403Webshell
Server IP : 108.170.25.35  /  Your IP : 3.129.195.254
Web Server : Apache/2
System : Linux gains.winzonesoftech.com 4.18.0-513.24.1.el8_9.x86_64 #1 SMP Mon Apr 8 11:23:13 EDT 2024 x86_64
User : valamburi ( 1607)
PHP Version : 8.1.28
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/valamburi/public_html/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/valamburi/public_html/admin/gallery_edit.php
<?php include('session.php')?>
<?php include('header.php')?>
  <link href="vendor/datatables/dataTables.bootstrap4.min.css" rel="stylesheet">
<style>
img.banner {
    width: auto;
    height: 86px;
}
</style>
 
<script> 
    Filevalidation = () => { 
        const fi = document.getElementById('otherAnswer'); 
        // Check if any file is selected. 
        if (fi.files.length > 0) { 
            for (const i = 0; i <= fi.files.length - 1; i++) { 
  
                const fsize = fi.files.item(i).size; 
                const file = Math.round((fsize / 1024)); 
                // The size of the file. 
                if (file >= 300) { 
                    alert( 
                      "File too Big, please select a file less than 300kb"); 
                } else if (file < 10) { 
                    alert( 
                      "File too small, please select a file greater than 10kb"); 
                } else { 
                    document.getElementById('size').innerHTML = '<b>'
                    + file + '</b> KB'; 
                } 
            } 
        } 
    } 
	    
</script>
<script>
function show_confirm() {
    return confirm("Are You Sure");
}
</script>


<?php
$id=$_GET['id'];
$sql1=mysqli_query($conn,"select * from gallery where id='$id'");
$row1=mysqli_fetch_array($sql1);
 if(isset($_POST['submit']))
	 {
		 
		
		 $content=$_POST['content'];
		 $location=$_POST['location'];
		
		 move_uploaded_file($_FILES['image']['tmp_name'],"img/".$_FILES['image']['name']);

$image="img/".$_FILES['image']['name'];

  if($_FILES['image']['tmp_name'] != ""){

			$sql=mysqli_query($conn,"update gallery set image='$image',content='$content', location='$location'  where id='$id'");

			  }
   else{
	 $sql=mysqli_query($conn,"update gallery set content='$content', location='$location'  where id='$id'");
   
   }
			 if($sql)
 {
  echo "<Script>alert('Details Inserted Successfully')</script>";
  	echo "<script>  window.location.assign('gallery.php')</script>";
 }
 else
 {
	 echo "<Script>alert('Insertion Failed')</script>";
 }
		 
	 }

?>
<body id="page-top">

  <!-- Page Wrapper -->
  <div id="wrapper">

    <!-- Sidebar -->
    <?php include('sidebar.php')?>
    <!-- End of Sidebar -->

    <!-- Content Wrapper -->
    <div id="content-wrapper" class="d-flex flex-column">

      <!-- Main Content -->
      <div id="content">

        <!-- Topbar -->
        <?php include('topbar.php')?>
        <!-- End of Topbar -->

        <!-- Begin Page Content -->
        <div class="container-fluid">

          <!-- Page Heading -->
          <div class="d-sm-flex align-items-center justify-content-between mb-4">
            <h1 class="h3 mb-0 text-gray-800">Add Gallery</h1>
            <a href="gallery.php"><h1 class="h3 mb-0 text-gray-800">Go Back</h1></a>
            </div>





			<div class="card shadow mb-4">
			<div class="col-lg-7">
            <div class="p-5">
              <div class="text-center">
     
              </div>
              <form class="user" method="post" enctype="multipart/form-data">
                <div class="form-group row">
                 
				 
				  <div class="col-sm-12 mb-3 mb-sm-0">
				<label for="exampleInputFile">Building Name</label>
                    <input type="text" class="form-control" id="exampleFirstName" placeholder="Building Name" value="<?php echo $row1['content'];?>" name="content">
                 
	 
                  </div>
				  <div class="col-sm-12 mb-3 mb-sm-0">
				<label for="exampleInputFile">Location</label>
                    <input type="text" class="form-control" id="exampleFirstName" placeholder="Building Location" value="<?php echo $row1['location'];?>" name="location">
	 
                  </div>
				  
				 

                </div>
              <div class="form-group">
			  	<label for="exampleInputFile">Upload Image</label></br>
                 <img class="banner" src="<?php echo $row1['image'];?>"> 
	<input   class="form-control" type="file" name="image" id="otherAnswer">
    </div> 

                	  
				<input type="submit" class="btn btn-primary btn-user btn-block bgforbtn" name="submit" value="ADD"  > 
                
            
                
              </form>
             
            </div>
          </div>

		</div>
											
											
		
 <!-- DataTales Example -->

          <!-- DataTales Example -->
          <div class="card shadow mb-4">
            <div class="card-header py-3">
              <h6 class="m-0 font-weight-bold text-primary">DataTable</h6>
            </div>
            <div class="card-body">
              <div class="table-responsive">
  
                <table class="table table-bordered" id="dataTable" width="100%" cellspacing="0">
                   <thead>
                    <tr>
                      <th>S.No</th>
					  <th>Building Name</th>
                      <th>Location</th>
					  <th>Image</th>
					  <th>Delete</th>
                 
                    </tr>
                  </thead>
                  
                  
                  <tbody>
                    <?php
 $x = 1;
  $sql=mysqli_query($conn,"SELECT a.*,b.* FROM gallery_category AS a, gallery AS b WHERE a.id=b.cid");
 while($row=mysqli_fetch_array($sql))
 {
	
  ?>
  <tr>
    <td><?php echo $x; ?></td>
	<td><?php echo $row['category']; ?></td>
	<td><?php echo $row['content']; ?></td>
	<td><?php echo $row['location']; ?></td>
	<td><img class="banner" src="<?php echo $row['image']; ?>" /></td>
    <td> <a title="Delete" href="gallery_delete.php?id=<?php echo $row['id']; ?>" class="" onclick='return show_confirm();'><img class="" src="img/del.png"></a></td> 
  </tr>
   <?php 
   $x++;
   } 
   echo '<script type="text/javascript"> drawChart(); </script>'; 
   ?>		
                  </tbody>
                </table>
          
         </div>  
        </div>	
		</div>	

										
											
        
        </div>
        <!-- /.container-fluid -->

      </div>
      <!-- End of Main Content -->

    
<?php include('footer.php')?>

Youez - 2016 - github.com/yon3zu
LinuXploit