SkidSec WebShell

Server Address : 172.31.38.4

Web Server : Apache/2.4.58 (Ubuntu)

Uname : Linux ip-172-31-38-4 6.14.0-1017-aws #17~24.04.1-Ubuntu SMP Wed Nov 5 10:48:17 UTC 2025 x86_64

PHP Version : 7.4.33

<?php include('../db.inc.php');?> <?php include('../functions.php');?> <?php if (($_REQUEST['action']=='del') && ($_REQUEST['id']!='')) { $sql="delete from user_login where id='$_REQUEST[id]'"; if ($conn->query($sql)!= true) { die('Error: ' . mysql_error()); } echo"<meta http-equiv=refresh content=\"0;url=manage_admin.php?action=view\">"; } if (($_REQUEST['action']=='active') && ($_REQUEST['id']!='')) { $status=$_REQUEST['status']; $id=$_REQUEST['id']; $sql="update user_login set status='$status' where id='$id'"; if ($conn->query($sql)!=true) { die('Error: ' . mysqli_error()); } echo"<meta http-equiv=refresh content=\"0;url=manage_admin.php?action=view\">"; } if ($_REQUEST['action']=='save') { $post_date = date('Y-m-d'); $contact_name=addslashes($_REQUEST['contact_name']); $address=addslashes($_REQUEST['address']); $mobile_no=addslashes($_REQUEST['mobile_no']); $email_id=addslashes($_REQUEST['email_id']); $password=addslashes($_REQUEST['password']); $role=addslashes($_REQUEST['role']); $categId=implode(",",$_POST['categId']); $subCategId=implode(",",$_POST['subCategId']); $result = $conn->query("select * from user_login where email_id='$email_id' and password='$password'"); $cnt = $result->num_rows; if($cnt > 0) { echo "<script langauge=\"javascript\">alert(\"Email ID or Password already in use\");location.href='manage_admin.php?action=view';</script>"; } else { $sql="INSERT INTO user_login (contact_name, address,mobile_no,email_id,password,role,categId,subCategId,status,post_date) VALUES ('$contact_name', '$address','$mobile_no','$email_id','$password','$role','$categId','$subCategId','1','$post_date')"; if ($conn->query($sql)!=true) { die('Error: ' . mysql_error()); } echo"<meta http-equiv=refresh content=\"0;url=manage_admin.php?action=view\">"; } } if (($_REQUEST['action']=='update')&&($_REQUEST['id']!='')) { $contact_name=addslashes($_REQUEST['contact_name']); $address=addslashes($_REQUEST['address']); $mobile_no=addslashes($_REQUEST['mobile_no']); $email_id=addslashes($_REQUEST['email_id']); $password=addslashes($_REQUEST['password']); $role=addslashes($_REQUEST['role']); $categId=implode(",",$_POST['categId']); $subCategId=implode(",",$_POST['subCategId']); $id=$_REQUEST['id']; $sql="update user_login set contact_name='$contact_name',address='$address', mobile_no='$mobile_no',email_id='$email_id',password='$password',role='$role',categId='$categId',subCategId='$subCategId' where id='$id'"; if ($conn->query($sql)!=true) { die('Error: ' . mysql_error()); } echo"<meta http-equiv=refresh content=\"0;url=manage_admin.php?action=view\">"; } ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Welcome to GJF</title> <link rel="stylesheet" type="text/css" href="css/style.css" />  <script type="text/javascript" src="js/jquery-1.3.2.min.js"></script> <link rel="stylesheet" type="text/css" href="css/ddsmoothmenu.css" /> <script type="text/javascript" src="js/ddsmoothmenu.js"></script> <script type="text/javascript"> ddsmoothmenu.init({ mainmenuid: "smoothmenu1", //menu DIV id orientation: 'h', //Horizontal or vertical menu: Set to "h" or "v" classname: 'ddsmoothmenu', //class added to menu's outer DIV //customtheme: ["#1c5a80", "#18374a"], contentsource: "markup" //"markup" or ["container_id", "path_to_menu_file"] }) </script>  <style type="text/css">  </style> <style> fieldset.scheduler-border { border: 1px groove #ddd !important; padding: 0 1.4em 1.4em 1.4em !important; margin: 0 0 1.5em 0 !important; -webkit-box-shadow: 0px 0px 0px 0px #000; box-shadow: 0px 0px 0px 0px #000; } legend.scheduler-border { font-size: 1.2em !important; font-weight: bold !important; text-align: left !important; width:auto; padding:0 10px; border-bottom:none; } </style> <script language="javascript"> function checkdata() { if(document.getElementById('contact_name').value == '') { alert("Please Enter Name"); document.getElementById('contact_name').focus(); return false; } if(document.getElementById('mobile_no').value == '') { alert("Please Enter Mobile No."); document.getElementById('mobile_no').focus(); return false; } if(!IsNumeric(document.getElementById('mobile_no').value)) { alert("Please enter valid Mobile No.") document.getElementById('mobile_no').focus(); return false; } /*var x=document.getElementById('mobile_no').value; if (x.charAt(0)!="9" && x.charAt(0)!="8" && x.charAt(0)!="7") { alert("It should start with 9 or 8 or 7"); document.getElementById('mobile_no').focus(); return false; }*/ if(document.getElementById('mobile_no').value.length < 10) { alert("Please enter 10 digit Mobile No."); document.getElementById('mobile_no').focus(); return false; } if(document.getElementById('email_id').value == '') { alert("Please enter Email ID."); document.getElementById('email_id').focus(); return false; } if(echeck(document.getElementById('email_id').value)==false) { document.getElementById('email_id').focus(); return false; } if(document.getElementById('password').value == '') { alert("Please Enter Password"); document.getElementById('password').focus(); return false; } if(document.getElementById('password').value.length < 5) { alert("password must be at least 5 characters long"); document.getElementById('password').focus(); return false; } if(document.getElementById('role').value == '') { alert("Please Select Role"); document.getElementById('role').focus(); return false; } if(document.getElementById('region_id').value == '') { alert("Please Select Region"); document.getElementById('region_id').focus(); return false; } } function echeck(str) { var at="@" var dot="." var lat=str.indexOf(at) var lstr=str.length var ldot=str.indexOf(dot) if (str.indexOf(at)==-1){ alert("Invalid E-mail ID") return false } if (str.indexOf(at)==-1 || str.indexOf(at)==0 || str.indexOf(at)==lstr){ alert("Invalid E-mail ID") return false } if (str.indexOf(dot)==-1 || str.indexOf(dot)==0 || str.indexOf(dot)==lstr){ alert("Invalid E-mail ID") return false } if (str.indexOf(at,(lat+1))!=-1){ alert("Invalid E-mail ID") return false } if (str.substring(lat-1,lat)==dot || str.substring(lat+1,lat+2)==dot){ alert("Invalid E-mail ID") return false } if (str.indexOf(dot,(lat+2))==-1){ alert("Invalid E-mail ID") return false } if (str.indexOf(" ")!=-1){ alert("Invalid E-mail ID") return false } return true } function IsNumeric(strString) { var strValidChars = "0123456789,\. /-"; var strChar; var blnResult = true; //if (strString.length == 0) return false; // test strString consists of valid characters listed above for (i = 0; i < strString.length && blnResult == true; i++) { strChar = strString.charAt(i); if (strValidChars.indexOf(strChar) == -1) { blnResult = false; } } return blnResult; } </script> <script language="javascript"> $(document).ready(function(){ $("#role").change(function () { var role=$(this).val(); if(role=="Super Admin") { $("#admin_access_div").hide(); }else { $("#admin_access_div").show(); } }); }); </script> </head> <body> <div id="header_wrapper"><?php include("include/header.php");?></div> <div id="nav_wrapper"> <div class="nav"><?php include("include/menu.php");?></div> </div> <div class="clear"></div> <div class="breadcome_wrap"> <div class="breadcome"><a href="admin.php">Home</a> > Manage Admin</div> </div> <div id="main"> <div class="content"> <div class="content_head"><a href="manage_admin.php?action=add"><div class="content_head_button">Add Jury</div></a> <a href="manage_admin.php?action=view"><div class="content_head_button">View Jury</div></a> </div> <?php if($_REQUEST['action']=='view') {?> <div class="content_details1"> <table width="100%" border="0" cellspacing="0" cellpadding="0" class="detail_txt" > <tr class="orange1"> <td ><a href="#">Sr. No.</a></td> <td >Name</td> <td >Email ID</td> <td >Mobile No.</td> <td>Password</td> <td>Role</td> <td>Status</td> <td colspan="3" align="center">Action</td> </tr> <?php $order_by = isset($_REQUEST['order_by'])?$_REQUEST['order_by']:'id'; $asc_desc = isset($_REQUEST['asc_desc'])?$_REQUEST['asc_desc']:'desc'; $attach = " order by ".$order_by." ".$asc_desc." "; $i=1; $result = $conn->query("SELECT * FROM user_login where 1".$attach." "); $rCount=0; $rCount = $result->num_rows; if($rCount>0) { while($row = $result->fetch_assoc()) { ?> <tr <?php if($i%2==0){echo "bgcolor='#CCCCCC'";}?>> <td><?php echo $i;?></td> <td><?php echo $row['contact_name']; ?></td> <td><?php echo $row['email_id']; ?></td> <td><?php echo $row['mobile_no']; ?></td> <td><?php echo $row['password']; ?></td> <td><?php echo $row['role']; ?></td> <td><?php if($row['status'] == '1') { echo "<span style='color:green'>Active</span>"; }else if($row['status'] == '0') { echo "<span style='color:red'>Deactive</span>"; } ?> </td> <td><?php if($row['status'] == 1) { ?> <a style="text-decoration:none;" href="manage_admin.php?id=<?php echo $row['id']; ?>&status=0&action=active" onclick="return(window.confirm('Are you sure you want to Deactivate.'));"><img src="images/inactive.png" border="0" title="Inactive"/></a> <?php } else { ?> <a style="text-decoration:none;" href="manage_admin.php?id=<?php echo $row['id']; ?>&status=1&action=active" onclick="return(window.confirm('Are you sure you want to Activate.'));"><img src="images/active.png" border="0" title="Active"/></a> <?php } ?></td> <td ><a href="manage_admin.php?action=edit&id=<?php echo $row['id']?>"><img src="images/edit.png" title="Edit" border="0" /></a></td> <td ><a href="manage_admin.php?action=del&id=<?php echo $row['id']?>" onclick="return(window.confirm('Are you sure you want to delete?'));"><img src="images/delete.png" title="Delete" border="0" /></a></td> </tr> <?php $i++; } } else { ?> <tr> <td colspan="10">Records Not Found</td> </tr> <?php } ?> </table> </div>  <?php } ?> <?php if(($_REQUEST['action']=='add') || ($_REQUEST['action']=='edit')) { $action='save'; if(($_REQUEST['id']!='') || ($_REQUEST['action']=='edit')) { $action='update'; $result2 = $conn->query("SELECT * FROM user_login where id='$_REQUEST[id]'"); if($row2 = $result2->fetch_assoc()) { $contact_name=stripslashes($row2['contact_name']); $address=stripslashes($row2['address']); $mobile_no=stripslashes($row2['mobile_no']); $email_id=stripslashes($row2['email_id']); $password=stripslashes($row2['password']); $role=stripslashes($row2['role']); $categId=explode(',',$row2['categId']); $subCategId=explode(',',$row2['subCategId']); } } ?> <div class="content_details1 "> <form action="" method="post" name="form1" id="form1" onsubmit="return checkdata()"> <table width="100%" border="0" cellspacing="0" cellpadding="0" > <tr class="orange1"> <td colspan="2">  Add New Jury</td> </tr> <tr> <td class="content_txt">Name <span class="star">*</span></td> <td><input type="text" name="contact_name" id="contact_name" title="Please enter your name" class="show-tooltip input_txt" value="<?php echo $contact_name; ?>" /> </td> </tr> <tr> <td valign="top" class="content_txt">Address</td> <td><label> <textarea name="address" id="address" rows="5" class="input_txt" ><?php echo $address; ?></textarea> </label></td> </tr> <tr> <td class="content_txt">Mobile No. <span class="star">*</span></td> <td><input type="text" name="mobile_no" id="mobile_no" class="input_txt" value="<?php echo $mobile_no; ?>" /> <label id="lblMsg" style="display:none;">Please enter your contact no.</label> </td> </tr> <tr> <td class="content_txt">Email ID <span class="star">*</span></td> <td><input type="text" name="email_id" id="email_id" class="input_txt" value="<?php echo $email_id; ?>" /></td> </tr> <tr> <td class="content_txt">Password <span class="star">*</span></td> <td><input type="password" name="password" id="password" class="input_txt" value="<?php echo $password; ?>" /></td> </tr> <tr> <td class="content_txt">Role <span class="star">*</span></td> <td> <select name="role" id="role" class="input_txt"> <option value="">Select Role</option> <option value="STP1" <?php if($role=="STP1"){echo "selected='selected'";} ?>>EY Verification</option> <option value="STP2" <?php if($role=="STP2"){echo "selected='selected'";} ?>>EY Second Step Verification</option> <option value="STP3" <?php if($role=="STP3"){echo "selected='selected'";} ?>>Screening Jury Round</option> <option value="STP4" <?php if($role=="STP4"){echo "selected='selected'";} ?>>Final Round</option> <option value="SA" <?php if($role=="SA"){echo "selected='selected'";} ?>>Super Admin</option> <option value="AC" <?php if($role=="AC"){echo "selected='selected'";} ?>>Accounts</option> </select></td> </tr> <tr> <td class="content_txt">Permission</td> <td> <?php $result=$conn->query("select * from award_category_master where status=1"); while($row=$result->fetch_assoc()){ ?> <fieldset class="scheduler-border"> <legend class="scheduler-border"><input type="checkbox" name="categId[]" value="<?php echo $row['cat_id'];?>" <?php if(in_array($row['cat_id'], $categId)){ echo "checked='checked'";}?> > <?php echo $row['category_name'];?>  </legend> <?php $result1=$conn->query("SELECT * FROM `award_sub_category_master` WHERE `cat_id`='".$row['cat_id']."' AND status='1'"); while($row1=$result1->fetch_assoc()){ ?> <input type="checkbox" name="subCategId[]" value="<?php echo $row1['sub_cat_id'];?>" <?php if(in_array($row1['sub_cat_id'], $subCategId)){ echo "checked='checked'";}?>>  <?php echo $row1['sub_category_name'];?>  <?php } ?> </fieldset> <?php } ?> </td> </tr> <tr> <td> </td> <td> <input type="submit" value="Submit" class="input_submit"/> <input type="hidden" name="action" id="action" value="<?php echo $action;?>" /> <input type="hidden" name="id" id="id" value="<?php echo $_REQUEST['id'];?>" /> </td> </tr> </table> </form> </div> <?php } ?> </div> </div> <div id="footer_wrap"><?php include("include/footer.php");?></div> </body> </html>