403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/home2/cgny/nympadmin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/home2/cgny/nympadmin/managebday.cfm
<cfif parameterexists(url.sendemail)>
	<cfsetting requestTimeout="5000">
	<Cfquery name="getoffers" dataSource="#ds#">
		select id,clientname from bdaycluboffers
		where clientname <> ''
order by id DESC
 </cfquery>
 
 <cfquery name="getchild" dataSource="#ds#">
	 select * from bdayclubentries
	 where id = #url.sendemail#
</cfquery>

<cfsavecontent variable="links">
<cfoutput query="getoffers">
	<cfset robpic = #createUUID()#>

	<cfhttp url="https://www.nymetroparents.com/sara/bdaycoupon.cfm?id=#id#&pdf=on&childid=#url.sendemail#" method="get" resolveurl="yes" charset="iso-8859-1" path="/home/home2/domains/parentsknow.com/public_html/newsite2018/2020/bdaypdf/" file="a#robpic#-#id#.pdf" timeout="20">
		

 <cffile
   action = "rename"
   source = "/home/home2/domains/parentsknow.com/public_html/newsite2018/2020/bdaypdf/a#robpic#-#id#.pdf"
   destination = "/home/home2/domains/parentsknow.com/public_html/newsite2018/2020/bdaypdf/#robpic#-#id#.pdf"
   mode = "644">


	<ul>
	<li><a href="https://www.nymetroparents.com/bdaypdf/#robpic#-#id#.pdf">#clientname#</a>
	</ul>
</cfoutput>		 
</cfsavecontent>	
#getchild.parentemail#

<!---<CFMAIL
TO="[email protected]"

SUBJECT="Happy Birthday, #getchild.childfirst#!"

        FROM="Rockland Parent <[email protected]>"
SERVER="us-smtp-outbound-1.mimecast.com"
type="html">
Hi #getchild.parentname#,
<p>
With #getchild.childfirst#'s birthday two weeks away, now's the perfect time to start celebrating! 
<p>
Click the links below to download your child's free birthday gift certificates to local family-friendly businesses:

#links#
<p>
Have fun celebrating, and don't forget to share the Rockland Parent Birthday Club with your friends!
<p>
<img src="https://www.nymetroparents.com/RP-LOGO2017.jpg" width="400">
<p>
 P.S. Share the fun with us and tag @NYMetroParents in your Instagram posts!


<p>

<p>
</cfmail>--->

SENT!
<Cfabort>
</cfif>	

<cfif not parameterexists(url.day7)>
<Cfinclude template="header.cfm">
</cfif>

  <div id="content-header" style="margin-left:225px;">
    <h2>&nbsp;Edit Birthday System</h2>
  </div>
  <div class="container-fluid" style="margin-left:200px;">



<cfif parameterexists(url.add)>

<cfquery name=addphoto datasource="#ds#">
INSERT INTO bdaycluboffers(clientname,dtentered,clientfineprint)
VALUES	('',#currentdatetime#,'')
</cfquery>
<cfquery name="Gettop" datasource="#ds#">
select id from bdaycluboffers
order by id DESC
limit 0,1
</cfquery>
<Cflocation url="managebday.cfm?edit=#gettop.id#" addToken="no">
</cfif>

<cfif parameterexists(url.editsave)>

<cfquery name="upds" dataSource="#ds#">
	update bdaycluboffers
	set clientname = '#form.clientname#',
	clientoffer = '#form.clientoffer#',
	clientexpire = '#dateformat(form.clientexpire,"yyyy-mm-dd")#',
	clientfineprint = '#form.clientfineprint#',
address = '#form.address#',
city = '#form.city#',
state = '#form.state#',
zip = '#form.zip#',
	clientemail = '#form.clientemail#'
where id = #url.editsave#
</cfquery>

<cfif parameterexists(form.crop) and #form.crop# is not ''>
<cfset robpic = #createUUID()#>
<cfset ds='cityguide'>
	<cfset imagepath="/home/home2/domains/parentsknow.com/public_html/eventpic">

<cffile action="upload"
	        nameconflict="makeunique"
filefield="crop"
accept="image/jpeg,image/pjpeg,image/png"
 destination="/home/home2/domains/parentsknow.com/public_html/newsite2018/birthdayoffers/#robpic#.jpg"
 mode="644">

<cfset #file.serverfile# = '#robpic#.jpg'>
	<cfset photo = "#File.ServerFile#">
<cfquery name="upds" dataSource="#ds#">
	update bdaycluboffers
	set clientart = '#photo#'
	where id = #url.editsave#
</cfquery>
</cfif>



</cfif>

<Cfif parameterexists(url.edit)>


	<Cfquery name="getone" dataSource="#ds#">
		select * from bdaycluboffers
		where id = #url.edit#
	</cfquery>

	<cfFORM action="managebday.cfm?editsave=#url.edit#" method="post" name="MyForm" enctype="multipart/form-data">



  <br>
   <table cellspacing=5 cellpadding=5 border=1>
<cfoutput query="getone">
 <tr><td style="padding:8px;">
	  <b><font SIZE="-1" FACE="verdana">Name:</font></b>
  </td><td style="padding:8px;">
	  <input NAME="clientname" SIZE="65" value="#clientname#">
  </td></tr>

<tr><td style="padding:8px;">
	  <b><font SIZE="-1" FACE="verdana">Offer:</font></b>
  </td><td style="padding:8px;">
	  <textarea name="clientoffer" style="width:400px;height:100px;">#clientoffer#</textarea>
  </td></tr>


  <tr><td style="padding:8px;">
	  <b><font SIZE="-1" FACE="verdana">Fine Print:</font></b>
  </td><td style="padding:8px;">
	  <textarea name="clientfineprint" style="width:400px;height:100px;">#clientfineprint#</textarea>
  </td></tr>

   <tr><td style="padding:8px;">
	  <b><font SIZE="-1" FACE="verdana">Client Email:</font></b>
  </td><td style="padding:8px;">
	  <input NAME="clientemail" SIZE="65" value="#clientemail#">
  </td></tr>

   <tr><td style="padding:8px;">
	  <b><font SIZE="-1" FACE="verdana">Client Address:</font></b>
  </td><td style="padding:8px;">
	  <input NAME="address" SIZE="65" value="#address#">
  </td></tr>
     <tr><td style="padding:8px;">
	  <b><font SIZE="-1" FACE="verdana">Client City:</font></b>
  </td><td style="padding:8px;">
	  <input NAME="city" SIZE="65" value="#city#">
  </td></tr>
     <tr><td style="padding:8px;">
	  <b><font SIZE="-1" FACE="verdana">Client State:</font></b>
  </td><td style="padding:8px;">
	  <input NAME="state" SIZE="65" value="#state#">
  </td></tr>
     <tr><td style="padding:8px;">
	  <b><font SIZE="-1" FACE="verdana">Client Zip:</font></b>
  </td><td style="padding:8px;">
	  <input NAME="zip" SIZE="65" value="#zip#">
  </td></tr>

   <tr><td style="padding:8px;">
	  <b><font SIZE="-1" FACE="verdana">Expiration Date (m/d/yyyy):</font></b>
  </td><td style="padding:8px;">
	  <input NAME="clientexpire" SIZE="65" value="#dateformat(clientexpire,'m/d/yyyy')#">
  </td></tr>
     <tr><td style="padding:8px;">

	     	  <b><font SIZE="-1" FACE="verdana">Client Logo:</font></b>

	     	  <cfif #clientart# is not ''>
		     	  <img src="https://www.nymetroparents.com/birthdayoffers/#clientart#" style="float:right;">
	     	  </cfif>

  </td><td style="padding:8px;">
<input type=file name="crop">
  </td></tr>

     </table><br>
<input type="submit" Value="Update Entry">

</cfoutput>



	</cfFORM>


	<cfelseif parameterexists(url.viewentries)>

     <link href="../plugins/bower_components/datatables/jquery.dataTables.min.css" rel="stylesheet" type="text/css" />

<link href="https://cdn.datatables.net/buttons/1.2.2/css/buttons.dataTables.min.css" rel="stylesheet" type="text/css" />

<a href="/managebday.cfm">Back...</a>


<cfsavecontent variable="tableme"> 

<cfset day7 = dateadd('d',-7,currentdatetime)>

<cfquery name="gettodaya" dataSource="#ds#">
	select * from bdayclubentries
	where clientid = #url.viewentries#
	<Cfif parameterexists(url.day7)>
		and dtentered > #day7# 
	</Cfif>	
	group by bdaycombined, parentemail
order by id desc
</cfquery>


<cfoutput><b>Total:</b>#gettodaya.recordcount#

<cfquery name="getunique" dbtype="query">
	select distinct upper(parentemail) from gettodaya
</cfquery>	
<b>Unique Parents:</b> #getunique.recordcount#

</cfoutput>

	<TAble  id="example"  class="table color-table primary-table table-bordered table-striped table-hover" border="1" cellspacing="0" cellpadding="4">
<thead>
	<Cfif not parameterexists(url.day7)>

<th>id</th>
	</Cfif>
<th>dtentered</th>
<th>childfirst</th>
<th>childlast</th>
<th>parentname</th>
<th>parentemail</th>
<th>zip</th>
<th>birthday</th>
<th>age</th>
	<Cfif not parameterexists(url.day7)>

<th>email</th>
	</Cfif>

</thead>

<Cfoutput query="Gettodaya">

<TR bgcolor="#IIf(CurrentRow Mod 2, DE('ffffff'), DE('ffffcf'))#">
	<Cfif not parameterexists(url.day7)>
<td>#id#</td>
</Cfif>
<td>#dateformat(dtentered,'m/d/yy')#</td>
<td>#childfirst#</td>
<td>#childlast#</td>
<td>#parentname# #parentnamelast#</td>
<td>#parentemail#</td>
<td>#zip#</td>
<td>#birthdaymonth#/#birthdayday#/#birthdayyear#</td>
<td><Cfset age = #dateformat(Currentdatetime,'yyyy')# - #birthdayyear#>
	#age#
	
</td>
	<Cfif not parameterexists(url.day7)>

<td><a href="managebday.cfm?sendemail=#id#">send email</a></td>
	</Cfif>
</tr>
</Cfoutput>
</Table>

</cfsavecontent>

<Cfoutput>#tableme#</Cfoutput>

<Cfif parameterexists(url.day7)>
	
<CFMAIL
TO="[email protected],[email protected]"
SUBJECT="Rockland Bday Club Report - #Gettodaya.recordcount# Entries"
        FROM="[email protected]"
SERVER="us-smtp-outbound-1.mimecast.com" 
type="html"
>
<a href="https://admin.nymetroparents.com/managebday.cfm?viewentries=0">View All Entries</a>

<p>
	#tableme#</p>

</CFMAIL>

</Cfif>	

<script src="../plugins/bower_components/datatables/jquery.dataTables.min.js"></script>

<!-- start - This is for export functionality only -->
<script src="https://cdn.datatables.net/buttons/1.2.2/js/dataTables.buttons.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.2/js/buttons.flash.min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jszip/2.5.0/jszip.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/pdfmake.min.js"></script>
<script src="https://cdn.rawgit.com/bpampuch/pdfmake/0.1.18/build/vfs_fonts.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.2/js/buttons.html5.min.js"></script>
<script src="https://cdn.datatables.net/buttons/1.2.2/js/buttons.print.min.js"></script>
<!-- end - This is for export functionality only -->
<!-- end - This is for export functionality only -->

    <script>
$(document).ready(function() {
    $('#example').DataTable( {
        "paging":   false,
        "ordering": false,
        "info":     false
    } );
} );

    $('#example23').DataTable({
        dom: 'Bfrtip',
        buttons: [
            'copy', 'csv', 'excel', 'pdf'
        ]
             ,   "paging":   false,

    });
    </script>

<cfelse>

<cfquery name="gettodaya" datasource="#ds#">
select * from bdaycluboffers
where clientname <> ''
</cfquery>
<font size=+1>
<a href="managebday.cfm?add=on">Add Offer</a> | <a href="/managebday.cfm?viewentries=0">View Entries</a>
</font>

<TAble class="table color-table primary-table table-bordered table-striped table-hover">
<thead>
<th>EDIT</th>
<th>CLIENT</th>
<th>OFFER</th>
<th>EXPIRE</th>
<th>PREVIEW</th>

</thead>

<Cfoutput query="Gettodaya">

<tr>
<td><a href="managebday.cfm?edit=#id#">edit</a></td>
<td>#clientname#</td>
<td>#clientoffer#</td>
<td>#dateformat(clientexpire,'m/d/yyyy')#</td>
	<td><a href="managebdaypreview.cfm?id=#id#">PREVIEW</a></td>
</tr>
</Cfoutput>
</Table>
</Cfif>


<Br>
<cfinclude template="footer.cfm">

  </body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit