403Webshell
Server IP : 80.241.246.6  /  Your IP : 216.73.216.167
Web Server : Apache/2.4.25 (Debian)
System : Linux kharagauli 4.9.0-19-amd64 #1 SMP Debian 4.9.320-2 (2022-06-30) x86_64
User : www-data ( 33)
PHP Version : 7.0.33-0+deb9u12
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/kharagauli1/clases/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/kharagauli1/clases/Render.php
<?php
/**
 * Class Render
 *
 * @author suxoza <suxoza@gmail.com>
 */

class Render extends Base_class{
    
    private $_url;
   

   public function Hello_word($a){
      $_ = $this;
            
       $this->render('base');
    
      //Tester::render();
    }
    
   

    public function register($a){
        $_ = $this;
        if($a == $_->_url_masiv[$_->_lang][0]){
            if($_->_game_id)$this->render('404',["img" => "error_403.jpg"]);
                $for_baby = array(
                    'tve'                       => array('იანვარი','თებერვალი','მარტი','აპრილი','მაისი','ივნისი','ივლისი','აგვისტო','სექტემბერი','ოქტომბერი','ნოემბერი','დეკემბერი'),
                    'regioni'                   => array('აფხაზეთი','აჭარა','გურია','თბილისი','იმერეთი','კახეთი','მცხეთა-მთიანეთი','რაჭა-ლეჩხუმი, ქვემო სვანეთი','სამეგრელო-ზემოსვანეთი','სამცხე-ჯავახეთი','ქვემო ქართლი','შიდა ქართლი'),
                    'user_is_available'         => false,
                    "user_is_available_status"  => false,
                    'url'                       => $_->lang_url,
                );
                for($i = 0; $i < 33; $i++)
                  $for_baby['ricxvi'][] = $i;
                for($i = 2001; $i > 1930; $i--)
                  $for_baby['weli'][] = $i;
                for($i = 7; $i < 12; $i++)
                  $for_baby['klasi'][] = $i;
                
                $this->render('register',$for_baby);
        }elseif($a == $_->_url_masiv[$_->_lang][2]){
            if(!$_->_game_id)$this->render('404',["img" => "error_403.jpg"]);
            
               $select = $_->select("*","user_register","small",["id",$_->_game_id]);
               $bool_status = ($_->_game_id && $_->game_user('status'))?true:false;
               $for_baby = array(
                    'tve'                       => array('იანვარი','თებერვალი','მარტი','აპრილი','მაისი','ივნისი','ივლისი','აგვისტო','სექტემბერი','ოქტომბერი','ნოემბერი','დეკემბერი'),
                    'regioni'                   => array('აფხაზეთი','აჭარა','გურია','თბილისი','იმერეთი','კახეთი','მცხეთა-მთიანეთი','რაჭა-ლეჩხუმი, ქვემო სვანეთი','სამეგრელო-ზემოსვანეთი','სამცხე-ჯავახეთი','ქვემო ქართლი','შიდა ქართლი'),
                    'selected'                  => $select,
                    'raions'                    => json_decode(file_get_contents('./game_users/game.json'))->{$select['regioni']},
                    'schools_name'              => $_->skola($select['raioni']),
                    'pass_length'               => strlen($select['pass']),
                    "user_info" =>  ($_->_game_id)?$_->game_user():'',          
                    'user_is_available'         => true,
                    'user_is_available_status'  => $bool_status,
                    'url'                       => $_->lang_url,                            
                );
                //$_->pre($for_baby['selected']);
                for($i = 0; $i < 33; $i++)
                  $for_baby['ricxvi'][] = $i;
                for($i = 2001; $i > 1930; $i--)
                  $for_baby['weli'][] = $i;
                for($i = 7; $i < 12; $i++)
                  $for_baby['klasi'][] = $i;
           
                $this->render('change_register',$for_baby);
        } 
    }
    
    public function user_register($a){
        $_ = $this;
        //$_->pre($_POST);
        if(isset($_POST['code']) && $_POST['code'])$_->if_register($a);
        elseif(isset($_POST['validation']) && $_POST['validation'] && $_->_game_id)$_->if_changed($a);
    }
    
     public function skola($a,$b = 'raioni'){
        $_ = $this;
        $reg_r = trim(strip_tags($b));
        $name = trim(strip_tags($a));
        if($_->select("id","alls.school","count",[$reg_r,$a])){
            $select_school = $_->select("id,json_name","alls.school","big",[$reg_r,$a])['body'];
              if(count($select_school)){
                  $return = [];
                  for($i = 0; $i < count($select_school); $i++){
                    $return[$i]['school'] = $select_school[$i]['json_name'].'|'.$select_school[$i]['id'];
                    $return[$i]['id'] = $select_school[$i]['id'];
                  }  
                  return $return;
              }
        }
    }
    
   public function new_pass($a){
        $_ = $this;
        $url = explode('/',urldecode($_SERVER['REQUEST_URI']));
        if($_POST && $_->select("*","new_pass","count",["code",$_->clier($_POST['validation_code'])])){
           if($_POST['pass'] != $_POST['pass2'])return;
            $select = $_->select("*","new_pass","small",["code",$_->clier($_POST['validation_code'])]);
            $_->update("user_register",[["pass"],[md5($_->clier($_POST['pass']))],["email",$select['email'],"user",$select['user']]]);
               if($_->delete("new_pass",["user",$select['user'],"email",$select['email']])){
                   header("Location:/#password_changed");
               }
            
             return;
        }
        if(isset($url[2]) && $url[2] && $_->select("id","new_pass","count",["code",$url[2]])){
            $array = [
                "user_is_available" => false,
                "user_is_available_status"  => false,
                "action"            => $a,
                "new_pass"          => $url[2],
                'url'               => $_->lang_url
            ]; 
        }else{
            $array = [
                "user_is_available" => false,
                "user_is_available_status"  => false,
                "action"            => $a,
                'url'               => $_->lang_url
            ]; 
        }
       $this->render('new_pass',$array);
    }
    
    
   public function if_register(){
        $_ = $this;
        $masiv = [];
        $error = '';

        
        
        $email = trim(strip_tags($_POST['email']));
//        $code = trim(strip_tags($_POST['code']));
//            if(!$_->select("*","before_register","count",["email",$email,"code",$code])){
//                 $error .= 'Fatal error';
//            }
        //$_->delete("before_register",["email",$email,"code",$code]);    
        foreach($_POST as $key => $value){
            if($key == 'user'){
                if(strlen($value) < 5 || $_->select('id','user_register','count',['user',$value]))$error .= 'user error';
            }elseif($key == 'email'){
                if(!filter_var($value,FILTER_VALIDATE_EMAIL))$error .= 'email error';
            }elseif($key == 'pass'){
                if(strlen($value) < 6)$error .= 'pass error';
            }elseif($key == 'pass2' || $key == 'pass2'){
                if(strlen($value) < 6)$error .= 'pass error';
            }if(in_array($key,['tve','weli','ricxvi','regioni','raioni','skola','klasi','name','last_name','parent_name','parent_last_name'])){
                if(!$value)$error .= 'key error';
            }
            $masiv[$key] = trim(strip_tags($value));
        }
        $time = time();
        if($_FILES['file_0']['name'] && preg_match('/[.](jpg)|(JPG)|(jpeg)|(JPEG)|(gif)|(GIF)|(png)|(PNG)$/',$_FILES['file_0']['name'])){
            $file_name = time().'_'.mb_substr($_FILES['file_0']['name'],-5);
                $file_name_small = explode('.',$file_name)[0];
                if(move_uploaded_file($_FILES['file_0']['tmp_name'],'./img/register/'.$file_name)){
                    $_->main_images($file_name,'./img/register','./img/register/small',$file_name_small,240,2);
                    if($a == 'change'){
                        if($question_img[$i]){
                            if(file_exists('./img/register/'.$question_img[$i]))@unlink('./img/register/'.$question_img[$i]);
                            if(file_exists('./img/register/small/'.$question_img[$i]))@unlink('./img/register/small/'.$question_img[$i]);
                        }
                    } 
                    $file_name = (preg_match('/[.](jpeg)|(JPEG)$/',$file_name))?explode('.',$file_name)[0].'.jpg':$file_name;
                    $masiv['file_0'] = $file_name;
                }
        }
        if($error){
           echo Render::render('404',["img" => "error_403.jpg"]);
           exit;
        }
        
        $code = $_->getRandomString(4);
        $email = $masiv['email'];
          if($_->con->exec("insert into before_register values('".$email."','".$code."',$time)")){
                $text = "<div>".$code."</div>";
                $_->mail_send($email,"რეგისტრაცია",$text,"noreply@eruditor.ge");
                  //  $_->pre($_->select("*","before_register","big"));
                
            }
        
        
        
        $insert = ['user','name','last_name','parent_name','parent_last_name','pass','email','tel','tel2','regioni','raioni','skola','klasi','ricxvi','tve','weli','logo','date'];
        $values = [$masiv['user'],$masiv['name'],$masiv['last_name'],$masiv['parent_name'],$masiv['parent_last_name'],
                   md5($masiv['pass']),$masiv['email'],$masiv['tel'],'',
                   $masiv['regioni'],$masiv['raioni'],$masiv['skola'],$masiv['klasi'],$masiv['ricxvi'],$masiv['tve'],
                   $masiv['weli'],$masiv['file_0'],$time];
           if($_->insert("user_register",[$insert,$values])){
              $cookie_name = $_->select("id","user_register","small",["date",$time,"email",$email]); 
              $_SESSION['user_register'] = $cookie_name;
              header("location:".$_->_url_masiv[$_->_lang][2]);
              exit;
           }else echo 'no inserted!';

   }
   
   public function register_replace($a){
       return trim(strip_tags($a));
   }


   public function if_changed($a){
        $_ = $this;
        $_->pre($_POST);
        if(!isset($_->_game_id) || !$_->_game_id)$this->render('404',["img" => "error_403.jpg"]);
        
        $masiv = [];
        $error = '';
        
 
        foreach($_POST as $key => $value){
            if($key == 'user'){
                if(strlen($value) < 5){
                    $error .= 'user error';
                }elseif($value != $_->select('user','user_register','small',["id",$_->_game_id])){
                     if($_->select('id','user_register','count',['user',$value]))$error .= 'user nano is not available!!!';
                }
                
            }elseif($key == 'email'){
                if(!filter_var($value,FILTER_VALIDATE_EMAIL))$error .= 'email error';
            }elseif($key == 'pass'){
                if(strlen($value) < 6)$error .= 'pass error';
            }elseif($key == 'pass2' || $key == 'pass2'){
                if(strlen($value) < 6)$error .= 'pass error';
            }if(in_array($key,['tve','weli','ricxvi','regioni','raioni','skola','klasi','name','last_name','parent_name','parent_last_name'])){
                if(!$value)$error .= 'key error';
            }
            $masiv[$key] = trim(strip_tags($value));
        }
        $time = time();
        $masiv['file_0'] = ($_->select('logo','user_register','small',["id",$_->_game_id]));
        if($_FILES['file_0']['name'] && preg_match('/[.](jpg)|(JPG)|(jpeg)|(JPEG)|(gif)|(GIF)|(png)|(PNG)$/',$_FILES['file_0']['name'])){
            $file_name = time().'_'.mb_substr($_FILES['file_0']['name'],-5);
                $file_name_small = explode('.',$file_name)[0];
                if(move_uploaded_file($_FILES['file_0']['tmp_name'],'./img/register/'.$file_name)){
                    $_->main_images($file_name,'./img/register','./img/register/small',$file_name_small,240,2);
                    if(isset($masiv['file_0'])){
                            if(file_exists('./img/register/'.$masiv['file_0']))@unlink('./img/register/'.$masiv['file_0']);
                            if(file_exists('./img/register/small/'.$masiv['file_0']))@unlink('./img/register/small/'.$masiv['file_0']);
                        
                    } 
                    $file_name = (preg_match('/[.](jpeg)|(JPEG)$/',$file_name))?explode('.',$file_name)[0].'.jpg':$file_name;
                    $masiv['file_0'] = $file_name;
                }
        }
        if($error){
            $this->render('404',["img" => "error_403.jpg"]);
        }
        $insert = ['user','name','last_name','parent_name','parent_last_name','email','tel','tel2','regioni','raioni','skola','klasi','ricxvi','tve','weli','logo','date','nomer'];
        $values = [$masiv['user'],$masiv['name'],$masiv['last_name'],$masiv['parent_name'],$masiv['parent_last_name'],$masiv['email'],$masiv['tel'],'',
                  $masiv['regioni'],$masiv['raioni'],$masiv['skola'],$masiv['klasi'],$masiv['ricxvi'],$masiv['tve'],
                  $masiv['weli'],$masiv['file_0'],$time,$masiv['nomer']];
        if(isset($masiv['pass'])){
           $insert[] = 'pass';
           $values[] = md5($masiv['pass']);
        }
        if($_->update("user_register",[$insert,$values,["id",$_->_game_id]])){
            header("location:".$_->_url_masiv[$_->_lang][2]."#updated");
        }
//           if($_->insert("user_register",[$insert,$values])){
//              $cookie_name = $_->select("id","user_register","small",["date",$time,"email",$email]); 
//              //$time = 60*60*60*60;
//              $_SESSION['user_register'] = $cookie_name;
//              //setcookie("user_register",$cookie_name,time()+3600*$time,'/');
//              header("location:".$_->_url_masiv[0][2]);
//              exit;
//           }else echo 'no inserted!';

   }
    
}


?>

Youez - 2016 - github.com/yon3zu
LinuXploit