| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/hkosl.com/m.musiccircle/webadmin/ |
Upload File : |
<?php
/*if (!function_exists('get_client_ip')) {
// Function to get the client IP address
function get_client_ip() {
$ipaddress = '';
if (isset($_SERVER['HTTP_CLIENT_IP']))
$ipaddress = $_SERVER['HTTP_CLIENT_IP'];
else if(isset($_SERVER['HTTP_X_FORWARDED_FOR']))
$ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR'];
else if(isset($_SERVER['HTTP_X_FORWARDED']))
$ipaddress = $_SERVER['HTTP_X_FORWARDED'];
else if(isset($_SERVER['HTTP_FORWARDED_FOR']))
$ipaddress = $_SERVER['HTTP_FORWARDED_FOR'];
else if(isset($_SERVER['HTTP_FORWARDED']))
$ipaddress = $_SERVER['HTTP_FORWARDED'];
else if(isset($_SERVER['REMOTE_ADDR']))
$ipaddress = $_SERVER['REMOTE_ADDR'];
else
$ipaddress = 'UNKNOWN';
return $ipaddress;
}
}
$user_ip = get_client_ip();
$block_ip = array("210.3.0.218", "61.244.105.228", "45.64.243.11", "45.64.243.111", "210.6.247.161");
if (in_array($user_ip, $block_ip)){
header("Location: ../404.html");
exit;
}*/
//only for m.musiccircle.hk
/*include('libraies/mobile_detect/Mobile_Detect.php');
$detect = new Mobile_Detect;
// Exclude tablets.
if( $detect->isMobile() && !$detect->isTablet() ){
}else{
header("Location: http://www.hkosl.com/imusiccircle/");
exit;
}*/
//check if browsing http://www.imusiccircle.com/
//var_dump(strpos($_SERVER['HTTP_HOST'], "www.imusiccircle.com") > 0);
/*if($_SERVER['HTTP_HOST'] == "www.muscircle.com"){
header("Location: http://www.imusiccircle.com");
exit;
}*/
//$debug_tool = true;
if(isset($_SESSION["cmsrole"]) && $_SESSION["cmsrole"] == "super_admin"){
$debug_tool = true;
}else{
$debug_tool = false;
}
$_database = array(
'driver' => 'mysql',
'charset' => 'utf8',
'collation' => 'utf8_general_ci',
'database' => 'dev_imusiccircle',
'prefix' => '',
'host' => '192.168.155.13',
'username' => 'admin',
'password' => 'PHac7dru',
);
define("PRODUCTION", 0);
if(PRODUCTION == 1){
$_database = array(
'driver' => 'mysql',
'charset' => 'utf8',
'collation' => 'utf8_general_ci',
'database' => 'muscircledb',
'prefix' => '',
'host' => 'localhost',
'username' => 'muscirclesa',
'password' => 'Mus.#0933',
);
//error_reporting(E_ERROR | E_WARNING | E_PARSE | E_NOTICE);
error_reporting(E_ALL ^E_NOTICE ^E_DEPRECATED ^E_WARNING);
ini_set('display_errors', 0);
define("PAYPAL_URL", "https://www.paypal.com/row/cgi-bin/webscr");
define("PAYPAL_BUSINESS", "finance@musiccircle.hk");
define("EXTRA_URL", "");
define("EXTRA_URL2", "");
define("SEND_EMAIL", 1);
}else{
$_database = array(
'driver' => 'mysql',
'charset' => 'utf8',
'collation' => 'utf8_general_ci',
'database' => 'dev_imusiccircle',
'prefix' => '',
'host' => '192.168.171.23',
'username' => 'admin',
'password' => 'PHac7dru',
);
//error_reporting(E_ERROR | E_WARNING | E_PARSE | E_NOTICE);
error_reporting(E_ALL ^E_NOTICE ^E_DEPRECATED ^E_WARNING);
ini_set('display_errors', 1);
define("PAYPAL_URL", "https://www.sandbox.paypal.com/row/cgi-bin/webscr");
define("PAYPAL_BUSINESS", "gsell_1323239795_biz@onesolution.com.hk");
define("EXTRA_URL", "m.musiccircle/");
define("EXTRA_URL2", "/m.musiccircle");
define("SEND_EMAIL", 0);
}
// Require composer autoloader
require_once __DIR__ . '/libraies/autoload.php';
// temp database include for webadmin2
require_once "database.php";
ini_set('session.gc_maxlifetime', 3600*24);
if (session_id() === "") {
session_start();
}
ini_set('session.cookie_httponly', 1);
header("Content-Type:text/html; charset=utf-8");
//header("x-frame-options:SAMEORIGIN");
$dbh->exec("set names utf8");
date_default_timezone_set("Asia/Hong_Kong");
$nowdate = date("Y-m-d H:i:s");
if (!isset($_SESSION["langcode"])) {
$_SESSION["langcode"] = "cn";
}
$langcode = $_SESSION["langcode"];
if(isset($_GET["wlangcode"])){
$_SESSION["wlangcode"] = $_GET["wlangcode"];
$wlangcode = $_SESSION["wlangcode"];
header("Location: ".$_SERVER['HTTP_REFERER']);
}else if(!isset($_SESSION["wlangcode"])){
$_SESSION["wlangcode"] = "cn";
$wlangcode = $_SESSION["wlangcode"];
}else{
$wlangcode = $_SESSION["wlangcode"];
}
if($debug_tool){
$whoops = new Whoops\Run();
$handler = new Whoops\Handler\PrettyPageHandler();
$handler->setEditor('sublime');
$whoops->pushHandler($handler)->register();
if (Whoops\Util\Misc::isAjaxRequest()) {
$whoops->pushHandler(new Whoops\Handler\JsonResponseHandler);
}
}
include_once "_helpers.php";
$session_factory = new \Aura\Session\SessionFactory;
$session = $session_factory->newInstance($_COOKIE);
$segment = $session->getSegment('Onesolution\Frontend');
include('../phpmailer/class.phpmailer.php');
if (!function_exists('aes_crypt')) {
function aes_crypt($data, $encrypt_decrypt){
if ($encrypt_decrypt == 1) {
if (!empty($data)) {
return base64_encode(base64_encode(base64_encode($data)));
} else {
return;
}
}
if ($encrypt_decrypt == 2) {
if (!empty($data)) {
return base64_decode(base64_decode(base64_decode($data)));
} else {
return;
}
}
}
}
function sendEmail2( $to, $subject, $content_arr = array(), $sender_name, $sender_email, $map_file ) {
$headers = "From: ".$sender_name." <".$sender_email.">\r\n";
$headers .= "MIME-Version: 1.0\r\n";
$headers .= "Content-type: text/html; charset=uft-8\r\n";
$headers .= "Reply-To: ".$sender_name."<".$sender_email.">\r\n";
$headers .= "Return-Path: ".$sender_name."<".$sender_email.">\r\n";
$headers .= "Message-ID: <".time()." ".$sender_email.">\r\n";
$headers .= "X-Mailer: PHP v".phpversion()."\r\n";
$msg = file_get_contents( $map_file );
$msg = str_replace('{sender_email}', $sender_email, $msg);
$subject = "=?UTF-8?B?" . base64_encode($subject) . "?=";
foreach ( $content_arr as $key=>$value ){
$msg = str_replace('{'.$key.'}', $value, $msg);
}
return mail($to, $subject, $msg, $headers);
}
function sendEmail( $to, $subject, $content_arr = array(), $sender_name, $sender_email, $map_file ,$form_name) {
$headers = "From: ".$sender_name." <".$sender_email.">\r\n";
$headers .= "MIME-Version: 1.0\r\n";
$headers .= "Content-type: text/html; charset=uft-8\r\n";
$headers .= "Reply-To: ".$sender_name."<".$sender_email.">\r\n";
$headers .= "Return-Path: ".$sender_name."<".$sender_email.">\r\n";
$headers .= "Message-ID: <".time()." ".$sender_email.">\r\n";
$headers .= "X-Mailer: PHP v".phpversion()."\r\n";
$msg = file_get_contents( $map_file );
$msg = str_replace('{sender_email}', $sender_email, $msg);
foreach ( $content_arr as $key=>$value ){
$msg = str_replace('{'.$key.'}', $value, $msg);
}
$x_mail = new PHPMailer();
$x_mail->IsSMTP();
//$x_mail->SMTPDebug = 2;
$x_mail->Host = 'smtp.sendgrid.net'; // Specify main and backup server
$x_mail->Port = 587; // Set the SMTP port
$x_mail->SMTPAuth = true; // Enable SMTP authentication
$x_mail->Username = 'it.support@imusiccircle.com'; // SMTP username
$x_mail->Password = 'Imu..1713'; // SMTP password
$x_mail->SMTPSecure = 'tls';
$x_mail->CharSet = "UTF-8";
$x_mail->Sender = $to;
//$x_mail->AddReplyTo($enquiryemail, $company_name);
$x_mail->From = $sender_email;
$x_mail->FromName = $sender_name;
$x_mail->AddAddress($to, $form_name);
//$x_mail->AddBCC("kelvinchan@onesolution.com.hk", "");
$x_mail->WordWrap = 50;
$x_mail->IsHTML(true);
$x_mail->Subject = $subject;
$x_mail->Body = $msg;
if($x_mail->Send()){
return 'OK';
}else{
return 'FAIL';
}
}
function formatPostData( $datas = array(), $filter = array(), $kill_empty = false ) {
if (count($datas)<1) return $datas;
$main_keys = array_keys($datas[current(array_keys($datas))]);
$sub_keys = array_keys($datas);
foreach($main_keys as $main_key) {
$empty = true;
foreach($sub_keys as $sub_key) {
$data[$main_key][$sub_key] = $datas[$sub_key][$main_key];
$empty = !empty($data[$main_key][$sub_key])&&!in_array($sub_key, $filter) ? false : $empty;
}
if ($kill_empty && $empty) array_pop($data);
}
return $data;
}
function mysql_install($array,$table,$action='add',$idname="",$id="",$type=1){ //array字串(array_keys),db table name,add=新db edit=修改,del= 刪除
$arraykey=array_keys($array);
if($action=='add'){
$sql= "INSERT INTO `".$table."` (";
for($i=0;$i<count($array);$i++){
if($i+1<count($array)){
$dot=',';
}else{
$dot='';
}
$sql.= "`".$arraykey[$i]."`".$dot;
}
$sql.= ') values (';
for($i=0;$i<count($array);$i++){
if($i+1<count($array)){
$dot=',';
}else{
$dot='';
}
//$sql.= "'".$array[$arraykey[$i]]."'".$dot;
if($type==2){
$sql.= "'".$array[$arraykey[$i]]."'".$dot;
}else if($type==1){
$sql.= "?".$dot;
}
}
$sql.= ')';
}else if($action=='edit'){
$sql="UPDATE `".$table."` SET ";
for($i=0;$i<count($array);$i++){
if($i+1<count($array)){
$dot=',';
}else{
$dot='';
}
//$sql.= "`".$arraykey[$i]."` = '".$array[$arraykey[$i]]."'".$dot;
$sql.= "`".$arraykey[$i]."` = ?".$dot;
}
if($type==2){
$sql.=" WHERE `".$table."`.`".$idname."` =".$id.";";
}else if($type==1){
$sql.=" WHERE `".$table."`.`".$idname."` =?;";
}
}else if($action=='del'){
$sql.="DELETE FROM `".$table."` WHERE `".$table."`.`".$idname."` =".$id;
}
return $sql;
}
require_once("_functions.php");