403Webshell
Server IP : 104.21.21.239  /  Your IP : 216.73.216.11
Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5
System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64
User : ec2-user ( 1000)
PHP Version : 8.4.23
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/banners/public_html/bway/wireless/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/banners/public_html/bway/wireless/content.php
<?php
set_time_limit(5);
require_once __DIR__ . '/Application.php';
require_once __DIR__ . '/Search_NextPrevious.php';

$strt = isset($_GET['strt']) ? (int)$_GET['strt'] : 1;
$show = isset($_GET['show']) ? (int)$_GET['show'] : 25;

if ($strt < 1 || $show < 1) exit;

// Get search term from GET or POST
$searchterm = $_POST['Crit1_Value'] ?? $_GET['crit1_value'] ?? null;
$l_idlist = '';

if ($searchterm !== null) {
    // Validate search term
    if (strpos($searchterm, '%') !== false || stripos($searchterm, 'union') !== false || stripos($searchterm, 'select') !== false) {
        exit;
    }
    // Run elasticsearch
    include __DIR__ . '/elastic.php';
}

// Build query
$sql = "SELECT columntable.Title, columntable.Blurb, columntable.DatePosted,
    columntable.mainswapbig AS MainSwap50, columntable.id AS colid, seo_friendly
    FROM bway_bww.columntable
    WHERE 1 = 1
    AND regionsfield = 1";

$params = [];

if ($searchterm !== null && $l_idlist !== '') {
    // Use the IDs from elasticsearch - these are already integers from elastic.php
    $sql .= " AND columntable.id IN ($l_idlist)";
} else {
    $sql .= " AND columntable.id > 2100000";
}

$sql .= " ORDER BY columntable.dateposted DESC LIMIT 75";

$stmt = $pdo->prepare($sql);
$stmt->execute($params);
$columns = $stmt->fetchAll();
$totalRecords = count($columns);
?>
<html>
<head>
	<title>BroadwayWorld.com Content</title>
	<meta name="viewport" content="width=device-width" />
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-253633-20"></script>
<script>
  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());
  gtag('config', 'UA-253633-20');
</script>
</head>

<body>
<table bgcolor="black" width="100%"><tr><td>
<center> <font face=verdana size=+0 color=white>
<a href="https://www.broadwayworld.com"><img src="https://cloudimages.broadwayworld.com/2017/broadwayworld-new-retina.png" style="max-width:150px;" border="0"></a><br>
</td></tr></table>

<form name="validate" action="content.php" method="post" style="margin-bottom:0; display: inline;padding:0; border:0; margin:0">
<input name="Crit1_Value" id="Crit1_Value" type="text" size="15" <?php if ($searchterm !== null): ?>value="<?= htmlspecialchars($searchterm) ?>"<?php endif; ?>>&nbsp;
<input type="submit" value="Search" class="search">
</form>

<?php if ($strt > 10000 || $show > 10000): ?>
<?php exit; ?>
<?php endif; ?>

<table>
<?php
$displayedRows = array_slice($columns, $strt - 1, $show);
foreach ($displayedRows as $row):
?>
<tr><td><font face=verdana size=-1>
<?php if (!empty($row['MainSwap50'])): ?><img src="<?= htmlspecialchars($row['MainSwap50']) ?>" border="0" align="right" hspace="10" width="100"><?php endif; ?>
<b><a href="https://www.broadwayworld.com/article/<?= htmlspecialchars($row['seo_friendly']) ?>" style="text-decoration:none;color:black;"><?= htmlspecialchars($row['Title']) ?></a></b>
<p>
(<?= date('n/j', strtotime($row['DatePosted'])) ?> at <?= date('g:i A', strtotime($row['DatePosted'])) ?>) - <?= $row['Blurb'] ?> (<a href="https://www.broadwayworld.com/article/<?= htmlspecialchars($row['seo_friendly']) ?>">read...</a>)
<hr>
</td></tr>
<?php endforeach; ?>
</table>

<p>
<?php
search_next_previous([
    'QueryRecordCount' => $totalRecords,
    'FileName' => 'content.php',
    'MaxresultPages' => 10,
    'MaxRowsAllowed' => 25,
]);
?>
<p>
<a href="index.php">Back to main...</a>

</body></html>

Youez - 2016 - github.com/yon3zu
LinuXploit