403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.45
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/model_admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/model_admin/content.php
<?php

	include ('../config.php');
	dbConn();

	include("auth.php");
	include("model-header.php");

if (isset($_POST['edit'])) {

$content_id = $_POST['content_id'];
$content_type = $_POST['content_type'];

$releasedate = $_POST['ryear'] . "-" . $_POST['rmonth'] . "-" . $_POST['rday'];
//$shootdate = $_POST['syear'] . "-" . $_POST['smonth'] . "-" . $_POST['sday'];

$name = addslashes($_POST['name']);
$sql = mysql_query("SELECT * FROM cms_tags_s WHERE stag_id='$name'");
$namedesc = mysql_result($sql, 0, 'description');

/*
$ident_1 = $_POST['ident_1'];
$release_1 = $_POST['release_1'];
$ident_2 = $_POST['ident_2'];
$release_2 = $_POST['release_2'];
$ident_3 = $_POST['ident_3'];
$release_3 = $_POST['release_3'];
$ident_4 = $_POST['ident_4'];
$release_4 = $_POST['release_4'];
*/

$comment = str_replace(chr(10), "<br />", addslashes($_POST['comment']));
$comment = str_replace(chr(13), "", $comment);
$comment = str_replace(chr(160), "", $comment);

$price = addslashes($_POST['price']);

$sql = mysql_query("DELETE FROM cms_content_models WHERE content_id = '".$content_id."'");
$build_query = "";
$build_query2 = "";
$model_1 = explode("_",$_POST['model_1']);
if (!$model_1[0]=="") { $build_query .= "('".$content_id."','".$model_1[0]."','','','1'),"; $build_query2 .= "('".$content_type."','".$content_id."','".$model_1[1]."'),"; }
$model_2 = explode("_",$_POST['model_2']);
if (!$model_2[0]=="") { $build_query .= "('".$content_id."','".$model_2[0]."','','','0'),"; $build_query2 .= "('".$content_type."','".$content_id."','".$model_2[1]."'),"; }
$model_3 = explode("_",$_POST['model_3']);
if (!$model_3[0]=="") { $build_query .= "('".$content_id."','".$model_3[0]."','','','0'),"; $build_query2 .= "('".$content_type."','".$content_id."','".$model_3[1]."'),"; }
$model_4 = explode("_",$_POST['model_4']);
if (!$model_4[0]=="") { $build_query .= "('".$content_id."','".$model_4[0]."','','','0'),"; $build_query2 .= "('".$content_type."','".$content_id."','".$model_4[1]."'),"; }

if (!$build_query == "") {
	if ($build_query = rtrim($build_query, ',')) { 
		$sql = mysql_query("INSERT INTO cms_content_models (`content_id`, `model_id`, `ident`, `release`, `featured`) VALUES ".$build_query);

				$sql = mysql_query("DELETE cms_tags FROM cms_tags
INNER JOIN cms_tags_s ON cms_tags.stag_id = cms_tags_s.stag_id
WHERE content_type='$content_type' AND content_id='$content_id' AND ctag_id IN ('1','2')");

	if ($build_query2 = rtrim($build_query2, ',')) {

			$sql = mysql_query("INSERT INTO cms_tags (content_type, content_id, stag_id) VALUES ('".$content_type."','".$content_id."','".$name."'),".$build_query2);

		}
		
		}
}

$sql = @mysql_query("UPDATE cms_content SET price='$price', comment='$comment', content_type='$content_type', releasedate='$releasedate', shootdate='$shootdate', title='$namedesc', name_id='$name' WHERE content_id='$content_id'");    

printf("<meta http-equiv=\"Refresh\" content=\"0;url=./content.php\">");

		
} elseif (isset($_POST['post'])) {


$content_type = $_POST['content_type'];
$content_path = $_POST['content_path'];

$releasedate = $_POST['ryear'] . "-" . $_POST['rmonth'] . "-" . $_POST['rday'];
//$shootdate = $_POST['syear'] . "-" . $_POST['smonth'] . "-" . $_POST['sday'];


$name = $_POST['name'];
$sql = mysql_query("SELECT * FROM cms_tags_s WHERE stag_id='$name'");
$namedesc = mysql_result($sql, 0, 'description');

/*
$ident_1 = $_POST['ident_1'];
$release_1 = $_POST['release_1'];
$ident_2 = $_POST['ident_2'];
$release_2 = $_POST['release_2'];
$ident_3 = $_POST['ident_3'];
$release_3 = $_POST['release_3'];
$ident_4 = $_POST['ident_4'];
$release_4 = $_POST['release_4'];
*/

$comment = str_replace(chr(10), "<br />", addslashes($_POST['comment']));
$comment = str_replace(chr(13), "", $comment);
$comment = str_replace(chr(160), "", $comment);

$price = addslashes($_POST['price']);

$sql = "INSERT INTO cms_content SET
content_type='$content_type',
content_path='$content_path',
releasedate='$releasedate',
shootdate='$shootdate',
price='$price',
title='$namedesc',
name_id='$name',
comment='$comment'";

if (@mysql_query($sql)) {
		$content_id = mysql_insert_id();
		//mkdir($photosetsroot.$dir,0777);
		//chmod($photosetsroot.$dir,0777);
		
$build_query = "";
$build_query2 = "";
$model_1 = explode("_",$_POST['model_1']);
if (!$model_1[0]=="") { $build_query .= "('".$content_id."','".$model_1[0]."','','','1'),"; $build_query2 .= "('".$content_type."','".$content_id."','".$model_1[1]."'),"; }
$model_2 = explode("_",$_POST['model_2']);
if (!$model_2[0]=="") { $build_query .= "('".$content_id."','".$model_2[0]."','','','0'),"; $build_query2 .= "('".$content_type."','".$content_id."','".$model_2[1]."'),"; }
$model_3 = explode("_",$_POST['model_3']);
if (!$model_3[0]=="") { $build_query .= "('".$content_id."','".$model_3[0]."','','','0'),"; $build_query2 .= "('".$content_type."','".$content_id."','".$model_3[1]."'),"; }
$model_4 = explode("_",$_POST['model_4']);
if (!$model_4[0]=="") { $build_query .= "('".$content_id."','".$model_4[0]."','','','0'),"; $build_query2 .= "('".$content_type."','".$content_id."','".$model_4[1]."'),"; }

if (!$build_query == "") {
	if ($build_query = rtrim($build_query, ',')) { 
		$sql = @mysql_query("INSERT INTO cms_content_models (`content_id`, `model_id`, `ident`, `release`, `featured`) VALUES ".$build_query);
		if ($build_query2 = rtrim($build_query2, ',')) { 
		$sql = @mysql_query("INSERT INTO cms_tags (content_type, content_id, stag_id) VALUES ('".$content_type."','".$content_id."','".$name."'),".$build_query2);
		}
		
	}
}
if ($content_type == 1) { // photoset
	include ('content_match.php');
	//$sql = @mysql_query("UPDATE cms_content SET num_photos='$count' WHERE content_id='$content_id'");    
	//printf("<meta http-equiv=\"Refresh\" content=\"0;url=./image_upload.php?type=icon&section=photoset&save=".$content_id."_icon.jpg&tn=none&id=".$content_id."\">");
	printf("<meta http-equiv=\"Refresh\" content=\"0;url=./content_photos.php?content_id=".$content_id."\">");
} else { // video
	include ('content_vidgen.php');
	include ('content_match.php');
	//printf("<meta http-equiv=\"Refresh\" content=\"0;url=./image_upload.php?type=icon&section=video&save=".$content_id."_icon.jpg&tn=none&id=".$content_id."\">");
	printf("<meta http-equiv=\"Refresh\" content=\"0;url=./content_photos.php?content_id=".$content_id."\">");
}
    //printf("<meta http-equiv=\"Refresh\" content=\"0;url=./image_upload.php?type=icon&section=".$content_type."&save=".$content_id."_icon.jpg&tn=none&id=".$content_id."\">");
    } else {
        echo 'Error:' . mysql_error();
    } 
		
} elseif (isset($_POST['del'])) {
	$id = $_POST['id'];
	$query = @mysql_query("DELETE FROM cms_content_models WHERE content_id = '".$id."'");
	$query = @mysql_query("DELETE FROM cms_tags WHERE content_type IN ('2','3') AND content_id = '".$id."'");
	$query = @mysql_query("DELETE FROM cms_content WHERE content_id = '" . $id . "' limit 1");
	$query = @mysql_query("DELETE FROM cms_members_fav WHERE content_type IN ('2','3') AND content_id = '" . $id . "'");
	$query = @mysql_query("DELETE FROM cms_members_rate WHERE content_type IN ('2','3') AND content_id = '" . $id . "'");
	$query = @mysql_query("DELETE FROM cms_members_comments WHERE content_type IN ('2','3') AND content_id = '" . $id . "'");		
	printf("<meta http-equiv=\"Refresh\" content=\"0;url=./content.php\">");
} elseif (isset($_GET["add"])) {

$grab_stats = mysql_query("SELECT model_id, name, name_id FROM cms_models ORDER BY name ASC");
$model_html = "";
while ($stats = mysql_fetch_array($grab_stats)) {
$model_html .= "<option value=\"".$stats['model_id']."_".$stats['name_id']."\">".$stats['name']."</option>";
} 


?>
<br />
<br />
<form action="content.php" method="POST">
<table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
<tr><td bgcolor="#CCCCCC" colspan="2"><span class="fourbold">Add photoset</span> - <a href="content.php">Back to List</a></td></tr>
    <tr>
<td colspan="2">if content name is not in drop down list; it must be <a href="tag_sub_list.php?id=3">added first</a></td>
</tr>

<tr><td><div align="right">content name:</div></td><td><select name="name" class="grey"><?
	$content_path = $_GET['content_path'];
	$exp = explode("/",$content_path);
	$tmp = count($exp) - 2;
	$tmp = $exp[$tmp];
	if(strstr($tmp,'-p')) {
		$tmp = str_replace("-p","-v",$tmp);
	} else {
		$tmp = str_replace("-v","-p",$tmp);
	}
$tmp = str_replace("pandeven","vandeven",$tmp);
$tmp = str_replace("poss","voss",$tmp);
	
$grab_stats = mysql_query("SELECT * FROM cms_tags_s WHERE ctag_id = '2' AND stag_id NOT IN (SELECT name_id FROM cms_content WHERE content_path NOT LIKE '%".$tmp."%') ORDER BY description ASC");
while ($stats = mysql_fetch_array($grab_stats)) {
echo "<option value=\"".$stats['stag_id']."\">".$tmpadd.stripslashes($stats['description'])."</option>";
} 
?></select></td></tr>
<tr><td colspan="2">&nbsp;</td></tr>
<tr><td width="115"><div align="right">content type</div></td><td width="665">
<select name="content_type" class="grey">
<option value="1" <? if ($row['content_type'] == 1) { ?> selected="selected" <? } ?>>Photoset</option>
<option value="2" <? if ($row['content_type'] == 2) { ?> selected="selected" <? } ?>>Video</option>
</select>
</td></tr>
<tr><td width="115"><div align="right">price</div></td><td width="665"><input type="text" name="price" maxlength="9" size="10" class="grey" value="<?php echo (isset($row['price']) ? $row['price'] : ""); ?>" /></td></tr>
<tr><td><div align="right">model 1</div></td><td><select name="model_1" class="grey"><?=$model_html?></select></td></tr>
<tr><td><div align="right">model 2</div></td><td><select name="model_2" class="grey"><option></option><?=$model_html?></select></td></tr>
<tr><td><div align="right">model 3</div></td><td><select name="model_3" class="grey"><option></option><?=$model_html?></select></td></tr>
<tr><td><div align="right">model 4</div></td><td><select name="model_4" class="grey"><option></option><?=$model_html?></select></td></tr>
<tr><td width="115"><div align="right">release date</div></td><td width="665">
<select name="rmonth" class="grey"><option value="01">January</option><option value="02">February</option><option value="03">March</option><option value="04">April</option><option value="05">May</option><option value="06">June</option><option value="07">July</option><option value="08">August</option><option value="09">September</option><option value="10">October</option><option value="11">November</option><option value="12">December</option></select>
<select name="rday" class="grey"><option>01</option><option>02</option><option>03</option><option>04</option><option>05</option><option>06</option><option>07</option><option>08</option><option>09</option><option>10</option><option>11</option><option>12</option><option>13</option><option>14</option><option>15</option><option>16</option><option>17</option><option>18</option><option>19</option><option>20</option><option>21</option><option>22</option><option>23</option><option>24</option><option>25</option><option>26</option><option>27</option><option>28</option><option>29</option><option>30</option><option>31</option></select>
<select name="ryear" class="grey"><option><?=date("Y")-3?></option><option><?=date("Y")-2?></option><option><?=date("Y")-1?></option><option selected="selected"><?=date("Y")?></option><option><?=date("Y")+1?></option><option><?=date("Y")+2?></option><option><?=date("Y")+3?></option></select>
</td></tr>
<tr><td colspan="2">blog/text:<br />
<textarea name="comment" cols="70" rows="7" class="grey"></textarea></td></tr>
<tr><td colspan="2"><div align="center"><br /><br /><input type="hidden" name="content_path" value="<?=$_GET['content_path']?>"><input name="post" type="submit" value="     Add Content     " class="grey"></div></td></tr>
</table>
</form>
<?php
} elseif (isset($_GET['delete'])) {
    $id = $_GET["id"];
    $query = @mysql_query("SELECT * FROM cms_content WHERE content_id = '$id'");
		
		while ($row = mysql_fetch_array($query)) {
        ?>
<br />
<br />
<table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
<tr>
  <td bgcolor="#CCCCCC"><span class="fourbold">DELETE photoset</span> - <a href=content.php>Back to List</a> </td>
</tr>
<tr>
  <td><?php
        echo "<div align=\"center\">Are you sure you want to delete:<br />";
        echo $row['title'] . "<br />";
				echo "<br />note: for safety purposes directories won't be deleted, only their database entries.<br />";
        echo "<form action=\"content.php\" method=\"POST\"><input type=\"hidden\" name=\"id\" value=\"" . $id . "\"><input name=\"del\" type=\"submit\" value=\"Delete\" class=\"grey\"></form></div></td></tr></table>";
    } 
} elseif (isset($_GET["edit"])) {
    if ($_GET["id"] == "") {
        die('Error');
    } else {
        $id = $_GET["id"];
    } 
    $query = @mysql_query("SELECT * from cms_content where content_id = '$id'");

		
		while ($row = mysql_fetch_array($query)) {
		
$rd = explode("-", $row['releasedate']);
$rdtxtmonth = date("F", mktime(0, 0, 0, $rd[1], $rd[2], $rd[0]));


$grab_stats = mysql_query("SELECT model_id, name, name_id FROM cms_models ORDER BY name ASC");
$model_html = "";
while ($stats = mysql_fetch_array($grab_stats)) {
$model_html .= "<option value=\"".$stats['model_id']."_".$stats['name_id']."\">".$stats['name']."</option>";
} 

$comment = str_replace("<br />", chr(10).chr(13), stripslashes($row['comment']));

$grab_stats = mysql_query("SELECT `cms_models`.`model_id`, `cms_models`.`name`, `cms_models`.`name_id`, `cms_content_models`.`ident`, `cms_content_models`.`release`
FROM `cms_content_models`
INNER JOIN `cms_models` ON `cms_models`.`model_id` = `cms_content_models`.`model_id`
WHERE `cms_content_models`.`content_id` = '".$id."' ORDER BY `cms_content_models`.`featured` DESC");
while ($stats = mysql_fetch_array($grab_stats)) {
$model[] = "<option value=\"".$stats['model_id']."_".$stats['name_id']."\" selected=\"selected\">".stripslashes($stats['name'])."</option>";
} 

?>
    <br />
    <br />
<form action="content.php" method="POST">
<table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
<tr><td bgcolor="#CCCCCC" colspan="2"><span class="fourbold">Edit Photoset</span> - <a href="content.php">Back to List</a></td></tr>
    <tr>
<td colspan="2">if content name is not in drop down list; it must be <a href="tag_sub_list.php?id=3">added first</a></td>
</tr>

<tr><td><div align="right">content name:</div></td><td><select name="name" class="grey"><?

	$exp = explode("/",$row['content_path']);
	$tmp = count($exp) - 2;
	$tmp = $exp[$tmp];
	if(strstr($tmp,'-p')) {
		$tmp = str_replace("-p","-v",$tmp);
	} else {
		$tmp = str_replace("-v","-p",$tmp);
	}
	$tmp = str_replace("pandeven","vandeven",$tmp);
	$tmp = str_replace("poss","voss",$tmp);
	
$grab_stats = mysql_query("SELECT * FROM cms_tags_s WHERE ctag_id = '2' AND stag_id NOT IN (SELECT name_id FROM cms_content WHERE content_path NOT LIKE '%".$tmp."%' AND content_id != '".$row['content_id']."')  ORDER BY description ASC");
while ($stats = mysql_fetch_array($grab_stats)) {
	if ($row['name_id'] == $stats['stag_id']) {
		echo "<option value=\"".$stats['stag_id']."\" selected=\"selected\">".stripslashes($stats['description'])."</option>";
	} else {
		echo "<option value=\"".$stats['stag_id']."\">".stripslashes($stats['description'])."</option>";
	}
} 
?></select></td></tr>
<tr><td colspan="2">&nbsp;</td></tr>

<tr><td width="115"><div align="right">content type</div></td><td width="665">
<select name="content_type" class="grey">
<option value="1" <? if ($row['content_type'] == 1) { ?> selected="selected" <? } ?>>Photoset</option>
<option value="2" <? if ($row['content_type'] == 2) { ?> selected="selected" <? } ?>>Video</option>
</select>
</td></tr>
<tr><td width="115"><div align="right">price</div></td><td width="665"><input type="text" name="price" maxlength="9" size="10" class="grey" /></td></tr>
<tr><td><div align="right">model 1</div></td><td><select name="model_1" class="grey"><?=$model[0]."<option></option>".$model_html?></select></td></tr>
<tr><td><div align="right">model 2</div></td><td><select name="model_2" class="grey"><?=$model[1]."<option></option>".$model_html?></select></td></tr>
<tr><td><div align="right">model 3</div></td><td><select name="model_3" class="grey"><?=$model[2]."<option></option>".$model_html?></select></td></tr>
<tr><td><div align="right">model 4</div></td><td><select name="model_4" class="grey"><?=$model[3]."<option></option>".$model_html?></select></td></tr>

<tr><td width="115"><div align="right">release date</div></td><td width="665">
<select name="rmonth" class="grey"><option value="<?=$rd[1]?>" selected="selected"><?=$rdtxtmonth?></option><option value="01">January</option><option value="02">February</option><option value="03">March</option><option value="04">April</option><option value="05">May</option><option value="06">June</option><option value="07">July</option><option value="08">August</option><option value="09">September</option><option value="10">October</option><option value="11">November</option><option value="12">December</option></select>
<select name="rday" class="grey"><option selected="selected"><?=$rd[2]?></option><option>01</option><option>02</option><option>03</option><option>04</option><option>05</option><option>06</option><option>07</option><option>08</option><option>09</option><option>10</option><option>11</option><option>12</option><option>13</option><option>14</option><option>15</option><option>16</option><option>17</option><option>18</option><option>19</option><option>20</option><option>21</option><option>22</option><option>23</option><option>24</option><option>25</option><option>26</option><option>27</option><option>28</option><option>29</option><option>30</option><option>31</option></select>
<select name="ryear" class="grey"><option selected="selected"><?=$rd[0]?></option><option><?=date("Y")-3?></option><option><?=date("Y")-2?></option><option><?=date("Y")-1?></option><option><?=date("Y")?></option><option><?=date("Y")+1?></option><option><?=date("Y")+2?></option><option><?=date("Y")+3?></option></select>
</td></tr>

<tr><td colspan="2">blog/text:<br />
<textarea name="comment" cols="70" rows="7" class="grey"><?=$comment?></textarea></td></tr>
<tr><td colspan="2"><div align="center"><br /><br /><input type="hidden" name="content_id" value="<?=$row['content_id']?>"><input name="edit" type="submit" value="     Save Content     " class="grey"></div></td></tr>
</table>
</form>

<?php
    } 
} else {

if (isset($_GET['page'])) {
	$page = $_GET['page'];
} else {
	$page = 1;
}	
$limit_start = $page * 20 - 20;


if (isset($_GET['sort']) && $_GET['sort'] == "release") {
$sort = "releasedate DESC";
} elseif(isset($_GET['sort']) && $_GET['sort'] == "alpha") {
$sort = "title ASC";
} else {
$sort = "releasedate DESC";
}
$add = "";
$url_add = "";

if (isset($_GET['model_id'])) {
	$add = " WHERE content_id IN (SELECT content_id FROM cms_content_models WHERE model_id = '".$_GET['model_id']."') ";
	$url_add = "&model_id=".$_GET['model_id'];
}

if (isset($_GET['content_type'])) {

	if ($_GET['content_type'] == 'photos') {
		$content_type_number = 2;
	} elseif ($_GET['content_type'] == 'videos') {
		$content_type_number = 1;
	}

	if (isset($content_type_number) && is_numeric($content_type_number)) {
		$filter_content_type = ' content_type = ' . $content_type_number;

		if (isset($add) && $add != "") {
			$filter_content_type = " AND " . $filter_content_type;
		} else {
			$filter_content_type = " WHERE " . $filter_content_type;
		}
	}
} else {
	$filter_content_type = '';
}

$sql = "SELECT * FROM cms_content " . $add . $filter_content_type . " ORDER BY ".$sort." LIMIT ".$limit_start.",20";
$count = @mysql_query("SELECT count(*) as count FROM cms_content ".$add." ORDER BY ".$sort);
$total_rows = @mysql_result($count, 0, 'count');
$total_pages = ceil($total_rows / 20);

if ($total_pages > 1) {
$pagination = pagination("content.php?sort=".$_GET['sort'].$url_add,$page,$total_pages);
} else {
$pagination = "";
}

if (isset($_POST['search'])) {
	$sql = "SELECT * FROM cms_content WHERE title LIKE '%".$_POST['search']."%'" . $filter_content_type . " ORDER BY releasedate DESC";
	$pagination = "";
}
	

    $result = @mysql_query($sql);
    if (!$result) {
        die('Error:' . mysql_error());
    } 

    ?>
    <br />
    <br />
    <table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
    <tr>
      <td bgcolor="#CCCCCC">
<table width="800" border="0" cellspacing="0" cellpadding="5">
  <tr>
    <td colspan="6"><span class="fourbold">content</span> - <a href="add_content.php">Add content</a></td>
      </tr>
  <tr>
  <td><div align="left"><a href="content.php">view all</a></div></td>
  <td><div align="left"><a href="content.php?content_type=photos">view videos</a></div></td>
  <td><div align="left"><a href="content.php?content_type=videos">view photos</a></div></td>
    <td width="100"><div align="right"><a href="content.php?sort=alpha<?=$url_add?>">sort alpha</a></div></td><td width="100">
      <div align="right"><a href="content.php?sort=release<?=$url_add?>">sort date</a></div></td>
    <form name="form" id="form"><td width="100">
      <div align="right">
        <select name="jumpMenu" id="jumpMenu" onchange="MM_jumpMenu('parent',this,0)">
          <option value="#">model</option>
          <?php
		
$grab_stats = mysql_query("SELECT model_id, name FROM cms_models ORDER BY name");
while ($stats = mysql_fetch_array($grab_stats)) {
echo "<option value=\"content.php?model_id=".$stats['model_id']."\">".$stats['name']."</option>";
if ($stats['model_id'] == $_GET['model_id']) { $model_name = $stats['name']; }
} 

		?>
            </select>
      </div></td></form>

    <form name="srch" method="post" action="content.php">
    <td><div align="right">        
<input name="search" type="text"  value="" size="15" maxlength="50"/>
<input type="submit" value="search name" name="search_submit" >
        </div></td></form>
      </tr>
</table>


</td>
    </tr>
    <tr>
      <td><?php
if (isset($model_name)) {
echo "<br /><br /><br /><div align=center class=fourbold>viewing photosets for model: ".$model_name."</div><br /><br />";
}

echo "<br />".$pagination."<br />";

echo "<table align=center width=800 border=0 cellpadding=5 cellspacing=5><tr>";
while ($row = mysql_fetch_array($result)) {
$tagcount = 0;

$get_tags = @mysql_query("SELECT count(`cms_tags`.`stag_id`) as count FROM `cms_tags`
INNER JOIN `cms_tags_s` ON `cms_tags`.`stag_id` = `cms_tags_s`.`stag_id`
WHERE `cms_tags`.`content_id` = '".$row['content_id']."' AND `cms_tags`.`content_type` = '".$row['content_type']."' AND `cms_tags_s`.`ctag_id` > '3'");

$tagcount = $content_name = @mysql_result($get_tags, 0, 'count');


	$owners_list = '';
	$ownerListCounter = 1;

	while ($ownerListCounter < 5) {

		$ownerNumber = 'owner_' . $ownerListCounter;

		if (isset($row[$ownerNumber]) && is_numeric($row[$ownerNumber])) {

			if ($row[$ownerNumber] == 1) {
				$owner_model_name = 'XFC';
			} else {
				
				$model_name_sql = mysql_query("SELECT * FROM `cms_models` WHERE `model_id` = '" . $row[$ownerNumber] . "'") or die(mysql_error());

				if (mysql_num_rows($model_name_sql) == 1) {

					$model_name = mysql_fetch_object($model_name_sql);

					if (isset($model_name->name)) {
						$owner_model_name = $model_name->name;
					}
				}
			}

			if (isset($owner_model_name)) {
				if (isset($owners_list) && $owners_list != "") {
					$owners_list .= ', ';
				}

				$owners_list .= $owner_model_name;
			}

			unset($owner_model_name);

		}

		$ownerListCounter++;

	}

$model = "";
$ident_release = "";

$grab_stats = mysql_query("SELECT cms_models.model_id,
cms_models.name
FROM cms_content_models
INNER JOIN cms_models ON cms_models.model_id = cms_content_models.model_id
WHERE cms_content_models.content_id = '".$row['content_id']."'");

while ($stats = mysql_fetch_array($grab_stats)) {


$model .= $stats['name'] . "<br />";
$ident_release .= $stats['name']."<br />";//." <a href=\"content_dl.php?getfile=".$stats['ident']."\">".$stats['ident']."</a> &bull; <a href=\"content_dl.php?getfile=".$stats['release']."\">".$stats['release']."</a><br />";
} 



$dt = explode("-", $row['releasedate']);
$date = date("m-d-Y", mktime(0, 0, 0, $dt[1], $dt[2], $dt[0]));

if ($row['content_type'] == 1) {
	$content_type = "photoset";
} else {
	$content_type = "video";
}

	$preview_thumbnail = "../" . $public_location . $row['directory'] . "/preview_thumbnail.jpg";

	if (is_file($preview_thumbnail)) {
		echo '<td width="213" bgcolor=#CCCCCC><div align=center><img src="' . $preview_thumbnail . '" border=0></td>';

	} else {
		echo '<td width="213" bgcolor=#CCCCCC><div align=center><a href="browse_thumbnails.php?content_id=' . $row['content_id'] . '">NO ICON</a></div></td>';
	}

	echo '<td width="70" colspan="2" bgcolor="#CCCCCC" style="text-align: center;">
		<a href="browse_thumbnails.php?content_id=' . $row['content_id'] . '">CROP</a><br /><br />
		<a href="add_content.php?id=' . $row['content_id'] . '">EDIT</a><br /><br />
		<a href="content.php?delete=yes&id=' . $row['content_id'] . '">DELETE</a></td>';

echo "<td bgcolor=#E6E6E6>";

if ($is_admin) {
	echo "<strong>FOLDER: </strong>" . $row['directory'] . "<br /><br />";
}
echo "<strong>realease date: </strong>" . $date . "<br /><br />";
echo "<strong>content name: </strong>" .stripslashes($row['title']) . "<br /><br />";
echo "<strong>content type: </strong>" . $content_type . "<br /><br />";
echo "<strong>models: </strong>" . $ident_release . "<br />";
if ($is_admin) {
	echo "<strong>owners: </strong>" . $owners_list . "<br />";
}
echo "</td></tr>";

} 
    echo "</table></td></tr></table>";
		echo "<br />".$pagination."<br />";
} 

?>

Youez - 2016 - github.com/yon3zu
LinuXploit