403Webshell
Server IP : 195.130.67.5  /  Your IP : 216.73.217.154
Web Server : Microsoft-IIS/10.0
System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586
User : IUSR ( 0)
PHP Version : 7.4.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /inetpub/wwwroot/icd/msc/sources/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /inetpub/wwwroot/icd/msc/sources/admin_news.php
<h2>@[PAGE_TITLE]</h2>

<?php
	global $mCtrl;
	
	$action = Utils::vGet("action");
	$id = Utils::vGet("id");
	
	switch ($action) {
		case 'delete':
			$query = "DELETE FROM `msc_announcements` WHERE `Id` = {$id}";
			DBUtils::execute_query($query);
			$mCtrl->redirectTo("@[URLROOT]/admin_news.php");
			break;
		
		default:
			
			break;
	}

	$query = "SELECT * FROM `msc_announcements` ORDER BY `annDate` DESC";
	$rows = NULL;
	$num = 0;
	DBUtils::getrows($query, $rows, $num);
?>

<style>
.userstable {
	border-collapse: collapse; 
	border: solid 1px;
}	
.userstable th{
	border-collapse: collapse; 
	border: solid 1px;
	text-align: center;
	font-size: 1.1em;	
}	
.userstable td{
	border-collapse: collapse; 
	border: solid 1px;
	text-align: center;	
}	
</style>	

	<a href="@[URLROOT]/admin_news_edit.php?mode=new">@[ADD_NEW]</a>
	<table class="userstable">
		<tr>
			<th>@[HDR_NO]</th>
			<th></th>
			<th>@[HDR_DATE]</th>
			<th>@[HDR_TITLE]</th>
			<th></th>
		</tr>
<?php
	$counter = 0;
	$titleField = "Title_" . $mCtrl->CurrentLanguage;
	while ($row = mysqli_fetch_object($rows)){
		$counter++;
		
		$dateStr = Utils::dateStr(strtotime($row->annDate), 1);
		$titleStr = $row->$titleField;
		
		$confirmMessage = $mCtrl->str("CONFIRM_DELETE");
		$confirmMessage = str_replace(array("'", "@[TITLE]"), array("\'", $titleStr), $confirmMessage);
		
		Utils::prline("<tr>");
		Utils::prline("<td>{$counter}</td>");
		Utils::prline("<td style=\"width: 30px; text-align: center\"><a href=\"@[URLROOT]/admin_news_edit.php?id={$row->Id}\" title=\"@[TIP_OPEN]\"><img src=\"images/open.gif\"></a></td>");		
		Utils::prline("<td>{$dateStr}</td>");
		Utils::prline("<td>{$titleStr}</td>");
		Utils::prline("<td><a href=\"@[URLROOT]/admin_news.php?action=delete&id={$row->Id}\" title=\"@[TIP_DELETE]\" onclick=\"return confirm('{$confirmMessage}')\" /><img src=\"@[URLROOT]/images/action-delete.png\" border=\"0\" /></a></td>");
		Utils::prline("</tr>");		
	}
?>		
	</table>

Youez - 2016 - github.com/yon3zu
LinuXploit