Tn Jones Shell Bypass


	: 13.59.218.229
	: 160.187.54.56 / upgov.net
	: Linux 160-187-54-56.cprapid.com 4.18.0-553.22.1.lve.1.el7h.x86_64 #1 SMP Tue Oct 8 14:36:03 UTC 2024 x86_64

: /home/upgov/www/cenreport/

files >> /home/upgov/www/cenreport/all.php

 <?php
include("connection.php");
if(isset($_post['search']))
{
$valuesearch=$_post['test1'];
$sql = mysql_query("SELECT * FROM `all_selected` where CONCAT(`Department`, `Project`, `District`, `Post`) LIKE \'%".$valuesearch."%\'");
}
else
{
$sq1=mysql_query("select * from all_selected");
}
?>
<html>
<head>
<title></title>
</head>
<body>
<form method="post">
<input type="text" name="test1" >
<input type="submit" name="search">
<table>
<tr>
<th>Dept</th>
<th>pro</th>
<th>name</th>
<th>dist</th>
<th>post</th>
</tr>

<?php

while($r=mysql_fetch_array($sql)):
		
			?>	
<tr>
<td><?php echo $r['Department'];?></td>
<td><?php echo $r['Project'];?></td>
<td><?php echo $r['Name'];?></td>
<td><?php echo $r['District'];?></td>
<td><?php echo $r['Post'];?></td>
</tr>
		<?php endwhile; ?>
</table>
</form>

</body>
</html>