403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/baberankings.com.bak/members/modules/chat/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/baberankings.com.bak/members/modules/chat/chat.php
<?
/* K-Rate
(C) Rinalds Uzkalns, 2003-2004. All Rights Reserved
http://turn-k.net

Version: 1.00 (22.09.04)
*/
?>
<?
ob_start();
chdir('..');chdir('..');

function filter ( $Text )
{
//  First match things beginning with http:// (or other protocols)
   $NotAnchor = '(?<!"|href=|href\s=\s|href=\s|href\s=)';
   $Protocol = '(http|ftp|https):\/\/';
   $Domain = '[\w]+(.[\w]+)';
   $Subdir = '([\w\-\.,@?^=%&:\/~\+#]*[\w\-\@?^=%&\/~\+#])?';
   $Expr = '/' . $NotAnchor . $Protocol . $Domain . $Subdir . '/i';

   $Result = preg_replace( $Expr, "<a href=\"$0\" title=\"$0\" target=\"_blank\">$0</a>", $Text );

//  Now match things beginning with www.
   $NotAnchor = '(?<!"|href=|href\s=\s|href=\s|href\s=)';
   $NotHTTP = '(?<!:\/\/)';
   $Domain = 'www(.[\w]+)';
   $Subdir = '([\w\-\.,@?^=%&:\/~\+#]*[\w\-\@?^=%&\/~\+#])?';
   $Expr = '/' . $NotAnchor . $NotHTTP . $Domain . $Subdir . '/i';

   return preg_replace( $Expr, "<a href=\"http://$0\" title=\"http://$0\" target=\"_blank\">$0</a>", $Result );
}
include 'kernel/initialize.php';
include 'includes/verify_session.php';

$act = $en['act'];

$room = $en['room'];

$dir = dirname(dirname($dir));
if (substr($dir,-1) != '/') $dir .= '/';

if ($act == 'show' || $act == 'post') {

        $refresh = c_msg_refresh;

        }

elseif ($act == 'users') {

        $refresh = c_usr_refresh;

        }


//update online table

$time = time();

//make leave messages and update table

sql_query("DELETE FROM $chatonlinetable WHERE co_time<".(time()-(c_online_time*2)));

sql_query("INSERT INTO $chattable (c_sender,c_to,c_time,c_text) SELECT 0,$room,$time,co_user FROM $chatonlinetable WHERE co_time<".(time()-c_online_time));

sql_query("DELETE FROM $chatonlinetable WHERE co_time<".(time()-c_online_time));

sql_query("DELETE FROM $chatonlinetable WHERE co_user=$usrdata[m_id]");


//join message?

if (sql_affected_rows() == 0)

        sql_query("INSERT INTO $chattable (c_sender,c_to,c_time,c_text) VALUES (-1,$room,$time,$usrdata[m_id])");



//update time

sql_query("INSERT INTO $chatonlinetable VALUES($room,$usrdata[m_id],$time)");



//post message?

if ($act == 'post') {

        $msg = $en[msg];

        $msg = strip_tags($msg,'<i><u><b>');

        $msg = preg_replace("/_(.*)_/","<i>\\1</i>",$msg);

        $msg = preg_replace("/\*(.*)\*/","<b>\\1</b>",$msg);

        $msg = $msg;

        $msg = sql_escape_string($msg);

        

        sql_query("INSERT INTO $chattable VALUES(0,$usrdata[m_id],$room,$time,'$msg')");

        exit;

        }



?>



<html>

<head>

<link rel=stylesheet href='<? echo $dir; ?>css.css'>

</head>

<body>
<div style='padding:5px'>

<?

$out = '';

//show list

if ($act == 'show') {

        //get smilies

        $f = fopen('smilies.txt','r') or die('couldn`t open smile file');
        while(!feof($f)) {
                $s = chop(fgets($f));
                list($file,$smile) = explode('|',$s);
                $smiles[$smile] = $file;
                }
        fclose($f);

        if (!$en['tstamp']) $en['tstamp'] = time()-2;
        $q = "SELECT * FROM $chattable LEFT JOIN $membtable ON $chattable.c_sender=$membtable.m_id WHERE c_to=$room AND c_time>=".(int)$en['tstamp']." AND c_time<".time()." ORDER BY c_time DESC LIMIT ".c_msg;
        $res = sql_query($q);

        //delete old messages
        sql_query("DELETE FROM $chattable WHERE c_time<".(time()-30));


        while ($line = sql_fetch_assoc($res))



                if ($line[c_sender] == 0 || $line[c_sender] == -1) {

                    if ($usrdata['m_chat_msg'] == 0) {

                        $out .= '<b><font color=green>Admin:</font></b> ';

                        $r = sql_query("SELECT * FROM $membtable WHERE m_id=$line[c_text]");

                        $l = sql_fetch_assoc($r);

                        if ($line[c_sender] == 0) {

                                $msg = ' '._has_left;

                                } else {

                                $msg = ' '._has_joined;

                                }

                                

                        $out .= '<a href="'.$dir.'view/'.$l[m_user].'.html" target=_blank>'.$l[m_user].'</a> '.$msg.'<br>';





                        }

                        }



                else {

                        $out .= '<b><a href="'.$dir.'view/'.$line[m_user].'.html" target=_blank>'.$line[m_user].'</a>:</b> '.filter($line[c_text]).'<br>';
                        }

                        foreach ($smiles as $key => $value) {
                                $out = str_replace($key, '<img src="'.$dir.'images/smilies/'.$value.'">', $out);
                                }
                        $out = stripslashes($out);
//                        $out = str_replace("'","`",$out);

        ob_clean();
        echo time().'|'.$out;
        exit;
        }



if ($act == 'users') {

        $res = sql_query("SELECT * FROM $chatonlinetable LEFT JOIN $membtable ON $membtable.m_id=$chatonlinetable.co_user WHERE co_room=$room ORDER BY co_user ASC");

        echo '<b>'._memb_chatting.' ('.sql_num_rows($res).')</b>';

        while ($line = sql_fetch_assoc($res))

                echo '<li><a href="'.$dir.'view/'.$line[m_user].'.html" target=_blank>'.$line[m_user].'</a><br>';

        }


?>
</div>
</body>
<? $buf = ob_get_contents(); ob_clean();  echo $buf; ob_end_flush(); exit; ?>

Youez - 2016 - github.com/yon3zu
LinuXploit