403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/litedemo/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/litedemo/webadmin/banner_modifyform.php
<?php
include 'config.php';

// Check if the user is logged in

if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
require("configure.php");
?>
<html>
<head>
<link rel="stylesheet" type="text/css" href="css/style.css" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>Content Management System (CMS) - Powered by One Solution Limited</title>
</head>
<body>
<?php
$result = mysql_query("SELECT * FROM banner WHERE bannerid=". $_GET["bannerid"] ." ");
$row = mysql_fetch_array($result,MYSQL_ASSOC);

$result9 = mysql_query("SELECT * FROM cms_login WHERE cmsloginid=". $row{'cmsloginid'} ." ");
$row9 = mysql_fetch_array($result9,MYSQL_ASSOC);

if( (!empty($row["menuid"])) && (empty($row["footpageid"])) ){
	$result2 = mysql_query("SELECT * FROM menu WHERE menuid = ".$row{'menuid'}." ");
	$row2 = mysql_fetch_array($result2,MYSQL_ASSOC);
	$pagename = $row2{'menutitleen'};
} else if( (empty($row["menuid"])) && (!empty($row["footpageid"])) ){
	$result2 = mysql_query("SELECT * FROM footpage WHERE footpageid = ".$row{'footpageid'}." ");
	$row2 = mysql_fetch_array($result2,MYSQL_ASSOC);
	$pagename = $row2{'footpagetitleen'};
}

if ($row2{'menuid'} == '1') {
	$uploadsize = '900px(W) x 300px(H)';
} else {
	$uploadsize = '900px(W) x 130px(H)';
}
?>
<form action="banner_modify.php" method="post" name="modifyform" enctype="multipart/form-data">
<input type="hidden" name="bannerid" value="<?=$row{'bannerid'};?>">
<input type="hidden" name="menuid" value="<?=$row{'menuid'};?>">
<input type="hidden" name="footpageid" value="<?=$row{'footpageid'};?>">
<table width="800" border="0" cellpadding="0" cellspacing="0">
  <tr>
    <td height="70" align="right" valign="middle" class="icontxt"><table border="0" cellpadding="0" cellspacing="0">
      <tr>        
        <td width="50" align="center"><a href="#" onClick="modifyform.submit()"><img src="images/iconSave.png" alt="Save" width="32" height="32" border="0"><br>
          &nbsp;Save&nbsp;&nbsp;</a></td>
        <td width="50" align="center"><a href="banner_index.php?menuid=<?=$row{'menuid'};?>&footpageid=<?=$row{'footpageid'};?>&msg=Cancel"><img src="images/iconCancel.png" alt="Cancel" width="32" height="32" border="0"><br>
          &nbsp;Cancel&nbsp;&nbsp;</a></td>
        <td>&nbsp;</td>
      </tr>
    </table></td>
  </tr>
  <tr>
	<td><span style="float:left;" class="pagetitletxt">&nbsp;&nbsp;<b><img src="images/iconList.jpg" width="48" height="48" align="absmiddle" /><?=$pagename;?> - Modify Banner </b></span><span style="float:right;" class="msg">Last Update: <?=$row9{'cmsusername'}.'&nbsp;&nbsp;&nbsp;'.$row{'modifyday'};?></span></td>
  </tr>
  <tr>
    <td align="left" valign="middle"><!-- Content -->
		<table border="0" cellpadding="0" cellspacing="0">
		<tr>
			<td width="120" align="right" valign="top" class='content'><b>English</b></td>
			<td class='content' valign="top">&nbsp;</td>
			<td class='content'>&nbsp;</td>
		</tr>
		<tr>
			<td width="120" align="right" valign="top" class='content'>Upload File</td>
			<td width="5" valign="top" class='content'>:&nbsp;</td>
			<td class='content'><?php if ($row{'bannerimageen'} <> '' ){ ?><a href="../banner/<?=$row{'bannerimageen'};?>" target="_blank"><img src="images/icon_Search.jpg"  border="0" align="absmiddle">View file</a><br /><?php } ?>
			<input name="bannerimageen" type="file" class="content" size="100"  /><br /><span class="msg">Image format: bmp,gif,jpg,png | Size: <?=$uploadsize;?></span><br /><br /></td>
		</tr>
		<tr>
			<td width="120" align="right" valign="top" class='content'>Hyperlink</td>
			<td class='content' valign="top">:&nbsp;</td>
			<td class='content'><input type="text" class="content" name="bannerlinken" value="<?=$row{'bannerlinken'};?>" size="80" maxlength="500" /><br><span class="msg">http://...</span><br /><br /></td>
		</tr>
		<tr>
			<td width="120" align="right" valign="top" class='content'>Target</td>
			<td class='content' valign="top">:&nbsp;</td>
			<td class='content'><select name="bannertarget" class="content">
			<option value="_blank" <? if ($row{'bannertarget'}=='_blank') echo 'selected'; ?>>_blank</option>
			<option value="_self"  <? if ($row{'bannertarget'}=='_self') echo 'selected'; ?>>_self</option>
			</select></td>
		</tr>
		<tr>
			<td width="120" align="right" valign="top" class='content'><b>Traditional Chinese</b></td>
			<td class='content' valign="top">&nbsp;</td>
			<td class='content'>&nbsp;</td>
		</tr>
		<tr>
			<td width="120" align="right" valign="top" class='content'>Upload File</td>
			<td width="5" valign="top" class='content'>:&nbsp;</td>
			<td class='content'><?php if ($row{'bannerimagetc'} <> '' ){ ?><a href="../banner/<?=$row{'bannerimagetc'};?>" target="_blank"><img src="images/icon_Search.jpg"  border="0" align="absmiddle">View file</a><br /><?php } ?>
			<input name="bannerimagetc" type="file" class="content" size="100"  /><br /><span class="msg">Image format: bmp,gif,jpg,png | Size: <?=$uploadsize;?></span><br /><br /></td>
		</tr>
		<tr>
			<td width="120" align="right" valign="top" class='content'>Hyperlink</td>
			<td class='content' valign="top">:&nbsp;</td>
			<td class='content'><input type="text" class="content" name="bannerlinktc" value="<?=$row{'bannerlinktc'};?>" size="80" maxlength="500" /><br><span class="msg">http://...</span><br /><br /></td>
		</tr>
		<tr>
			<td width="120" align="right" valign="top" class='content'><b>Simplified Chinese</b></td>
			<td class='content' valign="top">&nbsp;</td>
			<td class='content'>&nbsp;</td>
		</tr>
		<tr>
			<td width="120" align="right" valign="top" class='content'>Upload File</td>
			<td width="5" valign="top" class='content'>:&nbsp;</td>
			<td class='content'><?php if ($row{'bannerimagesc'} <> '' ){ ?><a href="../banner/<?=$row{'bannerimagesc'};?>" target="_blank"><img src="images/icon_Search.jpg"  border="0" align="absmiddle">View file</a><br /><?php } ?>
			<input name="bannerimagesc" type="file" class="content" size="100"  /><br /><span class="msg">Image format: bmp,gif,jpg,png | Size: <?=$uploadsize;?></span><br /><br /></td>
		</tr>
		<tr>
			<td width="120" align="right" valign="top" class='content'>Hyperlink</td>
			<td class='content' valign="top">:&nbsp;</td>
			<td class='content'><input type="text" class="content" name="bannerlinksc" value="<?=$row{'bannerlinksc'};?>" size="80" maxlength="500" /><br><span class="msg">http://...</span><br /><br /></td>
		</tr>
		</table>		
	<!-- End Content --></td>
  </tr>
  <tr>
    <td align="left" valign="middle">&nbsp;</td>
  </tr>
</table>
</form>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit