403Webshell
Server IP : 172.67.201.108  /  Your IP : 216.73.216.69
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/banners/public_html/bway/rec/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/banners/public_html/bway/rec/relatedclick2.php
<?php
require_once __DIR__ . '/../pixel/config.php';

// No-cache headers
header('Expires: ' . gmdate('D, d M Y H:i:s') . ' GMT');
header('Pragma: no-cache');

$fromlink    = $_GET['fromlink'] ?? '0';
$articlelink = $_GET['articlelink'] ?? '';
$regid       = $_GET['regid'] ?? '0';
$userAgent   = $_SERVER['HTTP_USER_AGENT'] ?? '';

if ($fromlink === '') {
    $fromlink = '0';
}

if (
    stripos($userAgent, 'bot') === false
    && isset($_GET['articlelink'])
    && stripos($userAgent, 'facebookexternalhit') === false
    && stripos($articlelink, 'broadwayworld') !== false
) {
    // Determine link type
    if (stripos($articlelink, 'bwwarticlebottom') !== false) {
        $lt = 'Promo';
    } else {
        $lt = 'Related';
    }

    if (isset($_GET['typer'])) {
        $lt = $_GET['typer'];
    }

    $namer = '';
    if (isset($_GET['name'])) {
        $namer = '&name=' . urlencode($_GET['name']);
    }

    if ($regid === '') {
        $regid = '0';
    }

    // Validation
    if (
        !is_numeric($regid)
        || strpos($articlelink, ',') !== false
        || (stripos($articlelink, 'union') !== false && stripos($articlelink, 'reunion') === false && strpos($articlelink, ' ') === false)
        || !is_numeric($fromlink)
        || strlen($articlelink) > 250
        || stripos($articlelink, 'broadwayworld') === false
    ) {
        exit;
    }

    $linkeme = substr($articlelink, 0, 300) . $namer;

    $db = getWriteDB();
    $stmt = $db->prepare(
        "INSERT INTO regionalstoryclick
         (datetime, regionid, articlelink, ipaddress, browser, typer, fromlink)
         VALUES (NOW(), :regid, :articlelink, :ip, :browser, :typer, :fromlink)"
    );
    $stmt->execute([
        ':regid'       => (int)$regid,
        ':articlelink' => $linkeme,
        ':ip'          => getClientIp(),
        ':browser'     => substr($userAgent, 0, 250),
        ':typer'       => $lt,
        ':fromlink'    => (int)$fromlink,
    ]);
}

// Redirect
if (isset($_GET['articlelink']) && stripos($articlelink, 'broadwayworld') !== false) {
    header('Location: ' . $articlelink, true, 301);
    exit;
}

Youez - 2016 - github.com/yon3zu
LinuXploit