403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)yuecreations.com.hk/en/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/www/(Del)yuecreations.com.hk/en/products.php
<?php require_once('../webadmin/configure.php');
$ProductColourId 	= (int)$_GET['ProductColourId'];
$ProductCatId 		= (int)$_GET['ProductCatId'];
$ProductGradeId 	= (int)$_GET['ProductGradeId'];
$Page 				= (int)$_GET['Page'];

if(!$ProductColourId)
{
	header('Location: home.php');
}
//echo ">".basename($_SERVER['PHP_SELF'])."?".$_SERVER['QUERY_STRING'];
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Yue Creations International Limited</title>
<meta name="keywords" content="Yue Creations International Limited">
<meta name="description" content="Yue Creations International Limited" />
<link rel="stylesheet" type="text/css" href="../css/style.css" />
<!-- Main Menu -->
<script type="text/javascript" src="dropdowntabfiles/dropdowntabs.js"></script>
<link rel="stylesheet" type="text/css" href="dropdowntabfiles/glowtabs.css" />
<!-- End Main Menu -->

<!-- Sub Menu -->
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>
<script type="text/javascript" src="submenu/ddaccordion.js"></script>
<script type="text/javascript" src="submenu/ddaccordion-function.js"></script>
<link rel="stylesheet" type="text/css" href="submenu/ddaccordion.css" />
<!-- End Sub Menu -->
</head>

<body>
<table width="1000" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td width="60" id="frameleft">&nbsp;</td>
    <td width="880" align="left" valign="top" bgcolor="#FFFFFF"><table width="880" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td width="40" align="left" valign="top"><img src="../images/header_left.jpg" width="40" height="92" /></td>
        <td width="800" align="left" valign="top" id="header_bg"><div class="header_lang"><a >English</a>&nbsp;&nbsp;&#8226;&nbsp;&nbsp;<a href="../tc/<?=basename($_SERVER['PHP_SELF'])."?".$_SERVER['QUERY_STRING'];?>">中文</a></div><a href="index.php"><img src="../images/header_logo_en.jpg" width="461" height="92" border="0" /></a></td>
        <td width="40" align="left" valign="top"><img src="../images/header_right.jpg" width="40" height="92" /></td>
      </tr>
      <tr>
        <td align="left" valign="top"><img src="../images/mainmenu_left.jpg" width="40" height="33" /></td>
        <td align="left" valign="bottom" id="mainmenu_bg"><!-- Main Menu -->
		<div id="glowmenu" class="glowingtabs">
		<ul>
		<li><a href="home.php"><span>Home</span></a></li>		
		<li><a rel="aboutus_dropmenu"><span>About Us</span></a></li>		
		<li><a href="news.php"><span>News</span></a></li>		
		<li><a rel="product_dropmenu"><span>Product Catalogue</span></a>
		<li><a href="contactus.php"><span>Contact Us</span></a></li>
		</ul>
		</div>		
		
		<!--aboutus drop down menu -->                                                   
		<div id="aboutus_dropmenu" class="dropmenudiv_d">
		<?php
			$aboutResult = mysql_query("SELECT * FROM Aboutus ORDER BY Aboutus.AboutusSort ASC  ");				
			while ($aboutus = mysql_fetch_array($aboutResult,MYSQL_ASSOC))
			{	
		?>         
			<a href="aboutus.php?AboutusId=<?=$aboutus{'AboutusId'};?>"><?=$aboutus{'AboutusTitleen'};?></a>
			
		<?php } ?></div>
		
		<!--product drop down menu-->  
		<div id="product_dropmenu" class="dropmenudiv_d">                 
		<?php
			$pcResult = mysql_query("SELECT * FROM ProductColour ORDER BY ProductColour.Sort ASC ");				
			while ($pc = mysql_fetch_array($pcResult,MYSQL_ASSOC))
			{					
		?>       
			<a href="products.php?ProductColourId=<?=$pc{'ProductColourId'};?>"><?=$pc{'DescEN'};?></a>
		<?php } ?></div>
		<script type="text/javascript">
		//SYNTAX: tabdropdown.init("menu_id", [integer OR "auto"])
		tabdropdown.init("glowmenu", "auto")
		</script>
		
		<!-- End Main Menu --></td>
        <td align="left" valign="top"><img src="../images/mainmenu_right.jpg" width="40" height="33" /></td>
      </tr>
      <tr>
        <td align="left" valign="top"><img src="../images/banner_left.jpg" width="40" height="300" /></td>
        <td align="left" valign="top" id="bannerimg"><img src="../images/banner_image.jpg" width="800" height="280" /></td>
        <td align="left" valign="top"><img src="../images/banner_right.jpg" width="40" height="300" /></td>
      </tr>
      <tr>
        <td height="350" align="left" valign="top"><img src="../images/submenu_left.jpg" width="40" height="200" /></td>
        <td align="left" valign="top"><table width="800" border="0" cellpadding="0" cellspacing="0">
          <tr>
            <td width="200" align="left" valign="top"><table width="200" border="0" cellpadding="0" cellspacing="0">
              <tr>
                <td><img src="../images/submenu_product.jpg" width="200" height="60" /></td>
              </tr>
              <tr>
                <td><div class="glossymenu">
				<?php
				$result1 = mysql_query("
							SELECT * 
							FROM ProductCat 
							WHERE ProductCat.ProductColourId =  '".$ProductColourId."' 
							ORDER BY ProductCat.Sort ASC, ProductCat.ProductCatId ASC");	
		
				while ($row1 = mysql_fetch_array($result1,MYSQL_ASSOC))	
				{					
					//echo "SELECT * FROM ProductGrade WHERE ProductGrade.ProductCatId =  ".$row1{'ProductCatId'} ;
					if( mysql_num_rows(mysql_query("SELECT * FROM ProductGrade WHERE ProductGrade.ProductCatId =  ".$row1{'ProductCatId'} )) > 0)
					{
						echo '<a class="menuitem submenuheader" >'.$row1{'DescEN'}.'</a>';
						echo '<div class="submenu"><ul>';
						
						$result2 = mysql_query("
						SELECT * 
						FROM ProductGrade 
						WHERE ProductGrade.ProductCatId =  '".$row1{'ProductCatId'}."' 
						ORDER BY ProductGrade.Sort ASC, ProductGrade.ProductGradeId ASC");	
						
						while ($row2 = mysql_fetch_array($result2,MYSQL_ASSOC))	{			
						
							echo '<li><a href="products.php?ProductColourId='.$ProductColourId.'&amp;ProductGradeId='.$row2{'ProductGradeId'}.'">'.$row2{'DescEN'}.'';
							echo '</a></li>';
						}
						echo '</ul></div>';
					}
				}
				?>	
				</div>				</td>
              </tr>
            </table></td>
            <td width="50" align="left" valign="top"><img src="../images/submenu_right.jpg" width="50" height="200" /></td>
            <td width="550" align="left" valign="top"><table width="550" border="0" cellpadding="0" cellspacing="0">
              <tr>
			  	<?php
				  if($ProductColourId)
				  {
				  	//echo "ColourID=".$ProductColourId;
				  	$result3 = mysql_query("SELECT * FROM ProductColour WHERE ProductColour.ProductColourId =  '".$ProductColourId."'");
				  	$row3 = mysql_fetch_array($result3,MYSQL_ASSOC);
				  }
				  
				  $result4 = mysql_query("SELECT * FROM ProductGrade WHERE ProductGrade.ProductGradeId =  '".$ProductGradeId."'");	
				  $row4 = mysql_fetch_array($result4,MYSQL_ASSOC);		
				?>
                <td align="left" valign="top" class="pathtxt">Location : <a href="home.php">Home</a> &gt; Product Catelogue &gt; <?=$row3{'DescEN'};?> </td>
              </tr>
              <tr>
                <td align="left" valign="top" class="pagetitle"><?=$row4{'DescEN'};?> <div align="right">
				<div class="pagetxt">&lt; 
				<?php
					//Page counter
					if ($ProductGradeId<>0)
					{
						$sql = "SELECT COUNT(*) 
								FROM Product AS p
									Inner Join ProductGrade AS pg ON p.ProductGradeId = pg.ProductGradeId								
								WHERE pg.ProductGradeId = '".$ProductGradeId."'";
					}
					elseif ($ProductCatId<>0)
					{
						$sql = "SELECT COUNT(*) 
								FROM Product AS p
									Inner Join ProductGrade AS pg ON p.ProductGradeId = pg.ProductGradeId
									Inner Join ProductCat AS pc ON pg.ProductCatId = pc.ProductCatId
								WHERE pc.ProductCatId = '".$ProductCatId."'";
					}
					elseif ($ProductColourId<>0)
					{
						$sql = "SELECT COUNT(*)  
								FROM Product AS p
									Inner Join ProductGrade AS pg ON p.ProductGradeId = pg.ProductGradeId
									Inner Join ProductCat AS pc ON pg.ProductCatId = pc.ProductCatId
									Inner Join ProductColour AS pcol ON pc.ProductColourId = pcol.ProductColourId
								WHERE pcol.ProductColourId =  '".$ProductColourId."'";
					}			
					//echo "<br>".$sql."<br>";
					$NumResult = mysql_query($sql);	
				    $NumEntryResult = mysql_fetch_array($NumResult,MYSQL_ASSOC);
					$NumEntry = $NumEntryResult{'COUNT(*)'};
					
					$thumbnailPerPage = 9;
					$currentPage = 1;	
					
					if ($Page == '' || $Page == '0') 
						$Page=1; 
						
					// Print PageNumber				
					do{
						if ($currentPage == $Page)
						{
							echo $currentPage++;
							echo "&nbsp;";
						}
						else
						{
							echo '<a href="'.basename($_SERVER['PHP_SELF']).'?ProductColourId='.$ProductColourId.'&ProductGradeId='.$ProductGradeId.'&Page='.$currentPage.'"">';
							echo $currentPage++;
							echo "</a>&nbsp;";
						}
						$NumEntry -= $thumbnailPerPage;
					}while ($NumEntry>0)					
				?>&gt; </div></td>
              </tr>
              <tr>
                <td height="25" align="left" valign="top"><img src="../images/line.jpg" width="550" height="10" /></td>
              </tr>
              <tr>
                <td align="left" valign="top" class="pagetxt"><!-- Product Image -->
					
				<?php 
					$PageIndex = $Page - 1;	
					if ($PageIndex<0)
					{
						$PageIndex = 0;
					}
					
					$thumbnailIndex = $PageIndex * $thumbnailPerPage;					
					
					if ($ProductGradeId)
					{
						$sql = "SELECT p.ProductId, p.NameEN, p.Sort, p.NameTC, p.DescEN, p.DescTC, p.Hotproduct, p.ImagePath 
								FROM Product AS p
									Inner Join ProductGrade AS pg ON p.ProductGradeId = pg.ProductGradeId								
								WHERE pg.ProductGradeId = '".$ProductGradeId."' 
								ORDER BY p.Sort ASC, p.ProductId ASC
								LIMIT ".$thumbnailIndex.", ".$thumbnailPerPage;
					}
					elseif ($ProductCatId)
					{
						$sql = "SELECT p.ProductId, p.NameEN, p.Sort, p.NameTC, p.DescEN, p.DescTC, p.Hotproduct, p.ImagePath 
								FROM Product AS p
									Inner Join ProductGrade AS pg ON p.ProductGradeId = pg.ProductGradeId
									Inner Join ProductCat AS pc ON pg.ProductCatId = pc.ProductCatId
								WHERE pc.ProductCatId = '".$ProductCatId."' 
								ORDER BY p.Sort ASC, p.ProductId ASC
								LIMIT ".$thumbnailIndex.", ".$thumbnailPerPage;
					}
					elseif ($ProductColourId)
					{
						$sql = "SELECT p.ProductId, p.NameEN, p.Sort, p.NameTC, p.DescEN, p.DescTC, p.Hotproduct, p.ImagePath  
								FROM Product AS p
									Inner Join ProductGrade AS pg ON p.ProductGradeId = pg.ProductGradeId
									Inner Join ProductCat AS pc ON pg.ProductCatId = pc.ProductCatId
									Inner Join ProductColour AS pcol ON pc.ProductColourId = pcol.ProductColourId
								WHERE pcol.ProductColourId =  ".$ProductColourId."
								ORDER BY p.Sort ASC, p.ProductId ASC
								LIMIT ".$thumbnailIndex.", ".$thumbnailPerPage;
					}
				//echo $sql;
				$result5 = mysql_query($sql);	

				$currentcol=0; // value= [0,1,2]				
				print'<table border="0" cellpadding="0" cellspacing="0">';				
				while ($product = mysql_fetch_array($result5,MYSQL_ASSOC))	{	
					//echo "current= ".$currentcol%3;
					if($currentcol % 3 == 0){ // new row
						print '<tr>';
					}
					print '<td align="center" valign="middle">';				
					print'<div class="producttable"><table border="0" cellpadding="0" cellspacing="0"> <tr>';
					$size = getimagesize("../webadmin/product/".$product{'ImagePath'}) ;
					//echo"File = $size[0], $size[1] <br/>";
					if($size[0] >$size[1]){ // 0=w 1=h
						print '<td align="center" valign="middle" ><a href="products_detail.php?ProductId='.$product{'ProductId'}.'">';
						print '<img src="../webadmin/product/'.$product{'ImagePath'}.'" width="170" /></a></td>';
					}
					else{
						print '<td align="center" valign="middle" ><a href="products_detail.php?ProductId='.$product{'ProductId'}.'">';
						print '<img src="../webadmin/product/'.$product{'ImagePath'}.'" height="170" /></a></td>';
					}
					print '</tr></table></div>';					
					print '</td>';				
					
					if($currentcol % 3 == 2){ //end of row
						print '</tr>';
					}
					$currentcol++;					
				}
				print '</table>';
				?>						

				<!-- End Product Image --></td>
              </tr>
            </table></td>
          </tr>
        </table></td>
        <td align="left" valign="top"><img src="../images/content_space.jpg" width="40" height="200" /></td>
      </tr>
      <tr>
        <td align="left" valign="top" id="footerleft">&nbsp;</td>
        <td align="center" valign="top" class="footer">© 2011 Yue Creations International Limited. All right reserved<br />
          Powered by <a href="http://www.onesolution.com.hk" target="_blank" /></a></a></a></a>One Solution Limited. <img src="../images/onesolutionlogo.jpg" width="90" height="15" align="absmiddle" /></td>
        <td align="left" valign="top" id="footeright">&nbsp;</td>
      </tr>
    </table></td>
    <td width="60" id="frameright">&nbsp;</td>
  </tr>
</table>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit