growthpharma.in - UnknownSec 403

UnknownSec Bypass 403

: /home/growthpharma/www/Master@Growth/ [ drwxr-xr-x ]
name : editteam.php
 <?php
include_once("config.php");
include_once("fckeditor/fckeditor.php");

$result = mysql_fetch_array(mysql_query("select * from team where id='".$_GET['id']."'"));

function getExtension($str) 
	{         
		$i = strrpos($str,".");         
		if (!$i) { return ""; }         
		$l = strlen($str) - $i;         
		$ext = substr($str,$i+1,$l);         
		return $ext; 
	}

if(isset($_POST['mode']) && ($_POST['mode']=="addrecord"))
{

$title = trim(mysql_real_escape_string($_POST['title']));
$designation = trim(mysql_real_escape_string($_POST['designation']));
//$shortcontent = trim(mysql_real_escape_string($_POST['content']));


//$phone = trim(mysql_real_escape_string($_POST['phone']));
//$email = trim(mysql_real_escape_string($_POST['email']));
//$facebook = trim(mysql_real_escape_string($_POST['facebook']));
//$twitter = trim(mysql_real_escape_string($_POST['twitter']));
//$skype = trim(mysql_real_escape_string($_POST['skype']));
//$linkedin = trim(mysql_real_escape_string($_POST['linkedin']));



$oldlimage=$_POST['banner'];

	$img1_name=trim($_FILES['banner']['name']);
	$extension = getExtension($img1_name); 
	$extension = strtolower($extension);
	$exten1=$extension;	
	if($img1_name!="")
	{
	if(file_exists("page/$oldlimage"))
	{
	$mm="page/".$oldlimage;
	//echo $mm;
	unlink($mm);
	//die;
	}
	$id=date("ymdHis");
	$image1 = $id."_"."PAGE".".".$exten1;
	$imagetmp1 = $_FILES['banner']['tmp_name'];
	$image_name_path1 = "page/$image1";
	move_uploaded_file($imagetmp1, $image_name_path1);
	}	
	else
	$image1 = $oldlimage;
	
$status = $_POST['status'];

$webpage = mysql_query("update team set title='$title',designation='$designation',image='$image1',status='$status' where id='".$_GET['id']."'");


if($webpage)
{
header("location:manageteam.php");
$_SESSION['mode'] = "Record Updated Successfully.";
exit;
}
else
{
header("location:manageteam.php");
$_SESSION['mode1'] = "Some Error Occured!";
exit;
}
}
?>
<!doctype html>
<!-- paulirish.com/2008/conditional-stylesheets-vs-css-hacks-answer-neither/ -->
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en"> <![endif]-->
<!--[if IE 7]>    <html class="no-js ie7 oldie" lang="en"> <![endif]-->
<!--[if IE 8]>    <html class="no-js ie8 oldie" lang="en"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="en"> <!--<![endif]-->
<head>
  <meta charset="utf-8">
  
  <!-- DNS prefetch -->
  <link rel=dns-prefetch href="//fonts.googleapis.com">

  <!-- Use the .htaccess and remove these lines to avoid edge case issues.
       More info: h5bp.com/b/378 -->
  <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">

  <title> Mentor Institutions Control:: Growth Pharmaceuticals Pvt. Ltd.  </title>
  <meta name="description" content="">
  <meta name="author" content="">

  <!-- Mobile viewport optimized: j.mp/bplateviewport -->
  <meta name="viewport" content="width=device-width,initial-scale=1">

  <!-- Place favicon.ico and apple-touch-icon.png in the root directory: mathiasbynens.be/notes/touch-icons -->

  <!-- CSS: implied media=all -->
  <!-- CSS concatenated and minified via ant build script-->
  <link rel="stylesheet" href="css/style.css"> <!-- Generic style (Boilerplate) -->
  <link rel="stylesheet" href="css/960.fluid.css"> <!-- 960.gs Grid System -->
  <link rel="stylesheet" href="css/main.css"> <!-- Complete Layout and main styles -->
  <link rel="stylesheet" href="css/buttons.css"> <!-- Buttons, optional -->
  <link rel="stylesheet" href="css/lists.css"> <!-- Lists, optional -->
  <link rel="stylesheet" href="css/icons.css"> <!-- Icons, optional -->
  <link rel="stylesheet" href="css/notifications.css"> <!-- Notifications, optional -->
  <link rel="stylesheet" href="css/typography.css"> <!-- Typography -->
  <link rel="stylesheet" href="css/forms.css"> <!-- Forms, optional -->
  <link rel="stylesheet" href="css/tables.css"> <!-- Tables, optional -->
  <link rel="stylesheet" href="css/charts.css"> <!-- Charts, optional -->
  <link rel="stylesheet" href="css/jquery-ui-1.8.15.custom.css"> <!-- jQuery UI, optional -->
  <!-- end CSS-->
  
  <!-- Fonts -->
  <link href="//fonts.googleapis.com/css?family=PT+Sans" rel="stylesheet" type="text/css">
  <!-- end Fonts-->

  <!-- More ideas for your <head> here: h5bp.com/d/head-Tips -->

  <!-- All JavaScript at the bottom, except for Modernizr / Respond.
       Modernizr enables HTML5 elements & feature detects; Respond is a polyfill for min/max-width CSS3 Media Queries
       For optimal performance, use a custom Modernizr build: www.modernizr.com/download/ -->
  <script src="js/libs/modernizr-2.0.6.min.js"></script>
  <script type="text/javascript">
var message="";
function ajaxcheck(sText)
{
var ajaxRequest;  // The variable that makes Ajax possible!
try
{
// Opera 8.0+, Firefox, Safari
ajaxRequest = new XMLHttpRequest();
} 
catch (e)
{
// Internet Explorer Browsers
try
{
ajaxRequest = new ActiveXObject("Msxml2.XMLHTTP");
} 
catch (e) 
{
try
{
ajaxRequest = new ActiveXObject("Microsoft.XMLHTTP");
} 
catch (e){
// Something went wrong
alert("Your browser browser is not compitable for the page on which you are working!");
return false;
}
}
}
// Create a function that will receive data sent from the server
ajaxRequest.onreadystatechange = function()
{
if(ajaxRequest.readyState == 4)
{

document.getElementById("texthint").innerHTML=ajaxRequest.responseText;
if(ajaxRequest.responseText)
{
alert(ajaxRequest.responseText);
//document.getElementById("menu_id").value=""; 
//document.getElementById("menu_id").focus();
location.reload();
}

}

}
//var menu_id = document.getElementById("menu_id").value;
var submenu = document.getElementById("submenu").value;
var subsubmenu = document.getElementById("subsubmenu").value;
var queryString = "?submenu=" + submenu + "&subsubmenu=" + subsubmenu;
alert (queryString);
ajaxRequest.open("GET", "checkwebpage.php" + queryString, true);
ajaxRequest.send(null); 
}
//To check Bottom Up Filling Of Form
function chkvalue111()
{
var status=0;
if(document.getElementById("menu_id").value=="")
{
document.getElementById("menu_id_error").style.display="block";
document.getElementById("menu_id_error").innerHTML="This field is required.";
status=1;
}
if(document.getElementById("menu_id").value!="")
{
document.getElementById("menu_id_error").style.display="none";
document.getElementById("menu_id_error").innerHTML="";
}
if(document.getElementById("title").value=="")
{
document.getElementById("title_error").style.display="block";
document.getElementById("title_error").innerHTML="This field is required.";
status=1;
}
if(document.getElementById("title").value!="")
{
document.getElementById("title_error").style.display="none";
document.getElementById("title_error").innerHTML="";
}
var location1 = FCKeditorAPI.GetInstance('details'); //location_info is name of text area.
var description = location1.GetXHTML(true);
if(!description)
{
document.getElementById("details_error").style.display="block";
document.getElementById("details_error").innerHTML="This field is required.";
status=1;
}
if(description)
{
document.getElementById("details_error").style.display="none";
document.getElementById("details_error").innerHTML="";
}

if(status==1)
{
return false;
}
}
function MM_openBrWindow(theURL,winName,features) { //v2.0
  window.open(theURL,winName,features);
}
function CheckExtension(fld)
{

var valid_extensions = /(.jpg|.gif|.png|.pdf)$/i;
if (valid_extensions.test(fld.value))
return true;
alert('You can Only Upload .jpg,.gif,.png format !!');
fld.select();
fld.value="";
fld.focus();
return false;
}
  </script>
  <script>
function formReset()
{
document.getElementById("frmreg").reset();
}
</script>
<script type="text/javascript" src="localitycheck.js">
</script>
</head>

<body id="top">

  <!-- Begin of #container -->
  <div id="container">
  	<!-- Begin of #header -->
    <?php include_once("header.php");?>
     <!--! end of #header -->
    
    <div class="fix-shadow-bottom-height"></div>
	
	<!-- Begin of Sidebar -->
     <?php include_once("navigation.php");?>
     <!--! end of #sidebar -->
    
    <!-- Begin of #main -->

    <div id="main" ROLE="main">
    	
    	<!-- Begin of titlebar/breadcrumbs -->
		<div id="title-bar">
			<ul id="breadcrumbs">
				<li><a href="dashboard.php" title="Home"><span id="bc-home"></span></a></li>
				<li class="no-hover"> Mentor Institutions  Control</li>
			</ul>
		</div> 
        <!--! end of #title-bar -->
		
		<div class="shadow-bottom shadow-titlebar"></div>
		<!-- Begin of #main-content -->
		<div id="main-content">
			<div class="container_12">
			
			<div class="grid_12">
				<h1>Create  Mentor Institutions </h1>
				<p></p>
			</div>
			
			<div class="grid_12">
				<div class="block-border">
					<div class="block-header">
						<h1>Enter Details</h1><span></span>
					</div>
					<form id="frmreg" name="frmreg" class="block-content form" action="" method="post" enctype="multipart/form-data" onSubmit="return chkvalue111();">
                    <input type="hidden" name="mode" id="mode" value="addrecord" />
                    <input type="hidden" name="banner" id="banner" value="<?php echo $result['image'];?>" />
                    <?php 
if(isset($_SESSION['mode']) && ($_SESSION['mode']!=''))
{
?>
<div class="alert success">
<span class="hide">x</span>
<?php
echo $_SESSION['mode'];
unset ($_SESSION['mode']);
?>
</div>	
<?php
}
?>
<?php 
if(isset($_SESSION['mode1']) && ($_SESSION['mode1']!=''))
{
?>
<div class="alert error">
<span class="hide">x</span>
<?php
echo $_SESSION['mode1'];
unset ($_SESSION['mode1']);
?>
</div>	
<?php
}
?>
					<!--	<div class="_100">
							<p>
<label for="select">Menu</label>
<select name="menu_id" id="groupid"  onChange="selectcatlogue(frmreg);">
<option value="">Select Menu</option>
<?php
$sqlrole = mysql_query("select * from menu where status='Active' order by menuid");
$sqfrole = mysql_fetch_array($sqlrole);
while($sqfrole)
{
?>
<option value="<?php echo $sqfrole['menuid'];?>"<?php if($result['menu']==$sqfrole['menuid']){ echo "selected=selected"; }?>><?php echo $sqfrole['menutitle'];?></option>
<?php
$sqfrole = mysql_fetch_array($sqlrole);
}
?>
</select>
<br>
<span style="padding-left:0px;" id="texthint"></span>
<span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="menu_id_error"></span>
</p>
                            
						</div>

						<div class="_100">
							<p>
                            <?php
							
$sqlrole1 = mysql_query("select * from submenu where  	submenuid='".$result['submenu']."' and status='Active'");
$sqfrole1 = mysql_fetch_array($sqlrole1);
?>
                            <label for="role">Sub Menu Name</label>
                           <select name="submenu" id="catid"  >
                            <option  value="<?php echo $sqfrole1['submenuid'];?>"<?php if($result['submenu']==$sqfrole1['submenuid']){ echo "selected=selected"; }?>><?php echo $sqfrole1['submenutitle'];?></option>
                           
                            </select>
                            </p>
                            
						</div>-->
                        
                       <!-- <div class="_100">
							<p>
                              <?php
							 
$sqlrole2 = mysql_query("select * from subsubmenu where id='".$result['subsubmenu']."' and status='Active'");
$sqfrole2 = mysql_fetch_array($sqlrole2);
?>
                            <label for="role">Sub sub Menu</label>
                            
                            <select name="subsubmenu" id="subsubmenu" onChange="ajaxcheck(frmreg);">
                            <option value="">Select Sub-sub Menu</option>

 <option  value="<?php echo $sqfrole2['id'];?>"<?php if($result['subsubmenu']==$sqfrole2['id']){ echo "selected=selected"; }?>><?php echo $sqfrole2['subsubmenu'];?></option>

</select>
                            
 <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="submenu_error"></span>                           
                            </p>
                            
						</div>-->
         
                        
                        <div class="_100">
							<p>
                            <label for="role">Title</label><input id="title" name="title" class="required" type="text" value="<?php echo $result['title'];?>" />
                            <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="title_error"></span>
                            </p>
                            
						</div>
                        
						
						
					
				<!--	  <div class="_100">
							<p>
                            <label for="role">Designation</label><input id="designation" name="designation" class="required" type="text" value="<?php echo $result['designation'];?>" />
                            <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="designation_error"></span>
                            </p>
                            
						</div>	-->
						<!--
						
						
						  <div class="_100">
							<p>
                            <label for="role">Email</label><input id="email" name="email" class="required" type="text" value="<?php echo $result['email'];?>" />
                            <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="email_error"></span>
                            </p>
                            
						</div>
						
						  <div class="_100">
							<p>
                            <label for="role">Facebook</label><input id="facebook" name="facebook" class="required" type="text" value="<?php echo $result['facebook'];?>" />
                            <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="facebook_error"></span>
                            </p>
                            
						</div>
						
						  <div class="_100">
							<p>
                            <label for="role">Skype</label><input id="skype" name="skype" class="required" type="text" value="<?php echo $result['skype'];?>" />
                            <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="skype_error"></span>
                            </p>
                            
						</div>
						
						
						
					  <div class="_100">
							<p>
                            <label for="role">Twitter</label><input id="twitter" name="twitter" class="required" type="text" value="<?php echo $result['twitter'];?>" />
                            <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="twitter_error"></span>
                            </p>
                            
						</div>	
						
						
						
						
						
					  <div class="_100">
							<p>
                            <label for="role">Linkedin</label><input id="linkedin" name="linkedin" class="required" type="text" value="<?php echo $result['linkedin'];?>" />
                            <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="title_error"></span>
                            </p>
                            
						</div>	
						-->
						
						
                       <!-- <div class="_100">
    <p>
        <label for="role">Short content </label>
        <textarea  name="content" id="content"><?php  echo $result['shortcontent'];?> </textarea>
        	
        <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="content_error"></span>   
    </p>
</div>
   -->                   <!--  <div class="_100">
							<p>
                            <label for="role">Meta Title</label><input id="mtitle" name="mtitle" type="text" value="<?php  $result['metatitle'];?>" />
                            
                            
                            </p>
                            
						</div>
                        
                        <div class="_100">
							<p>
                            <label for="role">Keywords</label><input id="key" name="key" type="text" value="<?php echo $result['keywords'];?>"/>
                            
                            
                            </p>
                            
						</div>
                        
                         <div class="_100">
							<p>
                            <label for="role">Meta Description</label><input id="mdesc" name="mdesc" type="text" value="<?php echo $result['keywords'];?>"/>
                            
                            
                            </p>
                            
						</div>-->
                     
				<!--		
						<div class="_100">
							<p><label for="Details">Details</label>
                            <?php
							$oFCKeditor = new FCKeditor('details') ;
							$oFCKeditor->BasePath = 'fckeditor/' ;
							$oFCKeditor->Value = stripslashes($result['details']);
							$oFCKeditor->Create() ;
							$oFCKeditor->toolbarSet = 'Mytoolbar';
							?>
                           <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="details_error"></span>
                            </p>
						</div>
						
                        
                        -->
                         <div class="_100">
							<p><label for="Banner"> Image</label>
                            
                            <div id="resumediv" >
                           <input type="file" name="banner" id="banner" onChange="return CheckExtension(this)"/> </div>
                            <a href="#"><img src="page/<?php echo $result['image'];?>" width="50" height="50" onClick="MM_openBrWindow('page/<?php echo $sqfpro['image'];?>','','scrollbars=yes,width=350,height=350')" /></a>
                            <!-- <span style="font-family:Arial; font-size:11px; font-weight:bold; color:#993300;" id="pri_error"></span>-->
                            </p>
						</div>
                        
                        
                        
                       
					
						
						<div class="_50">
							<p>
								<span class="label">Status</span>
								<label><input type="radio" name="status" value="Active"<?php if($result['status']=='Active'){ echo "checked=checked"; }?>/> Active</label>
								<label><input type="radio" name="status" value="Blocked"<?php if($result['status']=='Blocked'){ echo "checked=checked"; }?> /> Blocked</label>
								<!--<label><input type="radio" name="radio" /> Justo duo</label>-->
							</p>
						</div>
						
						
						<div class="clear"></div>
						<div class="block-actions">
							<ul class="actions-left">
							<li><a class="button red"  onClick="formReset();">Reset</a></li>
							</ul>
							<ul class="actions-right">
								<li><input type="submit" class="button" value="Proceed"></li>
                                <li><a class="button red" id="reset-validate-form" onClick="javascript:window.location.href='manageteam.php'">Manage  Mentor Institutions </a></li>
							</ul>
						</div>
					</form>
				</div>
			</div>
			<div class="clear"></div>
			<div class="clear height-fix"></div>

		</div></div> <!--! end of #main-content -->
  </div> <!--! end of #main -->

    
   <!-- <footer id="footer"><div class="container_12">
		<div class="grid_12">
    		<div class="footer-icon align-center"><a class="top" href="#top"></a></div>
		</div>
    </div></footer>-->
  </div> <!--! end of #container -->


  <!-- JavaScript at the bottom for fast page loading -->

  <!-- Grab Google CDN's jQuery, with a protocol relative URL; fall back to local if offline -->
  <script src="//ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js"></script>
  <script>window.jQuery || document.write('<script src="js/libs/jquery-1.6.2.min.js"><\/script>')</script>


  <!-- scripts concatenated and minified via ant build script-->
  <script defer src="js/plugins.js"></script> <!-- lightweight wrapper for consolelog, optional -->
  <script defer src="js/mylibs/jquery-ui-1.8.15.custom.min.js"></script> <!-- jQuery UI -->
  <script defer src="js/mylibs/jquery.notifications.js"></script> <!-- Notifications  -->
  <script defer src="js/mylibs/jquery.uniform.min.js"></script> <!-- Uniform (Look & Feel from forms) -->
  <script defer src="js/mylibs/jquery.validate.min.js"></script> <!-- Validation from forms -->
  <script defer src="js/mylibs/jquery.dataTables.min.js"></script> <!-- Tables -->
  <script defer src="js/mylibs/jquery.tipsy.js"></script> <!-- Tooltips -->
  <script defer src="js/mylibs/excanvas.js"></script> <!-- Charts -->
  <script defer src="js/mylibs/jquery.visualize.js"></script> <!-- Charts -->
  <script defer src="js/mylibs/jquery.slidernav.min.js"></script> <!-- Contact List -->
  <script defer src="js/common.js"></script> <!-- Generic functions -->
  <script defer src="js/script.js"></script> <!-- Generic scripts -->
  
  <script type="text/javascript">
	$().ready(function() {
		
		/*
		 * Form Validation
		 */
		$.validator.setDefaults({
			submitHandler: function(e) {
				$.jGrowl("Form was successfully submitted.", { theme: 'success' });
				$(e).parent().parent().fadeOut();
				v.resetForm();
				v2.resetForm();
				v3.resetForm();
			}
		});
		var v = $("#create-user-form").validate();
		jQuery("#reset").click(function() { v.resetForm(); $.jGrowl("User was not created!", { theme: 'error' }); });
		
		var v2 = $("#write-message-form").validate();
		jQuery("#reset2").click(function() { v2.resetForm(); $.jGrowl("Message was not sent.", { theme: 'error' }); });
		
		var v3 = $("#create-folder-form").validate();
		jQuery("#reset3").click(function() { v3.resetForm(); $.jGrowl("Folder was not created!", { theme: 'error' }); });
		
		var validateform = $("#validate-form").validate();
		$("#reset-validate-form").click(function() {
			validateform.resetForm();
			$.jGrowl("You resetted the form.", { theme: 'error' });
		});
		
		/*
		 * Datepicker
		 */
		$( "#datepicker" ).datepicker();		
	});
  </script>
  <!-- end scripts-->

  <!-- Prompt IE 6 users to install Chrome Frame. Remove this if you want to support IE 6.
       chromium.org/developers/how-tos/chrome-frame-getting-started -->
  <!--[if lt IE 7 ]>
    <script src="//ajax.googleapis.com/ajax/libs/chrome-frame/1.0.3/CFInstall.min.js"></script>
    <script>window.attachEvent('onload',function(){CFInstall.check({mode:'overlay'})})</script>
  <![endif]-->
  
</body>
</html>