403Webshell
Server IP : 127.0.0.1  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT DESKTOP-3H4FHQJ 10.0 build 19045 (Windows 10) AMD64
User : win 10 ( 0)
PHP Version : 8.2.12
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  D:/active_xampp_upgrade/cb_imagek/old_code/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : D:/active_xampp_upgrade/cb_imagek/old_code/profile.php
<html>

<head>
<title>Best Images</title>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" type="text/css" href="main_css/profile.css" />
</head>

<body id="body" onload="disp_right_img(6);">

<?php 
session_start();
include('db.php'); 


if(isset($_SESSION['id']))
{
$user_id = $_SESSION['id'];		

}else{ $user_id ='guest'; }
?>

<input id="my_id" value="<?php echo $user_id; ?>" style="display:none;" />



<?php
if(isset($_GET['sel']))
{
  $dzi = $_GET['sel'];
  $idstudio = $_GET['pro'];
  $imi = $_GET['imi'];
  $npost = $_GET['npost'];
 
}
?>
<input id="dzi" value="<?php echo $dzi; ?>" style="display:none;" />
<input id="dzi2" value="<?php echo $imi; ?>" style="display:none;" />
<input id="studio_id" value="<?php echo $idstudio; ?>" style="display:none;" />

<div class="main_content_div" >


<div id="zoomed_img_out" ondblclick="close_zoomed_img();" class="zoomed_img_div" style="font-family:Arial, sans-serif;" >
<!--div id="zoomed_text_out" class="text_disp_div"></div-->
</div>

<button onclick="go_back();" class="go_back_btn" >x</button>
<div id="post_name_out_pc" class="post_name_out_pc"> <?php echo $npost; ?></div>

<div class="download_div_pc" >

<div class="downloads_lebal" ><span style="float:left;">Downloads</span><span id="downloads_output" class="downloads_output"></span></div>

<span class="view_lebal2" >Views:<span id="img_view_output"></span></span>
<?php if(!isset($_SESSION['id'])){ ?>
<a href="login"><button class="downloads_btn">Download</button></a>
<?php }else{ ?>
<button onclick="download_img();" class="downloads_btn">Download</button>
<?php } ?>

<div class="com_view_div" >
<span class="disp_comment">Comments <span id="comment_count_output"></span></span>
<input id="comm_input_pc" class="comm_input" placeholder="Write a comment..." /><button onclick="save_comment();" onmousedown="clear_coment_pc();" id="comm_save_btn" class="comm_save_btn">Send</button>

<?php
if(!isset($_SESSION['id'])){ ?>	

<a href="login"><button class="add_comment_btn">New Comment</button></a>

<?php }else{ ?>
<button id="add_comment_btn" onclick="show_new_comment();"  class="add_comment_btn">New Comment</button>
<?php } ?>

</div>

</div> 

<div class="com_display_div" stylek="display:none;">
<div id="comment_output"></div>
</div>

</div><!-- end of main_content_div-->



<div id="more_option_img_div_pc_right" class="more_option_img_div_pc_right" >

<div class="album_header_div_pc" >

<?php

     $studio_user ="select * from studio_usertb where id='$idstudio' ";
	 $run_studio = mysqli_query($con,$studio_user);
	 while($row_studio = mysqli_fetch_array($run_studio))
	 {
		 $studio_id = $row_studio['id'];
		 $channel_name = $row_studio['channel_name'];
		 $image_url = $row_studio['image_url'];
		 $channel_description = $row_studio['description'];

		// echo"kat $studio_id"; 
?>

<?php if($image_url == 'avatar2.jpg' ){ ?>
	   <img src="avatar_image/avatar2.jpg" class="user_div_img"  />
<?php }else{	?>
	  <img src="avatar_image/ <?php  echo $image_url	?>" class="user_div_img"  />
	 <?php  } //}	?>
<!--div class="user_div_img" ></div-->

<div class="user_div_name" ><?php echo $channel_name; ?></div>

<div class="img_view_div" >
<?php
//$img_id = $_GET['img_id'];
	$get_view_img ="select * from img_viewtb where studio_id='$studio_id' ";
	$run_view_img = mysqli_query($con,$get_view_img);
	$check_view_img = mysqli_num_rows($run_view_img);
	if($check_view_img >0){
	
	//echo $check_view_img;

?>
<span class="view_lebal">Views: </span><span idk="img_view_output"><?php echo $check_view_img; ?></span>
<?php } ?>
</div>
<div class="channel_description" ><?php echo $channel_description; ?></div>
<?php  } ?>
</div>

<div id="single_right_out" ></div>
<button onclick="show_more_data();" class="load_more_btn" >Load More</button>
</div>









<?php if($npost !==""){ ?>
<div id="post_name_out_mob" class="post_name_out_mob" ><?php echo $npost; ?></div>
<?php } ?>



<div class="download_div_mob">

<span class="downloads_lebal" ><span id="downloads_output_mob" classk="downloads_output"></span> Downloads</span> 

<span class="disp_comment"><span id="comment_count_output_mob"></span> Comments</span>
<!--button id="add_comment_btn" onclick="show_new_comment();"  class="add_comment_btn">New Comment</button-->
<span class="view_lebal2" >Views:<span id="img_view_output_mob"></span></span>
</div>
<div class="new_comm_mob_div">
<?php if(!isset($_SESSION['id'])){ ?>

<a href="login"><input class="comm_input_mob" placeholder="Write a comment..." /><button class="comm_save_btn_mob">Send</button></a>

<?php }else{ ?>

<input id="comm_input_mob" class="comm_input_mob" placeholder="Write a comment..." /><button onclick="save_comment();" onmousedown="clear_coment_mob();" id="comm_save_btn" class="comm_save_btn_mob">Send</button>

<?php } ?>
</div>







<div class="com_display_div_mob" stylek="display:none;">
<div id="comment_output_mob"></div>
</div>







<div id="more_option_img_div_mob" class="more_option_img_div_mob" >


<div class="album_header_div_mob">

<?php

     $studio_user ="select * from studio_usertb where id='$studio_id' ";
	 $run_studio = mysqli_query($con,$studio_user);
	 while($row_studio = mysqli_fetch_array($run_studio))
	 {
		 //$my_id_studio = $row_studio['my_id_studio'];
		 $studio_id = $row_studio['id'];
		 $channel_name = $row_studio['channel_name'];
		 $image_url = $row_studio['image_url'];
		 $channel_description = $row_studio['description'];
?>


<?php if($image_url == 'avatar2.jpg' ){ ?>
	   <img src="avatar_image/avatar2.jpg" class="user_div_img"  />
<?php }else{	?>
	  <img src="avatar_image/ <?php  echo $image_url	?>" class="user_div_img"  />
<?php  }	?>

<!--div class="user_div_img" ></div-->
<div class="user_div_name_mob" ><?php echo $channel_name; ?></div>


<div class="img_view_div_mob" >
<?php
//$img_id = $_GET['img_id'];
	$get_view_img ="select * from img_viewtb where studio_id='$studio_id' ";
	$run_view_img = mysqli_query($con,$get_view_img);
	$check_view_img = mysqli_num_rows($run_view_img);
	if($check_view_img >0){
	
	//echo $check_view_img;

?>
<span class="view_lebal">Views: <?php echo $check_view_img; ?></span><!--span id="img_view_output_mob"></span-->

<?php } ?> 
</div>




<div class="channel_description_mob" ><?php echo $channel_description; ?></div>
<?php } ?>






<!--button idk="download_img_btn" onclick="download_img();" class="downloads_btn">Download</button-->

</div>



<div id="single_right_out_mob" ></div>
<button onclick="show_more_data();" class="load_more_btn" >Load More</button>
</div>



<!--/div><!--end of sub_content_div_mob-->






<input id="download_link_input" style="display:none;" valuek="<?php echo $post_img; ?>" />
<!--input id="post_id" stylek="display:none;"  /-->




<script>
 

 
 
load_conent();
function load_conent()
{ 
      dzi = document.getElementById('dzi').value;
	  dzi2 = document.getElementById('dzi2').value;
      document.getElementById('zoomed_img_out').innerHTML="";
	  document.getElementById('download_link_input').value="";
      var image_on =dzi;
	  
	  if(image_on =='kvtq'){
		  cur_post_di = dzi2;
		  
	   xmlhttp = new XMLHttpRequest();
	   xmlhttp.open("GET","auto_page.php?cur_post_di="+cur_post_di+"&&status=disp_text_post",false);
       xmlhttp.send(null);
	   document.getElementById('zoomed_img_out').innerHTML =xmlhttp.responseText;
       ///document.getElementById('zoomed_img_out').style="z-index:2;color:#fff;";	 
	   
      //document.getElementById('zoomed_img_out').style="z-index:2;";
      document.getElementById('more_option_img_div_mob').style="z-index:1;display:none;";
	   document.getElementById('download_link_input').value=image_on;
	   document.getElementById('zoomed_img_out').style=";color:#fff;width:90%;padding-left:5%;padding-right:5%; max-height:75vh;line-height:30px;background:#000;text-align:center;overflow:auto;z-index:2;";
	  // .style="overflow: auto;background:#000;color:#fff;";	   
		  
		  
	  }else{
	  
	  
     chek_type = image_on.slice(-1); //getting last letter
     if(chek_type ==4){
	var showing_img = document.createElement('VIDEO');
	    
		showing_img.autoplay = true;
		showing_img.play();	

	 }else{
	 var showing_img = document.createElement('IMG');
	   
    }
	   showing_img.controls = true;
      //var showing_img = document.createElement('IMG');
	  showing_img.setAttribute("src","post_image/"+image_on);
	  showing_img.style="max-width:90%;max-height:80vh;";
	  document.getElementById('zoomed_img_out').appendChild(showing_img);
      document.getElementById('zoomed_img_out').style="z-index:2;";
      document.getElementById('more_option_img_div_mob').style="z-index:1;display:none;";
	  document.getElementById('download_link_input').value=image_on;
	  document.getElementById('body').style="overflow: auto;";
      display_img_downl_conut(dzi2);
	  display_img_view(dzi2);
    //  display_img_view(dzi2);
	   disp_comment(dzi2);
	   disp_comm_count(dzi2);
}


}


function go_back() {
  window.history.back();
}


function show_more_data()
{	
	cur_load_limit=document.getElementById('cur_load_limit').value;
	new_load_limit = Number(cur_load_limit)+6;
	disp_right_img(new_load_limit);

}

//disp_right_img(); disp_zoomed_img
function disp_right_img(dri)
{
	limit_data = dri;
	   studio_id = document.getElementById('studio_id').value;
	//alert(limit_data);
	   xmlhttp = new XMLHttpRequest();
	   xmlhttp.open("GET","auto_page.php?studio_id="+studio_id+"&&limit_data="+limit_data+"&&status=curr_image",false);
       xmlhttp.send(null);
	   document.getElementById('single_right_out').innerHTML =xmlhttp.responseText;	
	   document.getElementById('single_right_out_mob').innerHTML =xmlhttp.responseText;	

	   
	   coming_img = document.getElementById('coming_image').value;

}
 

function disp_zoomed_img_name(dzin)
{ post_name = dzin;
   document.getElementById('post_name_out_pc').innerHTML=post_name;
   document.getElementById('post_name_out_mob').innerHTML=post_name;

	
}

function disp_zoomed_img(dzi)
{	   
      document.getElementById('zoomed_img_out').innerHTML="";
	  document.getElementById('download_link_input').value="";
      var image_on = dzi;
	  
	  check_leng = image_on.length;

	  
	  if(check_leng > 19){
		  
		 document.getElementById('zoomed_img_out').style="background:#000;color:#fff;width:90%;padding-left:5%;padding-right:5%; max-height:75vh;line-height:30px;backgroundk:red;text-align:center;overflow:auto;z-index:2;";
         document.getElementById('more_option_img_div_mob').style="z-index:1;display:none;";
		 
		 document.getElementById('zoomed_img_out').innerHTML=image_on;


		 

		 
		  
		  }else{
	  
	 
	
     chek_type = image_on.slice(-1); //getting last letter
     if(chek_type ==4){
	var showing_img = document.createElement('VIDEO');
	showing_img.autoplay = true;
	    showing_img.play();	

	 }else{
	 var showing_img = document.createElement('IMG');
	   
    }
	  
	  showing_img.setAttribute("src","post_image/"+image_on); 
	 // showing_img.setAttribute("src","post_image/"+image_on);
	  showing_img.style="max-width:100%;max-height:80vh;";

	  //	 curr_img = showing_img.name; //document.getElementById(image_on).files[0];
	//  image_name = curr_img.name;
	 // image_type = curr_img.type;


      showing_img.controls = true;
	  document.getElementById('zoomed_img_out').appendChild(showing_img);
	 // document.getElementById('zoomed_img_out_mob').appendChild(showing_img);
	 // window.scrollTo(0,0);
      document.getElementById('zoomed_img_out').style="z-index:2;";
      document.getElementById('more_option_img_div_mob').style="z-index:1;display:none;";
	   document.getElementById('download_link_input').value=image_on;
	   document.getElementById('zoomed_img_out').style="overflow: auto;background:#000;";
	  

}
}

function close_zoomed_img()
{
document.getElementById('zoomed_img_out').style="z-index:1;";
document.getElementById('more_option_img_div_mob').style="z-index:2;";
//document.getElementById('body').style="overflow: hidden;";
//alert(55);
}

function download_img()
{
	download_link_input = document.getElementById('download_link_input').value;

	   const a = document.createElement("a");
       a.href = "post_image/"+download_link_input;
       a.download = "";
       document.body.appendChild(a);
       a.click();
       document.body.removeChild(a);
	   insert_img_download_count();
}

function show_img_id(sii)
{
  img_id = sii;
  display_img_downl_conut(img_id);
  insert_img_view(img_id);
  display_img_view(img_id);
  //disp_single_img_view(img_id)
  disp_comment(img_id);
  disp_comm_count(img_id);
 // alert(img_id);
}

function insert_img_download_count()
{
	id_img = img_id;
	my_id = document.getElementById('my_id').value;
    xmlhttp = new XMLHttpRequest();
	xmlhttp.open("GET","auto_page.php?my_id="+my_id+"&&id_img="+id_img+"&&status=img_download_count_insert",false);
    xmlhttp.send(null);

}
//display_img_downl_conut();
function display_img_downl_conut(didc)
{ 
    img_id = didc;
	//alert(img_id);
	
	xmlhttp = new XMLHttpRequest();
	xmlhttp.open("GET","auto_page.php?img_id="+img_id+"&&status=display_img_downl_conut",false);
    xmlhttp.send(null);
	document.getElementById('downloads_output').innerHTML =xmlhttp.responseText;	
	document.getElementById('downloads_output_mob').innerHTML =xmlhttp.responseText;

}

function insert_img_view(iiv)
{
	id_img = iiv;
    studio_id = document.getElementById('studio_id').value;
	my_id = document.getElementById('my_id').value;
	xmlhttp = new XMLHttpRequest();
	 xmlhttp.open("GET","auto_page.php?my_id="+my_id+"&&id_img="+id_img+"&&studio_id="+studio_id+"&&status=img_view_insert",false);
     xmlhttp.send(null);

}

function display_img_view(div)
{   
    img_id = div;
	xmlhttp = new XMLHttpRequest();
	xmlhttp.open("GET","auto_page.php?img_id="+img_id+"&&status=display_img_view_conut",false);
    xmlhttp.send(null);
	document.getElementById('img_view_output').innerHTML =xmlhttp.responseText;	
	document.getElementById('img_view_output_mob').innerHTML =xmlhttp.responseText;	
}

function show_new_comment()
{ 

document.getElementById('add_comment_btn').style.display="none";
document.getElementById('comm_save_btn').style.display="block";
document.getElementById('comm_input_pc').style.display="block";
dzi2 = document.getElementById('dzi2').value;
//alert(dzi2);


}

function clear_coment_pc()
{
	document.getElementById('comm_input_mob').value="";
	//alert(11);
}
function clear_coment_mob()
{
	document.getElementById('comm_input_pc').value="";
	//alert(22);
}

function save_comment()
{ 
    post_id = img_id;
	my_id = document.getElementById('my_id').value;
	comm_input_pc = document.getElementById('comm_input_pc').value;
	comm_input_mob = document.getElementById('comm_input_mob').value;
	if(comm_input_pc !==""){comm_input = comm_input_pc;}else if(comm_input_mob !==""){comm_input = comm_input_mob;}
	//comm_input = document.getElementById('comm_input').value;
    if(comm_input !==""){
	xmlhttp = new XMLHttpRequest();
	xmlhttp.open("GET","auto_page.php?my_id="+my_id+"&&post_id="+post_id+"&&comm_input="+comm_input+"&&status=save_comment",false);
    xmlhttp.send(null);
	disp_comment(post_id);
	disp_comm_count(post_id)
	 document.getElementById('comm_input_pc').value="";
	 document.getElementById('comm_input_mob').value="";
	 comm_input="";
//	alert(comm_input);
}
}

function disp_comment(dc)
{
	post_id = dc;
	xmlhttp = new XMLHttpRequest();
	xmlhttp.open("GET","auto_page.php?post_id="+post_id+"&&status=display_comment",false);
    xmlhttp.send(null);
	document.getElementById('comment_output').innerHTML =xmlhttp.responseText;
	document.getElementById('comment_output_mob').innerHTML =xmlhttp.responseText;
	//alert(474);
}



function disp_comm_count(dcc)
{
	post_id = dcc;
	xmlhttp = new XMLHttpRequest();
	xmlhttp.open("GET","auto_page.php?post_id="+post_id+"&&status=disp_comm_count",false);
    xmlhttp.send(null);
	document.getElementById('comment_count_output').innerHTML =xmlhttp.responseText;
	document.getElementById('comment_count_output_mob').innerHTML =xmlhttp.responseText;

}




</script>



</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit