ROOTPLOIT
Server: LiteSpeed
System: Linux in-mum-web1878.main-hosting.eu 5.14.0-570.21.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 11 07:22:35 EDT 2025 x86_64
User: u435929562 (435929562)
PHP: 7.4.33
Disabled: system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
Upload Files
File: /home/u435929562/domains/events.peacockindia.in/public_html/admin/update_status.php
<?php 
$host = 'localhost';
$user = 'u520518518_valoevent_demo';
$pass = 'Valoevent@dem0';
$db_name = "u520518518_valoevent_demo";

$mysqli = new mysqli($host, $user, $pass, $db_name);
if (mysqli_connect_errno()) {
    printf("Connect failed: %s\n", mysqli_connect_error());
    exit();
}

mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
$link = mysqli_connect("localhost", "u520518518_valoevent_demo", "Valoevent@dem0", "u520518518_valoevent_demo");
$row = [];
    if($_POST['id']){
        $query = mysqli_query($link, "UPDATE qrcode set status = ".$_POST['updated_status']." WHERE id =" .$_POST['id']);
        /* Get the number of rows in the result set */
     
        if($query)
        {
            $row['status'] = 200;
            $row['result'] = "status updated";
        }    
    }
    else{
        $row['status'] = 101;
        $row['result'] = 'something went wrong';
    }
    
    echo json_encode($row);

$mysqli->close();
?>