403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/model_admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/model_admin/model-custom-video-pricing.php
<?php
	include("../config.php");
	include("auth.php");
	include("model-header.php");

	$msgSystem = "";

	if (isset($_SESSION['model_id'])) {

		$userinfo->model_id = $_SESSION['model_id'];

	} else {

		if (isset($_SESSION['email']) && isset($_SESSION['password'])) {

			$sth = $dbh->prepare("SELECT * FROM `cms_members` WHERE email=? AND password=?");
			$sth->execute(array($_SESSION['email'],$_SESSION['password']));
			$userinfo = $sth->fetch(PDO::FETCH_OBJ);

		}

	}

	if (isset($userinfo->model_id) && $userinfo->model_id > 0) {

		$sth = $dbh->prepare("SELECT * FROM `cms_models` WHERE `model_id` =?");
		$sth->execute(array($userinfo->model_id));
		$model_info = $sth->fetch(PDO::FETCH_OBJ);

	}

	$cvpos = $dbh->prepare("SELECT * FROM `cms_custom_video_pricing_options`");
	$cvpos->execute();
	$cvpoSum = $cvpos->rowCount();

	$categories = $dbh->prepare("SELECT * FROM `cms_categories`");
	$categories->execute();
	$categorySum = $categories->rowCount();

	if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($model_info->model_id) && is_numeric($model_info->model_id)) {

		$lengthSetcheck = FALSE;
		$categorySetcheck = FALSE;
		$deliverySetcheck = FALSE;

		$setcheckCounter = 1;

		while ($setcheckCounter <= $cvpoSum) {

			if ($setcheckCounter <= 5 && isset($_POST['cvpo_toggle' . $setcheckCounter]) && $_POST['cvpo_toggle' . $setcheckCounter] == 'on' && isset($_POST['cvpo_price' . $setcheckCounter]) && $_POST['cvpo_price' . $setcheckCounter] > 0) {
				$lengthSetcheck = TRUE;
			}

			if ($setcheckCounter >= 9 && isset($_POST['cvpo_toggle' . $setcheckCounter]) && $_POST['cvpo_toggle' . $setcheckCounter] == 'on' && isset($_POST['cvpo_price' . $setcheckCounter]) && $_POST['cvpo_price' . $setcheckCounter] > 0) {
				$deliverySetcheck = TRUE;
			}

			$setcheckCounter++;

		}

		$categorysetcheckCounter = 1;

		while ($categorysetcheckCounter <= $categorySum) {

			if (isset($_POST['category_toggle' . $categorysetcheckCounter]) && $_POST['category_toggle' . $categorysetcheckCounter] == 'on' && isset($_POST['category_price' . $categorysetcheckCounter]) && $_POST['category_price' . $categorysetcheckCounter] > 0) {
				$categorySetcheck = TRUE;
			}

			$categorysetcheckCounter++;
		}

		if ($lengthSetcheck && $categorySetcheck && $deliverySetcheck) {

			$listCounter = 1;

			while ($listCounter <= $cvpoSum) {

				if (isset($_POST['cvpo_toggle' . $listCounter]) && isset($_POST['cvpo_price' . $listCounter])) {

					if ($_POST['cvpo_toggle' . $listCounter] == 'on') {
						$active = 1;
					} else {
						$active = 0;
					}

					$price = str_replace("+", "", $_POST['cvpo_price' . $listCounter]);
					$price = str_replace("$", "", $price);

					if (is_numeric($price)) {
						$price = number_format($price, 2, '.', '');
					} else {
						$price = '0.00';
					}

					$cvpoCheck = $dbh->prepare("SELECT * FROM `cms_cvpo_match` WHERE model_id=? AND cvpo_id=?");
					$cvpoCheck->execute(array($model_info->model_id, $listCounter));

					if ($cvpoCheck->rowCount() > 0) {

						$cvpoUpdate = $dbh->prepare("UPDATE `cms_cvpo_match` SET `active` =?, `price` =? WHERE `model_id` =? AND `cvpo_id` =?");
						$cvpoUpdate->execute(array($active, $price, $model_info->model_id, $listCounter));

					} else {

						$cvpoInsert = $dbh->prepare("INSERT INTO `cms_cvpo_match` (`model_id`, `cvpo_id`, `category_id`, `active`, `price`) VALUES (?, ?, '0', ?, ?)");
						$cvpoInsert->execute(array($model_info->model_id, $listCounter, $active, $price));

					}
				}

				$listCounter++;
			}

			$categorylistCounter = 1;

			while ($categorylistCounter <= $categorySum) {

				if (isset($_POST['category_toggle' . $categorylistCounter]) && isset($_POST['category_price' . $categorylistCounter])) {

					if ($_POST['category_toggle' . $categorylistCounter] == 'on') {
						$active = 1;
					} else {
						$active = 0;
					}

					$price = str_replace("+", "", $_POST['category_price' . $categorylistCounter]);
					$price = str_replace("$", "", $price);

					if (is_numeric($price)) {
						$price = number_format($price, 2, '.', '');
					} else {
						$price = '0.00';
					}

					$cvpoCheck = $dbh->prepare("SELECT * FROM `cms_cvpo_match` WHERE model_id=? AND category_id=?");
					$cvpoCheck->execute(array($model_info->model_id, $categorylistCounter));

					if ($cvpoCheck->rowCount() > 0) {

						$cvpoUpdate = $dbh->prepare("UPDATE `cms_cvpo_match` SET `active` =?, `price` =? WHERE `model_id` =? AND `category_id` =?");
						$cvpoUpdate->execute(array($active, $price, $model_info->model_id, $categorylistCounter));

					} else {

						$cvpoInsert = $dbh->prepare("INSERT INTO `cms_cvpo_match` (`model_id`, `cvpo_id`, `category_id`, `active`, `price`) VALUES (?, '0', ?, ?, ?)");
						$cvpoInsert->execute(array($model_info->model_id, $categorylistCounter, $active, $price));

					}
				}

				$categorylistCounter++;
			}

		} else {
			$msgSystem .= msgSystem("You need at least one variable turned on per tab and a corresponding price.", "error");
		}

	}

?>
<form action="" method="POST">
<div class="row">
    <div class="large-12 columns">
		<?php
			if (isset($msgSystem) && $msgSystem != "") {

				echo $msgSystem;

			}
		?>
      <div class="panel">
        <h4>Set Custom Video Pricing</h4>
        <div class="row">
          <div class="large-12 columns">
	    <dl class="tabs" data-tab>
		<dd class="active"><a href="#panel1">1. Movie Length</a></dd>
		<dd><a href="#panel2">2. Movie Category</a></dd>
		<dd><a href="#panel4">3. Delivery Time</a></dd>
	    </dl>
<div class="tabs-content">
  <div class="content active" id="panel1">
    <p>
    <h5>Choose duration & enter base price</h5>
	<?php

		$lengths = $dbh->prepare("SELECT * FROM `cms_custom_video_pricing_options` WHERE type=?");
		$lengths->execute(array('length'));

		while ($length = $lengths->fetch(PDO::FETCH_OBJ)) {

			unset($cvpoPrice);
			unset($cvpoActive);

			$cvpoResult_sql = $dbh->prepare("SELECT * FROM `cms_cvpo_match` WHERE model_id=? AND cvpo_id=?");
			$cvpoResult_sql->execute(array($model_info->model_id, $length->id));

			if ($cvpoResult_sql->rowCount() > 0) {

				$cvpoResult = $cvpoResult_sql->fetch(PDO::FETCH_OBJ);
				$cvpoPrice = $cvpoResult->price;
				$cvpoActive = $cvpoResult->active;

			}

			echo '<div class="input_row"><div class="checkbox"><input type="checkbox"' . (isset($cvpoActive) && $cvpoActive == 1 ? " checked" : "") . ' class="toggleCheck" name="cvpo_toggle' . $length->id . '" id="cvpo_toggle' . $length->id . '"><span style="margin-left: 8px;">' . $length->cvpo_name . '</span></div><div class="input"><input type="text" class="priceCheck" id="cvpo_price' . $length->id . '" name="cvpo_price' . $length->id . '"' . (isset($cvpoPrice) ? " value=\"" . $cvpoPrice . "\"" : "") . ' placeholder="+$0.00"></div></div>';
		}

	?>
    </p>
  </div>
  <div class="content" id="panel2">
    <p>
    <h5>Select your categories & extra cost</h5>
	<?php

		$categories = $dbh->prepare("SELECT * FROM `cms_categories`");
		$categories->execute();

		while ($category = $categories->fetch(PDO::FETCH_OBJ)) {

			unset($cvpoPrice);
			unset($cvpoActive);

			$cvpoResult_sql = $dbh->prepare("SELECT * FROM `cms_cvpo_match` WHERE model_id=? AND category_id=?");
			$cvpoResult_sql->execute(array($model_info->model_id, $category->id));

			if ($cvpoResult_sql->rowCount() > 0) {

				$cvpoResult = $cvpoResult_sql->fetch(PDO::FETCH_OBJ);
				$cvpoPrice = $cvpoResult->price;
				$cvpoActive = $cvpoResult->active;

			}

			echo '<div class="input_row"><div class="checkbox"><input type="checkbox"' . (isset($cvpoActive) && $cvpoActive == 1 ? " checked" : "") . ' class="toggleCheck" name="category_toggle' . $category->id . '" id="category_toggle' . $category->id . '"><span style="margin-left: 8px;">' . $category->category . '</span></div><div class="input"><input type="text" class="priceCheck" id="category_price' . $category->id . '" name="category_price' . $category->id . '"' . (isset($cvpoPrice) ? " value=\"" . $cvpoPrice . "\"" : "") . ' placeholder="+$0.00"></div></div>';
		}

	?>
    </p>  </div>

<?php /* Not using ?>
  <div class="content" id="panel3">
    <p>
    <h5>Select your quality & extra cost</h5>
	<?php

		$qualities = $dbh->prepare("SELECT * FROM `cms_custom_video_pricing_options` WHERE type=?");
		$qualities->execute(array('quality'));

		while ($quality = $qualities->fetch(PDO::FETCH_OBJ)) {

			unset($cvpoPrice);
			unset($cvpoActive);

			$cvpoResult_sql = $dbh->prepare("SELECT * FROM `cms_cvpo_match` WHERE model_id=? AND cvpo_id=?");
			$cvpoResult_sql->execute(array($model_info->model_id, $quality->id));

			if ($cvpoResult_sql->rowCount() > 0) {

				$cvpoResult = $cvpoResult_sql->fetch(PDO::FETCH_OBJ);
				$cvpoPrice = $cvpoResult->price;
				$cvpoActive = $cvpoResult->active;

			}

			echo '<div class="input_row"><div class="checkbox"><input type="checkbox"' . (isset($cvpoActive) && $cvpoActive == 1 ? " checked" : "") . ' class="toggleCheck" name="cvpo_toggle' . $quality->id . '" id="cvpo_toggle' . $quality->id . '"><span style="margin-left: 8px;">' . $quality->cvpo_name . '</span></div><div class="input"><input type="text" class="priceCheck" id="cvpo_price' . $quality->id . '" name="cvpo_price' . $quality->id . '"' . (isset($cvpoPrice) ? " value=\"" . $cvpoPrice . "\"" : "") . ' placeholder="+$0.00"></div></div>';
		}

	?>
    </p>
  </div>
<?php */ ?>

  <div class="content" id="panel4">
    <p>
    <h5>Select your delivery time & extra cost</h5>
	<?php

		$deliveries = $dbh->prepare("SELECT * FROM `cms_custom_video_pricing_options` WHERE type=?");
		$deliveries->execute(array('delivery'));

		while ($delivery = $deliveries->fetch(PDO::FETCH_OBJ)) {

			unset($cvpoPrice);
			unset($cvpoActive);

			$cvpoResult_sql = $dbh->prepare("SELECT * FROM `cms_cvpo_match` WHERE model_id=? AND cvpo_id=?");
			$cvpoResult_sql->execute(array($model_info->model_id, $delivery->id));

			if ($cvpoResult_sql->rowCount() > 0) {

				$cvpoResult = $cvpoResult_sql->fetch(PDO::FETCH_OBJ);
				$cvpoPrice = $cvpoResult->price;
				$cvpoActive = $cvpoResult->active;

			}

			echo '<div class="input_row"><div class="checkbox"><input type="checkbox"' . (isset($cvpoActive) && $cvpoActive == 1 ? " checked" : "") . ' class="toggleCheck" name="cvpo_toggle' . $delivery->id . '" id="cvpo_toggle' . $delivery->id . '"><span style="margin-left: 8px;">' . $delivery->cvpo_name . '</span></div><div class="input"><input type="text" class="priceCheck" id="cvpo_price' . $delivery->id . '" name="cvpo_price' . $delivery->id . '"' . (isset($cvpoPrice) ? " value=\"" . $cvpoPrice . "\"" : "") . ' placeholder="+$0.00"></div></div>';
		}

	?>
    </p>
  </div>
	<script type="text/javascript">
	<!--

$(document).ready(function() {

	$('body').on('change', '.toggleCheck, .priceCheck', function () {

		var lengthSetcheck = false;
		var categorySetcheck = false;
		var deliverySetcheck = false;

		var setcheckCounter = 1;

		while (setcheckCounter <= <?php echo (isset($cvpoSum) ? $cvpoSum : ""); ?>) {

			if (setcheckCounter <= 5 && $('#cvpo_toggle' + setcheckCounter).prop('checked') && $('#cvpo_price' + setcheckCounter).val().length > 0) {
				lengthSetcheck = true;
			}

			if (setcheckCounter >= 9 && $('#cvpo_toggle' + setcheckCounter).prop('checked') && $('#cvpo_price' + setcheckCounter).val().length > 0) {
				deliverySetcheck = true;
			}

			setcheckCounter++;

		}

		var categorysetcheckCounter = 1;

		while (categorysetcheckCounter <= <?php echo (isset($categorySum) ? $categorySum : ""); ?>) {

			if ($('#category_toggle' + categorysetcheckCounter).prop('checked') && $('#category_price' + categorysetcheckCounter).val().length > 0) {
				categorySetcheck = true;
			}

			categorysetcheckCounter++;
		}

		if (lengthSetcheck && categorySetcheck && deliverySetcheck) {
			$("#submitButton").prop('disabled', false);
			$("#submitButton").removeClass('secondary');
		} else {
			$("#submitButton").prop('disabled', true);
			$("#submitButton").addClass('secondary');
		}

	});
});

	// -->
	</script>
    <div class="input_row"><input type="submit" id="submitButton" value="Save" class="button" ></div>
</div>


			</div>
		</div>
      </div>
    </div>
  </div>
</form>
<?php
	include("footer.php");

Youez - 2016 - github.com/yon3zu
LinuXploit