403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/designerclone/xfcadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/designerclone/xfcadmin/adm.store.php
<?php
$requiredLevel = 9;
	include('adm.config.php');
	
	include('adm.header.php');
	
	
	$pageDisplay = 1000;
	
	if(isset($_GET['v'])) {
		$pageView = addslashes($_GET['v']);
	} else {
		$pageView = "forsale";
	}
	
	if(isset($_GET['t']) && is_numeric($_GET['t'])) {
		$pageType = addslashes($_GET['t']);
	} else {
		$pageType = 0;	
	}
	
	if(isset($_GET['p']) && is_numeric($_GET['p'])) {
		$pageNumber = addslashes($_GET['p']);
	} else {
		$pageNumber = 1;
	}

	if ($pageNumber == 1) {
		$startResults = 0;
	} else {
		$startResults = ($pageNumber - 1) * $pageDisplay;
	}
	
	$add_sql = "";
		
	// TYPE LIMIT
	if($pageType > 0){
		//$add_sql .= " AND content_type = '".$pageType."' ";
	} 
	
	// ACCESS LEVEL
	if ($userDetails->xfcadmin == 1) {
		// THIS IS A MODEL
		$query = "SELECT * FROM cms_billing_store WHERE model_id = '" . $userDetails->model_id . "'  ".$add_sql."  ORDER BY timestamp DESC";
	} elseif ($userDetails->xfcadmin == 9) {
		// THIS IS TAMMY, DISPLAY ALL.
		$query = "SELECT * FROM cms_billing_store  ".$add_sql." ORDER BY timestamp DESC";
	} else {
		die(); // How did they get here?
	}
	
	$quickCount_sql = mysql_query($query) or die(mysql_error());
	$getCount = mysql_num_rows($quickCount_sql);
	
	if($pageNumber > ceil($getCount/$pageDisplay)) {
		$pageNumber = 1;
	}
	
	$getPagination = paginateStuff("adm.store.php","v=".$pageView,$pageNumber,$getCount,$pageDisplay,"all");
		
	$query .= " LIMIT " . $startResults . "," . $pageDisplay;

	$get_sql = mysql_query($query) or die(mysql_error());
	
?>

<h3>STORE
  <?php if($userDetails->xfcadmin == 9) { ?>
  <small><a href="adm.store.modify.php">Add Store Item</a></small>
  <?php } ?>
</h3>
<?php
if (mysql_num_rows($get_sql) > 0) {
if($userDetails->xfcadmin == 9) {
// DROP DOWN OF MODELS
// DROP DOWN OF TYPE  
  }
  ?>
<table class="table table-bordered table-hover table-condensed">
  <thead>
    <tr>
      <?php if($userDetails->xfcadmin == 9) { ?>
      <th width="50"></th>
      <?php } ?>
      <th>ID#</th>
      <th>Model</th>
      <th>Delivery</th>
      <th>Title</th>
      <th>Price</th>
      <th>Status</th>
    </tr>
  </thead>
  <tbody>
    <?php
		while ($row = mysql_fetch_object($get_sql)) {
			//$url = "video.php?id=" . $row->content_id;
			$modelDetails = cartModel($row->model_id,0);
			?>
    <tr <?php if ($row->itemStatus == 0) { echo 'class="danger"'; } ?>>
      <?php if($userDetails->xfcadmin == 9) { ?>
      <td><a href="adm.store.modify.php?id=<?php echo $row->storeID; ?>">EDIT</a></td>
      <?php } ?>
      <td><?php echo $row->storeID; ?></td>
      <td><?php echo $modelDetails->name; ?></td>
      <td><?php echo $row->itemDelivery; ?></td>
      <td><?php echo substr($row->itemDescription, 0, 40) . '...'; ?></td>
      <td>$<?php echo $row->itemPrice; ?></td>

      <td><?php if ($row->itemStatus == 0) { echo 'SOLD'; } else { echo 'FOR SALE'; } ?></td>

    </tr>
    <?php } ?>
  </tbody>
</table>
<?php
}
include ('adm.footer.php');
?>

Youez - 2016 - github.com/yon3zu
LinuXploit