403Webshell
Server IP : 172.67.187.206  /  Your IP : 162.159.115.42
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Inetpub/www/news/group/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Inetpub/www/news/group/XXnews_front_sc.php.bak
<?php 
session_start();
include("db.php"); 
if(!isset($_SESSION['username'])){
}else{ 
$username1 = $_SESSION['username'];
$user1 = $mysqli->query("SELECT * FROM users WHERE username='$username1' LIMIT 1");
$userrow1 = mysqli_fetch_array($user1);
} 

$sitesettings = $mysqli->query("SELECT * FROM settings WHERE id='1'");
$settingsrow = mysqli_fetch_array($sitesettings);

?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head>
<body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">


	<div align="center">
	  <?php
	/*$school=$mysqli->escape_string($_GET['school']);  
	$objConnect = mysqli_connect("localhost","root","sesao8@2558") or die("Error Connect to Database");
	$objDB = mysqli_select_db("news");
	mysqli_query("SET NAMES UTF8");
	*/
	$sql1= $mysqli->query("SELECT * FROM posts where uid between '1' and '65' ORDER BY id DESC LIMIT 8");
	/*
	$strSQL = "SELECT * FROM posts where uid between '1' and '65' ORDER BY id DESC LIMIT 8";
	$objQuery = mysqli_query($strSQL) or die ("Error Query [".$strSQL."]");
	*/
	echo"<table border=\"0\"  cellspacing=\"1\" cellpadding=\"1\"><tr>";	
	$intRows = 0;
	while($objResult = mysqli_fetch_array($sql1))
	{
	$intRows++;
	echo "<td>";									
	?>
	
<table width="176" border="0" cellpadding="0">
  <tr>
    <td bgcolor="#E6E6E6" valign="top">
<?php 
$sc=$objResult['cat_id'];
$sql2= $mysqli->query("select * from users where id = $sc");
$record = mysqli_fetch_array($sql2);
/*
$sql = "select * from users where id = $sc";
$result = mysql_query($sql); 
$record = mysql_fetch_array ($result);
*/
$schoolname=$record['school'];

$sc_school = iconv_substr("$schoolname", 0,26,"UTF-8")."..";
//$sc_school =  iconv_substr("$schoolname", 0,50,"UTF-8")."...";


echo "<font size='2'>$sc_school</font>";
?>	
	
	</td>
  </tr>
  <tr>
    <td width="180" height="120" valign="top"><a href="https://news.sesaorb.go.th/story.php?id=<?php echo $objResult["id"];?>" target="_blank">
	<?php /*
	$today=date("dmY"); 
	$oldday=substr($objResult['image'], 0, 8);
	if ($today>=$oldday){
	*/ ?>
	<?php 
	if ($objResult['id'] > 4430){
	?>	
	<img src="uploads/<?php echo $objResult["image"];?>" width="176" height="120" border="1" alt="<?php echo $objResult["title"];?>">
<?php }else{ ?>
	<img src="<?php echo $objResult["image"];?>" width="176" height="120" border="1" alt="<?php echo $objResult["title"];?>">
<?php } ?>	
	</a></td>
  </tr>
  <tr>
    <?php 
  $ti_news = iconv_substr("$objResult[title]", 0,72,"UTF-8")."";
  //$sc_school =  iconv_substr("$schoolname", 0,50,"UTF-8")."...";

  ?>
    <td height="50" valign="top" bgcolor="#0099FF"><font size="2" color="#FFFFFF"><?php echo $ti_news;?>
<?php
$today=date("d-m-Y");
$date_news=$objResult['date'];
$rest2 = substr("$date_news", 0,-9);
$news_day=(strtotime($today)-strtotime($rest2))/(60*60*24);
if($news_day <= 2) { echo "<img src='images/update_news.gif'>";} else { echo "";}
?></font></td>
  </tr>
</table>
	
	    <?php
		echo"</td>";
		if(($intRows)%4==0)
		{
		echo"</tr>";
		}
		else
		{
		echo "<td>";
		}	
	}
	echo"</tr></table>";
echo "
<table width='100%' border='0'>
  <tr style='height:30px'>
    <td></td>
    <td valign='middle' align='right' width='100'><a href='https://news.sesaorb.go.th/static/' target='_blank'><img src='static/static.png' width='30'></a></td>
    <td valign='middle' align='right' width='100'><a href='https://news.sesaorb.go.th/allnews_list2017.php?page=1' target='_blank'><img src='images/more_r.png' border='0'></a></td>
  </tr>
</table>";
	
	?>

  </div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit