SkidSec WebShell

Server Address : 172.31.38.4
Web Server : Apache/2.4.58 (Ubuntu)
Uname : Linux ip-172-31-38-4 6.14.0-1017-aws #17~24.04.1-Ubuntu SMP Wed Nov 5 10:48:17 UTC 2025 x86_64
PHP Version : 7.4.33
Current Path : /var/www/html/pmi/
Current File : //var/www/html/pmi/AddVisitors.aspx.cs
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data;
using System.Data.SqlClient;
using System.Drawing;
using System.Drawing.Drawing2D;
using System.IO;
using System.Collections;
using QRCoder;

public partial class AddVisitors : AdminPage
{

    Utility utility = new Utility();
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!IsPostBack)
        {

            if (Request.QueryString["VisitrId"] != null)
            {
                BindDataOnEdit(Request.QueryString["VisitrId"].ToString());
            }


        }
    }

    [System.Web.Services.WebMethod]
    public static string SaveRecords(string companyname, string ownername, string contactno, string address, string email, string password)
    {

        try
        {
            string result = "";
            using (SqlCommand cmd = new SqlCommand("Proc_VisitorsTable"))
            {
                cmd.CommandType = CommandType.StoredProcedure;
                cmd.Parameters.AddWithValue("@PARA", "ADD");
                cmd.Parameters.AddWithValue("@COMP_NAME", companyname);
                cmd.Parameters.AddWithValue("@COMPOWNER_NAME", ownername);
                cmd.Parameters.AddWithValue("@MOBILENO", contactno);
                cmd.Parameters.AddWithValue("@ADDRESS", address);
                cmd.Parameters.AddWithValue("@EMAILID", email);
                cmd.Parameters.AddWithValue("@PASSWORD", password);

                Utility utility = new Utility();
                if (utility.Execute(cmd))
                {
                    result = "success";

                    HttpContext.Current.Session["successmessage"] = "Insert";
                }
                else
                {
                    result = "fail";
                }
            }
            return result;
        }
        catch (Exception exp)
        {
            throw exp;
            //throw;
        }
    }

    [System.Web.Services.WebMethod]
    public static string UpdateRecords(string companyname, string ownername, string contactno, string address, string email, string password, string visitorid)
    {
        try
        {
            string result = "";
            using (SqlCommand cmd = new SqlCommand("Proc_VisitorsTable"))
            {
                cmd.CommandType = CommandType.StoredProcedure;
                cmd.Parameters.AddWithValue("@PARA", "UPDATE");
                cmd.Parameters.AddWithValue("@VISITORS_ID", visitorid);
                cmd.Parameters.AddWithValue("@COMP_NAME", companyname);
                cmd.Parameters.AddWithValue("@COMPOWNER_NAME", ownername);
                cmd.Parameters.AddWithValue("@MOBILENO", contactno);
                cmd.Parameters.AddWithValue("@ADDRESS", address);
                cmd.Parameters.AddWithValue("@EMAILID", email);
                cmd.Parameters.AddWithValue("@PASSWORD", password);

                Utility utility = new Utility();
                if (utility.Execute(cmd))
                {
                    result = "success";

                    HttpContext.Current.Session["successmessage"] = "Update";
                }
                else
                {
                    result = "fail";
                }
            }

            return result;
        }
        catch (Exception exp)
        {
            throw exp;
            //throw;
        }
    }

    public void BindDataOnEdit(string id)
    {
        try
        {
            DataTable dt = new DataTable();
            dt = utility.Display("Exec Proc_VisitorsTable 'GET_BY_ID','" + id + "'");
            if (dt.Rows.Count > 0)
            {
                txtcompanyname.Text = dt.Rows[0]["COMP_NAME"].ToString();
                txtownername.Text = dt.Rows[0]["COMPOWNER_NAME"].ToString();
                txtContactNo.Text = dt.Rows[0]["MOBILENO"].ToString();
                txtaddress.Text = dt.Rows[0]["ADDRESS"].ToString();
                txtEmail.Text = dt.Rows[0]["EMAILID"].ToString();
                txtpassword.Text = dt.Rows[0]["PASSWORD"].ToString();

                txtEmail.ReadOnly = true;
                btnsubmit.Text = "update";
            }
        }
        catch (Exception ex)
        {
            this.Title = ex.Message;
        }
    }

    protected void btngeneratepswd_Click(object sender, EventArgs e)
    {
        txtpassword.Text = Generatepassword();
    }

    public string Generatepassword()
    {
        Random rndm = new Random();
        string gerenate = string.Format("{0}{1}", rndm.Next(10, 20), rndm.Next(21, 30));

        char[] arry = { ' ' };
        string gettext = txtcompanyname.Text.ToString();
        string[] text = gettext.Split(arry);
        gerenate = text[0] + gerenate;

        // Response.Write(gerenate);
        return gerenate.ToString().ToLower(); ;
    }
}