403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)hsiaust.com.au/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)hsiaust.com.au/webadmin/siteinfo_modify.php
<?php
include 'config.php';

// Check if the user is logged in

if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
require("configure.php");
require("function_resizethumb.php"); 
 
$siteinfoid 			= htmlspecialchars($_POST["siteinfoid"],ENT_QUOTES);
$companynameen			= htmlspecialchars($_POST["companynameen"],ENT_QUOTES);
$companynametc			= htmlspecialchars($_POST["companynametc"],ENT_QUOTES);
$companynamesc			= htmlspecialchars($_POST["companynamesc"],ENT_QUOTES);
$menutexten				= htmlspecialchars($_POST["menutexten"],ENT_QUOTES);
$menutexttc 			= htmlspecialchars($_POST["menutexttc"],ENT_QUOTES);
$menutextsc 			= htmlspecialchars($_POST["menutextsc"],ENT_QUOTES);
$copyrighttexten 		= preg_replace("/'/","\'",$_POST["copyrighttexten"]);
$copyrighttexttc 		= preg_replace("/'/","\'",$_POST["copyrighttexttc"]);
$copyrighttextsc 		= preg_replace("/'/","\'",$_POST["copyrighttextsc"]);
$menulogolink			= htmlspecialchars($_POST["menulogolink"],ENT_QUOTES);
$awardprojectlink		= htmlspecialchars($_POST["awardprojectlink"],ENT_QUOTES);
$lastestproductlink		= htmlspecialchars($_POST["lastestproductlink"],ENT_QUOTES);
$lastestprojectlink_01	= htmlspecialchars($_POST["lastestprojectlink_01"],ENT_QUOTES);
$lastestprojectlink_02	= htmlspecialchars($_POST["lastestprojectlink_02"],ENT_QUOTES);
$lastestprojectlink_03	= htmlspecialchars($_POST["lastestprojectlink_03"],ENT_QUOTES);
$nowdate = date("Y-m-d H:i:s");
//print_r($_POST);

//Delete execiting file
$result			= mysql_query("SELECT * FROM site_info WHERE siteinfoid = ". $siteinfoid ." ");
$row			= mysql_fetch_array($result,MYSQL_ASSOC);
if($row['menulogo'] <> '' && $_FILES['menulogo']['name'] <> ''){
	unlink("../images/".$row['menulogo']);
}
if($row['catalougelogo'] <> '' && $_FILES['catalougelogo']['name'] <> ''){
	unlink("../images/".$row['catalougelogo']);
}
if($row['copyrightlogo'] <> '' && $_FILES['copyrightlogo']['name'] <> ''){
	unlink("../images/".$row['copyrightlogo']);
}
if($row['awardprojectlogo'] <> '' && $_FILES['awardprojectlogo']['name'] <> ''){
	unlink("../images/home_img/".$row['awardprojectlogo']);
}
if($row['lastestproductlogo'] <> '' && $_FILES['lastestproductlogo']['name'] <> ''){
	unlink("../images/home_img/".$row['lastestproductlogo']);
}
if($row['lastestprojectlogo_01'] <> '' && $_FILES['lastestprojectlogo_01']['name'] <> ''){
	unlink("../images/home_img/".$row['lastestprojectlogo_01']);
}
if($row['lastestprojectlogo_02'] <> '' && $_FILES['lastestprojectlogo_02']['name'] <> ''){
	unlink("../images/home_img/".$row['lastestprojectlogo_02']);
}
if($row['lastestprojectlogo_03'] <> '' && $_FILES['lastestprojectlogo_03']['name'] <> ''){
	unlink("../images/home_img/".$row['lastestprojectlogo_03']);
}
if($row['catalougefile'] <> '' && $_FILES['catalougefile']['name'] <> ''){
	unlink("../images/".$row['catalougefile']);
}
// Upload File
if ($_FILES['menulogo']['name'] <> '')
{
	if (($_FILES["menulogo"]["type"] == "image/bmp") || ($_FILES["menulogo"]["type"] == "image/BMP") || ($_FILES["menulogo"]["type"] == "image/gif") || ($_FILES["menulogo"]["type"] == "image/GIF") || ($_FILES["menulogo"]["type"] == "image/jpg") || ($_FILES["menulogo"]["type"] == "image/JPG") || ($_FILES["menulogo"]["type"] == "image/jpeg") || ($_FILES["menulogo"]["type"] == "image/JPEG") || ($_FILES["menulogo"]["type"] == "image/pjpeg") || ($_FILES["menulogo"]["type"] == "image/PJEG") || ($_FILES["menulogo"]["type"] == "image/png") || ($_FILES["menulogo"]["type"] == "image/x-png") || ($_FILES["menulogo"]["type"] == "image/PNG") || ($_FILES["menulogo"]["type"] == "image/X-PNG"))
	{
		move_uploaded_file ($_FILES['menulogo']['tmp_name'], "../images/menulogo_".$_FILES['menulogo']['name']) 
			or die ("Could not copy the file: menulogo");
		
		$menulogoimg = "../images/menulogo_".$_FILES['menulogo']['name'];
		createthumb($menulogoimg, $menulogoimg, 250, 67);
		
		$menulogo = "menulogo_".$_FILES['menulogo']['name'];
		
	  }
	else
	  {
	  // upload error
	  ?>
		<script language="javascript">
		alert("Files must be JPEG, GIF, or PNG");
		history.back();
		</script>
	 <?php
	 exit;
	 }

}
else
{
	$menulogo = "";
}

if ($_FILES['catalougelogo']['name'] <> '')
{
	if (($_FILES["catalougelogo"]["type"] == "image/bmp") || ($_FILES["catalougelogo"]["type"] == "image/BMP") || ($_FILES["catalougelogo"]["type"] == "image/gif") || ($_FILES["catalougelogo"]["type"] == "image/GIF") || ($_FILES["catalougelogo"]["type"] == "image/jpg") || ($_FILES["catalougelogo"]["type"] == "image/JPG") || ($_FILES["catalougelogo"]["type"] == "image/jpeg") || ($_FILES["catalougelogo"]["type"] == "image/JPEG") || ($_FILES["catalougelogo"]["type"] == "image/pjpeg") || ($_FILES["catalougelogo"]["type"] == "image/PJEG") || ($_FILES["catalougelogo"]["type"] == "image/png") || ($_FILES["catalougelogo"]["type"] == "image/x-png") || ($_FILES["catalougelogo"]["type"] == "image/PNG") || ($_FILES["catalougelogo"]["type"] == "image/X-PNG"))
	{
		move_uploaded_file ($_FILES['catalougelogo']['tmp_name'], "../images/catalougelogo_".$_FILES['catalougelogo']['name']) 
			or die ("Could not copy the file: catalougelogo");

		$catalougelogoimg = "../images/catalougelogo_".$_FILES['catalougelogo']['name'];
		createthumb($catalougelogoimg, $catalougelogoimg, 200, 200);
		
		$catalougelogo = "catalougelogo_".$_FILES['catalougelogo']['name'];
	  }
	else
	  {
	  // upload error
	  ?>
		<script language="javascript">
		alert("Files must be JPEG, GIF, or PNG");
		history.back();
		</script>
	 <?php
	 exit;
	 }

}
else
{
	$catalougelogo = "";
}

if ($_FILES['copyrightlogo']['name'] <> '')
{
	if (($_FILES["copyrightlogo"]["type"] == "image/bmp") || ($_FILES["copyrightlogo"]["type"] == "image/BMP") || ($_FILES["copyrightlogo"]["type"] == "image/gif") || ($_FILES["copyrightlogo"]["type"] == "image/GIF") || ($_FILES["copyrightlogo"]["type"] == "image/jpg") || ($_FILES["copyrightlogo"]["type"] == "image/JPG") || ($_FILES["copyrightlogo"]["type"] == "image/jpeg") || ($_FILES["copyrightlogo"]["type"] == "image/JPEG") || ($_FILES["copyrightlogo"]["type"] == "image/pjpeg") || ($_FILES["copyrightlogo"]["type"] == "image/PJEG") || ($_FILES["copyrightlogo"]["type"] == "image/png") || ($_FILES["copyrightlogo"]["type"] == "image/x-png") || ($_FILES["copyrightlogo"]["type"] == "image/PNG") || ($_FILES["copyrightlogo"]["type"] == "image/X-PNG"))
	{
		move_uploaded_file ($_FILES['copyrightlogo']['tmp_name'], "../images/copyrightlogo_".$_FILES['copyrightlogo']['name']) 
			or die ("Could not copy the file: copyrightlogo");

		$copyrightlogoimg = "../images/copyrightlogo_".$_FILES['copyrightlogo']['name'];
		createthumb($copyrightlogoimg, $copyrightlogoimg, 220, 57);
		
		$copyrightlogo = "copyrightlogo_".$_FILES['copyrightlogo']['name'];
	  }
	else
	  {
	  // upload error
	  ?>
		<script language="javascript">
		alert("Files must be JPEG, GIF, or PNG");
		history.back();
		</script>
	 <?php
	 exit;
	 }

}
else
{
	$copyrightlogo = "";
}

if ($_FILES['awardprojectlogo']['name'] <> '')
{
	if (($_FILES["awardprojectlogo"]["type"] == "image/bmp") || ($_FILES["awardprojectlogo"]["type"] == "image/BMP") || ($_FILES["awardprojectlogo"]["type"] == "image/gif") || ($_FILES["awardprojectlogo"]["type"] == "image/GIF") || ($_FILES["awardprojectlogo"]["type"] == "image/jpg") || ($_FILES["awardprojectlogo"]["type"] == "image/JPG") || ($_FILES["awardprojectlogo"]["type"] == "image/jpeg") || ($_FILES["awardprojectlogo"]["type"] == "image/JPEG") || ($_FILES["awardprojectlogo"]["type"] == "image/pjpeg") || ($_FILES["awardprojectlogo"]["type"] == "image/PJEG") || ($_FILES["awardprojectlogo"]["type"] == "image/png") || ($_FILES["awardprojectlogo"]["type"] == "image/x-png") || ($_FILES["awardprojectlogo"]["type"] == "image/PNG") || ($_FILES["awardprojectlogo"]["type"] == "image/X-PNG"))
	{
		move_uploaded_file ($_FILES['awardprojectlogo']['tmp_name'], "../images/home_img/awardprojectlogo_".$_FILES['awardprojectlogo']['name']) 
			or die ("Could not copy the file: awardprojectlogo");

		$awardprojectlogoimg = "../images/home_img/awardprojectlogo_".$_FILES['awardprojectlogo']['name'];
		createthumb($awardprojectlogoimg, $awardprojectlogoimg, 380, 380);
		
		$awardprojectlogo = "awardprojectlogo_".$_FILES['awardprojectlogo']['name'];
	  }
	else
	  {
	  // upload error
	  ?>
		<script language="javascript">
		alert("Files must be JPEG, GIF, or PNG");
		history.back();
		</script>
	 <?php
	 exit;
	 }

}
else
{
	$awardprojectlogo = "";
}

if ($_FILES['lastestproductlogo']['name'] <> '')
{
	if (($_FILES["lastestproductlogo"]["type"] == "image/bmp") || ($_FILES["lastestproductlogo"]["type"] == "image/BMP") || ($_FILES["lastestproductlogo"]["type"] == "image/gif") || ($_FILES["lastestproductlogo"]["type"] == "image/GIF") || ($_FILES["lastestproductlogo"]["type"] == "image/jpg") || ($_FILES["lastestproductlogo"]["type"] == "image/JPG") || ($_FILES["lastestproductlogo"]["type"] == "image/jpeg") || ($_FILES["lastestproductlogo"]["type"] == "image/JPEG") || ($_FILES["lastestproductlogo"]["type"] == "image/pjpeg") || ($_FILES["lastestproductlogo"]["type"] == "image/PJEG") || ($_FILES["lastestproductlogo"]["type"] == "image/png") || ($_FILES["lastestproductlogo"]["type"] == "image/x-png") || ($_FILES["lastestproductlogo"]["type"] == "image/PNG") || ($_FILES["lastestproductlogo"]["type"] == "image/X-PNG"))
	{
		move_uploaded_file ($_FILES['lastestproductlogo']['tmp_name'], "../images/home_img/lastestproductlogo_".$_FILES['lastestproductlogo']['name']) 
			or die ("Could not copy the file: lastestproductlogo");

		$lastestproductlogoimg = "../images/home_img/lastestproductlogo_".$_FILES['lastestproductlogo']['name'];
		createthumb($lastestproductlogoimg, $lastestproductlogoimg, 320, 320);
		
		$lastestproductlogo = "lastestproductlogo_".$_FILES['lastestproductlogo']['name'];
	  }
	else
	  {
	  // upload error
	  ?>
		<script language="javascript">
		alert("Files must be JPEG, GIF, or PNG");
		history.back();
		</script>
	 <?php
	 exit;
	 }

}
else
{
	$lastestproductlogo = "";
}

if ($_FILES['lastestprojectlogo_01']['name'] <> '')
{
	if (($_FILES["lastestprojectlogo_01"]["type"] == "image/bmp") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/BMP") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/gif") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/GIF") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/jpg") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/JPG") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/jpeg") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/JPEG") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/pjpeg") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/PJEG") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/png") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/x-png") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/PNG") || ($_FILES["lastestprojectlogo_01"]["type"] == "image/X-PNG"))
	{
		move_uploaded_file ($_FILES['lastestprojectlogo_01']['tmp_name'], "../images/home_img/lastestprojectlogo_01_".$_FILES['lastestprojectlogo_01']['name']) 
			or die ("Could not copy the file: lastestprojectlogo_01");

		$lastestprojectlogo_01img = "../images/home_img/lastestprojectlogo_01_".$_FILES['lastestprojectlogo_01']['name'];
		createthumb($lastestprojectlogo_01img, $lastestprojectlogo_01img, 230, 230);
		
		$lastestprojectlogo_01 = "lastestprojectlogo_01_".$_FILES['lastestprojectlogo_01']['name'];
	  }
	else
	  {
	  // upload error
	  ?>
		<script language="javascript">
		alert("Files must be JPEG, GIF, or PNG");
		history.back();
		</script>
	 <?php
	 exit;
	 }

}
else
{
	$lastestprojectlogo_01 = "";
}

if ($_FILES['lastestprojectlogo_02']['name'] <> '')
{
	if (($_FILES["lastestprojectlogo_02"]["type"] == "image/bmp") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/BMP") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/gif") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/GIF") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/jpg") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/JPG") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/jpeg") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/JPEG") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/pjpeg") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/PJEG") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/png") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/x-png") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/PNG") || ($_FILES["lastestprojectlogo_02"]["type"] == "image/X-PNG"))
	{
		move_uploaded_file ($_FILES['lastestprojectlogo_02']['tmp_name'], "../images/home_img/lastestprojectlogo_02_".$_FILES['lastestprojectlogo_02']['name']) 
			or die ("Could not copy the file: lastestprojectlogo_02");

		$lastestprojectlogo_02img = "../images/home_img/lastestprojectlogo_02_".$_FILES['lastestprojectlogo_02']['name'];
		createthumb($lastestprojectlogo_02img, $lastestprojectlogo_02img, 230, 230);
		
		$lastestprojectlogo_02 = "lastestprojectlogo_02_".$_FILES['lastestprojectlogo_02']['name'];
	  }
	else
	  {
	  // upload error
	  ?>
		<script language="javascript">
		alert("Files must be JPEG, GIF, or PNG");
		history.back();
		</script>
	 <?php
	 exit;
	 }

}
else
{
	$lastestprojectlogo_02 = "";
}

if ($_FILES['lastestprojectlogo_03']['name'] <> '')
{
	if (($_FILES["lastestprojectlogo_03"]["type"] == "image/bmp") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/BMP") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/gif") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/GIF") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/jpg") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/JPG") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/jpeg") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/JPEG") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/pjpeg") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/PJEG") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/png") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/x-png") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/PNG") || ($_FILES["lastestprojectlogo_03"]["type"] == "image/X-PNG"))
	{
		move_uploaded_file ($_FILES['lastestprojectlogo_03']['tmp_name'], "../images/home_img/lastestprojectlogo_03_".$_FILES['lastestprojectlogo_03']['name']) 
			or die ("Could not copy the file: lastestprojectlogo_03");

		$lastestprojectlogo_03img = "../images/home_img/lastestprojectlogo_03_".$_FILES['lastestprojectlogo_03']['name'];
		createthumb($lastestprojectlogo_03img, $lastestprojectlogo_03img, 230, 230);
		
		$lastestprojectlogo_03 = "lastestprojectlogo_03_".$_FILES['lastestprojectlogo_03']['name'];
	  }
	else
	  {
	  // upload error
	  ?>
		<script language="javascript">
		alert("Files must be JPEG, GIF, or PNG");
		history.back();
		</script>
	 <?php
	 exit;
	 }

}
else
{
	$lastestprojectlogo_03 = "";
}

if ($_FILES['catalougefile']['name'] <> '')
{
	copy ($_FILES['catalougefile']['tmp_name'], "../images/catalougefile_".$_FILES['catalougefile']['name']) 
		or die ("Could not copy the file");
	
	$catalougefile = "catalougefile_".$_FILES['catalougefile']['name'];
}
else
{
	$catalougefile = "";
}


// Modify 
$sql = "update site_info set companynameen='$companynameen', companynametc='$companynametc', companynamesc='$companynamesc', menutexten='$menutexten', menutexttc='$menutexttc', menutextsc='$menutextsc', copyrighttexten='$copyrighttexten', copyrighttexttc='$copyrighttexttc', copyrighttextsc='$copyrighttextsc', menulogolink='$menulogolink', awardprojectlink='$awardprojectlink', lastestproductlink='$lastestproductlink', lastestprojectlink_01='$lastestprojectlink_01', lastestprojectlink_02='$lastestprojectlink_02', lastestprojectlink_03='$lastestprojectlink_03', modifyday='$nowdate', cmsloginid='".$_SESSION['cmsloginid']."' ";
if ($menulogo <> '')
	$sql .= ", menulogo='$menulogo' ";
if ($catalougelogo <> '')
	$sql .= ", catalougelogo='$catalougelogo' ";
if ($copyrightlogo <> '')
	$sql .= ", copyrightlogo='$copyrightlogo' ";
if ($awardprojectlogo <> '')
	$sql .= ", awardprojectlogo='$awardprojectlogo' ";
if ($lastestproductlogo <> '')
	$sql .= ", lastestproductlogo='$lastestproductlogo' ";
if ($lastestprojectlogo_01 <> '')
	$sql .= ", lastestprojectlogo_01='$lastestprojectlogo_01' ";
if ($lastestprojectlogo_02 <> '')
	$sql .= ", lastestprojectlogo_02='$lastestprojectlogo_02' ";
if ($lastestprojectlogo_03 <> '')
	$sql .= ", lastestprojectlogo_03='$lastestprojectlogo_03' ";
if ($catalougefile <> '')
	$sql .= ", catalougefile='$catalougefile' ";
$sql .= " where siteinfoid=". $siteinfoid ." ";
mysql_query($sql);

if( mysql_errno() > 0 ){
	echo 'Modify Header Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
	exit;
}

mysql_close($dbh);

header("Location: siteinfo_modifyform.php?id='".$siteinfoid."'&msg=Modify Successful");
?>

Youez - 2016 - github.com/yon3zu
LinuXploit