KucukHacker0088 Shell

Current Path : G:/PleskVhosts/mpcdp.in/cmamp.mpcdp.in/

Windows NT SG2NWVPWEB022 10.0 build 17763 (Windows Server 2016) i586 Upload File :

Current File : G:/PleskVhosts/mpcdp.in/cmamp.mpcdp.in/Feedback-Exec.php

<?php
if (isset($_POST['BtnReset']))
	{
	$mStart = $_GET['start'];
	$mTMID = $_GET['TeamMemberID'];
	header("location: CPMasterTeamMember.php?start=$mStart&TeamMemberID=$mTMID&mMode=Add");
	}
else if (isset($_POST['BtnSubmit']))
	{
	
	$mErr = '';
	
	require_once('CP/CPConfig.php');
	$link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD);
	$db = mysql_select_db(DB_DATABASE);

	$FName = addslashes(str_replace("'", "&#39;", $_POST['TxtFName']));
	$FMobile = addslashes(str_replace("'", "&#39;", $_POST['TxtFMobile']));
	$FEmail = addslashes(str_replace("'", "&#39;", $_POST['TxtFEmail']));
	$FSubject = addslashes(str_replace("'", "&#39;", $_POST['TxtFSubject']));
	$FMessage = addslashes(str_replace("'", "&#39;", $_POST['TxtFMessage']));
	
	if ($FName == '')
		{
		$mErr = "Yes";
		}
	else if ($FMobile == '')
		{
		$mErr = "Yes";
		}
	else if ($FEmail == '')
		{
		$mErr = "Yes";
		}
	else if ($FSubject == '')
		{
		$mErr = "Yes";
		}
		
	if ($mErr != '')
		{
		session_start();
		$_SESSION['mFName'] = str_replace("'", "&#39;", $_POST['TxtFName']);
		$_SESSION['mFMobile'] = str_replace("'", "&#39;", $_POST['TxtFMobile']);
		$_SESSION['mFEmail'] = str_replace("'", "&#39;", $_POST['TxtFEmail']);
		$_SESSION['mFSubject'] = str_replace("'", "&#39;", $_POST['TxtFSubject']);
		$_SESSION['mFMessage'] = str_replace("'", "&#39;", $_POST['TxtFMessage']);
		
		header("location: Feedback.php?mError=$mErr");
		exit;
		}
	
	ini_set('memory_limit', '100M');
	$FDocumentPath = 'CP/FDocument/';
	$FDocumentName = basename($_FILES['FDocumentPath']['name']);
	$FDocumentFile = $FDocumentPath . $FDocumentName;
	
	if ($FDocumentName !='' )
		{
		if (move_uploaded_file($_FILES['FDocumentPath']['tmp_name'], $FDocumentFile))
			{
			}
		else
			{
			session_start();
			$_SESSION['mFName'] = $FName;
			$_SESSION['mFMobile'] = $FMobile;
			$_SESSION['mFEmail'] = $FEmail;
			$_SESSION['mFSubject'] = $FSubject;
			$_SESSION['mFMessage'] = $FMessage;
			
			header("location: Feedback.php?mError=Document");
			exit;
			}
		}
			
	//$mDate = date('Y-m-d');
	
	$qry = "INSERT INTO userfeedback(FName, FMobile, FEMail, FSubject, FDate, FTime, FMessage, FDocumentPath, FDocumentName) VALUES('$FName', '$FMobile', '$FEmail', '$FSubject', CURDATE(), CURTIME(), '$FMessage', 'FDocument/', '$FDocumentName')";
	$result = @mysql_query($qry);
	
	if($result) 
		{
		header("location: Feedback.php?mSuccessed=Yes");
		}
	else 
		{
		die("Query failed");
		}
	}
?>

Discord hacker0088#9402

FSecurity.org