403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)skdb.hk/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)skdb.hk/album_view.php
<?php 
require("configure.php");
$catid = (int)$_GET['catid'];
$pid   = (int)$_GET['pid']; 
$albummajid 	= (int)$_GET['albummajid'];
$offset			= $_GET["offset"];
$where			= $_GET["where"];

?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>SK Dragon Boat</title>
<link rel="stylesheet" type="text/css" href="css/style.css" />
<link rel="stylesheet" type="text/css" href="css/ddlevelsmenu-base.css" />
<link rel="stylesheet" type="text/css" href="css/ddlevelsmenu-topbar.css" />
<script type="text/javascript" src="css/ddlevelsmenu.js"></script>

<script type="text/javascript" src="js/prototype.js"></script>
<script type="text/javascript" src="js/scriptaculous.js?load=effects,builder"></script>
<script type="text/javascript" src="js/lightbox.js"></script>

<link rel="stylesheet" href="css/lightbox.css" type="text/css" media="screen" />

<script>
<!--
/*
Live Date Script- 
© Dynamic Drive (www.dynamicdrive.com)
For full source code, installation instructions, 100's more DHTML scripts, and Terms Of Use,
visit http://www.dynamicdrive.com
*/


var dayarray=new Array("Sun","Mon","Tue","Wed","Thu","Fri","Sat")
var montharray=new Array("January","February","March","April","May","June","July","August","September","October","November","December")

function getthedate(){
var mydate=new Date()
var year=mydate.getYear()
if (year < 1000)
year+=1900
var day=mydate.getDay()
var month=mydate.getMonth()
var daym=mydate.getDate()
if (daym<10)
daym="0"+daym
var hours=mydate.getHours()
var minutes=mydate.getMinutes()
var seconds=mydate.getSeconds()
var dn="AM"
if (hours>=12)
dn="PM"
if (hours>12){
hours=hours-12
}
if (hours==0)
hours=12
if (minutes<=9)
minutes="0"+minutes
if (seconds<=9)
seconds="0"+seconds
//change font size here
//var cdate="<small><font color='C1272D' face='Arial'><b>"+dayarray[day]+", "+montharray[month]+" "+daym+", "+year+" "+hours+":"+minutes+":"+seconds+" "+dn+"</b></font></small>"
var cdate="<small><font color='C1272D' face='Arial'><b>"+hours+":"+minutes+":"+seconds+" "+dn+" "+dayarray[day]+", "+montharray[month]+" "+daym+", "+year+" </b></font></small>"
if (document.all)
document.all.clock.innerHTML=cdate
else if (document.getElementById)
document.getElementById("clock").innerHTML=cdate
else
document.write(cdate)
}
if (!document.all&&!document.getElementById)
getthedate()
function goforit(){
if (document.all||document.getElementById)
setInterval("getthedate()",1000)
}

function MM_jumpMenu(targ,selObj,restore){ //v3.0
  eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
  if (restore) selObj.selectedIndex=0;
}
//-->
</script>
</head>

<body bgcolor="#FFFFFF" leftmargin="0" topmargin="0" onLoad="goforit()">
<table width="1000" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td><table width="1000" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td width="250" align="left" valign="top" background="images/logobg.jpg"><img src="images/logo.jpg" width="250" height="633" /></td>
        <td width="750" align="left" valign="top"><table width="750" border="0" cellpadding="0" cellspacing="0">
          <tr>
            <td height="105" colspan="2" align="left" valign="top" background="images/menubg.jpg"><table width="750" border="0" cellpadding="0" cellspacing="0">
              <tr>
                <td height="50" align="right" valign="middle" class="langtxt">請選擇語言
                    <select name="menu1" onchange="MM_jumpMenu('parent',this,0)">
                      <option value="tc">繁體中文</option>
                      <option value="en">English</option>
                    </select>&nbsp;&nbsp;
                  </td>
              </tr>
              <tr>
                <td align="right" valign="top">
				<div id="ddtopmenubar" class="mattblackmenu">
				<ul>
				<?
					load(0, 0);
			
					function load($p, $space)
					{
						$sql = "SELECT * ";
						$sql .= "FROM categories ";
						//$sql .= "ON template.templateid = categories.templateid ";
						$sql .= "where parentid = $p ";
						$sql .= "order by sortby desc ";
			//			echo $sql;
						$result1 = mysql_query($sql);
						$n=1;
						$count = mysql_num_rows($result1); 
			
						while ($row = mysql_fetch_array($result1,MYSQL_ASSOC))
						{
								if ($space <> 0 && $n == 1)
								echo "<ul id='". $row{'parentid'} ."' class='ddsubmenustyle'>";
			
								if($row{'link'} == '') {
									$str = "<li><a href='template1.php?pid=".$row{'catid'}."&catid=". $row{'catid'} ."'";
								} else {
									$str = "<li><a href='". $row{'link'} ."'";
								}	
									$sql2 = " select * from categories where parentid = ".$row{'catid'};
									$res2 = mysql_query($sql2);
									if (mysql_num_rows($res2) > 0)		
										$str .= "rel='". $row{'catid'} ."' ";
									$str .= ">". $row{'catname'} . "</a>";						
									echo $str;						
			
							$n++;
							load($row{'catid'}, $space+1);
							echo "</li>";
							if ($space <> 0 && $count < $n)
								echo "</ul>";
			
						}
			
					}
			?>
					</ul>
					</div>
					
					<script type="text/javascript">
					ddlevelsmenu.setup("ddtopmenubar", "topbar") //ddlevelsmenu.setup("mainmenuid", "topbar|sidebar")
					</script>
					
				</td>
              </tr>
            </table></td>
            </tr>
          <tr>
            <td width="35" align="left" valign="top"><img src="images/titlespace.jpg" width="35" height="70" /></td>
            <td width="715" align="left" valign="top"><table width="715" border="0" cellpadding="0" cellspacing="0">
              <? 
				$sql = "SELECT * ";
				$sql .= "FROM categories ";
				$sql .= "where categories.catid = '". $catid ."' ";
				
				$result = mysql_query($sql);
				$row = mysql_fetch_array($result,MYSQL_ASSOC)
			  ?>
			  <tr>
                <td height="80" align="left" class="titletxt"><? echo $row{'catname'} ?></td>
                <td align="right"><span id="clock"></span><br>
                  <a href="http://www.hko.gov.hk/wxinfo/currwx/fndc.htm" target="_blank"><img src="images/weatherlogo.jpg" width="119" height="31" border="0" /></a></td>
              </tr>
              <tr>
			  <? 
				$sql = "SELECT * ";
				$sql .= "FROM albummaj ";
				$sql .= "where albummaj.albummajid = '". $albummajid ."' ";
				
				$result = mysql_query($sql);
				$row = mysql_fetch_array($result,MYSQL_ASSOC)
			  ?>
                <td height="40" colspan="2" class="subtitletxt"><a href="album.php?pid=<? echo $pid ?>&catid=<? echo $catid ?>">Album</a> &gt; <a href="album_view.php?pid=<? echo $pid ?>&catid=<? echo $catid ?>&albummajid=<? echo $albummajid ?>"><? echo $row{'albummajname'} ?></a></td>
              </tr>
              <tr>
                <td height="450" colspan="2" align="left" valign="top">
				          <table width="200" border="0" cellpadding="0" cellspacing="0">		  

		<?
									
									
									$limit=6; 
									if (!$offset) $offset=0;

									if (strlen($where)==0)
									{
										if (strlen($albummajid)<>0)
										{
											$query_where .= "and albumimage.albummajid = ". $albummajid ." ";
										}										
									}
									else
									{
										$query_where = $where;
									}
									if (!$where) {
										if (empty($one) || empty($two)) {
										}
										$where=$query_where;
									}

									$sqlx = "select count(*) ";
									$sqlx .= "FROM albumimage inner join albummaj ";
									$sqlx .= "on albumimage.albummajid = albummaj.albummajid ";
									$sqlx .= "$query_where ";
									$sqlx = str_replace('\\','',$sqlx);
									$result=mysql_query($sqlx);

									list($numrec)=mysql_fetch_row($result);

									$numpage=intval($numrec/$limit);

									if ($numrec%$limit) {
										$numpage++; // add one page if remainder
									}
									//echo $numcnt;
?>
				<!--start here-->
									<?
										$sqly = "SELECT * ";
										$sqly .= "FROM albumimage inner join albummaj ";
										$sqly .= "on albumimage.albummajid = albummaj.albummajid ";
										$sqly .= "$query_where ";
										//$sqly .= "order by productimage.sortbyimage ASC ";
										$sqly .= "limit $offset,$limit";

									$x = 1;
									$y = 1;

										echo "<tr>";
										$result1 = mysql_query($sqly);

										while ($row = mysql_fetch_array($result1,MYSQL_ASSOC))
										{
											if ($y == 1)
											{
											}
											elseif ($y == 4)
												echo "<tr>";
										?>											
	<td width="230" valign="top" align="center" class="txt">
	<table width="230" border="0" cellpadding="0" cellspacing="0">
	<? 	if ($row{'albumimage'} <> "")  {  ?>
	  <tr>
		<td width="200" align="center" valign="top">
		<a href="admin/albumimage/<?=$row{'albumimage'}?>" rel="lightbox[roadtrip]"  title="<? echo $row{'albumname'}?>"><img src="admin/albumimage/<?=$row{'albumimage'}?>" border='0'  width='200'></a></td>
	  </tr>
	  <tr>
		<td width="200" height="5" align="center" valign="top"></td>
	  </tr>
	  <tr>
		<td width="200" height="5" align="center" valign="top">
		<a href="album_view.php??pid=<? echo $pid ?>&catid=<? echo $catid ?>albummajid=<?=$row{'albummajid'}?>&albumid=<?=$row{'albumid'}?>"><? echo $row{'albumname'}?></a></td>
	  </tr>
	  <? } ?>
	  <tr>
		<td width="200" height="40" align="center" valign="top">&nbsp;</td>
	  </tr>
	</table>
	</td>
						<?
							if ($y == 3)
								echo "</tr>";
							elseif ($y == 6)
								echo "</tr>";
							$y = $y + 1;
						}
						?>
																								
				<!--end here-->
			</table>	
				</td>
              </tr>
              <tr>
                <td colspan="4" class="txt" align="center" valign="top"><? include("pagenavimage.php"); ?></td>
              </tr>
            </table></td>
          </tr>
        </table></td>
      </tr>
    </table></td>
  </tr>
  <tr>
    <td align="left" valign="top"><img src="images/footer.jpg" width="1000" height="148" /></td>
  </tr>
  <tr>
    <td height="48" align="left" valign="top" background="images/footertxt.jpg" class="footertxt" style="background-repeat:no-repeat"><div align="center">© 2009 Copyright SK Dragon Boat. All Rights   Reserved<br />
    Powered by <a href="http://www.onesolution.com.hk" target="_blank">One Solution Limited</a>. </div></td>
  </tr>
</table>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit