403Webshell
Server IP : 51.89.169.208  /  Your IP : 216.73.216.57
Web Server : Apache
System : Linux ns3209505.ip-198-244-202.eu 4.18.0-553.27.1.el8_10.x86_64 #1 SMP Tue Nov 5 04:50:16 EST 2024 x86_64
User : yellowleaf ( 1019)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/yellowleaf/public_html/staff/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/yellowleaf/public_html/staff/BACKUP_decline.php
<?

include '../connect.php';
session_start();
$username = ucfirst($_SESSION['username']);
if(!($username)){
echo 'Login:<br>';
include 'form.html';
die(); // kill page
}
$adid=$_GET['adid'];
$memberid=$_GET['memberid'];
$advertName=$_GET['adname'];
if(isset($_POST['submit'])){
	$query = "UPDATE ads SET active='0',decline='1', decline_reason='{$_POST['reason']}' WHERE adid='{$adid}' AND memberid='{$memberid}'";
	mysql_query($query) or die(mysql_error()); // run query
	
	$a = mysql_query("SELECT * FROM members WHERE memberid='{$_GET['memberid']}'");
	$b = mysql_fetch_array($a);
	$contactname=$b['contactname'];
	$ename=$b['ename'];
	///////////// SEND EMAIL /////////////////////
	//////////////////////////////////////////////

	 $message = file_get_contents("email/declined.txt");
	 $subject = "Important - Your Advert at YellowLeaf";

	 $message = str_replace("[[[sitename]]]", YellowLeaf, $message);
	 $message = str_replace("[[[contactname]]]", $contactname, $message);
	 $message = str_replace("[[[advertName]]]", $advertName, $message);
	 $message = str_replace("[[[reason]]]", $_POST['reason'], $message);

	 $from = "From: info@yellowleaf.co.uk";

	 mail ($ename, $subject, $message, $from);
	
	header('Location: /staff');
	$updated==TRUE;
}
?>
<html>

<head>
<meta http-equiv="Content-Language" content="en-gb">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<link href="../style.css" rel="stylesheet" type="text/css">
<link href="style_staff.css" rel="stylesheet" type="text/css">
<title>Staff Area</title>
</head>

<body>

<?
include 'staff_header.php';

if($updated==TRUE){
	echo '<div class="successDvBx">Successfully Declined!</div>';
}
?>
<form method="POST" action="decline.php?adid=<?=$adid?>&memberid=<?=$memberid?>&adname=<?=$advertName?>">
	<table class="tbwdth cnTbl" width="945">
		<tr>
			<td valign="top" style="text-align: right" width="181"><b>Member ID:</b></td>
			<td valign="top" style="text-align: right" width="12">&nbsp;</td>
			<td width="748"><b><font color="#DD4B39"><?=$memberid?></font></b></td>
		</tr>	
		<tr>
			<td valign="top" style="text-align: right" width="181"><b>Advert ID:</b></td>
			<td valign="top" style="text-align: right" width="12">&nbsp;</td>
			<td width="748"><font color="#DD4B39"><b><?=$adid?></b></font></td>
		</tr>
		<tr>
			<td valign="top" style="text-align: right" width="181"><b>Reason of Decline:</b></td>
			<td valign="top" style="text-align: right" width="12">&nbsp;</td>
			<td width="748"><textarea rows="7" name="reason" cols="69"></textarea></td>
		</tr>
		<tr>
			<td valign="top" width="181"></td>
			<td valign="top" width="12">&nbsp;</td>
			<td width="748"><input type="submit" value="Decline >" name="submit"></td>
		</tr>
	</table>
</form>

</body>

</html>

Youez - 2016 - github.com/yon3zu
LinuXploit