403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/m.musiccircle/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/m.musiccircle/index.php
<?php include('_init.php');
	//unset($_SESSION["index_popup"]);
	//$_SESSION["index_popup"] = 1;


	if (!empty($_GET["key"])) {
		$_SESSION["key"] = $_GET["key"];
	}

	if (!empty($_GET["app_device_id"])) {
		$_SESSION["app_device_id"] = $_GET["app_device_id"];
	}

	if (!empty($_GET["app_device_id"])) {
		$_SESSION["app_notification_token"] = $_GET["app_notification_token"];
	}

	if (!isset($_SESSION["app_device"])) {
		if (!empty($_GET["app_device"])) {
			$_SESSION["app_device"] = $_GET["app_device"];
		} else {
			$_SESSION["app_device"] = "ANDROID";
		}
	}

	//user viewed popup
	if (!empty($_SESSION["index_popup"]) && empty($_GET["from"]) && empty($_SESSION["app_device_id"]) && empty($_SESSION["app_notification_token"])) {
		header("Location: index_user.php");
		exit;
	}

	//app auto login
	if (!empty($_GET["app_device_id"]) && !empty($_GET["app_notification_token"])) {

		$sql        = "select * from sys_cms_login where app_device_id = ? and cmsrole = ? and deleted = ?";
		$parameters = array($_SESSION["app_device_id"], 'user', 0);
		$row_cms    = bind_pdo($sql, $parameters, "selectone");
		/*---------------完---------------*/
		/*---------------更新最後登入日期及時間---------------*/
		if (!empty($row_cms)) {
			$sql        = "update sys_cms_login set last_login_date = ?, app_device_id = ?, app_notification_token = ?, app_device = ?, app_lastupdate = ? where cmsloginid = ?";
			$parameters = array(date("Y-m:d H:i:s"), $_SESSION["app_device_id"], $_SESSION["app_notification_token"], $_SESSION["app_device"], date("Y-m:d H:i:s"), $row_cms['cmsloginid']);
			bind_pdo($sql, $parameters);
		}
		/*---------------完---------------*/
		if ($row_cms['is_tutor'] == 1) { //如果是導師
			//查看是否已經電郵驗證
			$sql        = "select id,status,nickname from tutor_main 
							   where `cmsloginid` = ? and `isemailverified` = 1 LIMIT 1";
			$parameters = array($row_cms['cmsloginid']);
			$row        = bind_pdo($sql, $parameters, "selectone");
			//
			if ($row['id']) {
				if ($row['status'] == 3 || $row['status'] == 4) { //查看是否已經手機或管理員驗證
					//儲存SESSION
					$_SESSION['loginname']       = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsloginname']    = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsusername']     = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsloginid']      = $row_cms['cmsloginid'];
					$_SESSION['loginid']         = $row_cms['cmsloginid'];
					$_SESSION['cmsrole']         = $row_cms['cmsrole'];
					$_SESSION['role']            = $row_cms['cmsrole'];
					$_SESSION['is_tutor']        = $row_cms['is_tutor'];
					$_SESSION['is_student']      = $row_cms['is_student'];
					$_SESSION['login_user_name'] = $row['nickname'];
					$_SESSION['member_login']    = $row['id'];
					if ($row['status'] == 4) { //管理員驗證
						//$path = 'webadmin/index.php';
						$path = 'job.php';
					} else if ($row['status'] == 3) { //手機驗證
						$path = 'job.php';
					}
				} else {
					$_SESSION['member_login']    = $row['id'];
					$_SESSION['login_user_name'] = $row['nickname'];
					$path                        = 'tutor_profile.php';
				}

				//override if url find
				if (!empty($_GET["url"])) {
					$path = $_GET["url"];
				}
			} else {
				$_SESSION['login'] = 'fail';
				$path              = 'index.php';
			}
		} else if ($row_cms['is_student'] == 1) {
			//查看是否已經電郵驗證
			$sql        = "select id,status,contactname from student_main 
							   where `cmsloginid` = ? and `isemailverified` = 1 LIMIT 1";
			$parameters = array($row_cms['cmsloginid']);
			$row        = bind_pdo($sql, $parameters, "selectone");
			//
			if ($row['id']) {
				if ($row['status'] == 3 || $row['status'] == 4) { //查看是否已經手機或管理員驗證
					$_SESSION['loginname']       = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsloginname']    = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsusername']     = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsloginid']      = $row_cms['cmsloginid'];
					$_SESSION['loginid']         = $row_cms['cmsloginid'];
					$_SESSION['cmsrole']         = $row_cms['cmsrole'];
					$_SESSION['role']            = $row_cms['cmsrole'];
					$_SESSION['is_tutor']        = $row_cms['is_tutor'];
					$_SESSION['is_student']      = $row_cms['is_student'];
					$_SESSION['login_user_name'] = $row['contactname'];
					$_SESSION['student_login']   = $row['id'];
					//$path                        = 'webadmin/index.php';
					$path = 'index.php';
				} else {
					$_SESSION['login_user_name'] = $row['contactname'];
					$_SESSION['student_login']   = $row['id'];
					$path                        = 'student_profile.php';
				}

				//override if url find
				if (!empty($_GET["url"])) {
					$path = $_GET["url"];
				}
			} else {
				$_SESSION['login'] = 'fail';
				$path              = 'index.php';
			}
		} else {
			$_SESSION['login'] = 'fail';
			$path              = 'index.php';
		}

		header("Location: " . $path);
		exit;
	}
	//end app auto login

	/*if ($_SESSION["is_tutor"] == 1) {
		header("Location: job.php");
		exit;
	}*/

	$sql              = "select * from tutor_main
					INNER JOIN tutor_charge ON tutor_main.id = tutor_charge.tutormain_id
					INNER JOIN tutor_expectcharge ON tutor_charge.id = tutor_expectcharge.charge_id
					where tutor_charge.deleted = ? and tutor_main.status = ? and tutor_main.deleted = ? and tutor_main.approved = ? and tutor_main.recommend = ?
					group by tutor_main.id
					order by rand()
					limit 8";
	$parameters       = array(0, 4, 0, 1, 1);
	$recommend_tutors = bind_pdo($sql, $parameters, "selectall");

	$sql        = "select *,student_postjob.id as student_postjob_id, master_type_code.name_" . $langcode . " as instrument_name from student_postjob 
			INNER JOIN student_main ON student_main.id = student_postjob.studentmain_id
			INNER JOIN master_type_code ON master_type_code.id = student_postjob.mas_instrument
			where student_postjob.status = ? and student_postjob.deleted = ? and student_postjob.approved = ? and student_main.status = ? and student_main.deleted = ? and student_main.approved = ? 
			order by student_postjob.createdate DESC limit 8";
	$parameters = array(1, 0, 1, 4, 0, 1);
	$jobs       = bind_pdo($sql, $parameters, "selectall");
?>
	<!DOCTYPE html>
	<html lang="en">
	<head>
		<? include('_head.php'); ?>
		<link href="css/style_k.css?v=<?= time(); ?>" type="text/css" rel="stylesheet">

		<style>
			.fancybox-skin {
				background-color: transparent !important;
			}

			@media screen and (-ms-high-contrast: active), (-ms-high-contrast: none) {
				.read_more_center {
					margin-left: -55px;
				}
			}

		</style>
	</head>

	<body>

	<? include('_header.php') ?>
	<? include('_dialog.php') ?>
	<header style="height: auto; margin-top: 100px;background: none;">
		<div class="container tc" style="">
			<!--<div class="intro-text">
				<div class="intro-heading"><? /*= _lang("YOUR MUSICAL JOURNEY OFFICIALLY SET SAIL") */ ?></div>
				<div class="BeginsBTN">
					<?php /*if ($_SESSION["cmsloginid"] && $_SESSION["is_student"]) { */ ?>
						<a href="category.php" class="index_main_btn index_main_btn_1"><? /*= _lang("Find Musical Tutor") */ ?></a>
						<br>
						<a href="#" class="index_main_btn index_main_btn_3"><? /*= _lang("Tutor Matching Counseling Service") */ ?></a>
					<?php /*} else if ($_SESSION["cmsloginid"] && $_SESSION["is_tutor"]) { */ ?>
						<a href="category.php" class="index_main_btn index_main_btn_1"><? /*= _lang("Job") */ ?></a>
					<?php /*} else { */ ?>
						<a href="login.php" class="index_main_btn index_main_btn_1"><? /*= _lang('Student Login') */ ?></a>
						<br>
						<a href="login.php" class="index_main_btn index_main_btn_3"><? /*= _lang('Tutor Login') */ ?></a>
					<?php /*} */ ?>
				</div>
			</div>-->

			<img src="<?= $site_info["url"] ?>img/index_1.png" style="">

			<div class="BeginsBTN" style="margin-top: 20px; position: relative; z-index: 9;">
				<?php if ($_SESSION["cmsloginid"] && $_SESSION["is_student"]) { ?>
					<a href="category.php" class="index_main_btn index_main_btn_1"><?= _lang("Tutor Searching") ?></a>
					<br>
					<a href="student_postjob_form.php" class="index_main_btn index_main_btn_2"><?= _lang("Post Jobs") ?></a>
					<br>
					<a href="musical_show.php" class="index_main_btn index_main_btn_3"><?= _lang("Musical Show") ?></a>
					<br>
				<?php } else if ($_SESSION["cmsloginid"] && $_SESSION["is_tutor"]) {
					//count app_notification type=job, read_date=null
					/*$sql = "select count(*) as unread from app_notification_user
					inner join app_notification on app_notification.id = app_notification_user.app_notification_id
					where app_notification_user.cmsloginid = ? and app_notification_user.success = ? and app_notification.type = ? and app_notification_user.read_date is null";
					$parameters = array($_SESSION["cmsloginid"], 1, "job");
					$result = bind_pdo($sql, $parameters, "selectone");
					$unread_job_notification = $result["unread"];*/
					?>
					<a href="tutor_profile.php" class="index_main_btn index_main_btn_1"><?= _lang("My Resume") ?></a>
					<br>
					<a href="job.php" class="index_main_btn index_main_btn_2"><?= _lang("Matching Student") ?>
						<?php //if($unread_job_notification > 0){
							echo '<div style="position: relative; display: none;" id="unread_job_notification_container">
							<span class="badge" style="background: #CC1342; position: absolute; top: -25px; left: 55px;"></span>
						</div>';
							//} ?>
					</a>
					<br>
					<a href="category.php" class="index_main_btn index_main_btn_3"><?= _lang("Tutor Searching") ?></a>
				<?php } else { ?>
					<a href="register.php?type=student" class="index_main_btn index_main_btn_1"><?= _lang('Student Registration / Login') ?></a>
					<br>
					<a href="register.php?type=tutor" class="index_main_btn index_main_btn_3"><?= _lang('Tutor Registration / Login') ?></a>
				<?php } ?>
			</div>
		</div>
	</header>

	<?php if (!empty($_SESSION["cmsloginid"]) && $_SESSION["is_student"] == 1) { ?>

		<hr style="border-top: 5px solid #eee;">

		<div id="LearnSection" style="padding: 0;">
			<div class="container tc">
				<h3 class="bold"><?= _lang("Fast Find Tutor") ?></h3>
				<br>

				<div class="row" style="margin-bottom: 50px;">
					<?php
						$index_musical_instrument = array(
							160 => array("img" => "img/musical_instrument_1.jpg"),
							11  => array("img" => "img/musical_instrument_2.jpg"),
							141 => array("img" => "img/musical_instrument_3.jpg"),
							146 => array("img" => "img/musical_instrument_4.jpg"),
							150 => array("img" => "img/musical_instrument_5.jpg"),
							168 => array("img" => "img/musical_instrument_6.jpg"),
							130 => array("img" => "img/musical_instrument_7.jpg"),
							152 => array("img" => "img/musical_instrument_8.jpg"),

						);

						foreach ($index_musical_instrument as $key => $row) {
							$master_type_code = get_master_type_code_by_id($key);
							?>
							<div class="col-xs-3 tc" style="padding: 0; margin-bottom: 10px;">
								<a href="category.php?id=<?= $key ?>" style="color: inherit;">
									<img class="" src="<?= $site_info["url"] . $row["img"] ?>" alt="" style="width: 60%;"><br>
									<p><?= _lang($master_type_code["name_" . $langcode]) ?></p>
								</a>
							</div>
						<?php } ?>
				</div>
				<br>
			</div>
		</div>
	<?php } ?>

	<?php /*if (empty($_SESSION["cmsloginid"])) { */?><!--
		<div class="container tc" style="position: fixed; bottom: 0;">
			<img src="<?/*= $site_info["url"] */?>img/index_2.jpg" style="width: 100%;">
		</div>
	--><?php /*} */?>

	<div id="popup" style="display: none;">
		<!--<img src="img/popup/Uni_x_iMC_7Mar2017.jpg" alt="" style="width: 100%;"/>-->
		<div id="popup_slider">
			<ul class="slides">
				<li><img src="img/popup/MC Matching_PopUp_1.jpg" style="width: 100%;"></li>
				<li><img src="img/popup/MC Matching_PopUp_2.jpg" style="width: 100%;"></li>
				<li><img src="img/popup/MC Matching_PopUp_3.jpg" style="width: 100%;"></li>
				<li><img src="img/popup/MC Matching_PopUp_4.jpg" style="width: 100%;"></li>
			</ul>
		</div>
	</div>

	<div id="status" style="display: none;">
	</div>
	<script src="js/jquery.min.js"></script>
	<? include('_footer.php') ?>

	<script type="text/javascript">
		function category_search() {
			var search = $("#category_search").val();
			if (!search) {
				alert("<?=_lang("Please enter searching words.")?>");
			} else {
				location.href = 'category.php?search=' + search;
			}
		}

		function resizeImage() {
			//console.log($(window).width());
			if ($(window).width() <= 750) {
				$(".tutor_img").hide();
				$(".tutor_img2").show();
			} else {
				$(".tutor_img").show();
				$(".tutor_img2").hide();
			}

			//$(".tutor_img2").show();
		}

		$(function () {
			//center image
			resizeImage();

			$(window).resize(function () {
				resizeImage();
			});

		})
	</script>

	<?php
		if (!isset($_SESSION["index_popup"])) { ?>
			<link rel="stylesheet" href="js/fancybox/jquery.fancybox.css?v=2.1.5" type="text/css" media="screen"/>
			<script type="text/javascript" src="js/fancybox/jquery.fancybox.pack.js?v=2.1.5"></script>
			<link rel="stylesheet" href="js/flexslider2/flexslider.css" type="text/css" media="screen"/>
			<script type="text/javascript" src="js/flexslider2/jquery.flexslider-min.js"></script>

			<script type="text/javascript">
				$(function () {
					$.fancybox({
						//settings
						'type': 'inline',
						'fitToView': true,
						//'maxWidth': 800,
						'width': '100%',
						'height': '80%',
						'autoSize': false,
						'closeClick': false,
						'openEffect': 'none',
						'closeEffect': 'none',
						'padding': 0,
						'href': '#popup',
						'helpers': {
							'overlay': {'closeClick': false} // prevents closing when clicking OUTSIDE fancybox
						},
						'beforeClose': function () {
							<?php
							if (empty($_SESSION["app_device_id"]) && empty($_SESSION["app_notification_token"])) {
								echo 'location.href="index_user.php"';
							}
							?>
						},
					});

					$('#popup_slider').flexslider({
						animation: "slide",
						animationLoop: false,
						after: function (slider) {
							var curSlide = slider.currentSlide;
							console.log(curSlide);
							if (curSlide == "3") {
								$(document).find(".fancybox-close").show();
							}
						}
					});

					$(document).find(".fancybox-close").hide();
				});
			</script>
		<?php } ?>

	</body>
	</html>

<?php
	$_SESSION["index_popup"] = 1;

Youez - 2016 - github.com/yon3zu
LinuXploit