403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/dashboard/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/dashboard/webadmin//cms_config_modifyform.php
<?php

	include 'config.php';
	// Check if the user is logged in

	if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1')) {
		header("Location: login.php");
		exit;
	}

?>
<html>
<head>

	<link rel="stylesheet" type="text/css" href="css/style.css"/>
	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
	<title>CMS Management System</title>
	<script type="text/javascript" src="js/jquery-1.11.1.min.js"></script>
	<script type="text/javascript" src="js/jquery-migrate-1.2.1.min.js"></script>
	<script type="text/javascript" src="js/jquery-ui-1.11.4/jquery-ui.min.js"></script>
	<link type="text/css" href="js/jquery-ui-1.11.4/jquery-ui.min.css" rel="stylesheet"/>

	<!-- color picker -->
	<link href="js/color_picker/css/evol.colorpicker.min.css" rel="stylesheet"/>
	<script src="js/color_picker/js/evol.colorpicker.min.js" type="text/javascript"></script>

	<script type="text/javascript">
		$(document).ready(function () {
			$("#color").colorpicker();
		});
	</script>
</head>
<body>

<?php
	$sql        = "select * from config where id = ?";
	$parameters = array((int)$_GET["id"]);
	if (!($sth = $dbh->prepare($sql))) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}

	if (!$sth->execute($parameters)) {
		throw new Exception('[' . $sth->errorCode() . ']: ' . print_r($sth->errorInfo()));
	}
	$row = $sth->fetch(PDO::FETCH_ASSOC);


	$sql99 = "SELECT * FROM sys_cms_login WHERE cmsloginid=?";
	$sth99 = $dbh->prepare($sql99);
	$sth99->execute(array((int)$row{'lastupby'}));
	$row99 = $sth99->fetch(PDO::FETCH_ASSOC);

?>
<form action="cms_config_modify.php" method="post" name="modifyform" enctype="multipart/form-data">
	<input type="hidden" name="id" value="<?= $row{'id'}; ?>">
	<input type="hidden" name="module" value="<?= $row{'module'}; ?>">
	<table width="800" border="0" cellpadding="0" cellspacing="0">
		<tr>
			<td height="70" align="right" valign="middle" class="icontxt">
				<table border="0" cellpadding="0" cellspacing="0">
					<tr>
						<td width="50" align="center" style="font-size: 12px;">
							<input type="image" alt="submit" src="images/iconSave.png" width="32" height="32" border="0"><br>
							&nbsp;Save&nbsp;&nbsp;</td>
						<td width="50" align="center">
							<a href="cms_config_index.php?module=<?= $row{"module"} ?>&msg=Cancel"><img src="images/iconCancel.png" alt="Cancel" width="32" height="32" border="0"><br>
								&nbsp;Cancel&nbsp;&nbsp;</a></td>
						<td>&nbsp;</td>
					</tr>
				</table>
			</td>
		</tr>
		<tr>
			<td><span style="float:left;" class="pagetitletxt">
					&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle"/> <?php
							if ($row{"module"} == "slideshow")
								echo "Slide Show Setting";
							else if($row{"module"} == "rolling_text")
								echo "Rolling Text Setting";
							?>
					</b></span><span style="float:right;" class="msg">Last Update: <?= $row99{'cmsloginname'} . '&nbsp;&nbsp;&nbsp;' . $row{'lastupdate'}; ?></span>
			</td>
		</tr>
		<tr>
			<td align="left" valign="middle"><!-- Content -->
				<table border="0" cellpadding="0" cellspacing="0">

					<tr>
						<td width="150" align="right" valign="top" class='content'><?= $row{"config_name"} ?></td>
						<td class='content' valign="top">:&nbsp;</td>
						<td class='content'>


							<?php
								if($row{"id"}==3){
									echo '<div style="width: 250px;">
								<input name="config_value" id="color" value="'. $row{"config_value"} .'"/>
							</div>';
								}else{
									echo '<input type="text" class="content" name="config_value" value="'. $row{"config_value"} .'" style="width: 150px;"/>'.$row{"config_desc"};

								}
							?>

							<br><br>
						</td>
					</tr>

				</table>
			</td>
		</tr>
	</table>
</form>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit