403Webshell
Server IP : 109.234.162.214  /  Your IP : 216.73.216.222
Web Server : Apache
System : Linux servd162214.srv.odns.fr 4.18.0-372.26.1.lve.1.el8.x86_64 #1 SMP Fri Sep 16 14:08:19 EDT 2022 x86_64
User : carpe ( 1178)
PHP Version : 8.0.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/carpe/public_html/CURSED/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/carpe/public_html/CURSED/data.php
<?php

session_start();
include 'database.php';


$database = new Database();
$connexion = $database->getConnection();

if ($connexion) {
    
    if(isset($_SESSION['login'])){
        $username = $_SESSION['login'];
    }
    
    $sql = "SELECT * from users where pseudo = '$username'";
    $statement = $connexion->prepare($sql);
    $statement->execute();
                
    $results = $statement->fetchAll(PDO::FETCH_ASSOC);
    foreach ($results as $row) {
        $id = $row['id_user'];
        $vie = $row['vie'];
        $vivres = $row['vivres'];
        $gold = $row['gold'];
        $monde = $row['monde'];
        $quest = $row['quest'];
        $niv = $row['niv'];
        $bateau = $row['bateau'];
        $mess = $row['mess'];
    }

    if(isset($_POST['cause'])){
        $cause = $_POST['cause'];
        if($cause == "lookfor"){
            echo $vie;
            echo ",";
            echo $vivres;
            echo ',';
            echo $gold;
            echo ',';
            echo $monde;
            echo ',';
            echo $quest;
            echo ',';
            echo $niv;
            echo ',';
            echo $bateau;
            echo ',';
            echo $mess;
            
        }
        if($cause == "give"){
            $vie = $_POST['vie'];
            $vivres = $_POST['vivres'];
            $gold = $_POST['gold'];
            $monde = $_POST['monde'];
            $quest = $_POST['quest'];
            $niv = $_POST['niv'];
            $bateau = $_POST['bateau'];
            $mess = $_POST['mess'];
            
            $sql = "UPDATE `users` SET `vie`='$vie',`vivres`='$vivres',`gold`='$gold',`monde`='$monde',`quest`='$quest',`niv`='$niv',`bateau`='$bateau',`mess`='$mess' where pseudo = '$username'";
            $statement = $connexion->prepare($sql);
            $statement->execute();
            
            echo $username;
        }
        
    }
    
    
        
        

}

?>

Youez - 2016 - github.com/yon3zu
LinuXploit