartegory" || product_name=="" || product_details=="" || product_file=="" || product_country=="Select Country" ){
	
    document.getElementById('ad_input_output').innerHTML="<span style='color:red;'>Fill All The Spaces</span>";	
}else{ 

document.getElementById('upload_ad_final_btn').style.display="block";
document.getElementById('upload_ad_next_btn').style.display="none";

}
}

</script>

<?php

if(isset($_POST['upload_ad_final_btn']))
{
	$product_name = $_POST['product_name'];
	$product_name = mysqli_real_escape_string($con,$product_name);
	$product_details = $_POST['product_details'];
	$product_details = mysqli_real_escape_string($con,$product_details);
	$ad_cartegory = $_POST['ad_cartegory'];
	$product_price = $_POST['product_price'];
	$product_be4_price = $_POST['product_be4_price'];
	$product_country = $_POST['product_country'];
	
	
	
	//$ad_city = $_POST['product_city'];
	//$ad_adress = $_POST['product_adress'];
	//$ad_contact = $_POST['product_contact'];
	
	$product_status = $_POST['product_status'];
	$product_url = $_POST['product_url'];
	
	//$ad_currency_name = $_POST['ad_currency_name'];
	
	$product_file = $_FILES['product_file']['name'];
	/*$product_file2 = $_FILES['product_file2'];
	$product_file3 = $_FILES['product_file3'];
	$product_file4 = $_FILES['product_file4'];*/
?>
	<script>
	document.getElementById('upload_ad_final_btn').style.display="none";
//document.getElementById('upload_ad_next_btn').style.display="none";



</script>

<?php
	

	$type = explode('.',$product_file);
	$type = end($type);
	$random_name = rand();
	$tmp_image = $_FILES['product_file']['tmp_name'];
	
		$product_file2 = $_FILES['product_file2']['name'];
		if($product_file2==""){$random_name2 ='clear1'; $type_mo2='clear'; $tmp_image2='clear2';}else{
		//echo"2 $product_file2";
	
	$type_mo2 = explode('.',$product_file2);
	$type_mo2 = end($type_mo2);
	$random_name2 = rand();
$tmp_image2 = $_FILES['product_file2']['tmp_name'];}
	
		$product_file3 = $_FILES['product_file3']['name'];
		if($product_file3==""){$random_name3 ='clear1'; $type_mo3='clear'; $tmp_image3='clear3';}else{
		//echo"3 $product_file3";	
	
	$type_mo3 = explode('.',$product_file3);
	$type_mo3 = end($type_mo3);
	$random_name3 = rand();
$tmp_image3 = $_FILES['product_file3']['tmp_name'];}
	
		$product_file4 = $_FILES['product_file4']['name'];
		if($product_file4==""){$random_name4 ='clear1'; $type_mo4='clear';$tmp_image4='clear4';}else{
		//echo"4 $product_file4";	
	
	$type_mo4 = explode('.',$product_file4);
	$type_mo4 = end($type_mo4);
	$random_name4 = rand();
	$tmp_image4 = $_FILES['product_file4']['tmp_name'];
		}
	
	
	

	
	
	$insert_ad ="insert into adverttb(my_id,product_name,product_detail,product_category,product_price,before_price,product_country,country,city,product_image,product_url,product_status,curr_date,curr_time)

	values('$my_id','$product_name','$product_details','$ad_cartegory','$product_price','$product_be4_price','$product_country','$country','$city','$random_name.$type','$product_url','$product_status',CURDATE(),CURTIME() )";
	$run_insert_ad = mysqli_query($con,$insert_ad);
	if($run_insert_ad){

    move_uploaded_file($tmp_image,'advert_images/'.$random_name.'.'.$type);
	
	
echo"<div style='float:left;width:100%;height:30px;line-height:30px;text-align:center;color:green;'>Product Added.</div>";

$get_advert = "select * from adverttb where product_image ='$random_name.$type'";
$run_advert = mysqli_query($con,$get_advert);
while($row_advert = mysqli_fetch_array($run_advert))
{
	$advert_id = $row_advert['id'];
	
	$insert_more_img =" insert into more_advert_imagestb ( my_id,advert_id,image_url2,image_url3,image_url4,date,time ) values( '$my_id','$advert_id','$random_name2.$type_mo2','$random_name3.$type_mo3','$random_name4.$type_mo4',CURDATE(),CURTIME() )";
	$run_more_image = mysqli_query($con,$insert_more_img);
	if($run_more_image){
	
  move_uploaded_file($tmp_image2,'more_advert_images/'.$random_name2.'.'.$type_mo2);
  move_uploaded_file($tmp_image3,'more_advert_images/'.$random_name3.'.'.$type_mo3);
  move_uploaded_file($tmp_image4,'more_advert_images/'.$random_name4.'.'.$type_mo4);
 
	}
	//echo"$random_name";
}
	

	}else{echo"<span style='color:red;'>Something Went Wrong,Your Information Has Not Been Saved</span>";}

}

?>

</div><!--end of upoad_new_ad_input_div-->


<div class="footer" >

<div class="information_footer" >
<div class="title_footer" >INFORMATION</div>
<div class="links_footer" >About us</div>
<div class="links_footer" >Contact us</div>


<?php
if(isset($_SESSION['my_id']))
{?>

<a href="upload_ad"><div class="links_footer" >Upload Ad</button></div></a>
<div onClick="show_add_cat_div()" class="links_footer" >Add Cat</button></div>
<a href="log_out"><div class="links_footer" >Logout</button></div></a>
<?php }else{ ?>
<a href="login"><div class="links_footer" >Upload Ad</button></div></a>
<a href="login"><div class="links_footer" >Login</button></div></a>


<?php } ?>




</div>

<div class="information_footer" >
<div class="title_footer" >POLICY USE</div>
<div class="links_footer" >Terms of use</div>
<a href="https://coblaa.com/privacy_policy"><div class="links_footer" >Privacy policy</div></a>
<div class="links_footer" >Cookie Policy</div>
</div>

<div class="information_footer" >
<div class="title_footer" >Branches</div>
<div class="links_footer" >Kampala</div>
<div class="links_footer" >Wakiso</div>
<!--div class="links_footer" >Mukono</div>
<div class="links_footer" >Mbarara</div-->
</div>


</div><!--end of footer-->


<script>

function show_add_cat_div()
{
	document.getElementById('add_cat_div').style.display="block";
}
function close_add_cat_div()
{
	document.getElementById('add_cat_div').style.display="none";
	document.getElementById('cat_name').value="";
	document.getElementById('cat_img').value="";
}


</script>




<!--
Afghanistan
Albania
Algeria
Andorra
Angola
Antigua and Barbuda
Argentina
Armenia
Australia
Austria
Azerbaijan

B
The Bahamas
Bahrain
Bangladesh
Barbados
Belarus
Belgium
Belize
Benin
Bhutan
Bolivia
Bosnia and Herzegovina
Botswana
Brazil
Brunei
Bulgaria
Burkina Faso
Burundi

C
Cabo Verde
Cambodia
Cameroon
Canada
Central African Republic
Chad
Chile
China
Colombia
Comoros
Congo, Democratic Republic of the
Congo, Republic of the
Costa Rica
Côte d’Ivoire
Croatia
Cuba
Cyprus
Czech Republic
D
Denmark
Djibouti
Dominica
Dominican Republic
E
East Timor (Timor-Leste)
Ecuador
Egypt
El Salvador
Equatorial Guinea
Eritrea
Estonia
Eswatini
Ethiopia
F
Fiji
Finland
France
G
Gabon
The Gambia
Georgia
Germany
Ghana
Greece
Grenada
Guatemala
Guinea
Guinea-Bissau
Guyana
H
Haiti
Honduras
Hungary
I
Iceland
India
Indonesia
Iran
Iraq
Ireland
Israel
Italy
J
Jamaica
Japan
Jordan
K
Kazakhstan
Kenya
Kiribati
Korea, North
Korea, South
Kosovo
Kuwait
Kyrgyzstan
L
Laos
Latvia
Lebanon
Lesotho
Liberia
Libya
Liechtenstein
Lithuania
Luxembourg
M
Madagascar
Malawi
Malaysia
Maldives
Mali
Malta
Marshall Islands
Mauritania
Mauritius
Mexico
Micronesia, Federated States of
Moldova
Monaco
Mongolia
Montenegro
Morocco
Mozambique
Myanmar (Burma)

N
Namibia
Nauru
Nepal
Netherlands
New Zealand
Nicaragua
Niger
Nigeria
North Macedonia
Norway

O
Oman
P
Pakistan
Palau
Panama
Papua New Guinea
Paraguay
Peru
Philippines
Poland
Portugal

Q
Qatar
R
Romania
Russia
Rwanda

S
Saint Kitts and Nevis
Saint Lucia
Saint Vincent and the Grenadines
Samoa
San Marino
Sao Tome and Principe
Saudi Arabia
Senegal
Serbia
Seychelles
Sierra Leone
Singapore
Slovakia
Slovenia
Solomon Islands
Somalia
South Africa
Spain
Sri Lanka
Sudan
Sudan, South
Suriname
Sweden
Switzerland
Syria

T
Taiwan
Tajikistan
Tanzania
Thailand
Togo
Tonga
Trinidad and Tobago
Tunisia
Turkey
Turkmenistan
Tuvalu

U
Uganda
Ukraine
United Arab Emirates
United Kingdom
United States
Uruguay
Uzbekistan

V
Vanuatu
Vatican City
Venezuela
Vietnam
Y
Yemen
Z
Zambia
Zimbabwe
-->

</body>
</html>



Youez - 2016 - github.com/yon3zu
LinuXploit