403Webshell
Server IP : 127.0.0.1  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT DESKTOP-3H4FHQJ 10.0 build 19045 (Windows 10) AMD64
User : win 10 ( 0)
PHP Version : 8.2.12
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  D:/khalafsite-backup/old/htdocs/khalafsons.com/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : D:/khalafsite-backup/old/htdocs/khalafsons.com/index.php
<html>


<head>
<title>khalafsons.com</title>
<link rel="icon" type="image/jpg" href="http://khalafsons.com/kvt_con/khalaf_log.jpg" />

<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" type="text/css" href="main_css/index.css" />


</head>

<?php 
session_start();
include('db_con.php'); 
include('function.php');
?>

<?php

if(isset($_SESSION['id']))
{
	$my_id = $_SESSION['id'];
    $my_cpr = $_SESSION['user_cpr'];
	
	//echo $_SESSION['id'];
//	echo"$user_email";
}

?>

<input id="my_id" style="display:none;" value="<?php echo"$my_id";?>" />
<input id="my_cpr" style="display:none;" value="<?php echo"$my_cpr";?>" />


 <?php
$user_ip = getenv('REMOTE_ADDR');
$geo = unserialize(file_get_contents("http://www.geoplugin.net/php.gp?ip=$user_ip"));
$city = $geo["geoplugin_city"];
$region = $geo["geoplugin_regionName"];
$country = $geo["geoplugin_countryName"];
/*echo"$user_ip";
echo "City: ".$city."<br>";
echo "Region: ".$region."<br>";
echo "Country: ".$country."<br>";
/*
geoplugin_request
geoplugin_status
geoplugin_credit
geoplugin_city
geoplugin_region
geoplugin_areaCode
geoplugin_dmaCode
geoplugin_countryCode
geoplugin_countryName
geoplugin_continentCode
geoplugin_latitude
geoplugin_longitude
geoplugin_regionCode
geoplugin_regionName
geoplugin_currencyCode
geoplugin_currencySymbol
geoplugin_currencySymbol_UTF8
geoplugin_currencyConverter
*/
?>

<input type="text" id="country_user" class="helping_id" style="display:none;" value="<?php echo $country;?>"> 
<input type="text" id="region_user" class="helping_id" style="display:none;" value="<?php echo $region;?>">
<input type="text" id="city_user" class="helping_id" style="display:none;" value="<?php echo $city;?>">

<body onLoad="star_auto_machine();" >

<div class="main_home">

<div class="main_log">

<img src="kvt_con/khalaf_log.jpg" width="100%" height="100%" style="border-radius:20px;" />

</div>

<div class="main_home_title">Khalaf Sons Real Estate</div>




<div class="icon_div_right" >
<a href="maintenance"><span id="complaint_notif_output" ></span></a>
<img onClick="show_search_area();" src="kvt_con/search_icon.png" class="top_right_icons" />
<a href="https://www.facebook.com/Khalaf-Sons-Real-Estate-WLL-899406336847138/" ><img src="kvt_con/fb_icon.png" class="top_right_icons" /></a>
<!--img src="kvt_con/instagram_icon.png" class="top_right_icons" /-->
<a href="https://www.linkedin.com/company/khalaf-sons-real-estate/?viewAsMember=true" ><img src="kvt_con/linkedin.png" class="top_right_icons" /></a>


</div>

<img onClick="show_search_area();" src="kvt_con/search_icon.png" class="search_mob_icons" />

<div class="icon_div_right_mob" >


<img id="show_mob_menu_btn" onClick="show_mob_menu();" src="kvt_con/menu.png" class="top_right_mob_menu_icon" />
<img id="close_mob_menu_btn" onClick="close_mob_menu();" src="kvt_con/close_mob_menu.png" class="top_right_mob_menu_icon" style="display:none;" />



<script>

setInterval(function(){ complaint_notif_disp(); }, 6000);
complaint_notif_disp();
function complaint_notif_disp()
{
	my_cpr =document.getElementById('my_cpr').value; 
    xmlhttp = new XMLHttpRequest();
	xmlhttp.open("GET","khalaf_auto.php?my_cpr="+my_cpr+"&&status=complaint_notif_disp",false);
	xmlhttp.send(null);
	
	document.getElementById('complaint_notif_output').innerHTML =xmlhttp.responseText;
	//alert(54);
}



function show_mob_menu()
{
document.getElementById('main_home_left_mob').style.display="block";
document.getElementById('show_mob_menu_btn').style.display="none";
document.getElementById('close_mob_menu_btn').style.display="block";
document.getElementById('search_area').style.display="none";
//alert('woop');
window.scrollTo(0,0);
}

function close_mob_menu()
{
document.getElementById('main_home_left_mob').style.display="none";
document.getElementById('show_mob_menu_btn').style.display="block";
document.getElementById('close_mob_menu_btn').style.display="none";
document.getElementById('share_div_right').style.display="none";
}

function show_mob_share_div()
{
document.getElementById('share_div_right').style.display="block";
document.getElementById('main_home_left_mob').style.display="none";	
}

</script>

</div><!-- end of icon_div_right_mob-->

</div>

<div class="postion_main_home"></div>

<div class="main_share_div_right" >
<div id="share_div_right" class="share_div_right" >

<img src="kvt_con/fb_icon.png" class="top_right_icons" />
<img src="kvt_con/instagram_icon.png" class="top_right_icons" />
<img src="kvt_con/linkedin.png" class="top_right_icons" />


</div>
</div>


<div id="main_home_left" class="main_home_left">

<a href=""><button class="left_home_btn" >Home</button></a>
<!--button class="left_home_btn">Project</button-->
<a href="property"><button class="left_home_btn">Property</button></a>
<!--button onClick="show_upload_cv_div();" class="left_home_btn">Vacancies</button-->
<a href="jobs"><button class="left_home_btn">Jobs</button></a>
<a href="contact"><button class="left_home_btn">Contacts</button></a>
<a href="agent_page"><button class="left_home_btn">Our Agents</button></a>
<a href="projects"><button class="left_home_btn">Projects</button></a>
<!--button onClick="show_mob_share_div();" class="left_home_btn">Share</button-->

<?php
if(isset($_SESSION['user_cpr']))
{
	$my_cpr = $_SESSION['user_cpr'];
	$disp_maint_emp ="select * from mainttb where employee_cpr='$my_cpr' AND permission_status != 'No Access' ";
	$run_disp_maint_emp = mysqli_query($con,$disp_maint_emp);
    $check_user_cpr = mysqli_num_rows($run_disp_maint_emp);	
	if($check_user_cpr >0){
	?>
	<a href="maintenance.php"><button class="left_home_btn">Maintenance</button></a>
	<?php
	}
	}
	
?>

<?php
if(isset($_SESSION['id']))
{
		$my_id = $_SESSION['id'];
	
	$get_user ="select * from khalaf_admintb where user_id_adm='$my_id' ";
	$run_get_user = mysqli_query($con,$get_user);
	$check_user = mysqli_num_rows($run_get_user);
	if($check_user >0){
?>
<a href="admins.php"><button class="left_home_btn">Admin</button></a>
<a href="purchase"><button class="left_home_btn">Purchase</button></a>
<a href="extraction.php"><button class="left_home_btn">Extraction</button></a>


<?php } ?>

<a href="myaccount.php"><button class="left_home_btn">Myaccount</button></a>
<a href="log_out.php"><button class="left_home_btn">Log out</button></a>
<?php
}else{?>

<a href="log_in.php"><button class="left_home_btn">Sign in</button></a>
<?php } ?>
</div>



<div  class="main_home_left_mob" >
<div id="main_home_left_mob" style="display:none;" class="sub_home_left_mob" >

<!--a href="index.php"><button class="left_home_btn" >Home</button></a>
<!--button class="left_home_btn">Project</button-o->
<a href="property.php"><button class="left_home_btn">Property</button></a>
<!--button onClick="show_upload_cv_div();" class="left_home_btn">Vacancies</button-o->
<a href="jobs.php"><button class="left_home_btn">Jobs</button></a>
<a href="contact.php"><button class="left_home_btn">Contacts</button></a>
<a href="agent_page.php"><button class="left_home_btn">Our Agents</button></a>
<a href=""><button class="left_home_btn">About</button></a>
<button onClick="show_mob_share_div();" class="left_home_btn">Share</button-->


<a href="index"><button class="left_home_btn" >Home</button></a>
<a href="property"><button class="left_home_btn">Property</button></a>
<!--button onClick="show_upload_cv_div();" class="left_home_btn">Vacancies</button-->
<a href="jobs"><button class="left_home_btn">Jobs</button></a>
<a href="contact"><button class="left_home_btn">Contacts</button></a>
<a href="agent_page"><button class="left_home_btn">Our Agents</button></a>
<a href="projects"><button class="left_home_btn">Projects</button></a>
<!--button onClick="show_mob_share_div();" class="left_home_btn">Share</button-->
<?php
if(isset($_SESSION['user_cpr']))
{
	$my_cpr = $_SESSION['user_cpr'];
	$disp_maint_emp ="select * from mainttb where employee_cpr='$my_cpr' AND permission_status != 'No Access' ";
	$run_disp_maint_emp = mysqli_query($con,$disp_maint_emp);
    $check_user_cpr = mysqli_num_rows($run_disp_maint_emp);	
	if($check_user_cpr >0){
	?>
	<a href="maintenance.php"><button class="left_home_btn">Maintenance</button></a>
	<?php
	}
	}
	
?>



<!--?php
if(isset($_SESSION['id']))
{
		$my_id = $_SESSION['id'];
	
	$get_user ="select * from khalaf_admintb where user_id_adm='$my_id' ";
	$run_get_user = mysqli_query($con,$get_user);
	$check_user = mysqli_num_rows($run_get_user);
	if($check_user >0){
?>
<a href="purchase"><button class="left_home_btn">Purchase</button></a>
<a href="extraction.php"><button class="left_home_btn">Extraction</button></a>

<y?php } ?>

<a href="myaccount.php"><button class="left_home_btn">Myaccount</button></a>
<a href="log_out.php"><button class="left_home_btn">Log out</button></a>
<y?php
}else{?>

<a href="log_in.php"><button class="left_home_btn">Sign in</button></a>
<y?php } ?-->


<?php
if(isset($_SESSION['id']))
{
		$my_id = $_SESSION['id'];
	
	$get_user ="select * from khalaf_admintb where user_id_adm='$my_id' ";
	$run_get_user = mysqli_query($con,$get_user);
	$check_user = mysqli_num_rows($run_get_user);
	if($check_user >0){
?>
<a href="admins.php"><button class="left_home_btn">Admin</button></a>
<a href="purchase"><button class="left_home_btn">Purchase</button></a>
<a href="extraction.php"><button class="left_home_btn">Extraction</button></a>


<?php } ?>

<a href="myaccount.php"><button class="left_home_btn">Myaccount</button></a>
<a href="log_out.php"><button class="left_home_btn">Log out</button></a>
<?php
}else{?>

<a href="log_in.php"><button class="left_home_btn">Sign in</button></a>
<?php } ?>


</div>
</div><!-- end of main_home_left_mob-->


<div id="promotion_banner" class="promotion_banner" style="displayk:none;" >

<div class="promotion_title" style="">BASIC PROTECTIVE MEASURES AGAINST THE NEW CORONA VIRUS</div>
<div class="promotion_details" style="">Stay home if you can. </div>
<div class="promotion_details" style="">Maintain social distancing. </div>
<div class="promotion_details" style="">Wash your hands With soap frequently. </div>

</div><!-- end of promotion_banner-->


<div id="promotion_banner2" class="promotion_banner" style="display:none;">

<!--div class="promotion_title" style="">RAMADAN KAREEM</div>
<div class="promotion_details" style="">Stay home if you can. </div>
<div class="promotion_details" style="">Maintain social distancing. </div>
<div class="promotion_details" style="">Wash your hands With soap frequently. </div-->

<img src="promotion_images/khalaf_log RK WEB.jpg" width="100%" height="300px"  />


</div><!-- end of promotion_banner-->

<script>
play_promotions();
function play_promotions()
{
	//alert(123);
	myFunction1();
}

function myFunction1() {
  setTimeout(function(){
	//  alert("Hello1");
	 document.getElementById('promotion_banner2').style.display="block";
	 document.getElementById('promotion_banner').style.display="none"
	 myFunction2();
	  }, 12000);
}	  


function myFunction2() {
  setTimeout(function(){ 
 // alert("Hello2");
  	 document.getElementById('promotion_banner').style.display="block";
	 document.getElementById('promotion_banner2').style.display="none";
myFunction1();
  }, 12000);
}

</script>



<div id="main_banner" class="main_banner">
<div id="banner_preview" classk="main_banner"></div>
<?php

$disp_building_name ="select * from main_buildingtb ";
$run_building_name = mysqli_query($con,$disp_building_name);
$check_rows = mysqli_num_rows($run_building_name);
while($row_building_name = mysqli_fetch_array($run_building_name))
{

 $building_name = $row_building_name['building_name'];
 $image_id = $row_building_name['id']; 
 $bd_image = $row_building_name['image_url']; 

?>
<input type="text" id="kvt<?php echo"$image_id"; ?>" value="<?php echo"$bd_image"; ?>" style="display:none;" />



 <?php } ?>	 
  <img  src="main_building_images/<?php echo"$bd_image"; ?>" width="100%" height="100%" id="master_banner_div" style="displayk:none;" /> 	   


<input type="text" id="image_id_row_total" value="<?php echo"$check_rows"; ?>"  style="display:none;" /> 

<!-- next and back banner buttons -->
<!--img src="kvt_con/bk_icon_btn.png" id="back_btn" onClick="back_banner_image();" class="back_banner_image" style="" />
<img src="kvt_con/next_icon_btn.png" id="next_btn" onClick="next_banner_image();" class="next_banner_image" style="" /-->


<script>

function star_auto_machine()
{
	setInterval('show_main_banner_image()',10000);
}


var wss_i=1;


function next_banner_image()
{
  document.getElementById('banner_preview').innerHTML="";
  
image_row_total =document.getElementById('image_id_row_total').value;

main_total = image_row_total;

pro_id= wss_i++;

if(pro_id >= main_total){wss_i=1;}

new_image_next = 'kvt'+ pro_id;


my_image =document.getElementById(new_image_next).value;
 
	 
	   var  x = document.createElement("IMG");
	   x.style="float:left;width:100%;height:100%;";
       x.setAttribute("src", "main_building_images/"+my_image);

document.getElementById('banner_preview').appendChild(x);
document.getElementById('master_banner_div').style.display="none";

}


function back_banner_image()
{
  document.getElementById('banner_preview').innerHTML="";
image_row_total =document.getElementById('image_id_row_total').value;
main_total = image_row_total;

pro_id= wss_i--;

if(pro_id <= main_total){wss_i = main_total}

new_image_next = 'kvt'+ pro_id;

my_image =document.getElementById(new_image_next).value;
 
	 
	   var  x = document.createElement("IMG");
	   x.style="float:left;width:100%;height:100%;";
       x.setAttribute("src", "main_building_images/"+my_image);

document.getElementById('banner_preview').appendChild(x);
document.getElementById('master_banner_div').style.display="none";

}

function show_main_banner_image()
{
  document.getElementById('banner_preview').innerHTML="";
image_row_total =document.getElementById('image_id_row_total').value;
main_total ='kvt'+image_row_total;

pro_id='kvt'+wss_i++;

if(pro_id >= main_total){wss_i=1;}

my_image =document.getElementById(pro_id).value;
 
	 
	   var  x = document.createElement("IMG");
	   x.style="float:left;width:100%;height:100%;";
       x.setAttribute("src", "main_building_images/"+my_image);

document.getElementById('banner_preview').appendChild(x);
document.getElementById('master_banner_div').style.display="none";

}

</script>

</div>







<div id="search_area" class="search_area" >

<select id="search_description" class="main_select_search">
<option selected >Building Type</option>
<option >Residential</option>
<option >Commercial</option>
<option >Medical Shop</option>
<option >Office</option>
<option >Shop</option>

</select>

<select id="search_location" class="main_select_search">
<option selected disabled >Select Location</option>
<?php option_building_location(); ?>

</select>

<select id="search_furniture" class="main_select_search" style="">
<option selected disabled >Furniture Status</option>
<option>Fully Furnished</option>
<option>Semi Furnished</option>
<option>No Furniture</option>
</select>



<select id="search_bedroom"  class="main_select_search">
<option selected disabled >Select Bedroom</option>
<option>studio</option>
<option>1</option>
<option>2</option>
<option>3</option>
<option>4</option>
<option>5</option>
</select>


<button onClick="start_search();" class="main_search_btn" style="">Filter</button>
<button onClick="close_search_area_btn();" class="hide_search_area_btn" >Hide</button>

</div><!-- end of search_area-->






<div id="content_area" class="content_area">

<!--img src="background_image/DSC_2740.jpg" width="100%" height="100%" style="" classk="main_home_icon" /-->

<?php
  
  $get_advert ="select * from adverttb";
  $run_advert = mysqli_query($con,$get_advert);
  while($row_advert = mysqli_fetch_array($run_advert))
  {
	$post_id = $row_advert['id'];
	$building_name = $row_advert['building_name'];  
	$location = $row_advert['location']; 
	$bedroom = $row_advert['bedroom_no'];
	$bathroom = $row_advert['bathroom_no'];
	$furniture = $row_advert['furniture'];
	$image_url = $row_advert['image_url']; 
	$bd_status = $row_advert['description'];


?>

<div class="single_ad_div" >
<a href="ad_detail.php?ad_detail_id=<?php echo"$post_id";?>" ><img onClick="show_more_advert_images();" src="advert_images/<?php echo"$image_url"; ?>" class="advert_images" /></a>

<div class="single_ad_name" >
<?php echo"<span style='float:left;width:50%;font-size:1.2em;font-weight:bold;color:#1AA0F7;'>$building_name</span>"; ?>
<a href="ad_detail.php?ad_detail_id=<?php echo"$post_id";?>" >
<img src="kvt_con/call_btn.jpg" style="float:left;width:30px;height:30px;margin-top:10px;cursor:pointer;" /></a>

<?php echo"<span style='float:right;max-width:30%;font-size:1em;padding-right:1px;color:#717174;'>$bd_status</span>"; ?>
</div>


<div class="single_ad_location" >
<img src="kvt_con/location_icon2.png" width="30px" height="30px;" style="float:left;margin-top:5px;" />
<?php echo"$location"; ?>
</div>

<div class="ad_view_div" >

<?php
$get_ad_view ="select * from ad_viewstb where advert_id ='$post_id'";
$run_get_ad_view = mysqli_query($con,$get_ad_view);
$check_ad_view = mysqli_num_rows($run_get_ad_view);

if($check_ad_view >0){
	
	if($check_ad_view <2){echo"$check_ad_view view";}else{echo"$check_ad_view views";}	
	}
?>

</div>

<div class="single_ad_bedroom" > 
<img src="kvt_con/bedroom_icon.png" width="40px" height="30px;" style="float:left;" />
<span style="float:left;width:25%;height:30px;line-height:40px;color:#33C125;margin-left:1%;backgroundk:orange;"><?php echo"$bedroom"; ?></span>
<img src="kvt_con/bathroom_icon.png" width="40px" height="30px;" style="float:left;margin-left:10px;" />
<span style="float:left;width:25%;height:30px;line-height:40px;color:#33C125;margin-left:1%;backgroundk:blue;"><?php echo"$bathroom"; ?></span>
</div>

<div class="single_furnished" ><?php echo"$furniture"; ?></div>

<?php
if(isset($_SESSION['id']))
{
		$my_id = $_SESSION['id'];
	
	$get_user ="select * from khalaf_admintb where user_id_adm='$my_id' ";
	$run_get_user = mysqli_query($con,$get_user);
	$check_user = mysqli_num_rows($run_get_user);
	if($check_user >0){
?>

<a href="extraction.php?ad_id=<?php echo"$post_id";?>" ><button>...</button></a>

<?php } } ?>

</div>

<?php } ?>


</div><!--end of content_area-->








<script>

function show_search_area()
{

document.getElementById('main_home_left_mob').style.display="none";
document.getElementById('show_mob_menu_btn').style.display="block";
document.getElementById('close_mob_menu_btn').style.display="none";
document.getElementById('share_div_right').style.display="none";

	//main_banner_div_size = document.getElementById('main_banner').offsetWidth;
	//main_banner_div_ = document.getElementById('main_banner').offsetHeight;
	screen_size = screen.width;
	window.scrollTo(0,0);
	//alert(main_banner_div_size);
	
	if(screen_size < 600){
	//alert(screen_size);
	document.getElementById('search_area').style="margin-top:2%;display:block;";

	document.getElementById('main_banner').style.display="none";
	
 }else{
	 document.getElementById('search_area').style.display="block";
	 document.getElementById('main_banner').style.display="block";
	 }
 
 

}

function close_search_area_btn()
{
	document.getElementById('search_area').style.display="none";
	document.getElementById('main_banner').style.display="block";
}



function start_search()
{
	search_description = document.getElementById('search_description').value;	
    search_location = document.getElementById('search_location').value;
    search_furniture = document.getElementById('search_furniture').value;
    search_bedroom = document.getElementById('search_bedroom').value;
    
    xmlhttp = new XMLHttpRequest();
	xmlhttp.open("GET","khalaf_auto.php?search_description="+search_description+"&search_location="+search_location+"&search_furniture="+search_furniture+"&search_bedroom="+search_bedroom+"&status=search_advert_disp",false);
	xmlhttp.send(null);
	
	document.getElementById('search_result_output').innerHTML =xmlhttp.responseText;
	
	document.getElementById('content_area').style.display="none";
	document.getElementById('search_result_div').style.display="block";
	
 	//alert(search_description);

}



</script>





<div id="search_result_div" class="search_result_div" >
<div id="search_result_output"></div>


</div>




<div class="main_jocent">@Khalaf Sons Real Estate 2020 <a href="http://diipzone.ml"><img src="http://diipzone.ml/main_logo/dzlogo.png" class="main_dz" /></a></div>


</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit