403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/content.photoset.php
<?php
ob_start();
if (!isset($_GET['id'])) {
	header('Location: models.php');
	exit();
}

include('site.config.php');

$content_id = @mysql_real_escape_string($_GET['id']);

$get = @mysql_query("SELECT * FROM cms_content WHERE status = '1' AND releasedate <= '" . $today . "' AND content_id = '" . $content_id . "' AND content_type = '1'");

if (@mysql_num_rows($get) == 0) {
	header('Location: models.php');
	exit();
}

$row = mysql_fetch_object($get);

$getModel = @mysql_query("SELECT * FROM cms_models WHERE model_id = '" . $row->model_id . "'");
$modelDetails = @mysql_fetch_object($getModel);

// TURN INTO FUNCTION?
if($userDetails->xfcadmin == 9) {
	$purchased = 1;
}elseif($userDetails->xfcadmin == 1 && $modelDetails->model_id == $userDetails->model_id) {
	$purchased = 1;	
} else {
	$purchased = 0;	
	if (isset($member_id) && $member_id > 0 && isset($content_id)) {
		$purchased_sql = @mysql_query("SELECT * FROM cms_billing_purchases WHERE memberID = '" . $memberID . "' AND  relatedID = '0' AND itemID = '".$content_id."'");
		if (@mysql_num_rows($purchased_sql) == 1) {
			$purchased = 1;
		}
	}
}

if (isset($_GET['action']) && $_GET['action'] == 'addtocart') {		
	if (isset($content_id) && isset($row->title) && isset($row->price)) {
		cartAdd($member_id, $content_id, '1', '0', $row->price);
		die();
	}
}

if(isset($_GET['zip']) && $purchased == 1) {
	$content_directory = "/home/httpd/html/xfanclubscontent/models/";
 
    $explodedDirectory = explode("/", $row->directory);
	$folderName = $explodedDirectory[1];
	$url =  'http://xfanclubs.com/zip_files/' . $row->content_id . '_' . $folderName . '.zip';
	header('Location: ' . $url);
    
    /*
    $explodedDirectory = explode("/", $row->directory);
	$folderName = $explodedDirectory[1];
	$url = secureFile($row->directory . '/'. '.zip');
    $full_directory = $content_directory . $row->directory; 
        
    $string = substr($full_directory,strrpos($full_directory, "/", 0)+1, strlen($full_directory));
    $zipFileName = "zip_files/" . preg_replace("/[^A-Za-z0-9-]/", '', $string) . ".zip";
    zipDirectory($full_directory, $zipFileName);
	//header('Location: ' . $url);
    */
    	
}

include('site.header.php');

$purchaseUrl = "content.photoset.php?id=" . $content_id . "&action=addtocart";

//echo $row->model_id;
//echo $row->title;


if ($purchased == 1) {
?>	
	<div class="col-md-12 boxemout">
  <div class="content-box">
    <h3 id="videos"><span class="glyphicon glyphicon-camera" aria-hidden="true"></span> <?php echo stripslashes($row->title); ?></h3>
    <h4>Seller: <a href="<?php echo modelOutputName($modelDetails->name); ?>"><?php echo $modelDetails->name; ?></a></h4><br />
<?php
    echo '<div class="row"><div class="col-lg-3"><a class="btn btn-danger btn-block" href="content.photoset.php?id='.$content_id.'&zip=1" role="button">DOWNLOAD ZIP FILE</a></div></div><br />';

	$getImages = @mysql_query("SELECT * FROM cms_content_items WHERE content_id = '" . $row->content_id . "' ORDER BY itemID ASC");
	while ($image = mysql_fetch_object($getImages)) {
		echo '<div class="col-lg-2"><a href="content.photoset.gal.php?id='.$content_id.'&img='.$image->itemID.'"><img src="getImgs.php?img=content/models/' . $row->directory . '/' . strtolower($image->filename) .'"></a></div>';
	}
?>
<div class="clearfix"></div>
</div>
</div>
<div class="clearfix"></div>

<?php
} else {
?>
<div class="col-md-12 boxemout"> 
  <!-- Start Model Section -->
  <div class="modeldisp-bg"> 
    
    <!-- large poster image for model -->
    <div class="modeldisp">
      <div class="modeldisp-pic ibox">
        <h1><?php echo $modelDetails->name; ?></h1>
        <a href="model.php?id=<?php echo $row->model_id; ?>"><img src="content/models/<?php echo $row->model_id; ?>_mProfileSmall.jpg" alt="<?php echo $modelDetails->name; ?>" /></a>
        <ul class="modelnav">
          <li class=""><h4><span class="glyphicon glyphicon-info-sign" aria-hidden="true"></span>Photos: <?php echo $row->num_photos; ?></h4></li>
          <li class=""><h4><span class="glyphicon glyphicon glyphicon-compressed" aria-hidden="true"></span>Zip Downloads</h4></li>
			<li class="switch"><h4><span class="glyphicon glyphicon-info-sign" aria-hidden="true"></span>Price: $<?php echo $row->price; ?></h4></li>
          <li class=""></li>
        </ul>
        <div class="social">
        <a class="btn btn-danger" href="<?php echo $purchaseUrl; ?>" role="button">     ADD TO CART     </a>
        </div>
      </div>
      <img alt="<?php echo $row->name; ?>" class="large_bg_image" data-images="[&quot;content/models/<?php echo $row->directory; ?>/main.jpg&quot;]" src="content/models/<?php echo $row->directory; ?>/main.jpg" /> 
      <script>
$(document).ready(function(){
	var bgs = $('.large_bg_image').data('images');
	if (bgs) {
		var background = bgs[Math.floor(bgs.length * Math.random())];
		$('.large_bg_image').attr('src',background);		
	}
});
</script> 
      
      <div id="qa" class="bio">
        <h3><?php echo stripslashes($row->title); ?></h3>
       <?php echo nl2br($row->description); ?>
       </div>     
    </div>
  </div>
  <!-- model header --> 
  </div>
<div class="col-md-12 boxemout">
<div class="row no-gutters" align="center">
    <div class="col-md-4"><img src="getImgs.php?img=content/models/<?php echo $row->directory; ?>/pre1.jpg"></div>
    <div class="col-md-4">
        <div class="row no-gutters">
            <div class="col-md-6"><img src="getImgs.php?img=content/models/<?php echo $row->directory; ?>/pre2.jpg"></div>
            <div class="col-md-6"><img src="getImgs.php?img=content/models/<?php echo $row->directory; ?>/pre3.jpg"></div>
            <div class="col-md-6"><img src="getImgs.php?img=content/models/<?php echo $row->directory; ?>/pre4.jpg"></div>
            <div class="col-md-6"><img src="getImgs.php?img=content/models/<?php echo $row->directory; ?>/pre5.jpg"></div>
            <div class="col-md-12"><img src="getImgs.php?img=content/models/<?php echo $row->directory; ?>/pre6.jpg"></div>
        </div>
    </div>
    <div class="col-md-4"><img src="getImgs.php?img=content/models/<?php echo $row->directory; ?>/pre7.jpg"></div>
</div>
</div>

<?php /*
<div class="clearfix"></div>
<div class="col-md-12 boxemout">
  <div class="content-box">
    <h3 id="videos"><span class="glyphicon glyphicon-camera" aria-hidden="true"></span> SAMPLES</h3>
<?php
	$getImages = @mysql_query("SELECT * FROM cms_content_items WHERE content_id = '" . $row->content_id . "' ORDER BY itemID ASC LIMIT 6");
	while ($image = mysql_fetch_object($getImages)) {
		echo '<div class="col-lg-2"><img src="content/models/' . $row->directory . '/' . strtolower($image->filename) .'"></div>';
	}
?>
</div>
</div>
*/ ?>



<div class="clearfix"></div>
<?php
}

include('site.footer.php');
ob_end_flush();
?>

Youez - 2016 - github.com/yon3zu
LinuXploit