403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/glamourdollars.com/vip-area/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/glamourdollars.com/vip-area/mod_qa_post.php
<?php
if (isset($_POST['post'])) {
	//include('config.php');
	//dbConn();
	$model_id = $_POST['model_id'];
	$name = addslashes(strip_tags($_POST['name']));
	$email = addslashes(strip_tags($_POST['email']));
	$question = addslashes(strip_tags($_POST['question']));
	$question = str_replace(chr(10), "<br />", $question);
  $question = str_replace(chr(13), "", $question);
		
	if($question == "") {
		printf("<meta http-equiv=\"Refresh\" content=\"0;url=./model.php?id=".$model_id."&error=2\">");
		die();
	}
	
	$rvalues = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890";
	$rlen = strlen($rvalues);
	$code = "";
	for($i=0;$i<25;$i++) {
		$code .= substr($rvalues, rand(1, $rlen), 1);
	}
	
	$checkcode = @mysql_query("SELECT * FROM qa WHERE code = '".$code."'");
	if(@mysql_num_rows($checkcode) > 0) {
		$rvalues = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890";
		$rlen = strlen($rvalues);
		$code = "";
		for($i=0;$i<25;$i++) {
			$code .= substr($rvalues, rand(1, $rlen), 1);
		}
	}

	$insert = @mysql_query("INSERT INTO qa SET date=NOW(), code='".$code."', model_id='".$model_id."', name='".$name."', email='".$email."', question='".$question."'");
	
	$subject = " ** VIPAREA.COM MODEL QA ** ";
	$model_info = @mysql_query("SELECT email FROM cms_models WHERE model_id = '".$model_id."' AND enable_qa = '1'");
	$model_email = @mysql_result($model_info, 0, 'email');

	$to = "VIParea.support@gmail.com";
	
	if($model_email != "") { $to .= ",".$model_email; }
	
	$headers = "From: VIPAREA.COM <NO-REPLY@VIPAREA.COM>\r\n" .
				 'X-Mailer: PHP/' . phpversion() . "\r\n" .
				 "MIME-Version: 1.0\r\n" .
				 "Content-Type: text/html; charset=utf-8\r\n" .
				 "Content-Transfer-Encoding: 8bit\r\n\r\n";
	
	$message = "<strong>QUESTION:</strong><br>";
	$message .= $question."<br><br><br>";
	$message .= "<strong>ANSWER:</strong> http://www.viparea.com/_qa/index.php?code=".$code."<br><br>";
	
	mail($to, $subject, $message, $headers);
		
	
	//printf("<meta http-equiv=\"Refresh\" content=\"0;url=./qa.php?id=".$model_id."&error=1\">");
	printf("<meta http-equiv=\"Refresh\" content=\"0;url=./model.php?id=".$model_id."&error=1\">");
	die();
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit