403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/chineseaaedu/tc/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/chineseaaedu/tc/news.php
<? include('_init.php');?>
<?

//
$sql = "SELECT name_".$lang." as `name`,intro_".$lang." as `intro`,photo FROM bannerSingle WHERE refid = '2' LIMIT 1";
$sth1 = $dbh->prepare($sql);
$sth1->execute();
$row_banner = $sth1->fetch(PDO::FETCH_ASSOC);
//
$sql = "SELECT count(*) as count 
		FROM `news` where status = ? and deleted = ? and date >= ? and (display_date_from <= ? and ? <= display_date_to) order by date desc";
$sth1 = $dbh->prepare($sql);
$parameter = array(1,0,date('Y-m-d'),date('Y-m-d'),date('Y-m-d'));
$sth1->execute($parameter);
$row = $sth1->fetch(PDO::FETCH_ASSOC);
$page = @$_GET['page']?$_GET['page']:1;
$item_total = $row['count'];
$items_per_page = 3;
list($page, $page_total, $limit_start) = parsePages($page, $item_total, $items_per_page);
$number = $page_total;
$sql = "SELECT refid,title_".$lang." as title,intro_".$lang." as intro,editor_".$lang." as editor,date,photo
		FROM `news` where status = ? and deleted = ? and date >= ? and (display_date_from <= ? and ? <= display_date_to) order by date desc limit ".$limit_start.",".$items_per_page;
$sth1 = $dbh->prepare($sql);
$parameter = array(1,0,date('Y-m-d'),date('Y-m-d'),date('Y-m-d'));
$sth1->execute($parameter);
while ($row_news = $sth1->fetch(PDO::FETCH_ASSOC)) {
	$rows_news[] = $row_news;
}
//
$sql = "SELECT DISTINCT(YEAR(date)) as year
		FROM `news` where status = ? and deleted = ? and date >= ? and (display_date_from <= ? and ? <= display_date_to) order by date desc";
$sth1 = $dbh->prepare($sql);
$parameter = array(1,0,date('Y-m-d'),date('Y-m-d'),date('Y-m-d'));
$sth1->execute($parameter);
while ($row_year = $sth1->fetch(PDO::FETCH_ASSOC)) {
	$rows_year[] = $row_year;
}
?>
<!DOCTYPE html>
<html lang="<?=$lang?>">
<head>
  <? include('_head.php');?>
</head>

<body>
    <!-- Static navbar -->
  <? include('_header.php')?>
  
    <!-- Header -->
    <div class="newsHeader" style="background-image:url(../file/bannerSingle/<?=$row_banner['photo']?>)">
        <div class="container">
            <div class="row">
                <div class="col-lg-12">
                    <div class="subPage-intro-message">
                        <h4><?=nl2br($row_banner['intro'])?></h4>
                        <h3><?=$row_banner['name']?></h3>
                        <br><br>
                    </div>
                </div>
            </div>
        </div>
    </div>

<div class="SelectionMenu">
  <center><a class="show_hide"> <img src="../img/news/LinesMenu.png" wisth="20px" height="20px"></a></center>
</div>

<div class="openSelectionMenu">
  <div class="container">
    <div class="row">
      <div class="col-lg-12">
        <div class="slidingDiv">
          <span id="menuYear">年份 :</span> 
          <? foreach($rows_year as $row_year){?>
          <a href="news.php?year=<?=$row_year['year']?>&page=<?=$page?>" <? if($row_year['year']==$_GET['year']){?>style="background-color: #2086d5; color:#fff;"<? }?> class="MenuButton"><?=$row_year['year']?></a>
          <? }?>
        </div>        
      </div>      
    </div>    
  </div>  
</div>
<? for($i=0;$i<count($rows_news);$i++){?>
<?
$row_news = $rows_news[$i];
?>
<div class="News">
  <div class="container">
      <div class="row">
        <div class="col-lg-6">   
          <div class="NewsImageA" style="background-image:url(../file/news/<?=$row_news['photo']?>);cursor:pointer" onClick="location.href='news_detail.php?id=<?=$row_news['refid']?>'"></div>      
        </div>
        <div class="col-lg-6" id="NewsConent">
          <h11><?=$row_news['title']?></h11> <br>
           <img src="../img/news/writerIcon.png" width="15px" height="15"> &nbsp;<?=$row_news['editor']?> 
           &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
           <img src="../img/news/timeIcon.png" width="15px" height="15"> &nbsp;<?=$row_news['date']?>
           <br><br>
           <?=nl2br($row_news['intro'])?>
        </div>
      </div>
  </div>
</div>
<? if($i+1<count($rows_news)){?>
<div class="container">
  <div class="row">
    <div class="col-lg-12">
      <div class="bottomline">  
      </div>
    </div>    
  </div>  
</div>
<? }?>
<? }?>

<div class="PageButtonSection">
  <div class="container">
    <div class="row">
      <div class="col-lg-12">
      <? for ($i=1; $i<=$number; $i++){ ?>
        <a href="news.php?year=<?=$_GET['year']?>&page=<?=$i?>" <? if($i==$_GET['page']){?>style="border-color:#2086d5;background-color: #2086d5; color:#fff;"<? }?> class="PageButton"><?=$i?></a>
      <? }?>
      </div>
    </div> 
  </div>
</div>




  

<!-- Footer -->
<? include('_footer.php')?>
  </body>
</html>


Youez - 2016 - github.com/yon3zu
LinuXploit