AK-74 Security Team Web Shell

.:: :[ AK-74 Security Team Web-shell ]: ::.

Edit the file

<?php
include_once 'inc/function.php';
include_once('inc/paginator.class.php');
$admin=new Admin();
$pages = new Paginator;

$weburl=substr($_SERVER['QUERY_STRING'],strlen($_GET['page'])+15);

$query = "SELECT * FROM `video_gallery`";

$get_rows=$admin->get_rows_by_query($db,$query);
$per_page=10;
$start=($_GET['page']-1)*$per_page;
$pagination = $pages->displayHtmlPages($_GET['page'],$get_rows,$per_page,$weburl);

if(isset($_GET['action']) || isset($_GET['task'])){
	if($_GET['action']=='delete'){
		mysqli_query($db,"DELETE FROM `video_gallery` WHERE id='".$_GET['id']."'");
		$_SESSION['success']="Video Gallery Deleted Successfully";
	}
	
	if($_POST['action']=='edit'){
		$response=$admin->edit_video_gallery($db,$_POST);
		if($response){ 
			$_SESSION['success']="Video Gallery Updated Successfully"; 
		}
	}
	if($_GET['task']=='edit'){
		$result=mysqli_fetch_array(mysqli_query($db,"SELECT * FROM video_gallery WHERE id='".$_GET['id']."'"));
	}
}

include_once 'inc/header.php';
?>

<div id="content" class="container-fluid">
  <ol class="breadcrumb">
    <li>Home</li>
    <li>Gallery Management</li>
    <li>Video Gallery</li>
    <li>View Video Gallery</li>
  </ol>
  <?php if(!empty($_SESSION['success'])) { ?>
  <div class="alert alert-success">
  	<strong>Success!</strong> <?=$_SESSION['success']?>
  </div>
  <?php } ?>
  <?php if(!empty($_GET['task']) && $_GET['task']=='view') { ?>
  <div class="panel panel-default">
    <div class="panel-heading">
      <div class="pull-right">
        <a href="add-video-gallery.php" class="btn btn-primary"><i class="fa fa-plus"></i></a>
      </div>
      <h1 class="panel-title"><i class="fa fa-image"></i> View Video Gallery</h1>
    </div>
    <div class="panel-body">
      <form method="post" id="table-video-gallery">
        <div class="table-responsive">
          <table class="table table-striped table-bordered table-hover">
            <tr>
              <th class="text-left">S.No.</th>
              <th class="text-left">Title</th>
              <th class="text-left" width="30%">Video</th>
              <th class="text-left">Status</th>
              <th class="text-right" width="9%">Action</th>
            </tr>
            <?php
			    $i=$start+1;
				$apps=$admin->get_filter_data_by_page_id($db,$query,$start,$per_page,'id','desc');
				foreach($apps as $app):
				extract($app);
			?>
            <tr>
              <td class="text-left"><?=$i?></td>
              <td class="text-left"><?=$title?></td>
              <td class="text-left"><iframe width="100%" height="100" src="https://www.youtube.com/embed/<?=$video?>" frameborder="0" allowfullscreen></iframe>
</td>
              <td class="text-left"><?=$status?></td>
              <td class="text-right">
              	<a href="view-video-gallery.php?task=edit&id=<?=$id?>" class="btn btn-primary btn-xs" title="Edit" data-toggle="tooltip"><i class="fa fa-pencil"></i></a> 
                <a href="javascript:void(0)" onClick="deleteAction('<?=$id?>')" class="btn btn-danger btn-xs" title="Delete" data-toggle="tooltip"><i class="fa fa-times"></i></a></td>
            </tr>
            <?php
				$i++;
				endforeach;
		    ?>
          </table>
        </div>
      </form>
    </div>
  </div> 
  <?php } if(!empty($_GET['task']) && $_GET['task']=='edit') { ?>
  <div class="panel panel-default">
    <div class="panel-heading">
      <div class="pull-right">
        <button type="submit" form="form-video-gallery" title="Save" data-toggle="tooltip" class="btn btn-success"><i class="fa fa-save"></i></button>
        <a href="view-video-gallery.php?task=view&page=1" title="Cancel" data-toggle="tooltip" class="btn btn-danger"><i class="fa fa-times"></i></a> </div>
      <h1 class="panel-title"><i class="fa fa-image"></i> Edit Video Gallery</h1>
    </div>
    <div class="panel-body">
      <form method="post" id="form-video-gallery" class="form-horizontal"><br>
		<input type="hidden" name="action" value="edit">
        <input type="hidden" name="id" value="<?=$result['id']?>">
        <div class="form-group">
          <label class="col-sm-2 control-label">Title</label>
          <div class="col-sm-10">
            <input type="text" name="title" class="form-control" value="<?=$result['title']?>">
          </div>
        </div>
        <div class="form-group">
          <label class="col-sm-2 control-label">Video</label>
          <div class="col-sm-10">
            <input type="text" class="form-control" name="video" value="<?=$result['video']?>" />
          </div>
        </div>
        <div class="form-group">
          <label class="col-sm-2 control-label">Status</label>
          <div class="col-sm-10">
            <select name="status" class="form-control">
              <option value="Active" <?php if($result['status']=='Active'){ echo 'selected'; } ?>>Active</option>
              <option value="Inactive" <?php if($result['status']=='Inactive'){ echo 'selected'; } ?>>Inactive</option>
            </select>
          </div>
        </div>
      </form>
    </div>
  </div>
  <?php } ?>
</div>

<?php include_once 'inc/footer.php'; ?>

Rename: -