0byte V.2
PHP Backdoor

Linux 116-202-49-93.cprapid.com 5.14.0-611.49.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Apr 21 16:39:08 EDT 2026 x86_64 [ FIND EXPLOIT ]
[ MySQL: OFF ][ Curl: OFF ][ Wget: OFF ][ Perl: OFF ][ Compiler: OFF ]

Disable Function: exec,passthru,shell_exec,system

/home/vhtecindia/public_html/bcvps.in/application/helpers/

db->from('custom_fields'); $CI->db->where('belong_to', $belongs_to); $CI->db->order_by('custom_fields.belong_to', 'asc'); $CI->db->order_by('custom_fields.weight', 'asc'); $query = $CI->db->get(); $result = $query->result_array(); $fields_html = ''; foreach ($result as $result_key => $field) { $type = $field['type']; $label = ucfirst($field['name']); $field_name = 'custom_fields[' . $field['belong_to'] . '][' . $field['id'] . ']'; if ($field['bs_column'] == '' || $field['bs_column'] == 0) { $field['bs_column'] = 12; } $input_class = ""; $value = ""; if ($rel_id !== false) { $return_value = get_custom_field_value($rel_id, $field['id'], $belongs_to); if (!empty($return_value)) { $value = $return_value->field_value; } } $fields_html .= '

'; if ($field['type'] == 'input' || $field['type'] == 'number') { $type = $field['type'] == 'input' ? 'text' : 'number'; $fields_html .= render_input_field($field_name, $label, $value, $type, $input_class, $field['belong_to'], $field['id'], $field['validation']); } elseif ($field['type'] == 'textarea') { $fields_html .= render_textarea_field($field_name, $label, $value, $type, $input_class, $field['belong_to'], $field['id'], $field['validation']); } elseif ($field['type'] == 'select') { $options = optionSplit($field['field_values']); $fields_html .= render_select_field($field_name, $options, $label, $value, $type, $input_class, $field['belong_to'], $field['id'], $field['validation']); } elseif ($field['type'] == 'multiselect') { $options = optionSplit($field['field_values']); $fields_html .= render_multiselect_field($field_name, $options, $label, $value, $type, $input_class, $field['belong_to'], $field['id'], $field['validation']); } elseif ($field['type'] == 'checkbox') { $options = optionSplit($field['field_values']); $fields_html .= render_checkbox_field($field_name, $options, $label, $value, $type, $input_class, $field['belong_to'], $field['id'], $field['validation']); } elseif ($field['type'] == 'date_picker') { $type = $field['type']; $fields_html .= render_date_picker_field($field_name, $label, $value, $type, $input_class, $field['belong_to'], $field['id'], $field['validation']); } elseif ($field['type'] == 'date_picker_time') { $type = $field['type']; $fields_html .= render_date_picker_time_field($field_name, $label, $value, $type, $input_class, $field['belong_to'], $field['id'], $field['validation']); } elseif ($field['type'] == 'colorpicker') { $type = $field['type']; $fields_html .= render_colorpicker_field($field_name, $label, $value, $type, $input_class, $field['belong_to'], $field['id'], $field['validation']); } elseif ($field['type'] == 'link') { $type = $field['type']; $fields_html .= render_link_field($field_name, $label, $value, $type, $input_class, $field['belong_to'], $field['id'], $field['validation']); } $fields_html .= '

'; } return $fields_html; } function render_input_field($name, $label = '', $value = '', $type = 'text', $input_class = '', $belong_to, $field_id, $validation) { $input = ''; $_form_group_attr = ''; $_input_attrs = ''; if (isset($_POST['custom_fields'][$belong_to][$field_id])) { $value = $_POST['custom_fields'][$belong_to][$field_id]; } if (!empty($input_class)) { $input_class = ' ' . $input_class; } $input .= '