shell bypass 403
UnknownSec Shell
:
/
home
/
delvin
/
www
/ [
drwxr-x---
]
upload
mass deface
mass delete
console
info server
name :
admin_consSched.php
<?php include('ini.php'); $Template = new Template; $Consult_Schedule = new Consult_Schedule; $Consult_Bookings = new Consult_Bookings; if (!isset($_SESSION['LID']) || $_SESSION['LID'] <= 0){ $Template->redirect('cms_login.php'); } $error = false; //======== update available time slots if ($_POST['submitBut'] == 'Save' && !isset($_POST['conBookID'])){ // look for a conflict if ($_POST['date'] == '' || $_POST['time'] == '' || $_POST['duration'] == ''){ $error = true; $Template->set_alert('The form is missing some required information', 'error'); } else { $startTS = strtotime($_POST['date'] . ", " . $_POST['time']); $endTS = $startTS + (intval($_POST['duration']) * 60); $rows = $Consult_Schedule->get('', $startTS, $endTS); if (count($rows) <= 0 || is_array($rows[$_POST['conSchedID']])){ $Consult_Schedule->add_mod($_POST['conSchedID'], $startTS, $endTS); } else { $Template->set_alert("A time block already exists on ". date('D, M j, Y', $startTS) ." at " . date('gi a', $startTS) . " until " . date('gi a', $endTS).". Please create a time block at another time.", "error"); } } // ============= add booking to a time slot } else if ($_POST['submitBut'] == 'Confirm'){ if ($_POST['clName'] == ''){ $Template->set_alert('Please provide your name', 'error'); $error = true; } else if ($_POST['clEmail'] == '' || !filter_var($_POST['clEmail'], FILTER_VALIDATE_EMAIL)){ $Template->set_alert('Please provide a valid email address', 'error'); $error = true; } else if ($_POST['clOrg'] == ''){ $Template->set_alert('Please provide the name of your practice', 'error'); $error = true; } if ($error == false){ $Consult_Bookings->add_mod($_POST['conBookID'], $_POST['conSchedID'], $_POST['clName'], $_POST['clEmail'], $_POST['clOrg'], '', ''); } } else if ($_POST['submitBut'] == 'Save' && isset($_POST['conBookID'])){ $Consult_Bookings->add_mod($_POST['conBookID'], $_POST['conSchedID'], htmlspecialchars($_POST['clName']), htmlspecialchars($_POST['clEmail']), htmlspecialchars($_POST['clOrg']), $_POST['note'], $_POST['timeZone']); } else if ($_POST['submitBut'] == 'Confirm Delete'){ $Consult_Schedule->delete($_POST['conSchedID']); } else if ($_POST['submitBut'] == 'Confirm Delete Booking'){ $Consult_Bookings->delete($_POST['conBookID']); } include('includes/admin_header.php'); $Template = new Template; echo $Template->get_alerts(); if ($_SESSION['LID'] > 0){ // display views ===================== if ($_POST['submitBut'] == 'Open a Block' || ($_POST['submitBut'] == 'Edit' && !isset($_POST['conBookID'])) || ($_POST['submitBut'] == 'Save' && $error == true)){ $Template->load('views/v_admin_consSched_edit.php'); } else if ($_POST['submitBut'] == 'Edit' && isset($_POST['conBookID'])){ $Template->load('views/v_admin_consBook_edit.php'); } else if ($_POST['submitBut'] == 'Delete'){ $Template->load('views/v_admin_consSched_del.php'); } else { $Template->load('views/v_admin_consSched.php'); } } else { echo "<div class='col-12 centre'>Please <a href='cms_login.php'>login</a>.</div>"; } include('includes/admin_footer.php'); ?>
© 2026 UnknownSec