403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)pathways.org.hk/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)pathways.org.hk/admin/eventimageindex.php
<?
//require 'db_connect.php';
require 'check_login.php';
if ($logged_in <> 1) {
	header('Location: login.php');
	return;
}
else
{
?>
<?php 
require("configure.php");
$eventmajid	= $_GET['eventmajid'];
?>
<html>
<head>
<link rel="stylesheet" href="main.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Admin Page</title>
<script type="text/JavaScript">
<!--
function MM_jumpMenu(targ,selObj,restore){ //v3.0
  eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
  if (restore) selObj.selectedIndex=0;
}
//-->
</script>
</head>
<body>
<table border="0" cellpadding="1" cellspacing="1" width="100%">
<tr>
  <td class='content' align="left"><b> Event Name </b>
      <select name="eventmajid" onChange="MM_jumpMenu('self',this,0)">
	  <option value="eventimageindex.php?eventmajid=0" <? if (($eventmajid=='0') || ($eventmajid=='')) echo 'selected'; ?>>All</option>
	  		<?php
	  		$sql = "SELECT * from eventmaj order by eventmajid desc ";
			$result1 = mysql_query($sql) or die(mysql_error());
			while ($row1 = mysql_fetch_array($result1,MYSQL_ASSOC))
			{
			?>
        <option value="eventimageindex.php?eventmajid=<?=$row1{'eventmajid'}?>" <? if ($eventmajid==$row1{'eventmajid'}) echo 'selected'; ?> ><?=$row1{'eventmajname'}?></option>
		<? } ?>
      </select>
    </td>
  <td class='content' align="right"><a href="eventimageaddform.php"><img src="images/button_insert.png" alt="Add" border="0">&nbsp;Add</a></td>
</tr>
</table>
<?
echo "<p class='content'>". $_GET['msg'] ."</p>";
?>
<table border="0" cellpadding="1" cellspacing="1" bgcolor="#FFFFFF">
<tr><td class="contentsearch" bgcolor="#FFFFFF" width="50" align="center">Delete</td>
	<td class="contentsearch" bgcolor="#FFFFFF" width="140" align="center">Image</td>
	<td class="contentsearch" bgcolor="#FFFFFF" width="200" align="center">Event Name</td>
	<td class="contentsearch" bgcolor="#FFFFFF" width="200" align="center">Image Name</td>
	<td class="contentsearch" bgcolor="#FFFFFF" width="50" align="center">Action</td></tr>

<?php

if (($eventmajid <> "0") && ($eventmajid <> "")) {
$sql = "SELECT * FROM eventimage inner join eventmaj on eventimage.eventmajid = eventmaj.eventmajid where eventmaj.eventmajid = $eventmajid order by eventimageid desc ";
$result = mysql_query($sql);
} else {
$result = mysql_query("SELECT * FROM eventimage inner join eventmaj on eventimage.eventmajid = eventmaj.eventmajid order by eventmaj.eventmajid desc ");
}
while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
	print "<tr>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
	print "<a href='eventimagedeleteconfirm.php?eventmajid=".$row{'eventmajid'}."&eventimageid=".$row{'eventimageid'}."' border='0'>";
	print "<img src='images/btnRemove.gif' border='0' alt='Remove'></a></td>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'><img src='eventimagethumb/".$row{'eventimageimage'}."' border='0' width='100' ></td>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'eventmajname'}."</td>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'eventimagename'}."</td>";
	print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
	print "<a href='eventimagemodifyform.php?eventmajid=".$row{'eventmajid'}."&eventimageid=".$row{'eventimageid'}."'>";
	print "<img src='images/button_properties.png' border='0' alt='Modify'></a>";
	print "</td></tr>";
}
mysql_close($dbh);
?>
</table>
</body>
</html>
<?
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit