Fallagassrini Bypass Shell

echo"Fallagassrini ";
Current Path : /home/easwari/www/admin/includes/classes/
Linux 141.162.178.68.host.secureserver.net 3.10.0-1160.114.2.el7.x86_64 #1 SMP Wed Mar 20 15:54:52 UTC 2024 x86_64
Current File : /home/easwari/www/admin/includes/classes/class.MediaReg.php
<?php
  $dev_id = $_GET["dev_id"];
#####Class For Adding Content Management ######
class MediaReg extends MysqlFns{
 
 /* class constructor */
 function MediaReg(){
 $this->LDDisplayPath= $config['SiteGlobalPath']."class.MediaReg.php";
  global $config;
  global $objSmarty;
  $this->MysqlFns();
  $this->Limit = 15;

   $SelQuery	= 'SELECT max(sl_no) as last FROM `images` Limit 0,1';
 //  echo $SelQuery;
   $DevDetail	= $this->ExecuteQuery($SelQuery, 'select');
 //  	echo $DevDetail[0]['last'];
   $DevDetail[0]['description'] = stripslashes($DevDetail[0]['last']);
  	$m_c1 = preg_replace("/[^0-9\.]/", '', $DevDetail[0]['sl_no']);
	$m_c1= $m_c1 + 1;
	$str = str_split($DevDetail[0]['last'], 1);
	$m_c = $str[0]. "" .$m_c1;
   $objSmarty->assign('m_c', $m_c);
 }


/* Get the Static Content list */
 	function GetTurbineView($objArray='')  {
		global $objSmarty;
		$objSmarty->assign('tur_id',$_GET['tur_id']);
		$SelQuery = 'SELECT * FROM `arka_turbine_reg_master`WHERE turbine_id ="'.$_GET['tur_id'].'"' ;
		//echo $SelQuery;
		$LDList		= $this->ExecuteQuery($SelQuery, "select");
		$total_records = count($LDList);
		$record_per_page = $this->Limit;
		
		$objSmarty->assign("TList1",$_GET['tur_id']);
		/*$LDList[0]['title'] 		= stripslashes($LDList[0]['title']);
		$LDList[1]['txttitle'] 		= stripslashes($LDList[1]['txttitle']);
		$LDList[2]['image'] 		= stripslashes($LDList[2]['image']);*/
		 if(!empty($LDList) && is_array($LDList))
		{
			$objSmarty->assign("LDList2",$LDList);
			$objSmarty->assign("LDDisp", $this->LDDisplayPath);
			return $LDList2;
		}
		else{
			return false;
		}
		$objPage->set_page_data($_SERVER['PHP_SELF'],$total_records,$record_per_page,$scroll,true,true,true);
		$listing_split = new MsplitPageResults($SelQuery, $this->Limit);
		
		if ( ($listing_split->number_of_rows > 0) )  
		{
			$objSmarty->assign('LinkPage',$listing_split->display_count(TEXT_DISPLAY_NUMBER_OF_RESULT));
			$objSmarty->assign('PerPageNavigation',TEXT_RESULT_PAGE1 . ' ' . $listing_split->display_links($this->Limit, get_all_get_params(array('page', 'info', 'x', 'y')))); 
			$PageList = $this->ExecuteQuery($listing_split->SelQuery, 'selectassoc');
		}
		if(!empty($PageList) && is_array($PageList))
			foreach($PageList as $key=>$value)
			{
				$PageList[$key]['Title'] = stripslashes($PageList[$key]['turbine_id']);
				$PageList[$key]['Image'] = stripslashes($PageList[$key]['turbine_name']);
				$objSmarty->assign('Title',$PageList[$key]['tur_id']);
				$objSmarty->assign('Image',$PageList[$key]['turbine_name']);
			}		
			$objSmarty->assign('i', $listing_split->i);
			$objSmarty->assign('PageList', $PageList);
			echo $PageList;
			return $PageList;
	}	
 /*function GetMaterialDetails($objArray='')  
	{
		global $objSmarty;
		$SelQuery = 'SELECT * FROM `images` WHERE description ="'.$_GET['description'].'"' ;
		$PageList3		= $this->ExecuteQuery($SelQuery, "select");
        $objSmarty->assign('PageList3', $PageList3);
	}*/	
	/*function DeleteID($id)
	{
  		global $objSmarty;
  		$DelQuery = 'update  `images` set `record_status` = 0 WHERE `description`="'.$_GET['description'].'" '; 
  		$this->ExecuteQuery($DelQuery, 'delete');
  		$objSmarty->assign('SuccessMessage1', 'Deleted Successfully');
 	}*/
/*function GetMaterialDetails($objArray='')  {
		global $objSmarty;
		$objSmarty->assign('tur_id',$_GET['tur_id']);
		$SelQuery = 'SELECT * FROM `images`WHERE description ="'.$_GET['description'].'"' ;
		//echo $SelQuery;
		$LDList		= $this->ExecuteQuery($SelQuery, "select");
		$total_records = count($LDList);
		$record_per_page = $this->Limit;
		
		$objSmarty->assign("TList1",$_GET['tur_id']);
		//$LDList[0]['title'] 		= stripslashes($LDList[0]['title']);
	//	$LDList[1]['txttitle'] 		= stripslashes($LDList[1]['txttitle']);
	//	$LDList[2]['image'] 		= stripslashes($LDList[2]['image']);
		 if(!empty($LDList) && is_array($LDList))
		{
			$objSmarty->assign("LDList2",$LDList);
			$objSmarty->assign("LDDisp", $this->LDDisplayPath);
			return $LDList2;
		}
		else{
			return false;
		}
		$objPage->set_page_data($_SERVER['PHP_SELF'],$total_records,$record_per_page,$scroll,true,true,true);
		$listing_split = new MsplitPageResults($SelQuery, $this->Limit);
		
		if ( ($listing_split->number_of_rows > 0) )  
		{
			$objSmarty->assign('LinkPage',$listing_split->display_count(TEXT_DISPLAY_NUMBER_OF_RESULT));
			$objSmarty->assign('PerPageNavigation',TEXT_RESULT_PAGE1 . ' ' . $listing_split->display_links($this->Limit, get_all_get_params(array('page', 'info', 'x', 'y')))); 
			$PageList = $this->ExecuteQuery($listing_split->SelQuery, 'selectassoc');
		}
		if(!empty($PageList) && is_array($PageList))
			foreach($PageList as $key=>$value)
			{
				$PageList[$key]['Title'] = stripslashes($PageList[$key]['turbine_id']);
				$PageList[$key]['Image'] = stripslashes($PageList[$key]['turbine_name']);
				$objSmarty->assign('Title',$PageList[$key]['tur_id']);
				$objSmarty->assign('Image',$PageList[$key]['turbine_name']);
			}		
			$objSmarty->assign('i', $listing_split->i);
			$objSmarty->assign('PageList', $PageList);
			echo $PageList;
			return $PageList;
	}	*/

 //Create FCK Editor
 function CreateFCKeditor($value = ''){
  global $config, $objSmarty;

  include($config['FckEditorPath'] . '/fckeditor.php');
  $sBasePath = $config['SiteFCKEditorBasePath'];

  $oFCKeditor 			= new FCKeditor('content') ;
  $oFCKeditor->BasePath	= $sBasePath ;
  $oFCKeditor->Width		= 600 ;
  $oFCKeditor->Height		= 450 ;
  $oFCKeditor->Value		= $value;
  $objSmarty->assign('Editor', $oFCKeditor->Create());
 }
 
 /* Get the Static Content list */
 function GetMaterialLists($objArray='')  {
  global $objSmarty;
  $this->Limit = 3351;
  $whereClause = 'WHERE status =1';
  if($_POST['search'] == ''){
  			if($_POST['materialCode'])
	   			$whereClause = ' WHERE (`description` like "%'.$_POST['materialCode'].'%") AND `status` =1 ';
	   		elseif($_POST['tittle'])
	   			$whereClause = ' WHERE (`m_name` like "%'.$_POST['tittle'].'%") AND `status` =1 ';
			elseif($_POST['materialType'])
				$whereClause = ' WHERE (`m_type` like "%'.$_POST['materialType'].'%") AND `status` =1';
			elseif($_POST['materialCategory'])
				$whereClause = ' WHERE (`m_cat` like "%'.$_POST['materialCategory'].'%") AND `status` =1 ';
			elseif($_POST['price'])
				$whereClause = ' WHERE (`price` like "%'.$_POST['price'].'%") AND `status` =1 ';
			elseif($_POST['description'])
				$whereClause = ' WHERE (`description` like "%'.$_POST['description'].'%") AND `status` =1 ';
			elseif($_POST['date'])
				$whereClause = ' WHERE (`doe` like "%'.$_POST['date'].'%") AND `status` =1 ';
			elseif($_POST['status'])
				$whereClause = ' WHERE (`status` like "%'.$_POST['status'].'%") AND `status` =1 ';
   
   $objSmarty->assign('description',$_POST['materialCode']);
   $objSmarty->assign('m_name',$_POST['tittle']);
   $objSmarty->assign('m_type',$_POST['materialType']);
   $objSmarty->assign('m_cat',$_POST['materialCategory']);
   $objSmarty->assign('price',$_POST['price']);
   $objSmarty->assign('description',$_POST['description']);
   $objSmarty->assign('doe',$_POST['date']);
   $objSmarty->assign('status',$_POST['status']);
  }
  $SelQuery		= 'SELECT * FROM `images`'.$whereClause.' ORDER BY description ASC';
  $listing_split = new MsplitPageResults($SelQuery, $this->Limit);
  if ( ($listing_split->number_of_rows > 0) )  {
   $objSmarty->assign('LinkPage',$listing_split->display_count(TEXT_DISPLAY_NUMBER_OF_RESULT));
   $objSmarty->assign('PerPageNavigation',TEXT_RESULT_PAGE1 . ' ' . $listing_split->display_links_submit($this->Limit, get_all_get_params(array('page', 'info', 'x', 'y')))); 
   $PageList = $this->ExecuteQuery($listing_split->sql_query, 'selectassoc');
  }
  if(!empty($PageList) && is_array($PageList))
  {
   foreach($PageList as $key=>$value){
    $PageList[$key]['Mcd'] = stripslashes($PageList[$key]['description']);
	$PageList[$key]['Mname'] = stripslashes($PageList[$key]['m_name']);
	$PageList[$key]['Mtype'] = stripslashes($PageList[$key]['m_type']);
	$PageList[$key]['Mcat'] = stripslashes($PageList[$key]['m_cat']);
	$PageList[$key]['MPrice'] = stripslashes($PageList[$key]['price']);
	$PageList[$key]['MDesc'] = stripslashes($PageList[$key]['description']);
	$PageList[$key]['MDate'] = stripslashes($PageList[$key]['doe']);
	$PageList[$key]['MStatus'] = stripslashes($PageList[$key]['status']);
	}
  $objSmarty->assign('i', $listing_split->i);
  $objSmarty->assign('PageList', $PageList);
 // print_r($PageList);exit;
  return $PageList;
  }
  elseif(empty($PageList) && is_array($PageList))
    $objSmarty->assign('ErrorMessage', 'No Records Found');
 }
 /* Delete the Static Page */
 function DeleteDev($DevIdent){
  global $objSmarty;
  foreach ( $DevIdent as $ConId ){
   if($ConId){
    $DelQuery = 'DELETE FROM `arka_turbine_reg_master` WHERE `id` ='.$ConId;
	$this->ExecuteQuery($DelQuery, 'delete');
   }
  }
  $objSmarty->assign('Keyword', $this->Keyword);
  $objSmarty->assign('Operator', $this->Operator);
  $objSmarty->assign('Offset', $this->Offset);
  $objSmarty->assign('PerPage', $this->PerPage);
  return true;
 }
 /* Insert the content for  About Us Pages */
 function InsertMediaContent($objArray,$objFiles){
  global $objSmarty,$config,$_FILES,$_POST;
  $objSmarty->assign('Keyword', $this->Keyword);
  $objSmarty->assign('Operator', $this->Operator);
  $objSmarty->assign('Offset', $this->Offset);
  $objSmarty->assign('PerPage', $this->PerPage);
  
		list ($name,$format) = split("[.]", $objFiles['image']['name'],2);
		$uploadpath = $config['mediaImagePath'];

				if($objFiles['image']["name"] <> "")
		{
			    $errors     = array();
   				$maxsize    = 5242880;
   				$acceptable = array(
				'image/jpeg','image/jpg','image/gif','image/png','application/pdf','text/plain','application/msword','application/vnd.openxmlformats-officedocument.presentationml.presentation','application/vnd.openxmlformats-officedocument.wordprocessingml.document',
				'application/x-zip-compressed','application/vnd.ms-excel','application/vnd.ms-powerpoint','video/pps','application/vnd.openxmlformats-officedocument.spreadsheetml.sheet');
		if(($_FILES['image']['size'] >= $maxsize) || ($_FILES["image"]["size"] == 0)) {
		$errors[] = 'File --1-- too large. File must be less than 2 megabytes';
		}
		
		if((!in_array($_FILES['image']['type'], $acceptable)) && (!empty($_FILES["image"]["type"])))
		 {
		$errors1[] = 'File --1-- Only PDF, JPG, JPEG, TXT, DOC, DOCX, XLS, XLSX, ZIP, PPT, PPTX, GIF and PNG types are accepted';
		}
		
		if(count($errors)  === 0 && count($errors1)  === 0) 
		{
			if((!file_exists($config['mediaImagePath'] . $_FILES["image"]["name"])))
			{	$time = date("Y_m_d_H_i_s");
				$f1 = $objFiles['image']['name'];
				$f1 = $time.'_'.$f1;
				
				if(move_uploaded_file($objFiles['image']['tmp_name'], $uploadpath.$f1))
				//echo ($uploadpath.$f1);exit;
				chmod($uploadpath.$f1,"0511");
			}
		   } 
		  
			else {
        	foreach($errors as $error) 
			{
            $objSmarty->assign('ErrorMessage', $error);
				//$url_addtnal_data=base64_encode($error);
				//header('location:'.$_SERVER['PHP_SELF']."?em=".$url_addtnal_data);
				return false;			
        }
		foreach($errors1 as $error1) 
			{
            $objSmarty->assign('ErrorMessage', $error1);
				//$url_addtnal_data=base64_encode($error);
				//header('location:'.$_SERVER['PHP_SELF']."?em=".$url_addtnal_data);
				return false;						
        }
		
		}
	}
	
   if(!$objArray['tittle']){
   
    $objSmarty->assign('ErrorMessage', 'Tittle should not be blank');
	return false;
   }elseif(!$objFiles['image']){
    $objSmarty->assign('ErrorMessage', 'Image should not be blank');
	return false;
   }
   //*************************** Insert Turbine Reg Master *********************************************
   if($objArray['tittle']){    
   $InsQuery = 'INSERT INTO `media` (`title`,`image`,`status`) VALUES("'.trim(addslashes($objArray['tittle'])).'","'.$f1.'","1")'; 
	$this->ExecuteQuery($InsQuery, 'insert');
	$this->MediaReg();
	$objSmarty->assign('Mcd',$objArray['tittle']);
	$oFCKeditor->Value		= '';
	$objSmarty->assign('tittle', '');
	$objSmarty->assign('SuccessMessage', 'Media Added Successfully');
    $url_addtnal_data=base64_encode("Media Added Successfully");
    header('location:'.$_SERVER['PHP_SELF']."?sm=".$url_addtnal_data);
  }
  
 
 }
 
 /* Edit the Static Page */
 
 /* Validation for Static Pages */
 function ChkDupliMat($objarray){
  global $objSmarty;
  if(!empty($objarray))
  $SelQueryx		= 'SELECT * FROM `media` WHERE `title` = "'.$objarray['tittle'].'" Limit 0,1';
  $DevDetail		= $this->ExecuteQuery($SelQueryx, 'select');
  if(!empty($DevDetail) && is_array($DevDetail))
   return false;
  else
   return true;
 }
 
 
 
  function ChkDupliMat2($objarray){
  global $objSmarty;
  if(!empty($objarray))
   $WhereClause	= '';
  $SelQueryx		= 'SELECT * FROM `media` WHERE `description` = "'.$objarray['description'].'" AND `m_type` = "'.$objarray['m_type'].'" AND `m_cat` = "'.$objarray['m_cat'].'" Limit 0,1' ;
  $DevDetail		= $this->ExecuteQuery($SelQueryx, 'select');
  if(!empty($DevDetail) && is_array($DevDetail))
   return false;
  else
   return true;
 }
 
 
 /* Delete the Static Page */

 


 /* Activate, Deactivate and Delete for the Static Pages */
 
 function GetMediaList($objArray='')  
	{
		global $objSmarty;
		$SelQuery5 = 'SELECT * FROM `media` WHERE status="1" ORDER BY sl_no DESC' ;
		$PageList		= $this->ExecuteQuery($SelQuery5, "select");
        $objSmarty->assign('PageList', $PageList);
	}	
	//Delete Plan List
 function DeleteMediaList(){
   
   $SelQuery = 'UPDATE `media` set status = "0" WHERE title = "'.$_GET['tittle'].'" ';
   $DList = $this->ExecuteQuery($SelQuery, "update");
    $url_addtnal_data=base64_encode("Service Deleted Successfully");
   header('location:'.$_SERVER['PHP_SELF']."?sm=".$url_addtnal_data);
  // $objSmarty->assign('DList',$DList);
   
 }
	
function DeleteID2($id){ 
  global $objSmarty;
 echo  $DelQuery2 = 'update `images` set status ="0" WHERE `m_name`="'.$_GET['tittle'].'" '; 
	$this->ExecuteQuery($DelQuery2, 'delete');
	header('Location:' .$_SERVER['PHP_SELF'].'?server_success1=delete succeed');
	//  $objSmarty->assign('SuccessMessage1', 'Deleted Successfully');
	}
}
?>
bypass 1.0, Devloped By El Moujahidin (the source has been moved and devloped)
Email: contact@elmoujehidin.net