403Webshell
Server IP : 127.0.0.1  /  Your IP : 216.73.216.48
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT DESKTOP-3H4FHQJ 10.0 build 19045 (Windows 10) AMD64
User : win 10 ( 0)
PHP Version : 8.2.12
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : OFF |  Perl : OFF |  Python : OFF |  Sudo : OFF |  Pkexec : OFF
Directory :  D:/khalafsite-backup/old/htdocs/khalafsons.com/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : D:/khalafsite-backup/old/htdocs/khalafsons.com/khalaf_auto.php
<?php
session_start();
include('db_con.php'); 
$status = $_GET['status'];


if($status =='search_advert_disp')
{

	$search_description = $_GET['search_description'];
	$search_location = $_GET['search_location'];
	$search_furniture = $_GET['search_furniture'];
	$search_bedroom = $_GET['search_bedroom'];
	
	
if($search_description !=="Building Type" ){
		
  $get_bd_type ="select * from buliding_type where description='$search_description' ";

  
  $run_bd_type = mysqli_query($con,$get_bd_type);
  while($row_bd_type = mysqli_fetch_array($run_bd_type))
  {
	$post_id = $row_bd_type['id'];
	$building_name_type = $row_bd_type['buliding_name']; 
	
//echo"<div>xxxx$building_name_type</div>xxx";

 ///} 
 //echo "Sorry, but we can not find an entry to match your query<br><br>";
 
 if($search_description !=="Building Type" AND $search_location !=="Select Location" AND $search_furniture !=="Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type' AND location ='$search_location' AND furniture='$search_furniture' AND bedroom_no='$search_bedroom'"; 
 }
 
  if($search_description !=="Building Type" AND $search_location !=="Select Location" AND $search_furniture !=="Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type' AND location ='$search_location' AND furniture='$search_furniture'"; 
 }
 
   if($search_description !=="Building Type" AND $search_location !=="Select Location" AND $search_furniture =="Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type' AND location ='$search_location'"; 
 }

   if($search_description !=="Building Type" AND $search_location =="Select Location" AND $search_furniture =="Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type'";
 }
 
  if($search_description !=="Building Type" AND $search_location =="Select Location" AND $search_furniture !=="Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type' AND furniture='$search_furniture'"; 
 }
 
  if($search_description !=="Building Type" AND $search_location =="Select Location" AND $search_furniture =="Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where building_name ='$building_name_type' AND bedroom_no='$search_bedroom'"; 
 }

  
//  $get_advert ="select * from adverttb where building_name like'$building_name_type%' OR location like'$search_location%'";// AND furniture='$search_furniture' AND bedroom_no='$search_bedroom'";
 
  // $get_advert ="select * from adverttb where location like'%$search_location%' AND furniture like'%$search_furniture%' ";// AND bedroom_no='$search_bedroom'";

 
 $run_advert = mysqli_query($con,$get_advert);
  while($row_advert = mysqli_fetch_array($run_advert))
  {
	$post_id = $row_advert['id'];
	$building_name = $row_advert['building_name'];  
	$location = $row_advert['location']; 
	$bedroom = $row_advert['bedroom_no'];
	$bathroom = $row_advert['bathroom_no'];
	$furniture = $row_advert['furniture'];
	$image_url = $row_advert['image_url']; 
// echo"vv$furniture";

?>

<div class="single_ad_div" >
<img onClick="show_more_advert_images();" src="advert_images/<?php echo"$image_url"; ?>" class="advert_images" />
<div class="single_ad_name" ><?php echo"$building_name"; ?></div>
<div class="single_ad_location" >
<img src="kvt_con/location_icon2.png" width="30px" height="30px;" style="float:left;margin-top:5px;" />
<?php echo"$location"; ?>
</div>
<!--div class="single_ad_location" ><?php echo"$location"; ?></div-->

<div class="single_ad_bedroom" > 
<img src="kvt_con/bedroom_icon.png" width="40px" height="30px;" style="float:left;" />
<span style="float:left;width:30px;height:30px;line-height:40px;color:#5DADE2;margin-left:10px;backgroundk:green;"><?php echo"$bedroom"; ?></span>
<img src="kvt_con/bathroom_icon.png" width="40px" height="30px;" style="float:left;margin-left:20px;" />
<span style="float:left;width:30px;height:30px;line-height:40px;color:#5DADE2;margin-left:10px;backgroundk:green;"><?php echo"$bathroom"; ?></span>
</div>

<div class="single_furnished" ><?php echo"$furniture"; ?></div>
<!--a href="extraction.php?ad_id=<?php //echo"$post_id";?>" ><button>Add Image</button></a-->

</div>

<?php
 } 
 }
 }else{

///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////



 if($search_description =="Building Type" AND $search_location !=="Select Location" AND $search_furniture !=="Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where location ='$search_location' AND furniture='$search_furniture' AND bedroom_no='$search_bedroom'"; 
 }
 
  if($search_description =="Building Type" AND $search_location =="Select Location" AND $search_furniture !=="Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where furniture='$search_furniture' AND bedroom_no='$search_bedroom'"; 
 }
 
   if($search_description =="Building Type" AND $search_location !=="Select Location" AND $search_furniture =="Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where location ='$search_location' AND bedroom_no = '$search_bedroom'"; 

 }
 
  if($search_description =="Building Type" AND $search_location =="Select Location" AND $search_furniture == "Furniture Status" AND $search_bedroom !=="Select Bedroom"){
 $get_advert ="select * from adverttb where  bedroom_no = '$search_bedroom'"; 
 }
 
   if($search_description =="Building Type" AND $search_location =="Select Location" AND $search_furniture !== "Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where  furniture = '$search_furniture'"; 

 }
 
    if($search_description =="Building Type" AND $search_location !=="Select Location" AND $search_furniture == "Furniture Status" AND $search_bedroom =="Select Bedroom"){
 $get_advert ="select * from adverttb where  location = '$search_location'"; 

 }
 
 
 


 
 $run_advert = mysqli_query($con,$get_advert);
  while($row_advert = mysqli_fetch_array($run_advert))
  {
	$post_id = $row_advert['id'];
	$building_name = $row_advert['building_name'];  
	$location = $row_advert['location']; 
	$bedroom = $row_advert['bedroom_no'];
	$bathroom = $row_advert['bathroom_no'];
	$furniture = $row_advert['furniture'];
	$image_url = $row_advert['image_url']; 


?>

<div class="single_ad_div" >
<img onClick="show_more_advert_images();" src="advert_images/<?php echo"$image_url"; ?>" class="advert_images" />
<div class="single_ad_name" ><?php echo"$building_name"; ?></div>
<div class="single_ad_name" ><?php echo"$location"; ?></div>

<div class="single_ad_bedroom" > 
<img src="kvt_con/bedroom_icon.png" width="40px" height="30px;" style="float:left;" />
<span style="float:left;width:30px;height:30px;line-height:40px;color:#5DADE2;margin-left:10px;backgroundk:green;"><?php echo"$bedroom"; ?></span>
<img src="kvt_con/bathroom_icon.png" width="40px" height="30px;" style="float:left;margin-left:20px;" />
<span style="float:left;width:30px;height:30px;line-height:40px;color:#5DADE2;margin-left:10px;backgroundk:green;"><?php echo"$bathroom"; ?></span>
</div>

<div class="single_furnished" ><?php echo"$furniture"; ?></div>
<!--a href="extraction.php?ad_id=<?php //echo"$post_id";?>" ><button>Add Image</button></a-->

</div>

<?php } 


}

}


?>
<?php
if($status =='insert_new_message')
{
	$user_id = $_GET['user_id'];
	$my_id = $_GET['my_id'];
	$message_new = $_GET['message_new'];
	$message_new = mysqli_real_escape_string($con,$message_new);
	$insert_message ="insert into khalaf_messagetb (my_id,user_id,message,curr_date,curr_time) values ('$my_id','$user_id','$message_new',CURDATE(),CURTIME() )";
	$run_insert_message = mysqli_query($con,$insert_message);
}


?>  
<?php
if($status =='display_message')
{
	$user_id = $_GET['user_id'];
	$my_id = $_GET['my_id'];

?>

<div class="user_message_body">

<?php

	$get_message ="select * from khalaf_messagetb where my_id='$my_id' AND user_id='$user_id' OR my_id='$user_id' AND user_id='$my_id'";
	$run_get_message = mysqli_query($con,$get_message);
	while($row_get_message = mysqli_fetch_array($run_get_message))
	
	{
		$message = $row_get_message['message'];
		$my_id_sms = $row_get_message['my_id'];
		$user_id_sms = $row_get_message['user_id'];

    if($my_id_sms == $my_id){    
?>

<div class="message_to"> <div class="final_message_to"><?php echo"$message"; ?> </div></div>

	<?php }elseif($user_id_sms == $my_id){ ?>
	
<div class="message_from"> <div class="final_message_from"><?php echo"$message"; ?></div></div>



	<?php } } ?>

</div>


<?php
}


?>
<?php
if($status =='insert_user_call_agent')
{
	$user_id = $_GET['user_id'];
    $my_ip = $_GET['my_ip'];
	
	$get_user_call ="select * from agent_calltb where my_ip='$my_ip' AND user_id='$user_id' ";
	$run_user_call = mysqli_query($con,$get_user_call);
	$check_user_call = mysqli_num_rows($run_user_call);
	
	if($check_user_call <1){


  $insert_agent_call ="insert into agent_calltb (my_ip,user_id,curr_date,curr_time) values('$my_ip','$user_id',CURDATE(),CURTIME() )";
  $run_agent_call = mysqli_query($con,$insert_agent_call);
  if(!$run_agent_call){echo"<div style='float:left;width:100%;text-align:center;font-size:1.1em;color:red;'>Something Went Wrong,Data Not Saved</div>";}
 	
}

}



?>




Youez - 2016 - github.com/yon3zu
LinuXploit