SkidSec WebShell

Server Address : 172.31.38.4

Web Server : Apache/2.4.58 (Ubuntu)

Uname : Linux ip-172-31-38-4 6.14.0-1017-aws #17~24.04.1-Ubuntu SMP Wed Nov 5 10:48:17 UTC 2025 x86_64

PHP Version : 7.4.33

<?php session_start(); if(!isset($_SESSION['curruser_login_id'])){ header('Location: index.php'); exit; } include('../db.inc.php'); include('../functions.php'); ?> <?php $admin_id = $_SESSION['curruser_login_id']; if(($_REQUEST['action']=='del') && ($_REQUEST['id']!='')) { $id=filter($_REQUEST['id']); $sql="delete from manage_pmi_participants where id=$id"; $stmt = $conn -> prepare($sql); $stmt->execute(); echo"<meta http-equiv=refresh content=\"0;url=manage_pmi_participant.php?action=view\">"; /* $stmt = $conn -> prepare($sql); $stmt->bind_param("i", intval($_REQUEST['id'])); if($stmt->execute()){ echo"<meta http-equiv=refresh content=\"0;url=manage_pmi_participant.php?action=view\">"; } */ } if(($_REQUEST['action']=='active') && ($_REQUEST['id']!='')) { $status = filter($_REQUEST['status']); $id = intval(filter($_REQUEST['id'])); $sql="update manage_pmi_participants set status='$status',adminId='$adminID',modified_date=NOW() where id='$id'"; $stmt = $conn -> prepare($sql); if($stmt->execute()){ echo"<meta http-equiv=refresh content=\"0;url=manage_pmi_participant.php?action=view\">"; } } if($_REQUEST['action']=='save') { $created_date = date("Y-m-d"); $modified_date = date("Y-m-d"); $category_name = filter($_REQUEST['category_name']); $company_name = addslashes($_REQUEST['company_name']); $company_profile = addslashes($_REQUEST['ckeditor']); $company_location = filter($_REQUEST['company_location']); //---------------------------------------- uplaod logo ----------------------------------------------- $upload_pdf = ''; $target_folder = 'pmi_participant_logo/'; $file_name = $_FILES['company_logo']['name']; $file_name = str_replace(" ","_",$file_name); $path_parts = ""; $ext=""; $target_path = ""; $filetoupload=""; $temp_code = rand(); if(preg_match("/.php/i", $file_name)) { echo "<script langauge=\"javascript\">alert(\"Sorry you have select Invalid file.\");location.href='manage_pmi_participant.php?action=add';</script>"; exit; }else if($file_name!='') { if (($_FILES["company_logo"]["type"] == "image/jpeg") || ($_FILES["company_logo"]["type"] == "image/jpg") || ($_FILES["company_logo"]["type"] == "image/png")) { $target_path = $target_folder.$temp_code.'_'.$_FILES['company_logo']['name']; if(@move_uploaded_file($_FILES['company_logo']['tmp_name'], $target_path)) { $company_logo = $temp_code.'_'.$_FILES['company_logo']['name']; } else { echo "<script langauge=\"javascript\">alert(\"Sorry you can not upload this file.\");location.href='manage_pmi_participant.php?action=add';</script>"; return; } } else { echo "<script langauge=\"javascript\">alert(\"Sorry you have select Invalid file.\");location.href='manage_pmi_participant.php?action=add';</script>"; } } //---------------------------------------- uplaod Model Photo ----------------------------------------------- $upload_pdf = ''; $target_folder = 'pmi_model_photo/'; $file_name = $_FILES['company_model_photo']['name']; $file_name = str_replace(" ","_",$file_name); $path_parts = ""; $ext=""; $target_path = ""; $filetoupload=""; $temp_code = rand(); if(preg_match("/.php/i", $file_name)) { echo "<script langauge=\"javascript\">alert(\"Sorry you have select Invalid file.\");location.href='manage_pmi_participant.php?action=add';</script>"; exit; }else if($file_name!='') { if (($_FILES["company_model_photo"]["type"] == "image/jpeg") || ($_FILES["company_model_photo"]["type"] == "image/jpg") || ($_FILES["company_model_photo"]["type"] == "image/png")) { $target_path = $target_folder.$temp_code.'_'.$_FILES['company_model_photo']['name']; if(@move_uploaded_file($_FILES['company_model_photo']['tmp_name'], $target_path)) { $company_model_photo = $temp_code.'_'.$_FILES['company_model_photo']['name']; } else { echo "<script langauge=\"javascript\">alert(\"Sorry you can not upload this file.\");location.href='manage_pmi_participant.php?action=add';</script>"; return; } } else { echo "<script langauge=\"javascript\">alert(\"Sorry you have select Invalid file.\");location.href='manage_pmi_participant.php?action=add';</script>"; } } $sql="INSERT INTO `manage_pmi_participants`(`category_name`,`company_name`,`company_profile`,`company_logo`,`company_model_photo`,`company_location`,`admin_id`,`status`,`created_date`,`modified_date`) VALUES ('$category_name','$company_name','$company_profile','$company_logo','$company_model_photo','$company_location','$admin_id','1','$created_date','$modified_date')"; $stmt = $conn -> prepare($sql); $stmt->execute(); echo"<meta http-equiv=refresh content=\"0;url=manage_pmi_participant.php?action=view\">"; } if(($_REQUEST['action']=='update')&&($_REQUEST['id']!='')) { $created_date = date("Y-m-d"); $modified_date = date("Y-m-d"); $category_name = filter($_REQUEST['category_name']); $company_name = addslashes($_REQUEST['company_name']); $company_profile = addslashes($_REQUEST['ckeditor']); $company_location = filter($_REQUEST['company_location']); $id=filter($_REQUEST['id']); //------------------------------------ Update uplaod logo ---------------------------------------------------- $company_logo = ''; $target_folder = 'pmi_participant_logo/'; $path_parts = ""; $ext=""; $target_path = ""; $filetoupload=""; $temp_code = rand(); if($_FILES['company_logo']['name'] != '') { //Unlink the previuos image $qpreviousimg=$conn ->query("select company_logo from manage_pmi_participants where id='$id'"); $rpreviousimg=$qpreviousimg->fetch_assoc(); $filename="pmi_participant_logo/".$rpreviousimg['company_logo']; unlink($filename); if (($_FILES["company_logo"]["type"] == "image/jpeg") || ($_FILES["company_logo"]["type"] == "image/jpg") || ($_FILES["company_logo"]["type"] == "image/png")) { $target_path = $target_folder.$temp_code.'_'.$_FILES['company_logo']['name']; if(@move_uploaded_file($_FILES['company_logo']['tmp_name'], $target_path)) { $company_logo = $temp_code.'_'.$_FILES['company_logo']['name']; $sql="update manage_pmi_participants set company_logo='$company_logo',admin_id='$admin_id',modified_date=NOW() where id='$id'"; $result=$conn ->query($sql); } else { echo "<script langauge=\"javascript\">alert(\"Sorry you can not upload this file.\");location.href='manage_pmi_participant.php?action=edit&id=$id';</script>"; return; } } else { echo "<script langauge=\"javascript\">alert(\"Sorry you have select Invalid file.\");location.href='manage_pmi_participant.php?action=edit&id=$id';</script>"; } } //------------------------------------ Update Model Photo ---------------------------------------------------- $company_logo = ''; $target_folder = 'pmi_model_photo/'; $path_parts = ""; $ext=""; $target_path = ""; $filetoupload=""; $temp_code = rand(); if($_FILES['company_model_photo']['name'] != '') { //Unlink the previuos image $qpreviousimg=$conn ->query("select company_model_photo from manage_pmi_participants where id='$id'"); $rpreviousimg=$qpreviousimg->fetch_assoc(); $filename="pmi_model_photo/".$rpreviousimg['company_model_photo']; unlink($filename); if (($_FILES["company_model_photo"]["type"] == "image/jpeg") || ($_FILES["company_model_photo"]["type"] == "image/jpg") || ($_FILES["company_model_photo"]["type"] == "image/png")) { $target_path = $target_folder.$temp_code.'_'.$_FILES['company_model_photo']['name']; if(@move_uploaded_file($_FILES['company_model_photo']['tmp_name'], $target_path)) { $company_model_photo = $temp_code.'_'.$_FILES['company_model_photo']['name']; $sql="update manage_pmi_participants set company_model_photo='$company_model_photo',admin_id='$admin_id',modified_date=NOW() where id='$id'"; $result=$conn ->query($sql); } else { echo "<script langauge=\"javascript\">alert(\"Sorry you can not upload this file.\");location.href='manage_pmi_participant.php?action=edit&id=$id';</script>"; return; } } else { echo "<script langauge=\"javascript\">alert(\"Sorry you have select Invalid file.\");location.href='manage_pmi_participant.php?action=edit&id=$id';</script>"; } } $sql="update manage_pmi_participants set category_name='$category_name',company_name='$company_name',company_profile='$company_profile',company_location='$company_location',modified_date=NOW() where id='$id'"; $result = $conn ->query($sql); if(!$result) die ($conn->error); echo"<meta http-equiv=refresh content=\"0;url=manage_pmi_participant.php?action=view\">"; } ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Welcome to GJC</title> <link rel="stylesheet" type="text/css" href="css/style.css" />  <script type="text/javascript" src="js/jquery-1.3.2.min.js"></script> <link rel="stylesheet" type="text/css" href="css/ddsmoothmenu.css" /> <script type="text/javascript" src="js/ddsmoothmenu.js"></script> <script type="text/javascript" src="js/ckeditor/ckeditor.js"></script> <script type="text/javascript"> ddsmoothmenu.init({ mainmenuid: "smoothmenu1", //menu DIV id orientation: 'h', //Horizontal or vertical menu: Set to "h" or "v" classname: 'ddsmoothmenu', //class added to menu's outer DIV //customtheme: ["#1c5a80", "#18374a"], contentsource: "markup" //"markup" or ["container_id", "path_to_menu_file"] }) </script> <script language="javascript"> function checkdata() { if(document.getElementById('category_name').value == '') { alert("Please Choose Category"); document.getElementById('category_name').focus(); return false; } if(document.getElementById('company_name').value == '') { alert("Please Enter Participant Name."); document.getElementById('company_name').focus(); return false; } <?php if($_REQUEST['action']!='edit') { ?> if(document.getElementById('company_logo').value == '') { alert("Please Upload Logo."); document.getElementById('company_logo').focus(); return false; } <?php } ?> if(document.getElementById('company_location').value == '') { alert("Please Enter Participant Location."); document.getElementById('company_location').focus(); return false; } } </script> </head> <body> <div id="header_wrapper"><?php include("include/header.php");?></div> <div id="nav_wrapper"> <div class="nav"><?php include("include/menu.php");?></div> </div> <div class="clear"></div> <div class="breadcome_wrap"> <div class="breadcome"><a href="admin.php">Home</a> > Manage PMI Participants</div> </div> <div id="main"> <div class="content"> <div class="content_head"><a href="manage_pmi_participant.php?action=add"><div class="content_head_button">Add Participant </div></a> <a href="manage_pmi_participant.php?action=view"><div class="content_head_button">View Participant </div></a> </div> <?php if($_REQUEST['action']=='view') {?> <div class="content_details1"> <table width="100%" border="0" cellspacing="0" cellpadding="0" class="detail_txt" > <tr class="orange1"> <td><a href="#">Sr. No.</a></td> <td>Post Date</td> <td>Participant Name</td> <td>Category</td> <td>Location</td> <td>Logo</td> <td>Model Photo</td> <td>Status</td> <td colspan="3" align="center">Action</td> </tr> <?php $order_by = isset($_REQUEST['order_by'])?$_REQUEST['order_by']:'id'; $asc_desc = isset($_REQUEST['asc_desc'])?$_REQUEST['asc_desc']:'desc'; $attach = " order by ".$order_by." ".$asc_desc." "; $i=1; $sqlx1 = "SELECT * FROM manage_pmi_participants where 1".$attach." "; $query = $conn -> prepare($sqlx1); $query->execute(); $result = $query->get_result(); $rCount=0; $rCount=$result->num_rows; if($rCount>0) { while($row = $result->fetch_assoc()) { ?> <tr <?php if($i%2==0){echo "bgcolor='#CCCCCC'";}?>> <td><?php echo $i;?></td> <td><?php echo $row['created_date']; ?></td> <td><?php echo filter($row['company_name']); ?></td> <td><?php echo filter($row['category_name']);?></td> <td><?php echo filter($row['company_location']);?></td> <td> <?php if($row['company_logo']!=""){?> <a href="pmi_participant_logo/<?php echo $row['company_logo']; ?>" target="_blank" style="color:#000000">View</a> <?php }?> </td> <td> <?php if($row['company_model_photo']!=""){?> <a href="pmi_model_photo/<?php echo $row['company_model_photo']; ?>" target="_blank" style="color:#000000">View</a> <?php }?> </td> <td> <?php if($row['status'] == '1') { echo "<span style='color:green'>Active</span>"; }else if($row['status'] == '0') { echo "<span style='color:red'>Deactive</span>"; } ?> </td> <td><?php if($row['status'] == 1) { ?> <a style="text-decoration:none;" href="manage_pmi_participant.php?id=<?php echo $row['id']; ?>&status=0&action=active" onClick="return(window.confirm('Are you sure you want to Deactivate.'));"><img src="images/inactive.png" border="0" title="Inactive"/></a><?php } else { ?><a style="text-decoration:none;" href="manage_pmi_participant.php?id=<?php echo $row['id']; ?>&status=1&action=active" onClick="return(window.confirm('Are you sure you want to Activate.'));"><img src="images/active.png" border="0" title="Active"/></a><?php } ?></td> <td ><a href="manage_pmi_participant.php?action=edit&id=<?php echo $row['id']?>"><img src="images/edit.png" title="Edit" border="0" /></a></td> <td ><a href="manage_pmi_participant.php?action=del&id=<?php echo $row['id']?>" onClick="return(window.confirm('Are you sure you want to delete?'));"><img src="images/delete.png" title="Delete" border="0" /></td> </tr> <?php $i++; } } else { ?> <tr> <td colspan="10">Records Not Found</td> </tr> <?php } ?> </table> </div> <?php } ?> <?php if(($_REQUEST['action']=='add') || ($_REQUEST['action']=='edit')) { $action='save'; if(($_REQUEST['id']!='') || ($_REQUEST['action']=='edit')) { $action='update'; $sql3 = "SELECT * FROM manage_pmi_participants where id='".$_REQUEST['id']."'"; $query = $conn -> prepare($sql3); //$query -> bind_param("i", intval($_REQUEST['id'])); $query->execute(); $result2 = $query->get_result(); if($row2 = $result2->fetch_assoc()) { $id=filter($row2['id']); $category_name=filter($row2['category_name']); $company_name=filter($row2['company_name']); $company_profile=filter($row2['company_profile']); $company_logo=filter($row2['company_logo']); $company_model_photo=filter($row2['company_model_photo']); $company_location=filter($row2['company_location']); $created_date = filter(date("d-m-Y",strtotime($row2['created_date']))); $modified_date = filter(date("d-m-Y",strtotime($row2['modified_date']))); } } ?> <div class="content_details1 "> <form action="" method="post" name="form1" id="form1" onsubmit="return checkdata()" enctype="multipart/form-data"> <table width="100%" border="0" cellspacing="0" cellpadding="0" > <tr class="orange1"> <td colspan="2">  Add Participant</td> </tr> <tr> <td class="content_txt">Category</td> <td> <select name="category_name" id="category_name" class="input_txt"> <option value="">--Select Category--</option> <option value="Generic Gold Jewellery" <?php if($category_name=="Generic Gold Jewellery"){echo "selected='selected'";} ?>>Generic Gold Jewellery</option> <option value="Antique Jewellery" <?php if($category_name=="Antique Jewellery"){echo "selected='selected'";} ?>>Antique Jewellery</option> <option value="Couture Jewellery" <?php if($category_name=="Couture Jewellery"){echo "selected='selected'";} ?>>Couture Jewellery</option> <option value="Diamond Jewellery" <?php if($category_name=="Diamond Jewellery"){echo "selected='selected'";} ?>>Diamond Jewellery</option> <option value="Allied & Machinery" <?php if($category_name=="Allied & Machinery"){echo "selected='selected'";} ?>>Allied & Machinery</option> <option value="Diamond Pavilion" <?php if($category_name=="Diamond Pavilion"){echo "selected='selected'";} ?>>Diamond Pavilion</option> </select> </td> </tr> <tr> <td class="content_txt">Participant Name <span class="star">*</span></td> <td><input type="text" name="company_name" id="company_name" class="input_txt" value="<?php echo $company_name; ?>" /></td> </tr> <tr> <td class="content_txt">Participant profile</td> <td> <textarea class="ckeditor" name="ckeditor" id="company_profile"><?php echo $company_profile; ?></textarea> </td> </tr> <tr> <td> </td> <td> <tr> <td class="content_txt">Upload Logo <span class="star">*</span></td> <td><input name="company_logo" id="company_logo" type="file" />  <img src="pmi_participant_logo/<?php echo $company_logo; ?>" height="100px"> </td> </tr> <tr> <td> </td> <td> <tr> <td class="content_txt"> Upload Model Photo <span class="star">*</span></td> <td><input name="company_model_photo" id="company_model_photo" type="file" />  <img src="pmi_model_photo/<?php echo $company_model_photo; ?>" height="100px"> </td> </tr> <tr> <td class="content_txt">Location <span class="star">*</span></td> <td><input type="text" name="company_location" id="company_location" class="input_txt" value="<?php echo $company_location; ?>" /></td> </tr> <tr> <td> </td> <td> <input type="submit" value="Submit" class="input_submit"/> <input type="hidden" name="action" id="action" value="<?php echo $action;?>" /> <input type="hidden" name="id" id="id" value="<?php echo $_REQUEST['id'];?>" /> </td> </tr> </table> </form> </div> <?php } ?> </div> </div> <div id="footer_wrap"><?php include("include/footer.php");?></div> </body> </html>