403Webshell
Server IP : 127.0.0.1  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT DESKTOP-3H4FHQJ 10.0 build 19045 (Windows 10) AMD64
User : win 10 ( 0)
PHP Version : 8.2.12
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  D:/khalafsite-backup/21-8-2019/New/htdocs/khalaf/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : D:/khalafsite-backup/21-8-2019/New/htdocs/khalaf/khalaf_auto.php
<?php
include('db_con.php'); 
$status = $_GET['status'];


if($status =='search_advert_disp')
{

	$search_description = $_GET['search_description'];
	$search_location = $_GET['search_location'];
	$search_furniture = $_GET['search_furniture'];
	$search_bedroom = $_GET['search_bedroom'];
	
	
if($search_description !=="Building Type" ){
		
  $get_bd_type ="select * from buliding_type where description='$search_description' ";

  
  $run_bd_type = mysqli_query($con,$get_bd_type);
  while($row_bd_type = mysqli_fetch_array($run_bd_type))
  {
	$post_id = $row_bd_type['id'];
	$building_name_type = $row_bd_type['buliding_name']; 
	
echo"<div>xxxx$building_name_type</div>xxx";

 ///} 
 //echo "Sorry, but we can not find an entry to match your query<br><br>";
 
 if($search_description !=="Building Type" AND $search_location !=="Select Location" AND $search_furniture !=="Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type' AND location ='$search_location' AND furniture='$search_furniture' AND bedroom_no='$search_bedroom'"; 
 }
 
  if($search_description !=="Building Type" AND $search_location !=="Select Location" AND $search_furniture !=="Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type' AND location ='$search_location' AND furniture='$search_furniture'"; 
 }
 
   if($search_description !=="Building Type" AND $search_location !=="Select Location" AND $search_furniture =="Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type' AND location ='$search_location'"; 
 }

   if($search_description !=="Building Type" AND $search_location =="Select Location" AND $search_furniture =="Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type'";
 }
 
  if($search_description !=="Building Type" AND $search_location =="Select Location" AND $search_furniture !=="Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type' AND furniture='$search_furniture'"; 
 }
 
  if($search_description !=="Building Type" AND $search_location =="Select Location" AND $search_furniture =="Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type' AND bedroom_no='$search_bedroom'"; 
 }

  
//  $get_advert ="select * from adverttb where building_name like'$building_name_type%' OR location like'$search_location%'";// AND furniture='$search_furniture' AND bedroom_no='$search_bedroom'";
 
  // $get_advert ="select * from adverttb where location like'%$search_location%' AND furniture like'%$search_furniture%' ";// AND bedroom_no='$search_bedroom'";

 
 $run_advert = mysqli_query($con,$get_advert);
  while($row_advert = mysqli_fetch_array($run_advert))
  {
	$post_id = $row_advert['id'];
	$building_name = $row_advert['building_name'];  
	$location = $row_advert['location']; 
	$bedroom = $row_advert['bedroom_no'];
	$bathroom = $row_advert['bathroom_no'];
	$furniture = $row_advert['furniture'];
	$image_url = $row_advert['image_url']; 
 echo"vv$furniture";

?>

<div class="single_ad_div" >
<img onClick="show_more_advert_images();" src="advert_images/<?php echo"$image_url"; ?>" class="advert_images" />
<div class="single_ad_name" ><?php echo"$building_name"; ?></div>
<div class="single_ad_name" ><?php echo"$location"; ?></div>

<div class="single_ad_bedroom" > 
<img src="kvt_con/bedroom_icon.png" width="40px" height="30px;" style="float:left;" />
<span style="float:left;width:30px;height:30px;line-height:40px;color:#5DADE2;margin-left:10px;backgroundk:green;"><?php echo"$bedroom"; ?></span>
<img src="kvt_con/bathroom_icon.png" width="40px" height="30px;" style="float:left;margin-left:20px;" />
<span style="float:left;width:30px;height:30px;line-height:40px;color:#5DADE2;margin-left:10px;backgroundk:green;"><?php echo"$bathroom"; ?></span>
</div>

<div class="single_furnished" ><?php echo"$furniture"; ?></div>
<!--a href="extraction.php?ad_id=<?php //echo"$post_id";?>" ><button>Add Image</button></a-->

</div>

<?php
 } 
 }
 }else{

///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////



 if($search_description =="Building Type" AND $search_location !=="Select Location" AND $search_furniture !=="Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where location ='$search_location' AND furniture='$search_furniture' AND bedroom_no='$search_bedroom'"; 
 }
 
  if($search_description =="Building Type" AND $search_location =="Select Location" AND $search_furniture !=="Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where furniture='$search_furniture' AND bedroom_no='$search_bedroom'"; 
 }
 
   if($search_description =="Building Type" AND $search_location !=="Select Location" AND $search_furniture =="Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where location ='$search_location' AND bedroom_no = '$search_bedroom'"; 

 }
 
  if($search_description =="Building Type" AND $search_location =="Select Location" AND $search_furniture == "Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where  bedroom_no = '$search_bedroom'"; 
 }
 
   if($search_description =="Building Type" AND $search_location =="Select Location" AND $search_furniture !== "Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where  furniture = '$search_furniture'"; 

 }
 
    if($search_description =="Building Type" AND $search_location !=="Select Location" AND $search_furniture == "Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where  location = '$search_location'"; 

 }
 
 
 


 
 $run_advert = mysqli_query($con,$get_advert);
  while($row_advert = mysqli_fetch_array($run_advert))
  {
	$post_id = $row_advert['id'];
	$building_name = $row_advert['building_name'];  
	$location = $row_advert['location']; 
	$bedroom = $row_advert['bedroom_no'];
	$bathroom = $row_advert['bathroom_no'];
	$furniture = $row_advert['furniture'];
	$image_url = $row_advert['image_url']; 


?>

<div class="single_ad_div" >
<img onClick="show_more_advert_images();" src="advert_images/<?php echo"$image_url"; ?>" class="advert_images" />
<div class="single_ad_name" ><?php echo"$building_name"; ?></div>
<div class="single_ad_name" ><?php echo"$location"; ?></div>

<div class="single_ad_bedroom" > 
<img src="kvt_con/bedroom_icon.png" width="40px" height="30px;" style="float:left;" />
<span style="float:left;width:30px;height:30px;line-height:40px;color:#5DADE2;margin-left:10px;backgroundk:green;"><?php echo"$bedroom"; ?></span>
<img src="kvt_con/bathroom_icon.png" width="40px" height="30px;" style="float:left;margin-left:20px;" />
<span style="float:left;width:30px;height:30px;line-height:40px;color:#5DADE2;margin-left:10px;backgroundk:green;"><?php echo"$bathroom"; ?></span>
</div>

<div class="single_furnished" ><?php echo"$furniture"; ?></div>
<!--a href="extraction.php?ad_id=<?php //echo"$post_id";?>" ><button>Add Image</button></a-->

</div>

<?php } 


}

}


?>






Youez - 2016 - github.com/yon3zu
LinuXploit