AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Edit the file

<?php
include_once 'inc/function.php';
include_once('inc/paginator.class.php');
$admin=new Admin();
$pages = new Paginator;

$weburl=substr($_SERVER['QUERY_STRING'],strlen($_GET['page'])+15);

$query = "SELECT * FROM `photo_album`";  
		
$get_rows=$admin->get_rows_by_query($db,$query);
$per_page=50;
$start=($_GET['page']-1)*$per_page;
$pagination = $pages->displayHtmlPages($_GET['page'],$get_rows,$per_page,$weburl);

if(!empty($_GET['task'])){
	if($_GET['action']=='delete'){
		$result=mysqli_query($db,"DELETE FROM photo_album WHERE id='".$_GET['id']."'");
		$_SESSION['success']='Photo Album Deleted Successfully';
		echo '<script> window.location="view-photo-album.php?task=view&page=1"; </script>';
	}
	if($_POST['action']=='edit'){
		$response=$admin->edit_photo_album($db,$_POST);
		if($response){ 
			$_SESSION['success']="Photo Album Updated Successfully"; 
		}
	}
	if($_GET['task']=='edit'){
		$result=mysqli_fetch_array(mysqli_query($db,"SELECT * FROM photo_album WHERE id='".$_GET['id']."'"));
	}
}

include_once 'inc/header.php';
?>

<div id="content" class="container-fluid">
  <ol class="breadcrumb">
    <li>Home</li>
    <li>Gallery Management</li>
    <li>Photo Album</li>
    <li>View Photo Album</li>
  </ol>
  <?php if(!empty($_SESSION['success'])) { ?>
  <div class="alert alert-success">
  	<strong>Success!</strong> <?=$_SESSION['success']?>
  </div>
  <?php } ?>
  <?php if(!empty($_GET['task']) && $_GET['task']=='view') { ?>
  <div class="panel panel-default">
    <div class="panel-heading">
      <div class="pull-right">
        <a href="add-photo-album.php" class="btn btn-primary"><i class="fa fa-plus"></i></a>
      </div>
      <h1 class="panel-title"><i class="fa fa-image"></i> View Photo Album</h1>
    </div>
    <div class="panel-body">
      <form method="post" id="table-photo-album">
        <div class="table-responsive">
          <table class="table table-striped table-bordered table-hover">
            <tr>
              <th class="text-left">S.No.</th>
              <th class="text-left">Title</th>
              <th class="text-left">Image</th>
              <th class="text-left">Status</th>
              <th class="text-right" width="9%">Action</th>
            </tr>
            <?php
			    $i=$start+1;
				$apps=$admin->get_filter_data_by_page_id($db,$query,$start,$per_page,'id','desc');
				foreach($apps as $app):
				extract($app);
			?>
            <tr>
              <td class="text-left"><?=$i?></td>
              <td class="text-left"><?=$title?></td>
              <td class="text-left"><img src="<?=SITEURL?>/files/gallery/album/<?=$image?>" alt="<?=$title?>" height="50"></td>
              <td class="text-left"><?=$status?></td>
              <td class="text-right">
              	<a href="view-photo-album.php?task=edit&id=<?=$id?>" class="btn btn-primary btn-xs"><i class="fa fa-pencil"></i></a> 
                <a href="javascript:void(0)" onClick="deleteAction('<?=$id?>')" class="btn btn-danger btn-xs"><i class="fa fa-times"></i></a></td>
            </tr>
            <?php
				$i++;
				endforeach;
		    ?>
            <?php if($get_rows==0){ ?>
            <tr>
            	<td class="text-center danger" colspan="5"><p>&nbsp;</p><h4>Sorry, No Data Found</h4></td>
            </tr>
            <?php } ?>
          </table>
          <center>
          	<ul class="pagination">
          		<?php print_r($pagination); ?>
          	</ul>
          </center>
        </div>
      </form>
    </div>
  </div> 
  <?php } if(!empty($_GET['task']) && $_GET['task']=='edit') { ?>
  <div class="panel panel-default">
    <div class="panel-heading">
      <div class="pull-right">
        <button type="submit" form="form-photo-album" title="Save" data-toggle="tooltip" class="btn btn-success"><i class="fa fa-save"></i></button>
        <a href="view-photo-album.php?task=view&page=1" title="Cancel" data-toggle="tooltip" class="btn btn-danger"><i class="fa fa-times"></i></a> </div>
      <h1 class="panel-title"><i class="fa fa-image"></i> Edit Photo Album</h1>
    </div>
    <div class="panel-body">
      <form method="post" id="form-photo-album" class="form-horizontal" enctype="multipart/form-data"><br>
		<input type="hidden" name="action" value="edit">
        <input type="hidden" name="id" value="<?=$result['id']?>">
        <div class="form-group">
          <label class="col-sm-2 control-label">Title</label>
          <div class="col-sm-10">
            <input type="text" name="title" class="form-control" value="<?=$result['title']?>">
          </div>
        </div>
        <div class="form-group">
          <label class="col-sm-2 control-label">Image</label>
          <div class="col-sm-10">
            <input type="file" name="image" class="form-control">
            <div class="col-md-3 post-container">
             	<div class="post-image"><img src="<?=SITEURL?>/files/gallery/album/<?=$result['image']?>" height="100"></div>
             </div>
          </div>
        </div>
        <div class="form-group">
          <label class="col-sm-2 control-label">Status</label>
          <div class="col-sm-10">
            <select name="status" class="form-control">
              <option value="Active" <?php if($result['status']=='Active'){ echo 'selected'; } ?>>Active</option>
              <option value="Inactive" <?php if($result['status']=='Inactive'){ echo 'selected'; } ?>>In Active</option>
            </select>
          </div>
        </div>
      </form>
    </div>
  </div>
  <?php } ?>
</div>

<?php include_once 'inc/footer.php'; ?>

Rename: -