403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.37
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mitzvahm/public_html/wp-content/plugins/proxi_salesman/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mitzvahm/public_html/wp-content/plugins/proxi_salesman/proxi_salesman.php
<?php
/*
Plugin Name: Vendor Salesman
Plugin URI: http://www.proximatesolutions.com/
Description: Vendor Salesman Plugin of Proximate Solutions
Author: Proximate Solutions
Version: 2.0
Author URI: http://www.proximatesolutions.com/
*/
function proxi_salesman() { 
//===================================================================================================================
$url = get_bloginfo('wpurl') . '/wp-admin/admin.php?page=' . $_GET['page'];
$siteurl = get_option('siteurl');
	
	if($_POST['newsalesman']=="update")
	{
		global $wpdb;
		$db_name = $wpdb->prefix . "proxi_salesman";
				
		$qry = mysqli_query($GLOBALS['con'], "update $db_name set name='".$_POST['name']."',email='".$_POST['email']."',phone='".$_POST['phone']."',department='".$_POST['department']."' where id=".$_POST['edit']);
			
		    
		header("location:".$url);
	}
	
	
	if($_POST['newsalesman']=="post")
	{
		global $wpdb;
		$db_name = $wpdb->prefix . "proxi_salesman";
	
		$qry = mysqli_query($GLOBALS['con'], "insert into $db_name  values (Null,'".$_POST['name']."','".$_POST['email']."','".$_POST['phone']."','".$_POST['department']."')");
		
	
		header("location:".$url);			

	}
//===================================================================================================================
	


	global $wpdb;
	$db_name = $wpdb->prefix . "proxi_salesman";
	
	if(isset($_GET['delsalesman'])){

	$url = get_bloginfo('wpurl') . '/wp-admin/admin.php?page=' . $_GET['page'];
	global $wpdb;
	$db_name = $wpdb->prefix . "proxi_salesman";

	$query = mysqli_query($GLOBALS['con'], "delete from $db_name where id=".$_GET['delsalesman']);	
}
?>
<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>

<div class="wrap" style="width:850px;">
    <table width="100%" border="0" cellspacing="1" cellpadding="5">
        <tr>
          <td width="32%" align="left" valign="middle"><h2><strong>MM Staff</strong></h2></td>
          <td width="36%" align="left" valign="middle"> 
          <?php if(empty($_GET['id'])){ ?>
          <div class="button-heading"><a style="cursor:pointer;" id="addshow">Add New</a></div>
          <?php } ?>
          </td>
          <td width="32%" align="left" valign="middle">&nbsp;</td>
        </tr>
      </table>
 
<?php 
	$siteurl = get_option('siteurl');
	$updatefile = $siteurl . '/wp-content/plugins/' . "proxi_salesman" . '/updateList.php'; 
	?>

<style>
ul {
	padding:0px;
	margin: 0px;
}
#response {
	padding:10px;
	background-color:#9F9;
	border:2px solid #396;
	margin-bottom:20px;
}
#list li {
	margin: 0 0 3px;
	padding:5px;
	background-color:#f4f4f4;
	color:#000;
	list-style: none;
	height:100px;
}
.maintext{
	padding:10px;
	float:left;
}
.button-heading {
	width:auto;
	height:auto;
	color:#FFFFFF!important;
	text-decoration:none!important;
}
.button-heading  a {
	font-family:Verdana, Geneva, sans-serif;
	color:#FFFFFF!important;
	font-size:13px;
	font-weight:bold;
	text-decoration:none!important;
	margin:20px 3px 1px 3px;
	padding:7px 7px 7px 7px;
	cursor:pointer;
	background: -moz-linear-gradient(top, #000000, #333333);
	background: -webkit-gradient(linear, left top, left bottom, from(#000000), to(#333333));
	-moz-border-radius: 3px;
	-webkit-border-radius: 3px;
	-khtml-border-radius: 3px;
	-moz-box-shadow: 1px 1px 1px #333333;
	-webkit-box-shadow: 1px 1px 1px #333333;
	-khtml-box-shadow: 1px 1px 1px #333333;
}
.button-heading  a:hover {
	color:#ffffff!important;
	padding:7px 7px 7px 7px;
	cursor:pointer;
	text-decoration:none!important;
	background: -moz-linear-gradient(top, #e30000, #ff0505);
	background: -webkit-gradient(linear, left top, left bottom, from(#e30000), to(#ff0505));
	-moz-border-radius: 3px;
	-webkit-border-radius: 3px;
	-khtml-border-radius: 3px;
}
.Link3{
	font-size:14px;
	font-weight:bold;
}
.Link3 a{
	font-size:14px;
	font-weight:bold;
}
.Link3 a:hover{
	color:#F00 !important;
}

</style>
<!--[if IE]>
<style>
.button-heading {
	width:auto;
	height:auto;
	color:#FFFFFF!important;
	text-decoration:none!important;
}
.button-heading  a {
	background: #333333;
}
.button-heading  a:hover {
	background: #333333;
}
</style>
<![endif]-->

<script type="text/javascript">
$(document).ready(function(){ 
	$("#addshow").click(function(){
		$("#addnewform").slideToggle();
		
	});

});	
</script> 

  
  
  <table width="100%" border="0" cellspacing="0" cellpadding="0">
    <?php
    if(!empty($_GET['id'])){
  		
	$siteurl = get_option('siteurl');
	$mainimage_url = $siteurl . '/wp-content/plugins/' . "proxi_salesman" . '/image.php'; 
	$row= mysqli_fetch_object(mysqli_query($GLOBALS['con'], "select * from $db_name where id=".$_GET['id']));
	?>
    <tr>
      <td align="center"><form action="<?=$url?>" method="post" enctype="multipart/form-data" name="form1" target="_self">
          <table width="300" align="left" >
            <tbody>
              <tr valign="top">
                <th height="40" colspan="2" align="left" valign="middle" scope="row" style="font-size:16px;"><strong>Edit MM Staff</strong></th>
              </tr>
               <tr valign="top" style="font-size:12px;">
                 <th align="right" scope="row">Name</th>
                 <td align="left"><input name="name" type="text" id="name" style="width:100%;" value="<?=$row->name?>" /></td>
               </tr>
               <tr valign="top" style="font-size:12px;">
                 <th align="right" scope="row">Email</th>
                 <td align="left"><input name="email" type="text" id="email" style="width:100%;" value="<?=$row->email?>" /></td>
               </tr>
               <tr valign="top" style="font-size:12px;">
                 <th align="right" scope="row">Phone</th>
                 <td align="left"><input name="phone" type="text" id="phone" style="width:100%;" value="<?=$row->phone?>" /></td>
               </tr>
               <tr valign="top" style="font-size:12px;">
                 <th width="52" align="right" scope="row">Department</th>
                 <td width="236" align="left"><select name="department" id="department">
                   <option value=""> </option>
                   <option value="Sales" <?php if($row->department=="Sales"){?> selected="selected"<?php } ?>>Sales</option>
                   <option value="Traffic" <?php if($row->department=="Traffic"){?> selected="selected"<?php } ?>>Traffic</option>
                   <option value="Art" <?php if($row->department=="Art"){?> selected="selected"<?php } ?>>Art</option>
                 </select></td>
               </tr>
              <tr valign="top">
                <th colspan="2" align="center" scope="row"><input type="submit" value="Update" class="button-primary" name="Update2" /></th>
              </tr>
            </tbody>
            <tbody>
            </tbody>
          </table>
        <input name="newsalesman" type="hidden" value="update">
          <input name="edit" type="hidden" value="<?=$row->id?>">
        </form></td>
    </tr>
    <?php  }else{ ?>
    <tr>
      <td align="center">
      <div id="addnewform" style="display:none;" ><form action="<?=$url?>" method="post" enctype="multipart/form-data" name="form1" target="_self">
          <input name="newsalesman" type="hidden" value="post">
          <table width="300" align="left" >
            <tbody>
            
               <tr valign="top" style="font-size:12px;">
                 <th align="right" scope="row">Name</th>
                 <td align="left"><input type="text" name="name" id="name" style="width:100%;" /></td>
               </tr>
               <tr valign="top" style="font-size:12px;">
                 <th align="right" scope="row">Email</th>
                 <td align="left"><input type="text" name="email" id="email" style="width:100%;" /></td>
               </tr>
               <tr valign="top" style="font-size:12px;">
                 <th align="right" scope="row">Phone</th>
                 <td align="left"><input type="text" name="phone" id="phone" style="width:100%;" /></td>
               </tr>
               <tr valign="top" style="font-size:12px;">
                 <th width="58" align="right" scope="row">Department</th>
                 <td width="280" align="left"><select name="department" id="department">
                   <option value=""> </option>
                   <option value="Sales">Sales</option>
                   <option value="Traffic">Traffic</option>
                   <option value="Art">Art</option>
                 </select></td>
               </tr>
              
              <tr valign="top">
                <th colspan="2" align="center" scope="row"><input type="submit" value="Submit" class="button-primary" name="Update" /></th>
              </tr>
            </tbody>
            <tbody>
            </tbody>
          </table>
        </form></div></td>
    </tr>
    <?php } ?>
  </table>
  <br />
  <?php 
	$siteurl = get_option('siteurl');
	  $edit_image = $siteurl . '/wp-content/plugins/' . "proxi_salesman" . '/edit_s.png'; 
	$delete_image = $siteurl . '/wp-content/plugins/' . "proxi_salesman" . '/delete_s.png'; 
	 ?>


 
  <table width="850" border="0" cellspacing="0"  class="widefat">
    <thead>
      <tr class="test">
        <td width="52" align="center" valign="middle"><strong>#</strong></td>
        <td width="478" align="left" valign="middle"><strong>Name</strong></td>
        <td width="150" align="center" valign="middle"><strong>Action</strong></td>
      </tr>
       <?php
   $query2 =mysqli_query($GLOBALS['con'], "select * from $db_name order by id asc");
  $count = 1;
  $url = get_bloginfo('wpurl') . '/wp-admin/admin.php?page=' . $_GET['page'];
  if(mysqli_num_rows($query2)>0){
  while($row=mysqli_fetch_object($query2)){ 
	  ?>
       <tr class="test">
        <td width="52" align="center" valign="middle"><?=$count;?></td>
        <td width="478" align="left" valign="middle"><?=$row->name?></td>
        <td width="150" align="center" valign="middle"><a href="<?=$url?>&amp;id=<?=$row->id?>" >
          <img src="<?=$edit_image?>" border="0" title="Edit" /></a> &nbsp;
          <a href="<?=$url?>&amp;delsalesman=<?=$row->id?>" onclick="return window.confirm('Are you sure you want to delete this Salesman?');">
          <img src="<?=$delete_image?>" border="0" title="Delete" /></a></td>
      </tr>
        <?php $count = $count + 1 ;
  } }else{?>
      <tr class="test">
        <td colspan="3" align="center" valign="middle" style="color:#F00;"><strong>No MM Staff Found</strong></td>
      </tr>
       <?php } ?>
    </thead>
  </table>
     
</div>
<?php 

}
/*--------------Install Plugin Database-------------*/


/*------------End of Instalation Process-----------------*/

/*--------------Plugin Display Name-------------*/

function proxi_salesman_add_to_menu() {

	//add_options_page('MM Staff', 'MM Staff', 0, __FILE__, 'proxi_salesman' );

}


add_action('admin_menu', 'proxi_salesman_add_to_menu');
?>

Youez - 2016 - github.com/yon3zu
LinuXploit