403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/xfcadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/xfcadmin/adm.content.php
<?php
	include('adm.config.php');
	
	include('adm.header.php');
	
	
	$pageDisplay = 5;
	
	if(isset($_GET['v'])) {
		$pageView = addslashes($_GET['v']);
	} else {
		$pageView = "pending";
	}
	
	if(isset($_GET['t']) && is_numeric($_GET['t'])) {
		$pageType = addslashes($_GET['t']);
	} else {
		$pageType = 0;	
	}
	
	if(isset($_GET['p']) && is_numeric($_GET['p'])) {
		$pageNumber = addslashes($_GET['p']);
	} else {
		$pageNumber = 1;
	}

	if ($pageNumber == 1) {
		$startResults = 0;
	} else {
		$startResults = ($pageNumber - 1) * $pageDisplay;
	}
	
	$add_sql = "";
		
	// TYPE LIMIT
	if($pageType > 0){
		$add_sql .= " AND content_type = '".$pageType."' ";
	} 
	
	// ACCESS LEVEL
	if ($userDetails->xfcadmin == 1) {
		// THIS IS A MODEL
		$query = "SELECT * FROM cms_content WHERE model_id = '" . $userDetails->model_id . "'  ".$add_sql."  ORDER BY releasedate DESC";
	} elseif ($userDetails->xfcadmin == 9) {
		// THIS IS TAMMY, DISPLAY ALL.
		$query = "SELECT * FROM cms_content  ".$add_sql." ORDER BY releasedate DESC";
	} else {
		die(); // How did they get here?
	}
	
	$quickCount_sql = mysql_query($query) or die(mysql_error());
	$getCount = mysql_num_rows($quickCount_sql);
	
	if($pageNumber > ceil($getCount/$pageDisplay)) {
		$pageNumber = 1;
	}
	
	$getPagination = paginateStuff("adm.content.php","v=".$pageView,$pageNumber,$getCount,$pageDisplay,"all");
		
	$query .= " LIMIT " . $startResults . "," . $pageDisplay;

	$get_sql = mysql_query($query) or die(mysql_error());
	if (mysql_num_rows($get_sql) > 0) {
?>

<div class="row">
	<div class="large-12 columns">
		
		<div class="panel">
			<h4>Content...</h4>
			<?php if($userDetails->xfcadmin == 9) {
				?>
			When allowed, or full admin:<br />
			<a href="adm.content.modify.php">Add Content</a><br />
			--drop down for specific model--<br />
			--drop down for type of content--<br /><br />
			<?php
		}
			?>
			<?php echo $getPagination; ?>
			<div class="row">
				<div class="large-12 columns">
					<?php if($userDetails->xfcadmin == 9) { ?><div class="large-1 columns">-</div><?php } ?>
					
					<div class="large-2 columns">ID#</div>
					<div class="large-2 columns">Model</div>
					<div class="large-2 columns">Release</div>
					<div class="large-2 columns">Title</div>
					<div class="large-2 columns">Price</div>
					<?php if($userDetails->xfcadmin == 9) { ?><div class="large-1 columns">-</div><?php } ?>
				</div>
			</div>
			<?php
		while ($row = mysql_fetch_object($get_sql)) {
									
			$modelurl = "model.php?id=" . $row->model_id;
			
			if($row->content_type == 1){
				$url = "photoset.php?id=" . $row->content_id;
				//$itemDetails->title = "Photoset: ".$itemDetails->title;
			} else {
				$url = "video.php?id=" . $row->content_id;
				//$itemDetails->title = "Video: ".$itemDetails->title;
			}
			
			?>
			
			<div class="row">
				<div class="large-12 columns">
					<?php if($userDetails->xfcadmin == 9) { ?><div class="large-1 columns"><a href="adm.content.modify.php?id=<?php echo $row->content_id; ?>">EDIT</a></div><?php } ?>
					<div class="large-2 columns"><?php echo $row -> content_id; ?></div>
					<div class="large-2 columns">model name</div>
					<div class="large-2 columns"><?php echo $row -> releasedate; ?></div>
					<div class="large-2 columns"><?php echo $row -> title; ?></div>
					<div class="large-2 columns">$<?php echo $row -> price; ?></div>
					<?php if($userDetails->xfcadmin == 9) { ?><div class="large-1 columns"><a href="adm.content.modify.php?id=<?php echo $row->content_id; ?>">DISABLE</a></div><?php } ?>
				</div>
			</div>
			
			<?php }

				}
			?>
		</div>
	</div>
</div>


<?php
include ('adm.footer.php');
?>

Youez - 2016 - github.com/yon3zu
LinuXploit