X3ND1 GANTENG
Server IP : 108.163.255.210  /  Your IP : 18.227.52.111
Web Server : Apache
System : Linux blossom.urlnameserver.com 3.10.0-1160.80.1.el7.x86_64 #1 SMP Tue Nov 8 15:48:59 UTC 2022 x86_64
User :  ( 1172)
PHP Version : 7.2.34
Disable Function : eval,escapeshellarg,proc_close,proc_get_status,proc_nice,proc_open,symlink,system,pcntl_exec,getrusage,chown,chgp,closelog,openlog,syslog,define_syslog_variables,php_ini_loaded_file,getservbyname,getservbyport,posix_getgid,posix_getgrgid,proc_terminate,pfsockopen,apache_child_terminate,posix_mkfifo,posix_setpgid,posix_setuid,hypot,pg_host,pos,posix_access,posix_getcwd,posix_getservbyname,myshellexec,getpid,posix_getsid,posix_isatty,posix_kill,posix_mknod,posix_setgid,posix_setsid,posix_setuid,posix_times,posix_uname,ps_fill,posix_getpwuid,global,ini_restore,zip_open,zip_read,rar_open,bzopen,bzread,bzwrite,apache_get_modules,apache_get_version,phpversionphpinfo,php_ini_scanned_files,get_current_user,disk_total_space,diskfreespace,leak,imap_list,hypo,filedump,safe_mode,getmygid,apache_getenv,apache_setenv,bzread,bzwrite,bzopen,phpini,higlight_file,dos_conv,get_cwd,er_log,cmd,e_name,vdir,get_dir,only_read,ftok,ftpexec,posix_getpwnam,mysql_list_dbs,disk_free_space,session_save_path,confirm_phpdoc_compiled,zip_entry_rea,php_u,psockopen,crack_opendict,crack_getlastmessage,crack_closedict,crack_check,fpassthru,posix_get_last_error,posix_getlogin,posix_getgroups,posix_strerror,posix_getrlimit,posix_getpgrp,posix_getgrnam,pos,dl
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/unilinki/www/Intellilead/client/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ BERANDA ]     

Current File : /home/unilinki/www/Intellilead/client/add_company.php
<?php require "../includes/authenticate.php";

if(isset($_REQUEST['submit']) && $_REQUEST['submit']=='submit')
{
	$company_name = valid_data(str_replace("''","'",$_POST["company"]));
	$client_id = valid_data(str_replace("''","'",$_POST["company_code"]));
	$mobile = valid_data(str_replace("''","'",$_POST["mobile"]));
	$phone = valid_data(str_replace("''","'",$_POST["phone"]));
	$email = valid_data(str_replace("''","'",$_POST["email"]));
	$username = valid_data(str_replace("''","'",$_POST["user_name"]));
	$pass = valid_data(str_replace("''","'",$_POST["password"]));
	$password = md5($_POST["password"]);
	$address = str_replace("''","'",addslashes($_POST["address"]));
	$title = valid_data(str_replace("''","'",$_POST["title"]));
	$logo =  $_POST['logo'];
	
	$sql="select COUNT(company_id) from mstr_company where company_name='$company_name' or client_id='$client_id' or user_name='$username';";
	$res= getSingleResult($sql);
	
	if($res != "0"){
		$_SESSION['sess_msg'] =  "THIS COMPANY ALREADY EXISTS. PLEASE INSERT ANOTHER ONE.";
		header('Location: add_company_form.php');
		exit;
	} else{

	//----------------------------------------Image------------------------------------------------------//
	if($_FILES['image']['name']!=""){
			$ext_allowed	= array ("gif", "jpg", "jpeg", "png");
			$img_prefix		= date('Ymdhis')."_";//str_replace(" ", "_", $product_name)."_";
			$file_name		= $_FILES['image']['name'];
			$pos			= strrpos($file_name, ".");
			$len			= strlen($file_name);
			$ext			= substr($file_name ,$pos+1, $len-1);
			$ext			= strtolower($ext);
			if (in_array ($ext, $ext_allowed)) {
				if (is_uploaded_file($_FILES['image']['tmp_name'])){
					$companylogo		= $img_prefix.$file_name;
					@copy($_FILES['image']['tmp_name'], "../resources/client/".$companylogo);
					$image_thumb	= make_thumb("../resources/client/".$companylogo,244, 163,"thumb_","../resources/client/");
				}
			}
	}else{
		$companylogo   = "";
		
	}		
	///End Image//
	
	$sql="INSERT INTO mstr_company(company_name,logo,user_name,password,pass,client_id,user_id,mobile,email_id,phone_no,address,status,created_date) values('$company_name','$companylogo','$username','".crypt_now($pass)."','$pass','$client_id','$username','$mobile','$email','$phone','$address','Active',NOW())";
	//die;
	
	executeQuery($sql);
	
	$_SESSION['sess_msg'] = "COMPANY ADDED SUCCESSFULLY";
	header('Location: manage_company.php');
	exit();
	}
}
?>

Anon7 - 2022
SCDN GOK