Fallagassrini Bypass Shell

echo"Fallagassrini ";
Current Path : /home/jpewexports/public_html/application/controllers/admin/
Linux 43-225-53-84.webhostbox.net 3.10.0-1160.92.1.el7.x86_64 #1 SMP Tue Jun 20 11:48:01 UTC 2023 x86_64
Current File : /home/jpewexports/public_html/application/controllers/admin/Blog.php
<?php

class Blog  extends CI_Controller {

	function __construct()
	{ 
	    
		parent::__construct();	
		$this->load->helper(array('url','form','string'));
		$this->load->helper('file');
		$this->load->database();	
	}
	function index()
	{
		 
	        if(!isset($_SESSION['admin_id']))
			{
			         echo "<script type='text/javascript'>window.location.href='".base_url()."admin/login'</script>";
			}
			else
			{
		             $this->load->view('admin/blog');
			}		 
	}

     function delete($id)
	{
	   $set1=$this->db->query("select * from products where id='".$id."'");
	   $row1=$set1->row_array();

if($row1['image']!='')
{	
   $path1='uploads/large/'.$row1['main_image'];
	   unlink($path1);


}
if($row1['thumbnail']!='')
{



	   $path4='uploads/thumbnails/icon/'.$row1['thumbnail'];
	   unlink($path4);

	   $path5='uploads/thumbnails/small/'.$row1['thumbnail'];
	   unlink($path5);

	   $path6='uploads/thumbnails/large/'.$row1['thumbnail'];
	   unlink($path6);
}

	   $this->db->query("delete from products where id='".$id."'");
	   $_SESSION['deleted']="Product detail has been Removed";
	   echo '<script language="javascript">window.location.href="'.base_url().'admin/blog"</script>';

	}
	
	function add()
	{
		
		

		
		
		$title=$this->input->post("aname");
		$desc=$this->input->post("detail");
		$old_price=$this->input->post("old_price");
		$new_price=$this->input->post("new_price");
		$type=$this->input->post("type");
		$status=$this->input->post("status");
		$category=$this->input->post("category");
		$featured=$this->input->post("featured");
		$rating=$this->input->post("rating");
		
		
				$ald=$this->db->query("select * from products where title='$title' and category='$category'");
				$ald_count=$ald->num_rows();
		
		if($ald_count==0)
		{
			
$content='';
  $title=str_replace("'","",$title);
		   $date=date('d M Y');
		    $this->db->query("insert into products(rating,title,description,category,old_price,new_price,type,status,featured) values('$rating','$title','$desc','$category','$old_price','$new_price','$type','$status','$featured')");
//echo "insert into products(title,description,category,old_price,new_price,type,status,featured) values('$title','$desc','$category','$old_price','$new_price','$type','$status','$featured')";
	$id=mysql_insert_id();

			if(isset($_FILES['file']['name']))
			{
					 if ((($_FILES["file"]["type"] == "image/gif") || ($_FILES["file"]["type"] == "image/jpeg") || ($_FILES["file"]["type"] == "image/pjpeg") || ($_FILES["file"]["type"] == "image/png") || ($_FILES["file"]["type"] == "image/jpg") || ($_FILES["file"]["type"] == "image/x-png"))) 
		 {

					  if ($_FILES["file"]["error"] > 0) 
					  {
						 $content .= "Return Code: " . $_FILES["file"]["error"] . "<br />";
					  } 
			          else 
			          {

		$upload=$_FILES['file']['name'];
		$ext=explode('.',$upload);
		$ext2=end($ext);
		$_FILES['file']['name']=random_string('numeric', 4).".".$ext2;
		$targetpath="uploads/large/";
	 	   		if(move_uploaded_file($_FILES['file']['tmp_name'],$targetpath.$_FILES['file']['name']))
					
{

$this->db->query("update products set main_image='".$_FILES['file']['name']."' where id='".$id."'");

}					
						}
						 
					} 
				}
					else 
					{
				
						
					}



$content2="";
			
					 if ((($_FILES["thumb_file"]["type"] == "image/gif") || ($_FILES["thumb_file"]["type"] == "image/jpeg") || ($_FILES["thumb_file"]["type"] == "image/pjpeg") || ($_FILES["thumb_file"]["type"] == "image/png") || ($_FILES["thumb_file"]["type"] == "image/jpg") || ($_FILES["thumb_file"]["type"] == "image/x-png"))) 
		 {

					  if ($_FILES["thumb_file"]["error"] > 0) 
					  {
						 $content2 .= "Return Code: " . $_FILES["thumb_file"]["error"] . "<br />";
					  } 
			          else 
			          {
							if(isset($_FILES['thumb_file']['name']))
							{ 
							$content2 .= "Upload: " . $_FILES["thumb_file"]["name"] . "<br />";
							}
							$content2 .= "Type: " . $_FILES["thumb_file"]["type"] . "<br />";
							$content2 .= "Size: " . ($_FILES["thumb_file"]["size"] / 1024) . " Kb<br />";
							$content2 .= "<br/><br/>";
							$image2 = str_replace(' ', '_', $_FILES["thumb_file"]["name"]);
							$date2=date('d-M-Y');
							$rn2=rand(1000,9999);
						  	$rand2=$date2."_".$rn2."_".$image2;
		
							if (file_exists($rand2)) 
							{
									 $content2 .= $_FILES["thumb_file"]["name"] . " already exists. Upload cancelled!";
							} 
							else 
							{											
									$uploadedfile2 = $_FILES["thumb_file"]["tmp_name"];
						    						
									$size2 = getimagesize($uploadedfile2);
																						
									$type2 = $size2['mime'];
						
									$width2 = $size2[0];
						
									$height2 = $size2[1];
						
									
									  $newwidth2 = 500;
			                          $newwidth12 = 324;
				                      $newwidth22 = 50;
			                       

								    $newheight2 = 500;
								   $newheight12 =  324;
								   $newheight22 =  50;

									$tmp2 = imagecreatetruecolor($newwidth2, $newheight2);
									$tmp12 = imagecreatetruecolor($newwidth12, $newheight12);
									$tmp22 = imagecreatetruecolor($newwidth22, $newheight22);
			
									$filename2 = "uploads/thumbnails/large/" . $rand2;
									$filename12 = "uploads/thumbnails/small/" . $rand2;
									$filename22 = "uploads/thumbnails/icon/" . $rand2;
								
								
			                           if ($size2[2] == IMAGETYPE_GIF) 
									   {

											$src2 = imagecreatefromgif($uploadedfile2);
							
											imagecopyresampled($tmp2, $src2, 0, 0, 0, 0, $newwidth2, $newheight2, $width2, $height2);
											imagecopyresampled($tmp12, $src2, 0, 0, 0, 0, $newwidth12, $newheight12, $width2, $height2);
											imagecopyresampled($tmp22, $src2, 0, 0, 0, 0, $newwidth22, $newheight22, $width2, $height2);
										   
											imagegif($tmp2, $filename2, 100);
											imagegif($tmp12, $filename12, 100);
											imagegif($tmp22, $filename22, 100);
			

			                            } 
										elseif ($size2[2] == IMAGETYPE_JPEG)
										{

												$src2 = imagecreatefromjpeg($uploadedfile2);
								
												imagecopyresampled($tmp2, $src2, 0, 0, 0, 0, $newwidth2, $newheight2, $width2, $height2);
												imagecopyresampled($tmp12, $src2, 0, 0, 0, 0, $newwidth12, $newheight12, $width2, $height2);
												imagecopyresampled($tmp22, $src2, 0, 0, 0, 0, $newwidth22, $newheight22, $width2, $height2);
												
								
												imagejpeg($tmp2, $filename2, 100);
												imagejpeg($tmp12, $filename12, 100);
												imagejpeg($tmp22, $filename22, 100);
															

			                           }
									   elseif ($size[2] == IMAGETYPE_PNG)
									   {
												$src2 = imagecreatefrompng($uploadedfile2);
								
												imagecopyresampled($tmp2, $src2, 0, 0, 0, 0, $newwidth2, $newheight2, $width2, $height2);
												imagecopyresampled($tmp12, $src2, 0, 0, 0, 0, $newwidth12, $newheight12, $width2, $height2);
												imagecopyresampled($tmp22, $src2, 0, 0, 0, 0, $newwidth22, $newheight22, $width2, $height2);
								
												imagepng($tmp2, $filename2, 9);
												imagepng($tmp12, $filename12, 9);
												imagepng($tmp22, $filename22, 9);
												

			                           }

			
								imagedestroy($src2);
								imagedestroy($tmp2);
							
							}
							
						}
						 
					} 
					else 
					{
						$content2 .= "Invalid file";
						
					}

			 $this->db->query("update products set thumbnail='".$rand2."' where id='".$id."'");
			
			
			
			 $_SESSION['added']="Product detail has been successfully added"; 
	}
	else
	{
			 $_SESSION['added']="Product with same details already exists"; 
	}
			
		  
	 echo '<script language="javascript">window.location.href="'.base_url().'admin/blog"</script>';
				
	
	}
		
		
   
		
		
}

/* End of file product.php */
/* Location: ./system/application/controllers/news.php */
bypass 1.0, Devloped By El Moujahidin (the source has been moved and devloped)
Email: contact@elmoujehidin.net