403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/aa-lam.org/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/aa-lam.org/guestbook.php
<?php require("admin/configure.php");
 ?>
<? require("fckeditor/fckeditor.php") ; ?>
<?php 
session_start();

if( isset($_POST['submit'])) {
   if( $_SESSION['security_code'] == $_POST['security_code'] && !empty($_SESSION['security_code'] ) ) {
		// Insert you code for processing the form here, e.g emailing the submission, entering it into a database. 
		//echo 'Thank you. Your message said "'.$_POST['message'].'"';
		$_SESSION['guestbookname'] 	= $_POST['guestbookname'];
		$_SESSION['guestbookemail'] = $_POST['guestbookemail'];
		$_SESSION['guestbookdesc']	= $_POST['guestbookdesc'];
		
		header('Location: guestbookadd.php');
		unset($_SESSION['security_code']);
   } else {
		// Insert your code for showing an error message here
		//echo 'Sorry, you have provided an invalid security code';
		header("Location: guestbook.php?msg=Sorry, you have provided an invalid security code");
   }
} else {
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>晞望 林俊晞生命見證 晞望成長坊</title>
<link rel="stylesheet" type="text/css" href="css/style.css" />
</head>

<body bgcolor="#FFFFFF" leftmargin="0" topmargin="0">
<table width="980" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td><a href="index.php"><img src="images/home.jpg" width="980" height="55" border="0" /></a></td>
  </tr>
  <tr>
    <td><?php 
	if (($_SESSION["pmenu"] == '1') || ($_SESSION["pmenu"] == '2')){
	echo '<img src="images/pagebanner2.jpg" width="980" height="184" />';
	} else if ($_SESSION["pmenu"] == '3'){
	echo '<img src="images/pagebanner3.jpg" width="980" height="184" />';
	} else if ($_SESSION["pmenu"] == '4'){
	echo '<img src="images/pagebanner4.jpg" width="980" height="184" />';
	} else {
	echo '<img src="images/pagebanner.jpg" width="980" height="184" />';
	}
	?></td>
  </tr>
  <tr>
    <td><table width="980" border="0" cellpadding="0" cellspacing="0">
      <tr>
	  	<?
		$sql = " select * from categories where categories.parentid = '1' order by sortby limit 0, 1";
		$res = mysql_query($sql);
		$row = mysql_fetch_array($res);
		$template1 = $row["template"];
		?>
		<?
		$sql = " select * from categories where categories.parentid = '2' order by sortby limit 0, 1";
		$res = mysql_query($sql);
		$row = mysql_fetch_array($res);
		$template2 = $row["template"];
		?>
		<?
		$sql = " select * from categories where categories.parentid = '3' order by sortby limit 0, 1";
		$res = mysql_query($sql);
		$row = mysql_fetch_array($res);
		$template3 = $row["template"];
		?>
		<?
		$sql = " select * from categories where categories.parentid = '4' order by sortby limit 0, 1";
		$res = mysql_query($sql);
		$row = mysql_fetch_array($res);
		$template4 = $row["template"];
		?>
		<?
		$sql = " select * from news where news.status = 'Enable' order by newsdate desc limit 0, 1";
		$res = mysql_query($sql);
		$row = mysql_fetch_array($res);
		$new = $row["newsid"];
		?>
		<td><a href="<?=$template1?>"><img src="images/menu01.jpg" width="140" height="31" border="0" /></a></td>
        <td><a href="<?=$template2?>"><img src="images/menu02.jpg" width="140" height="31" border="0" /></a></td>
        <td><a href="<?=$template3?>"><img src="images/menu03.jpg" width="140" height="31" border="0" /></a></td>
        <td><a href="<?=$template4?>"><img src="images/menu04.jpg" width="140" height="31" border="0" /></a></td>
        <td><a href="guestbook.php"><img src="images/menu05.jpg" width="140" height="31" border="0" /></a></td>
        <td><a href="contactus.php"><img src="images/menu06.jpg" width="140" height="31" border="0" /></a></td>
        <td><a href="news.php?newsid=<?=$new?>"><img src="images/menu07.jpg" width="140" height="31" border="0" /></a></td>
      </tr>
    </table></td>
  </tr>
  <tr>
    <td height="7"></td>
  </tr>
  <tr>
    <td><table width="980" border="0" cellpadding="0" cellspacing="0">
	  <tr>
        <td width="280"><img src="images/title05.jpg" width="280" height="33" /></td>
        <td width="700" align="left" valign="top">&nbsp;</td>
      </tr>
      <tr>
        <td height="350" align="left" valign="top" bgcolor="#F2F2F2"><?	echo "". $_GET['msg'] ."";?>
		<br><br><form action="guestbook.php" method="post" name="addform" enctype="multipart/form-data">
			<table width="250" border="0" align="center" cellpadding="0" cellspacing="0" class="txt">
			  <tr>
				<td width="50" height="20" align="left" class="txt"><strong>&nbsp;名字:&nbsp;&nbsp;</strong></td>
				<td width="200" height="20" class="txt"><input type="text" class="txt" name="guestbookname" size="25"></td>
			  </tr>
			  <tr>
				<td height="20" align="left" class="txt"><strong>&nbsp;電郵:&nbsp;&nbsp;</strong></td>
				<td height="20" class="txt"><input type="text" name="guestbookemail" size="25" class="txt" /></td>
			  </tr>
			  <tr>
				<td height="20" colspan="2" align="left" valign="top" class="txt"><strong>&nbsp;驗証碼&nbsp;&nbsp;</strong>
				  <input id="security_code" name="security_code" type="text" size="10" /><img src="CaptchaSecurityImages.php?width=80&height=25&characters=5" align="absmiddle" /><br /></td>
				</tr>
			  <tr>			  
			  <tr>
				<td height="20" colspan="2" align="left" valign="top" class="txt"><strong>&nbsp;內容:&nbsp;&nbsp;</strong></td>
			  </tr>
			  <tr>
				<td height="20" colspan="2" align="left" valign="top" class="txt"><?php
				$sBasePath = $_SERVER['PHP_SELF'] ;
				$sBasePath = "fckeditor/";
				
				$oFCKeditor = new FCKeditor('guestbookdesc') ;
				$oFCKeditor->BasePath	= $sBasePath ;
				$oFCKeditor->Value		= "";
				$oFCKeditor->Width 		= 250;
				$oFCKeditor->Height		= 400;
				$oFCKeditor->Create() ;
				
				?></td>
				</tr>
			  <tr align="center">
				<td height="20" colspan="2">&nbsp;&nbsp;&nbsp;&nbsp;</td>
			  </tr>
			  <tr align="center">
				<td height="20" colspan="2"><input name="submit" type="submit" value="提交" /></td>
			  </tr>
			  <tr align="center">
				<td height="20" colspan="2">&nbsp;</td>
			  </tr>
			</table>
		</form>		  </td>
        <td align="right" valign="top"><table width="680" border="0" cellpadding="0" cellspacing="0">
          <? 
				$sql = "SELECT * ";
				$sql .= "FROM guestbook ";
				$sql .= "where guestbookstatus = 'Enable' ";
				$sql .= "order by guestbookid desc ";
				
				$result = mysql_query($sql);
				while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
					{
		   ?>
		  <tr>
            <td height="35" align="left" valign="top" class="titletxt"><? echo $row{'guestbookname'}; ?></td>
          </tr>
          <tr>
            <td align="left" valign="top" class="txt"><? echo $row{'guestbookdesc'}; ?></td>
          </tr>
		  <tr>
            <td align="left" valign="top" class="guestbookdate"><? echo $row{'guestbookdate'}; ?></td>
          </tr>
		  <tr>
            <td align="left" valign="top" height="30" ><hr></td>
          </tr>
		  <? } ?>
        </table></td>
      </tr>
      <tr>
        <td height="50" align="left" valign="top" bgcolor="#F2F2F2">&nbsp;</td>
        <td align="right" valign="top">&nbsp;</td>
      </tr>
    </table></td>
  </tr>
  <tr>
    <td align="center" class="footertxt"><p>Copyright © 2009 晞望 林俊晞生命見證 All Rights Reserved.  |   Sponsored by <a href="http://www.onesolution.com.hk" target="_blank">One Solution Limited</a>.<br />
      <a href="http://www.onesolution.com.hk" target="_blank"><img src="images/webicon137w23h.jpg" width="137" height="23" border="0" /></a> </p>
    </td>
  </tr>
</table>


</body>
</html>
<?php
	}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit