403Webshell
Server IP : 51.89.169.208  /  Your IP : 216.73.216.57
Web Server : Apache
System : Linux ns3209505.ip-198-244-202.eu 4.18.0-553.27.1.el8_10.x86_64 #1 SMP Tue Nov 5 04:50:16 EST 2024 x86_64
User : yellowleaf ( 1019)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/yellowleaf/public_html/edit/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/yellowleaf/public_html/edit/edit_2.html
<? 
ini_set("memory_limit", "200000000"); 
// prevent cache
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Cache-Control: no-cache");
header("Pragma: no-cache");

require('../../connect.php'); 
$adid=$_GET['adid'];
$memberid=$_GET['memberid'];
$companyname=$_GET['adname'];
// css for menu
$styleManage = 'color:#ff6131;background-color:#fff;border-top:1px solid #c9c9c9;font-weight:bold;';
if(isset($_POST['submit'])){


	$description=$_POST['description'];
	$services=$_POST['services'];
	$refund=$_POST['refund'];
	$establishment=$_POST['establishment'];	
	$edit_file=$_POST['edit_file'];
	$areas_cover=$_POST['areas_cover'];
	
	if($edit_file=="yes"){
		// function parameter variables
		$fieldname = 'image_upload_box';
		$destination = '../../members/uploads/logo/';
		$image_file = $adid.'.jpg';
		$width = 300;
		$height = 150;
		$watermark = FALSE; // true is on - false is off
	
		// deleting old logo
		$old_image = $_POST['old_image'];
		if (file_exists($destination.$old_image)) {
			@unlink($destination.$old_image);
		}
		
		// IMAGE UPLOAD -- file needs to be jpg,gif,bmp,x-png and 4 MB max
		if (($_FILES[$fieldname]["type"] == "image/jpeg" || $_FILES[$fieldname]["type"] == "image/jpg" || $_FILES[$fieldname]["type"] == "image/pjpeg" || $_FILES[$fieldname]["type"] == "image/gif" || $_FILES[$fieldname]["type"] == "image/png") && ($_FILES[$fieldname]["size"] < 4000000))	{
			include 'image_logo_upload.php';
			img_up($fieldname,$destination,$image_file,$width,$height,$watermark);
		}else{
			$error = TRUE;	
		}
		// sql code to insert new logo name
		$imageExist=", image = '{$image_file}'";
	}elseif($edit_file=="delete"){
		// deleting old logo
		$old_image = $_POST['old_image'];
		$destination = '../../members/uploads/logo/';
		if (file_exists($destination.$old_image)) {
			@unlink($destination.$old_image);
		}
		$imageExist=", image=''";
	}
	
	mysql_query("UPDATE ads SET 
			description='$description',
			services='$services',
			refund='$refund',
			establishment='$establishment',
			areas_cover='$areas_cover'
			{$imageExist}
			WHERE `adid` = '$adid' AND `memberid` = '{$memberid}'");
	$success=TRUE;
}

$add_que_sql = mysql_query("SELECT * FROM ads WHERE memberid ='{$memberid}' AND adid ='{$adid}'");
$add_row = mysql_fetch_array($add_que_sql);

?>
<!DOCTYPE html>
<html>

<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>YellowLeaf UK</title>
<link href="../../style.css" rel="stylesheet" type="text/css">
<link href="../style_staff.css" rel="stylesheet" type="text/css">
<script language="javascript">
<!--
function show(){
document.getElementById('up_file').style.display='';
document.getElementById('pic').style.display='none';
}

function hide(){
document.getElementById('up_file').style.display='none';
document.getElementById('pic').style.display='';
}

function CheckPostAd(){
 if(document.RegForm.description.value==""){
  window.alert('Please enter your business description.');
  document.RegForm.description.focus();
  return false;
 }
  if(document.RegForm.services.value==""){
  window.alert('Please enter the services that your business provides.');
  document.RegForm.services.focus();
  return false;
 }

    if(document.RegForm.establishment.value==""){
  window.alert('Please enter your business establishment.');
  document.RegForm.establishment.focus();
  return false;
 }
 
}

//-->
</script>
</head>

<body>

<? include '../staff_header.php'; include 'edit_menu.php';?>
<table class="tbwdth">
	<tr>
		<td valign="top">
		<div class="cnHead">Manage Advert</div>
		<?if($success==TRUE){?>
		<div class="successDvBx">
		Update Successful. Your details have been saved. <br><a href="edit_3.html?adid=<?=$adid?>">Click here to go to Section 3 ></a>
		</div>
		<?}?>		
		<form name="RegForm" action="edit_2.html?adid=<?=$adid?>&memberid=<?=$memberid?>" method="POST" enctype="multipart/form-data" onsubmit="return CheckPostAd();" autocomplete="off">
			<table class="cnTbl" width="100%">
				<tr>
					<td align="left" valign="top" class="cnTitle" style="padding-left:25px" >
					Your Business Description*:<br>
					<div class="cnTitleDesc">Please enter a brief description 
						about your business. <br>
						<i>(Providing more information will give your more 
						search engine exposure)</i></div>
					<textarea id="description" name="description" rows="8" style="width:590px"><?=$add_row['description']?></textarea></td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td align="left" valign="top" class="cnTitle" style="padding-left:25px" >Business Facilities*:<br>
					<div class="cnTitleDesc">Please enter the facilities that your business provides.</div>
					<textarea id="services" name="services" rows="8" style="width:590px"><?=$add_row['services_offered']?></textarea></td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td align="left" valign="top" class="cnTitle" style="padding-left:25px" >
					Your Refund Policy:<br>
					<div class="cnTitleDesc">Please enter any refund policy that your business 
						may have.</div>
					<textarea id="refund" name="refund" rows="8" style="width:590px"><?=$add_row['refund']?></textarea>
					</td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td align="left" valign="top" class="cnTitle" style="padding-left:25px" >
					Areas Your Business Covers*:<br>
					<div class="cnTitleDesc">Please provide the locations that your business covers e.g. cities, areas, towns and postcodes.</div>
					<textarea id="areas_cover" name="areas_cover" rows="8" style="width:590px"><?=$add_row['areas_cover']?></textarea></td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td align="left" valign="top" class="cnTitle" style="padding-left:25px" >
					Your Business Establishment*:<br>
					<div class="cnTitleDesc">Please enter a brief description of 
						how long your business has been established.</div>
					<textarea id="establishment" name="establishment" rows="8" style="width:590px"><?=$add_row['establishment']?></textarea></td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
								<tr>
					<td valign="top" class="cnTitle" style="padding-left:25px">Upload logo (optional):<br>
					<div class="cnTitleDesc">Please upload the logo of your business.</div>
					<div>Yes <input type="radio" name="edit_file" value="yes" onclick="show()"> 
					No <input type="radio" name="edit_file" value="no" onclick="hide()" checked>
					 - || - Remove <input type="radio" name="edit_file" value="delete" onclick="hide()">
					</div>
					<?if (!empty($add_row['image'])){
					echo '<div id="pic"><div style="margin:10px 0px 5px;font-weight:bold;color:#444;">Your Current Logo:</div><div><img width="100" src="../../members/uploads/logo/'.$adid.'.jpg" border="0" /></div></div>';
					}?>
					<div id="up_file" style="display:none">
					<input name="image_upload_box" type="file" />
					<input type="hidden" name="old_image" value="<?=$add_row['image']?>">
					<?if($error2 == "Please upload a file with a .gif or .jpg extention"){echo "<br><b>Please upload a file with a .gif or .jpg extention<b>";}?>
					</div>
					</td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td>
					<span style="font-size:9pt;color:#666;">* mandatory fields that must be filled in.</span>
					</td>
				</tr>
			</table>
			<input class="blueBtn fancyBtn" style="border:0px;float:left;" type="submit" value="Update >" name="submit">
		</form>
		</td>
	</tr>
</table>

</body>

</html>

Youez - 2016 - github.com/yon3zu
LinuXploit