403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.201
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/mitzvahm/public_html/wp-content/plugins/proxi_vendors/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/mitzvahm/public_html/wp-content/plugins/proxi_vendors/proxi_video_seq.php
<?php
	//include('../db_conn.php');
	//echo 'we are in ajax.';
	include('../../../wp-config.php');
	//echo DB_NAME;	
	$GLOBALS['con'] = mysqli_connect(DB_HOST,DB_USER,DB_PASSWORD,DB_NAME);
	if (!$con) :
		die('Could not connect: ' . mysqli_error($GLOBALS['con']));
	endif;
	//var_dump($_GET);
	$video_id = addslashes(trim($_GET['id']));
	$video_seq = addslashes(trim($_GET['seq']));
	$video_dir = addslashes(trim($_GET['dir']));
	$sql = "SELECT * FROM wp_proxi_vendors_video WHERE id = ".$video_id;
	$result = mysqli_query($GLOBALS['con'], $sql) or die(mysqli_error($GLOBALS['con']));
	if (mysqli_num_rows($result) > 0) :
		$row = mysqli_fetch_object($result);
		$vendor_id = $row->cat7;
		if ($video_dir == 'up') :
			$sql = "SELECT * FROM wp_proxi_vendors_video WHERE cat7 = ".$vendor_id." AND seq <= ".$video_seq." ORDER BY seq DESC";
			$result_seq = mysqli_query($GLOBALS['con'], $sql) or die(mysqli_error($GLOBALS['con']));
			if (mysqli_num_rows($result_seq) > 1) :
				$row_seq = mysqli_fetch_object($result_seq);
				$row_seq = mysqli_fetch_object($result_seq);
				$swap_id = $row_seq->id;
				$swap_seq = $row_seq->seq;
				try {
					mysqli_begin_transaction($GLOBALS['con']);
					$sql = "UPDATE wp_proxi_vendors_video SET seq = ".$swap_seq." WHERE id = ".$video_id;
					$result_upd1 = mysqli_query($GLOBALS['con'], $sql);
					$sql = "UPDATE wp_proxi_vendors_video SET seq = ".$video_seq." WHERE id = ".$swap_id;
					$result_upd2 = mysqli_query($GLOBALS['con'], $sql);
					mysqli_commit($GLOBALS['con']);
				} catch(Exception $e) {
					mysqli_rollback($GLOBALS['con']);
				}
			endif;
		endif;
		if ($video_dir == 'down') :
			$sql = "SELECT * FROM wp_proxi_vendors_video WHERE cat7 = ".$vendor_id." AND seq >= ".$video_seq." ORDER BY seq ASC";
			$result_seq = mysqli_query($GLOBALS['con'], $sql) or die(mysqli_error($GLOBALS['con']));
			if (mysqli_num_rows($result_seq) > 1) :
				$row_seq = mysqli_fetch_object($result_seq);
				$row_seq = mysqli_fetch_object($result_seq);
				$swap_id = $row_seq->id;
				$swap_seq = $row_seq->seq;
				try {
					mysqli_begin_transaction($GLOBALS['con']);
					$sql = "UPDATE wp_proxi_vendors_video SET seq = ".$swap_seq." WHERE id = ".$video_id;
					$result_upd1 = mysqli_query($GLOBALS['con'], $sql);
					$sql = "UPDATE wp_proxi_vendors_video SET seq = ".$video_seq." WHERE id = ".$swap_id;
					$result_upd2 = mysqli_query($GLOBALS['con'], $sql);
					mysqli_commit($GLOBALS['con']);
				} catch(Exception $e) {
					mysqli_rollback($GLOBALS['con']);
				}
			endif;
		endif;
	endif;
	echo 'done';
?>

Youez - 2016 - github.com/yon3zu
LinuXploit