KucukHacker0088 Shell

Current Path : G:/PleskVhosts/mpcdp.in/cmamp.mpcdp.in/CP/

Windows NT SG2NWVPWEB022 10.0 build 17763 (Windows Server 2016) i586 Upload File :

Current File : G:/PleskVhosts/mpcdp.in/cmamp.mpcdp.in/CP/CPContactUs-Exec.php

<?php
if (isset($_POST['BtnAdd']))
	{
	//Blank
	}
else if (isset($_POST['BtnModify']))
	{
	header("location: CPContactUs.php?mMode=Modify");
	}
else if (isset($_POST['BtnSave']))
	{
	require_once('CPConfig.php');

	if (isset($_GET['mMode']))
		{
		$mMode = $_GET['mMode'];
		}
	else
		{
		$mMode = '';
		}
	
	 $link = mysql_connect($hostname, $username, $password) ;
$db= mysql_select_db($dbname);

	$CUName = addslashes(str_replace("'", "&#39;", $_POST['TxtCUName']));
	$CURemarks = addslashes(str_replace("'", "&#39;", $_POST['TxtCURemarks']));
		
	if ($CUName == '')
		{
		session_start();
		$_SESSION['mCUName'] = str_replace("'", "&#39;", $_POST['TxtName']);
		$_SESSION['mCURemarks'] = str_replace("'", "&#39;", $_POST['TxtRemarks']);
		
		header("location: CPContactUS.php?mMode=$mMode&mError=Invalid Name...");
		exit;
		}
		
	if ($mMode == 'Modify')
		{
		$qry = "UPDATE mastercontactus SET ContactUsName='$CUName', ContactUsRemarks='$CURemarks' WHERE ContactUsID=1";
		}

	$result = @mysql_query($qry);
	
	if($result) 
		{
		header("location: CPContactUs.php?mMode=Save");
		}
	else 
		{
		die("Query failed");
		}
	}
else if (isset($_POST['BtnCancel']))
	{
	header("location: CPContactUs.php?mMode=Cancel");
	}
else if (isset($_POST['BtnDelete']))
	{
	//Blank
	}
?>

Discord hacker0088#9402

FSecurity.org