403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/citysuper/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/citysuper/webadmin//basic_info.php
<?php
	require_once('configure.php');

	//functions

	if (!function_exists('random_string')) {
		function random_string($length = 8)
		{
			$chars         = "abcdefghijkmnpqrstuvwxyzABCDEFGHIJKLMNPQRSTUVWXYZ23456789abcdefghijkmnpqrstuvwxyzABCDEFGHIJKLMNPQRSTUVWXYZ23456789";
			$random_string = substr(str_shuffle($chars), 0, $length);
			return $random_string;
		}
	}


	if (!function_exists('bind_pdo')) {
		function bind_pdo($sql, $parameters = NULL, $action = NULL)
		{
			global $dbh;

			if ($action == "insert" || $action == "update" || $action == "delete" || empty($action)) {
				if (!($sth = $dbh->prepare($sql))) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}

				if (!$sth->execute($parameters)) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}
			}

			if ($action == "selectone") {
				if (!($sth = $dbh->prepare($sql))) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}

				if (!$sth->execute($parameters)) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}

				return $sth->fetch(PDO::FETCH_ASSOC);

			}

			if ($action == "selectall") {
				if (!($sth = $dbh->prepare($sql))) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}

				if (!$sth->execute($parameters)) {
					throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
				}

				return $sth->fetchAll(PDO::FETCH_ASSOC);

			}


		}
	}

	function matched_option($data1, $data2, $type)
	{
		if ($data1 == $data2) {
			if ($type == "checkbox" || $type == "radiobutton") {
				return "checked";
			} else if ($type == "select") {
				return "selected";
			} else {
			}

		}
	}

	if (!function_exists('startsWith')) {
		function startsWith($haystack, $needle)
		{
			$length = strlen($needle);
			return (substr($haystack, 0, $length) === $needle);
		}
	}

	if (!function_exists('check_upload_path')) {
		function check_upload_path($img_file)
		{
			$session_path_str  = "/uploader/" . $_SESSION['KCFINDER']['uploadURL'];
			$session_path_long = strlen($session_path_str);
			$path_error        = 0;
			foreach ($img_file as $key2 => $pathname) {
				if ($key2 && $pathname) {
					$submit_path_str  = substr($pathname, 0, $session_path_long);
					$submit_path_long = strlen($submit_path_str);
					$file             = str_replace('..', '', $pathname);
					if ($session_path_long <> $submit_path_long || $session_path_str <> $submit_path_str || !startsWith($file, $session_path_str)) {
						$path_error = 1;
					}
				}
			}
		}
	}


	if (!function_exists('get_site_info')) {
		function get_site_info()
		{
			$sql        = "SELECT * FROM site_info WHERE siteinfoid = ? ";
			$parameters = array(1);
			$site_info  = bind_pdo($sql, $parameters, "selectone");

			return $site_info;
		}
	}

	/*if (!function_exists('clean_data')) {
		function clean_data($data = array())
		{
			foreach ($data as $data_name => $data_value) {
				if (is_array($data_value)) {
					clean_data($data_value);
				} else {
					$_POST[$data_name] = htmlspecialchars($data_value, ENT_QUOTES);
				}
			}
		}
	}*/


	$sql             = "SELECT * FROM sys_lang WHERE langstatus = '1' ORDER BY langsort ASC ";
	$lang_array_info = bind_pdo($sql, NULL, "selectall");
	foreach ($lang_array_info as $lang_info) {
		$arraylangcode[$lang_info{'langcode'}] = $lang_info{'langname'};
	}

	//clean_data($_POST);

Youez - 2016 - github.com/yon3zu
LinuXploit