Fallagassrini Bypass Shell

echo"Fallagassrini ";
Linux 141.162.178.68.host.secureserver.net 3.10.0-1160.114.2.el7.x86_64 #1 SMP Wed Mar 20 15:54:52 UTC 2024 x86_64
Current File : /home/easwari/www/llm/ajaxoverduebook.php
<?php 
include('is_autheticated.php');
$branch=$_POST['branch'];//echo $branch;
$book_name=$_POST['book_name'];//echo $book_name;
$member_name=$_POST['member_name'];//echo $member_name;
$from_date1=$_POST['from_date'];
$from_date= date('Y-m-d', strtotime($from_date1));//echo $from_date;
$to_date1=$_POST['to_date'];
$to_date= date('Y-m-d', strtotime($to_date1));//echo $to_date;
$text = trim($_POST['book_code']); // remove the last \n or whitespace character
$textAr = explode("\n", $text);
$textAr = array_filter($textAr, 'trim'); // remove any extra \r characters left behind

foreach ($textAr as $line) {
  $books=$books."','".$line;
} 


function getname($id)
{
$res=mysql_fetch_row(mysql_query("select book_name from book where id='".$id."'"));
return $res[0];
}
function getauthname($id)
{
$res=mysql_fetch_row(mysql_query("select author from book where id='".$id."'"));
return $res[0];
}
function getcost($id)
{
$res=mysql_fetch_row(mysql_query("select cost from book where id='".$id."'"));
return $res[0];
}
function getreading($id)
{
$res=mysql_fetch_row(mysql_query("select default_reading_days from book where id='".$id."'"));
return $res[0];
}



function getbranchname($id)
{
$res=mysql_fetch_row(mysql_query("select name from branches where id='".$id."'"));
return $res[0];
}

function getmemberid($name)
{
$res=mysql_fetch_row(mysql_query("select id from members where member_code='".$name."'"));
return $res[0];
}
?>
<div class="panel-body">
			              <div id="dt_example" class="table-responsive example_alt_pagination clearfix">
						  <table width="100%" border="0" cellspacing=0 cellpadding=0 class="dtable" align="center" style="margin-top:-1.5%">
	           <tr>
			   <input type="hidden" id="mem" name="mem" value="<?php echo $member_name;?>" />
			    <input type="hidden" id="bk" name="bk" value="<?php echo $book_name;?>" />
				 <input type="hidden" id="fd" name="fd" value="<?php echo $from_date;?>" />
				 <input type="hidden" id="td" name="td" value="<?php echo $to_date;?>" />
				 <input type="hidden" id="branc" name="branc" value="<?php echo $branch;?>" />
				
			   
				    <td colspan="14" align="right"><a href="#" onClick="window.open('overbook_xls.php?m_name='+encodeURIComponent(document.getElementById('mem').value) + '&bk_name='+encodeURIComponent(document.getElementById('bk').value) + '&fr_date='+encodeURIComponent(document.getElementById('fd').value) +'&t_date='+encodeURIComponent(document.getElementById('td').value) +'&bran='+encodeURIComponent(document.getElementById('branc').value),'popUpWindow','height=150,width=300,left=100,top=100,resizable=yes,scrollbars=yes,toolbar=no,menubar=no,location=no,directories=no,status=yes,url=no');"><img src="img/xls.gif" alt="xls" border=0></a>&nbsp;<!--{$LinkPage_amc_view_tab}{$PerPageNavigation_amc_view_tab}--></td>
		</tr>
		</table>
		<br />
			                <table class="table table-condensed table-striped table-bordered pull-left" id="data-table">    
			                  <thead>
			                    <tr>
								<th style="width:5%">S No</th>
                                <th style="width:15%">Member Code</th>
                                <th style="width:15%">Member Name</th>
                                <th style="width:15%">MobileNo</th>
                                <th style="width:15%">EmailID</th>                               
                                <th style="width:15%">Branch Name</th>
                              
                              </tr>
			                  </thead>
			                  <tbody>
							  <?php
							  $i=0;
							   $memberd=mysql_fetch_array(mysql_query("select * from members where member_code='".$member_name."'"));
							  $member_id=$memberd['id'];//echo $member_id;
							  
							  $bookd=mysql_fetch_array(mysql_query("select * from book where book_name='".$book_name."'"));
							  $book_id=$bookd['id'];
							
							  $qry="select * from check_out_in_history where branch='".$branch."' and status=0";
							  if ($member_name != '') {
									$qry .= " AND member_name='".$member_name."' ";
								}
								if ($book_id != '') {
									$qry .= " AND book_id='".$book_id."' ";
								}
								 if ($from_date != '') {
									$qry .= " AND expected_check_in_date BETWEEN '$from_date' and '$to_date' ";
								}
								
						//		 $qry="select DISTINCT(member_id),DATEDIFF( now(), expected_check_in_date ) as diff,co.branch,member_code  from check_out_in_history co left join members m on m.id=co.member_id  where DATEDIFF( now(), expected_check_in_date )>='".$_REQUEST['days']."' and  co.branch='".$branch."' and actual_check_in_date='0000-00-00' order by member_code";
								 $qry="select DISTINCT(member_id),DATEDIFF( now(), expected_check_in_date ) as diff,co.branch,member_code from check_out_in_history co left join members m on m.id=co.member_id  where expected_check_in_date >='".$from_date."' and expected_check_in_date <='".$to_date."' and  co.branch='".$branch."' and co.status='0' ";
								 
								 
							  if ($member_name != '') {
									$qry .= " AND member_id='".$member_id."' ";
								}
								if ($book_id != '') {
									$qry .= " AND book_id='".$book_id."' ";
								}
								$qry .= "order by member_code";
                             // echo $qry;
							  $source = mysql_query($qry);
								 $counts = mysql_num_rows($source);
								if($counts!=0) {
								$members=array();
								$members[]=0;
								while($step=mysql_fetch_array($source))
								{ 
								$i=$i+1;
							       $bookd=mysql_fetch_array(mysql_query("select * from book where id='".$book_id."'"));
								  if(!in_array($step['member_id'],$members))
								  { 
								  $members[]=$step['member_id'];
								?> 
                                <input type="hidden"  name="branch_id" id="branch_id" value="<?php echo $branch;?>" />
                                <tr class="gradeA">
                                  <?php $member= mysql_fetch_array(mysql_query("select * from members where id='".$step['member_id']."'")); ?>
								  <td><?php echo $i;?>  </td>
			                      <td><?php echo $member['member_code'];?>  </td>
                                  <td><?php echo $member['member_name'];?></td>
                                  <td><?php echo $member['contact_number'];?></td>
                                  <td><?php echo $member['emailid'];?> </td>
								   <?php $branchs= mysql_fetch_array(mysql_query("select * from branches where id='".$step['branch']."'")); ?>
								    <td><?php echo $branchs['name'];?></td>
			                      
                                 
                                 
                                 </tr>
			                    
			                    	<?php 
									}
									
									} } else {?>
									
									 <tr class="gradeA">
                                 
                                  <td colspan="6" align="center">No Records</td>
                                 
			                    </tr>
									
									<?php } ?>
			             
			                  </tbody>
			                </table>
			              </div>
			            </div>
bypass 1.0, Devloped By El Moujahidin (the source has been moved and devloped)
Email: contact@elmoujehidin.net