403Webshell
Server IP : 103.48.194.25  /  Your IP : 216.73.216.74
Web Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33
System : Linux VMHostDefault 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64
User : sieuthimay ( 1016)
PHP Version : 8.2.20
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/nhadatkhangdien.net-bk/public_html/sources/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/nhadatkhangdien.net-bk/public_html/sources/noithat.php
<?php
session_start();
$_SESSION['id_old']=0;
if(!defined('_source')) die("Error");
if(isset($_GET['id'])){
	$id =  addslashes($_GET['id']);
	
	/*if($id<>0){
		//$_SESSION['id_old']=$id;
		echo 'ngu mai';
	}
	if($id==$_SESSION['id_old']){
		$_SESSION['id_old']=$id;
		echo 'ngu';
	}*/
	
	
	
	
	
	
	
	
	
	
	
	$sql_lanxem = "UPDATE #_product SET luotxem=luotxem+1  WHERE id ='".$id."'";
	$d->query($sql_lanxem);
	
	#product detail
	//$id =  addslashes($_GET['id']);
	$sql = "select * from #_product where hienthi=1 and id='".$id."'";
	$d->query($sql);
	$result_detail = $d->result_array();
	$title_bar=$result_detail[0]['ten'].' - ';
	
	$d->reset();
	$sql="select * from #_mausac where id_product='".$result_detail[0]['id']."' order by stt";
		$d->query($sql);
		$color = $d->result_array();
	
	
	#product order
	$d->reset();
	if($result_detail[0]['id_list']<>0){
		$sql = "select * from #_product where hienthi=1 and id <>'".$id."' and id_list='".$result_detail[0]['id_list']."' order by stt,ngaytao desc ";
	}
	else if($result_detail[0]['id_cat']<>0){
		$sql = "select * from #_product where hienthi=1 and id <>'".$id."' and id_cat='".$result_detail[0]['id_cat']."' order by stt,ngaytao desc ";
	    $result_detail[0]['id_cat'];
	}
	$d->query($sql);
	$result_product = $d->result_array();
	$curPage = isset($_GET['p']) ? $_GET['p'] : 1;
	$url=getCurrentPageURL();
	$maxR=8;
	$maxP=5;
	$paging=paging_home($result_product, $url, $curPage, $maxR, $maxP);
	$result_product=$paging['source'];
	
}elseif(isset($_GET['idc'])){
	 $id =  addslashes($_GET['idc']);
	$sql="select ten,id,tenkhongdau from #_product_cat where tenkhongdau='$id' limit 0,1 ";
	$d->query($sql);
	$cat=$d->result_array();
	$title_bar=' - '.$cat[0]['ten'];
	$title_tcat=$cat[0]['ten'];
	$sql = "select * from #_product where hienthi=1 and id_cat='".$cat[0]['id']."'   order by stt,ngaytao desc";
	$d->query($sql);
	$result_product = $d->result_array();
	$curPage = isset($_GET['p']) ? $_GET['p'] : 1;
	$url=getCurrentPageURL();
	$maxR=16;
	$maxP=5;
	$paging=paging_home($result_product, $url, $curPage, $maxR, $maxP);
	$result_product=$paging['source'];
}










elseif(isset($_GET['idl'])){
	 $id =  addslashes($_GET['idl']);
	$sql="select ten,id,id_cat,tenkhongdau from #_product_list where id='$id' limit 0,1 ";
	$d->query($sql);
	$list=$d->result_array();
	
	$id_cat =$list[0]['id_cat'];
	$sql_cat ="select id,ten,tenkhongdau from #_product_cat where id='$id_cat' limit 0,1";
	$d->query($sql_cat);
	$cat=$d->result_array();
	//$ten_cat = $cat[0]['ten'];
	
	
	$title_bar=' - '.$cat[0]['ten'].' - '.$list[0]['ten'];
	$title_tcat=$list[0]['ten'];
	$sql_product = "select * from #_product where hienthi=1 and id_list='".$list[0]['id']."'   order by stt,ngaytao desc";
	$d->query($sql_product);
	$result_product = $d->result_array();
	$curPage = isset($_GET['p']) ? $_GET['p'] : 1;
	$url=getCurrentPageURL();
	$maxR=16;
	$maxP=5;
	$paging=paging_home($result_product, $url, $curPage, $maxR, $maxP);
	$result_product=$paging['source'];
}




elseif($_REQUEST['idi']!='')
{
	 $id =  addslashes($_GET['idi']);
	$sql="select ten,id,id_cat,id_list,tenkhongdau from #_product_item where id='$id' limit 0,1 ";
	$d->query($sql);
	$item=$d->result_array();

	$id_cat =$item[0]['id_cat'];
	$sql_cat ="select ten,id,tenkhongdau from #_product_cat where id='$id_cat' limit 0,1";
	$d->query($sql_cat);
	$cat=$d->result_array();

	$id_list =$item[0]['id_list'];
	$sql_cat ="select ten,id,tenkhongdau from #_product_list where id='$id_list' limit 0,1";
	$d->query($sql_cat);
	$list=$d->result_array();

	$title_bar=' - '.$cat[0]['ten'].' - '.$list[0]['ten'].' - '.$item[0]['ten'];
	$title_tcat=$item[0]['ten'];	 $sql_product = "select * from #_product where hienthi=1 and id_item='".$item[0]['id']."'   order by stt,ngaytao desc";
	$d->query($sql_product);
	$result_product = $d->result_array();
	$curPage = isset($_GET['p']) ? $_GET['p'] : 1;
	$url=getCurrentPageURL();
	$maxR=16;
	$maxP=5;
	$paging=paging_home($result_product, $url, $curPage, $maxR, $maxP);
	$result_product=$paging['source'];
	
}





else{	
	$sql_sp = "select * from #_product  where id_cat=21 and hienthi=1 order by stt,ngaytao desc";
	$d->query($sql_sp);
	$result_product = $d->result_array();
	$curPage = isset($_GET['p']) ? $_GET['p'] : 1;
	$url=getCurrentPageURL();
	$maxR=16;
	$maxP=5;
	$paging=paging_home($result_product, $url, $curPage, $maxR, $maxP);
	$result_product=$paging['source'];
	$title_bar="Nội thất |";

}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit