403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/www.superporner.com/porn/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/www.superporner.com/porn/admin/edit_content.php
<? 
include_once('db.php');
if(!is_numeric($_REQUEST[id])) { exit(); } 

if($_POST) {
	$_POST = mysql_real_escape_array($_POST);
		$_POST[title] = strip_tags($_POST[title]); 
	$_POST[description] = strip_tags($_POST[description]); 
	$_POST[keywords] = strip_tags($_POST[keywords]); 
	mysql_query("UPDATE content SET title = '$_POST[title]', description = '$_POST[description]', main_thumb = '$_POST[mainthumb]', length = '$_POST[length]', keywords = '$_POST[keywords]', scheduled_date = '$_POST[scheduled_date]', encoded_date = NOW(), scheduled_date = NOW(), paysite = '$_POST[paysite]', pornstars = '$_POST[pornstars]', embed = '$_POST[embed]', enabled = '$_POST[enabled]', pornstartmp = '', force_related = '$_POST[force_related]'  WHERE record_num = '$_REQUEST[id]'") or die(mysql_error());
	mysql_query("UPDATE content_views SET views = '$_POST[views]' WHERE content = '$_REQUEST[id]'");
	$success = true;
	mysql_query("DELETE FROM content_niches WHERE content = '$_REQUEST[id]'");
	mysql_query("DELETE FROM content_pornstars WHERE content = '$_REQUEST[id]'");
	if($_FILES[postroll][tmp_name]) {
		$name = $_REQUEST[id].'.jpg';
		move_uploaded_file($_FILES['postroll']['tmp_name'], $thumb_path.'/embedded/'.$name); 
	}
	if($_POST[niche]) {
		foreach($_POST[niche] as $i) {
			if(is_numeric($i)) {
				mysql_query("INSERT INTO content_niches (content,niche) VALUES ('$_REQUEST[id]','$i')");
			}
		}
	}
	if($_POST[pornstar]) {
		foreach($_POST[pornstar] as $i) {
			if(is_numeric($i)) {
				mysql_query("INSERT INTO content_pornstars (content,pornstar) VALUES ('$_REQUEST[id]','$i')");
			}
		}
	}	
}
$result = mysql_query("SELECT content.*, content_views.views as views FROM content, content_views WHERE content_views.content = content.record_num AND content.record_num = '$_REQUEST[id]'");
$row = mysql_fetch_array($result); 
if(!$row[record_num]) {
	echo "ID Not found";
	require "footer.php";
	exit();  
	
}
?>
<html>
<head>
<link href="css/style.css" media="screen" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="<? echo $basehttp; ?>/js/swfobject.js"></script>
<script type="text/javascript" src="<? echo $basehttp; ?>/admin/js/jquery-latest.js"></script>
<? if($success) { ?>
<script>$(document).ready(function(){parent.$.fn.colorbox.close()});</script>
<? } ?>
<script>
$(document).delegate('.changeThumb','click',function(){
	var id = $(this).attr('data');
	$.get('swap_thumb.php?id=<? echo $row[record_num]; ?>&thumb='+id);	
	$(document).ready(function(){parent.$.fn.colorbox.close()});	
	return false;
});
</script>
</head>
<body style='background-image: none;'>
<div style='width: 925px; height: 625px; overflow: hidden'>            

<form method='post' enctype="multipart/form-data" action=''>
<input type='hidden' name='referrer' value='<? echo $_SERVER['HTTP_REFERER']; ?>' />
<input type='hidden' name='id' value='<? echo $_REQUEST[id]; ?>' />
  <table width="925" border="0" align="center" cellpadding="2" cellspacing="0" style='font-family: Arial, Helvetica, sans-serif; font-size: 11px;'>
    <tr>
      <td width="63" valign="top" class="style4">Title</td>
      <td colspan="3" align="left" valign="top" class="style4"><input name="title" type="text" id="title" value="<? echo $row[title]; ?>" size="40" maxlength="255" /></td>
      <td width="342" rowspan="4" align="left" valign="top" class="style4"><table width="100%" border="0" cellspacing="0" cellpadding="1" style='font-family: Arial, Helvetica, sans-serif; font-size: 11px;'>
			<tr>
				<td>Length (seconds)</td>
				<td><input name="length" type="text" id="length" value="<? echo $row[length]; ?>" size="10" maxlength="255" /></td>
			</tr>
      		<tr>
      			<td>Views</td>
				<td><input name="views" value="<? echo $row[views]; ?>" type="text" id="views" size="10" maxlength="255" /></td>
			</tr>
      		<tr>
      			<td>Paysite</td>
				<td><select name='paysite'>
					<option value='0'>None</option>
					<?
        $rresult = mysql_query("SELECT * FROM paysites ORDER BY name ASC");
        while($rrow = mysql_fetch_array($rresult)) {
            if($row[paysite] == $rrow[record_num]) { $selected = 'selected'; } else { $selected = ''; }
            echo "<option $selected value='$rrow[record_num]'>$rrow[name]</option>";
        }
        ?>
				</select></td>
			</tr>
      		<tr>
      			<td>Published</td>
				<td><select name="enabled" id="enabled">
					<option <? if($row[enabled] == '1') { echo 'selected'; } ?> value="1">Yes</option>
					<option <? if($row[enabled] == '0') { echo 'selected'; } ?> value="0">No</option>
				</select></td>
			</tr>
			<tr>
      			<td>Force Related (<a href='#' title='Comma separate id numbers of other content, which will be forced as related videos/photos on video page. Please enter with no trailing comma.'>?</a>)</td>
				<td><input name="force_related" value="<? echo $row[force_related]; ?>" type="text" id="force_related" size="10" maxlength="255" /></td>
			</tr>
      		<tr>
      			<td>Submitter</td>
      			<td><? if($row[submitter] != 0) { 
	  $rresult = mysql_query("SELECT * FROM users WHERE record_num = $row[submitter]"); 
	  $rrow = mysql_fetch_array($rresult); 
	  echo "<a href='edit_user.php?id=$rrow[record_num]'>$rrow[username]</a>"; 
	  }
	  else { echo "Anonymous"; }
	  ?></td>
      			</tr>
			</table></td>
      <tr>
      <td valign="top" class="style4">Description</td>
      <td colspan="3" align="left" valign="top" class="style4"><textarea name="description" cols="80" rows="3" id="description2"><? echo $row[description]; ?></textarea></td>
    </tr>
    <tr>
      <td valign="top" class="style4">Keywords</td>
      <td colspan="3" align="left" valign="top" class="style4"><input name="keywords" type="text" id="keywords" value="<? echo $row[keywords]; ?>" size="40" maxlength="255" /></td>
    </tr>
    <tr>
    	<td valign="top" class="style4">&nbsp;</td>
    	<td width="279" align="left" valign="top" class="style4">&nbsp;</td>
    	<td width="182" align="left" valign="top" class="style4">&nbsp;</td>
    	<td width="39" align="left" valign="top" class="style4">&nbsp;</td>
    	</tr>
<? if(!$row[embed]) { ?>
      <tr>
      	<td valign="top" class="style4">Main Thumb<br />
(<a href='regenthumbs.php?id=<? echo $row[record_num]; ?>'>Regenerate</a>)</td>
      	<td colspan="4" align="left" class="style4"><? 
	  for($i = 1; $i <= 8; $i++) {
	  $dirname = str_replace('.flv','',$row[orig_filename]);
	  $subdir = $row[filename][0].'/'.$row[filename][1].'/'.$row[filename][2].'/'.$row[filename][3].'/'.$row[filename][4].'/'; 
	  $dirname = $subdir.$dirname; 
	  ?>
			<span style='float: left; width: 105px; margin-bottom: 10px; text-align: center;'><img style='width: 95px; height: 75px;' border="0" src='<? echo $thumb_url; ?>/<? echo $dirname; ?>/<? echo $row[orig_filename]; ?>-<? echo $i; ?>.jpg' class='changeThumb' data='<? echo $i; ?>' /><br />
			<input name='mainthumb' type='radio' value='<? echo $i; ?>' <? if($row[main_thumb] == $i) { ?>checked="checked"<? } ?> />
Thumb <? echo $i; ?> (<a href='upload_thumb.php?file=<? echo rawurlencode($dirname.'/'.$row[orig_filename].'-'.$i.'.jpg'); ?>'>Change</a>) </span>
			<? 
	  } 
	  ?></td>
      	</tr>
<? } else { ?>
	<tr>
      	<td valign="top" class="style4">Thumb</td>
      	<td colspan="4" align="left" class="style4"><input type="file" name="postroll" id="fileField" /> (jpeg)</td>
      	</tr>
<? } ?>		
      <tr>
      <td colspan="5" valign="top" class="style4"><table width="100%" border="0" cellspacing="0" cellpadding="0" style='font-size: 11px;'>
			<tr>
				<td width="19%" valign="top">Categories:<br />
					<?
unset($thisniche); 
$sresult = mysql_query("SELECT * FROM content_niches WHERE content = '$_REQUEST[id]'");
while($srow = mysql_fetch_array($sresult)) {
	$thisniche[] = $srow[niche];
}
?>
					<select name='niche[]' size="12" multiple="multiple" style='width: 150px;'>
						<?
$presult =  mysql_query("SELECT * FROM niches ORDER BY name ASC");
while($srow = mysql_fetch_array($presult)) {
	if(in_array($srow[record_num],$thisniche)) { $checked = 'selected'; } else { $checked = ''; }
	echo "<option $checked value='$srow[record_num]'>$srow[name]</option>";
}
?>
					</select></td>
				<td width="20%" valign="top">Pornstars:<br />
					<?
unset($thisniche); 
$sresult = mysql_query("SELECT * FROM content_pornstars WHERE content = '$_REQUEST[id]'");
while($srow = mysql_fetch_array($sresult)) {
	$thisniche[] = $srow[pornstar];
}
?>
					<select name='pornstar[]' size="12" multiple="multiple" style='width: 150px;'>
						<?
$presult =  mysql_query("SELECT * FROM pornstars ORDER BY name ASC");
while($srow = mysql_fetch_array($presult)) {
	if(in_array($srow[record_num],$thisniche)) { $checked = 'selected'; } else { $checked = ''; }
	echo "<option $checked value='$srow[record_num]'>$srow[name]</option>";
}
?>
					</select></td>
				<td width="61%" rowspan="2" valign="top"><center>
					<? displayPlayer($row,450,300,'skipAutoPlay'); ?>
				</center></td>
			</tr>
			<tr>
				<td colspan="2" valign="top">
<br>Embed Code:		
				<? if($row[embed]) { ?>
<textarea name="embed" style='width: 100%;' rows="3" id="description"><? echo $row[embed]; ?></textarea></td>

<? } else { ?>   
<textarea name="dupa" style='width: 100%;' rows="3" id="description"><iframe src="<? echo $basehttp; ?>/embed/<? echo $row[record_num]; ?>" width="640" height="480" frameborder="0"><iframe></textarea></td>

<? } ?>
		</td>
				</tr>
		</table>
      	<br /></td>
      </tr>

      <tr>
      <td colspan="5" class="style4"><div align="right">
        <input type="submit" name="button" id="button" value="Save" />
      </div></td>
      </tr>
  </table>
</form>

            </div>
</body>
</html>       

Youez - 2016 - github.com/yon3zu
LinuXploit