403Webshell
Server IP : 109.234.162.214  /  Your IP : 216.73.216.222
Web Server : Apache
System : Linux servd162214.srv.odns.fr 4.18.0-372.26.1.lve.1.el8.x86_64 #1 SMP Fri Sep 16 14:08:19 EDT 2022 x86_64
User : carpe ( 1178)
PHP Version : 8.0.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/carpe/public_html/starship/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/carpe/public_html/starship/results.php
<?php

include 'database.php';
session_start();

$database = new Database();
$connexion = $database->getConnection();

function getId($connexion){
            $username = $_SESSION['login'];
            $sql = "SELECT id_user from users where username = '$username'";
            $statement = $connexion->prepare($sql);
            $statement->execute();
            $results = $statement->fetchAll(PDO::FETCH_ASSOC);
            foreach ($results as $row) {
                $id = $row['id_user'];
                return $id;
            }
        }

$value = $_POST['toto'];
$id = getId($connexion);

if($value == "vaisseau1"){
    $val = "Aurora";
    $vall = 1;

}
if($value == "vaisseau2"){
    $val = "Spectrus";
    $vall = 2;

}

if($value == "vaisseau3"){
    $val = "Blorps";
    $vall = 3;

}

$sql = "select * from team where id_user='$id' and statu = 'vivant' and id_vaisseau ='$vall'";
$statement = $connexion->prepare($sql);
    $statement->execute();
    $results = $statement->fetchAll(PDO::FETCH_ASSOC);
    foreach($results as $value){
        echo $value['prenom'];
        echo " ";
        echo $value['nom'];
        echo " ";
        echo $value['age'];
        echo "ans ";
        echo $value['metier'];
        echo " ";
        if($vall == 1){
            //echo "Aurora";
        }
        if($vall == 2){
            //echo "Spectrus";
        }
        echo ".";
        
    }
    
?>

Youez - 2016 - github.com/yon3zu
LinuXploit