403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/litedemo/en/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/litedemo/en/products.php
<?php require_once('../webadmin/configure.php');?>
<?php //Menu 
	$result1 = mysql_query("SELECT * FROM menu WHERE menulink = '".basename($_SERVER['SCRIPT_NAME'])."' AND menustatus = '1' ");
	$row1 = mysql_fetch_array($result1,MYSQL_ASSOC);
	//Header And Footer 
	$result2 = mysql_query("SELECT * FROM headandfoot WHERE hafid = '1' ");
	$row2 = mysql_fetch_array($result2,MYSQL_ASSOC);
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=7" />
<title><?=$row1{'seotitleen'};?></title>
<meta name="keywords" content="<?=$row1{'seokeyen'};?>" />
<meta name="description" content="<?=$row1{'seodescen'};?>" />
<link rel=stylesheet type="text/css" href="../css/style.css">
<?=html_entity_decode($row2{'hafgoogleana'}, ENT_QUOTES);?>
<script type="text/JavaScript">
<!--
function MM_jumpMenu(targ,selObj,restore){ //v3.0
  eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'");
  if (restore) selObj.selectedIndex=0;
}
//-->
</script>
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.5/jquery.min.js"></script>
<script type="text/javascript" src="../js/jquery.cycle.all.latest.js"></script>
<script type="text/javascript">
$(document).ready(function() {
    $('.slideshow').cycle({
		fx: 'fade' // choose your transition type, ex: fade, scrollUp, shuffle, etc...
	});
});
</script>

<script type="text/javascript" src="../js/imagesize.js"></script>
<!--<script type="text/javascript" src="../js/jquery-1.6.js"></script>-->  
<script type="text/javascript" src="../js/jquery.jqzoom-core.js"></script>  
<link rel="stylesheet" type="text/css" href="../css/jquery.jqzoom.css"> 
<script type="text/javascript"> 
$(document).ready(function() {
	$('.jqzoom').jqzoom({zoomType:'reverse',lens:true,preloadImages: true,alwaysOn:false,zoomWidth:300,zoomHeight:300,showEffect:'fadein',title:false, position:'right', yOffset:0, xOffset:20});
});
</script>

</head>
<body id="pagebg">
<table width="900" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td height="110" align="left" valign="top" style="padding-top:5px"><table width="900" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td width="400" align="left" valign="top"><a href="../index.php?langcode=en"><img src="../images/<?=$row2{'haflogoen'};?>" width="400" height="110" /></a></td>
        <td align="right" valign="top"><div class="langarea"><?php if ($row2{'haffblink'} <> '') { ?><a href="<?=$row2{'haffblink'};?>" target="_blank"><img src="../images/icon_fb.png" width="20" height="20" align="absmiddle" /></a><?php } ?>
		<?php // Language
		$result3 = mysql_query("SELECT * FROM lang WHERE langstatus = '1' ORDER BY langsort ASC, langid ASC ");
		if (mysql_num_rows($result3)>0) { ?>
			<select name="lang" onchange="MM_jumpMenu('parent',this,0)" class="langselect">
			<?php while ($row3 = mysql_fetch_array($result3,MYSQL_ASSOC)){ ?>
				<option value="../<?=$row3{'langcode'};?>/<?=basename($_SERVER['SCRIPT_NAME']);?>?langcode=<?=$row3{'langcode'};?>&id=<?=$_GET['id'];?>&prodid=<?=$_GET['prodid'];?>" <?php if ($_GET['langcode'] == $row3{'langcode'}) echo 'selected="selected"';?> ><?=$row3{'langname'};?></option>
			<?php } ?>
			</select>
		<?php }?></div>
		<div class="mainmenu">
		<ul><?php // Main Menu
		$result3 = mysql_query("SELECT * FROM menu WHERE menustatus = '1' AND headerorfooter = '1' ORDER BY menusort ASC ");
		while ($row3 = mysql_fetch_array($result3,MYSQL_ASSOC)){
			echo "<li><a href='".$row3{'menulink'}."?langcode=en'>".$row3{'menutitleen'}."</a></li>\n";
		}?></ul>
		</div>		
		</td>
      </tr>
    </table></td>
  </tr>
  <tr>
    <td height="135" align="left" valign="top" style="padding-top:5px"><div class="slideshow"><?php // Banner
		$result4 = mysql_query("SELECT * FROM banner WHERE menuid = '".$row1{'menuid'}."' AND bannerstatus = '1' ORDER BY bannersort ASC ");
		while ($row4 = mysql_fetch_array($result4,MYSQL_ASSOC)){ 
			if ($row4{'bannerlinken'} <> '') {
				echo "<a href='".$row4{'bannerlinken'}."' target='".$row4{'bannertarget'}."'><img src='../banner/".$row4{'bannerimageen'}."' width='900' height='130' /></a>";
			} else{
				echo "<img src='../banner/".$row4{'bannerimageen'}."' width='900' height='130' />";
			} 
		}?></div></td>
  </tr>
  <tr>
    <td height="300" align="left" valign="top" style="padding:30px 0px;"><table width="900" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td width="200" align="left" valign="top"><div class="pagetitle"><?=$row1{'menutitleen'};?></div>
		<div id="ddproductmenu"><?php // Submenu
		$result6 = mysql_query("SELECT * FROM prodcategory WHERE levelnum = '1' AND prodcatstatus = '1' ORDER BY prodcatsort ASC ");
		while ($row6 = mysql_fetch_array($result6,MYSQL_ASSOC)){
			echo "<div class='menutitle'><a href='".$row1{'menulink'}."?langcode=en&id=".$row6{'prodcatid'}."'>".$row6{'prodcattitleen'}."</a></div>\n";
			$sql7  = "SELECT * FROM prodcategory WHERE levelnum = '2' AND prodcatstatus = '1' AND parentid = ".$row6{'prodcatid'}." ORDER BY prodcatsort ASC ";
			$result7 = mysql_query($sql7);
			echo "<ul>\n";
				while ($row7 = mysql_fetch_array($result7,MYSQL_ASSOC)) {
					echo "<li><a href='".$row1{'menulink'}."?langcode=en&id=".$row7{'prodcatid'}."'>".$row7{'prodcattitleen'}."</a></li>\n";
				}
			echo "</ul>\n";
		}?></div>
		<div class="adarea"><?php // AD
		$result5 = mysql_query("SELECT * FROM ad WHERE adstatus = '1' ORDER BY adsort ASC ");
		while ($row5 = mysql_fetch_array($result5,MYSQL_ASSOC)){ 
			if ($row5{'adlinken'} <> '') {
				echo "<a href='".$row5{'adlinken'}."' target='".$row5{'adtarget'}."'><img src='../ad/".$row5{'adimageen'}."' width='200' /></a>";
			} else {
				echo "<img src='../ad/".$row5{'adimageen'}."' width='200' />";
			}
		}?></div>
		</td>
        <td width="50" align="left" valign="top">&nbsp;</td>
        <td width="650" align="left" valign="top"><?php
			// echo path
			function getPath($p)
			{
				$sql1 = "select * from prodcategory where prodcatid = ". $p ." and prodcatstatus = '1' ";
				$result1 = mysql_query($sql1);
				while ($row1 = mysql_fetch_array($result1,MYSQL_ASSOC))
				{
					if ($row1{parentid} <> 0)
					{
						$n =  $n . getPath($row1{'parentid'}) ." > ". $row1{'prodcattitleen'} ."";
					}
					else
					{
						$n = "". $row1{'prodcattitleen'} ."";
					}
				}
				return $n;
			}
			if(empty($_GET["id"])){
				$path = 'All Products';
			} else {
				$path = getPath($_GET["id"]);
			}
			?>
		<table width="650" border="0" cellspacing="0" cellpadding="0">
          <tr>
            <td align="left" valign="top" class="pagetitle"><?=$path;?></td>
          </tr>
		  <?php if(empty($_GET["prodid"])){ // Product List ?>
          <tr>
            <td align="left" valign="top"><table border="0" cellpadding="0" cellspacing="0"><!--start here-->
			<?php
			  function getAllChildID($pid){                
					$rtnString = "";
					$sqlCmd = " SELECT prodcatid FROM prodcategory WHERE parentid = ".$pid." AND prodcatstatus = '1' ";
					$result = mysql_query($sqlCmd);
					if (mysql_num_rows( $result)>0 && mysql_num_rows($result) >0)
					{                   
					   while($row = mysql_fetch_array($result, MYSQL_ASSOC))
					   {
								 $rtnString .= $row{'prodcatid'} .",".  getAllChildID($row{'prodcatid'});
					   }
					}
					return $rtnString;                                     
				}
			?>
			<?php 
				$offset			= $_GET["offset"];
				$where			= $_GET["where"]; 
	
				$limit=9; 
				if (!$offset) $offset=0;
				
				//PRODUCT
				$sqlx = "SELECT * FROM proddetail det INNER JOIN prodcategory cat ";
				$sqlx .= "ON det.prodcatid = cat.prodcatid ";
				if ($_GET['id'] <> '') {
					$sqlx .= "WHERE (det.prodcatid in (".substr($_GET['id'].','.getAllChildID($_GET['id']),0, -1).")) AND cat.prodcatstatus = '1' AND det.prodstatus = '1' ";
					$sqlx .= "ORDER BY cat.levelnum ASC, cat.prodcatsort ASC, det.prodsort ASC ";
				} else {
					$sqlx .= "ORDER BY det.prodid DESC ";
				}
				
				$result2 = mysql_query($sqlx);
				$numrec = mysql_num_rows($result2);
				//list($numrec)= mysql_num_rows($result2);
				//echo 'display:'.$limit;
				$numpage=intval($numrec/$limit);
	
				if ($numrec%$limit) {
					$numpage++; // add one page if remainder
				}
				//echo '<br>numrec'.$numrec;
				//echo '<br>numpage:'.$numpage;
				?>
			<?php 
				//PRODUCT LIST
				$sqly = "SELECT * FROM proddetail det INNER JOIN prodcategory cat ";
				$sqly .= "ON det.prodcatid = cat.prodcatid ";
				if ($_GET['id'] <> '') {
					$sqly .= "WHERE (det.prodcatid in (".substr($_GET['id'].','.getAllChildID($_GET['id']),0, -1).")) AND cat.prodcatstatus = '1' AND det.prodstatus = '1' ";
					$sqly .= "ORDER BY cat.levelnum ASC, cat.prodcatsort ASC, det.prodsort ASC ";
				} else {
					$sqly .= "ORDER BY det.prodid DESC ";
				}
				$sqly .= "limit $offset,$limit";

				//echo "Y=".$sqly;
				$y = 1;
		
				echo "<tr>";
				$result = mysql_query($sqly);
				while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
				{
					if (($y == 1) or ($y == 4) or ($y == 7)) {
						$line = '';
					} else {
						$line = 'id="productlist_table"';
					}
					
					if ($y == 1)
					{					
					}
					elseif ($y == 4)
						echo "<tr>";
					elseif ($y == 7)
						echo "<tr>";
					
					echo "<td width='220' align='center' valign='top' ".$line.">";				
						echo '<table width="210" border="0" cellpadding="0" cellspacing="0">';
						  echo '<tr>';
							echo '<td width="210" align="center" valign="top"><a href="products.php?langcode=en&id='.$row{'prodcatid'}.'&prodid='.$row{'prodid'}.'">';
							$result5 = mysql_query("SELECT * FROM prodimage WHERE prodid = ".$row{'prodid'}." ORDER BY prodimagesort ASC");
							$row5 = mysql_fetch_array($result5,MYSQL_ASSOC);
							echo '<img src="../products/thumb/'.$row5{'prodimage'}.'" width="0" height="0" border="0" onload="AutoResizeImage(210,160,this)" />';
							echo '</a></td>';
						  echo '</tr>';
						  echo '<tr>';
							echo '<td width="210" align="center" valign="top" class="listproduct_name">'.$row{'prodnameen'}.'<br /><span class="listproduct_code">'.$row{'prodcode'}.'</span></td>';
						  echo '</tr>';
						  echo '<tr>';
							echo '<td width="210" height="10" align="center" valign="top"></td>';
						  echo '</tr>';
						echo '</table>';
					echo "</td>";
					
					if ($y == 3)
						echo "</tr>";
					elseif ($y == 6)
						echo "</tr>";
					elseif ($y == 9)
						echo "</tr>";
					$y = $y + 1;
				}
			?><!--end here-->
			</table></td>
          </tr>
          <tr>
            <td align="left" valign="top"><?php include("pagenav.php"); ?></td>
          </tr>
		  <?php } else { // Product Detail 
		  $result7 = mysql_query("SELECT * FROM proddetail det INNER JOIN prodcategory cat ON det.prodcatid = cat.prodcatid WHERE det.prodcatid = ".$_GET['id']." AND det.prodid = ".$_GET['prodid']." AND cat.prodcatstatus = '1' AND det.prodstatus = '1' ");
		  $row7 = mysql_fetch_array($result7,MYSQL_ASSOC);
		  $result8 = mysql_query("SELECT * FROM prodimage WHERE prodid = ".$row7{'prodid'}." ORDER BY prodimagesort ASC ");
		  $row8 = mysql_fetch_array($result8,MYSQL_ASSOC);
		  ?>
		  <tr>
            <td align="left" valign="top"><table width="650" border="0" cellspacing="0" cellpadding="0">
              <tr>
                <td width="300" height="300" align="center" valign="top"><a class="jqzoom" href="../products/large/<?=$row8{'prodimage'};?>" rel='msi'><img src="../products/thumb/<?=$row8{'prodimage'};?>" /></a></td>
                <td width="20" align="left" valign="top">&nbsp;</td>
                <td width="330" align="left" valign="top"><table border="0" cellspacing="0" cellpadding="0">
			  <tr>
                <td align="left" valign="top" class="product_name"><?=$row7{'prodnameen'};?><br /><span class="product_code"><?=$row7{'prodcode'};?></span></td>
              </tr>
              <tr>
                <td align="left" valign="top"><ul id="thumblist"><?php
				$sql9 = "SELECT * FROM prodimage WHERE prodid = ".$row7{'prodid'}." ORDER BY prodimagesort ASC ";
				$result9 = mysql_query($sql9);
				while ($row9 = mysql_fetch_array($result9,MYSQL_ASSOC)){ ?>
				<li><a href='javascript:void(0);' rel="{gallery: 'msi', smallimage: '../products/thumb/<?=$row9{'prodimage'};?>',largeimage: '../products/large/<?=$row9{'prodimage'};?>'}">
					<img src="../products/thumb/<?=$row9{'prodimage'};?>" width="0" height="0" border="0" onload="AutoResizeImage(70,52,this)" /></a></li>
				<?php } ?>									
					</ul></td>
                </tr>
            </table>
                </td>
              </tr>
            </table></td>
          </tr>
          <tr>
            <td align="left" valign="top" class="product_desc_txt12"><?=$row7{'proddescen'};?></td>
          </tr>
		  <?php } ?>
        </table></td>
      </tr>
    </table></td>
  </tr>
  <tr>
    <td height="55" align="right" valign="middle" class="footer"><div style="float:left;"><?php // Footer page
		$result3 = mysql_query("SELECT * FROM footpage WHERE footpagestatus = '1' ORDER BY footpagesort ASC ");
		$i=0;
		while ($row3 = mysql_fetch_array($result3,MYSQL_ASSOC)){
		if ($i>0) {
			echo ' | ';
		}
		$i++;
			echo "<a href='fpage.php?langcode=en&id=".$row3{'footpageid'}."'>".$row3{'footpagetitleen'}."</a>";
		}?></div><div style="float:right;"><?=$row2{'hafcopyrighten'};?></div></td>
  </tr>
</table>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit